16 matches found
EUVD-2021-14533
Malware in sbrugna...
CVE-2021-27792
The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An authenticated attacker could use this weakness to cause the FOS HTTP application handler to...
Denial Of Service (DoS)
libsquid.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to a buffer overread bug in the library. This allows an attacker to cause an application crash during HTTP message processing...
CVE-2021-27792
The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An authenticated attacker could use this weakness to cause the FOS HTTP application handler to...
Cross site request forgery (csrf)
The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An authenticated attacker could use this weakness to cause the FOS HTTP application handler to...
CVE-2021-27792
CVE-2021-27792 affects Brocade Fabric OS with a flaw in the web management interface: input validation failure for malformed requests can crash the FOS HTTP application handler, causing a DoS and reboot requirement. Affected products include Brocade Fabric OS versions before 9.0.1a, 8.2.3a, and 7...
CVE-2021-27792: Undefined Security Weakness
The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An authenticated attacker could use this weakness to cause the FOS HTTP application handler to...
BSA-2021-1490
Security Advisory ID : BSA-2021-1490 Component : Web Management Interface Revision : 1.1 The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An...
CVE-2017-12250: Improper Input Validation
A vulnerability in the HTTP web interface for Cisco Wide Area Application Services WAAS could allow an unauthenticated, remote attacker to cause an HTTP Application Optimization AO related process to restart, causing a partial denial of service DoS condition. The vulnerability is due to lack of...
Design/Logic Flaw
The HTTP application on Mitsubishi Electric MELSEC FX3G PLC devices before April 2015 allows remote attackers to cause a denial of service device outage via a long parameter...
CVE-2015-3938
The CVE-2015-3938 vulnerability affects Mitsubishi Electric MELSEC FX3G PLCs, where the built‑in HTTP application cannot handle parameters longer than expected. This leads to a remote denial-of-service (device outage), potentially requiring a reboot. Public details consistently point to the FX3G ...
PT-2015-6350
Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC FX3G PLC devices versions prior to April 2015 Description The issue allows remote attackers to cause a denial of service, resulting in a device outage, by sending a long parameter to the HTTP application...
CVE-2015-3938: Undefined Security Weakness
The HTTP application on Mitsubishi Electric MELSEC FX3G PLC devices before April 2015 allows remote attackers to cause a denial of service device outage via a long parameter...
HTTP 1.1 - GET Directory Traversal
source: https://www.securityfocus.com/bid/39590/info The HTTP application is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files and directories within the context of...
CVE-2004-0039: Undefined Security Weakness
Multiple format string vulnerabilities in HTTP Application Intelligence AI component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause forma...
