12 matches found
CVE-2026-93441
The IBM QRadar SIEM is vulnerable to a denial of service via the HTTP Receiver protocol due to uncontrolled resource consumption (CWE-400). The vulnerability impacts versions 7.4-20210823144546 through 7.5-20260930064858 , and 7.6-20260330053257 through 7.6-20260930064910 . Affected customers sho...
CVE-2026-111999
Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/ns/eventbus/name/events or legacy...
CVE-2026-111999
Versions 0.8.0 through 0.9.0 of Vanus are affected by a missing authentication vulnerability in the gateway CloudEvents HTTP receiver . This flaw allows unauthenticated remote attackers to bypass token authentication and authPublish checks by sending forged CloudEvents to the /namespaces/{ns}/eve...
CVE-2026-111999 Vanus 0.8.0 through 0.9.0 Missing Authentication via Gateway CloudEvents HTTP Receiver
Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/ns/eventbus/name/events or legacy...
EUVD-2026-103452
Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/ns/eventbus/name/events or legacy...
CVE-2026-111999 Vanus 0.8.0 through 0.9.0 Missing Authentication via Gateway CloudEvents HTTP Receiver
Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/ns/eventbus/name/events or legacy...
Security Bulletin: An IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service, SQL injection and could allow a remote attacker to execute arbitrary code on the system.
Summary IBM QRadar when using the HTTP Receiver protocol could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. Vulnerability Details CVEID:CVE-2026-93441 DESCRIPTION: IBM QRadar could allow a remote attacker to cause a denial of service due to...
Microsoft BizTalk Server 2002 HTTP Receiver Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7469/info Microsoft BizTalk Server 2002 contains a boundary condition error that could allow a buffer to be overrun. Successful exploitation could allow arbitrary code execution in the security context of the IIS Server...
CVE-2003-0117
Buffer overflow in the HTTP receiver function BizTalkHTTPReceive.dll ISAPI of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver...
CVE-2003-0117
Buffer overflow in the HTTP receiver function BizTalkHTTPReceive.dll ISAPI of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver...
CVE-2003-0117
CVE-2003-0117 : A buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 enables an attacker to execute arbitrary code via a crafted HTTP request. The vulnerability is discussed in external advisories referencing MS03-016 and is corroborated ...
Microsoft BizTalk Server 2002 - HTTP Receiver Buffer Overflow
source: https://www.securityfocus.com/bid/7469/info Microsoft BizTalk Server 2002 contains a boundary condition error that could allow a buffer to be overrun. Successful exploitation could allow arbitrary code execution in the security context of the IIS Server hosting the application. It is...