3819 matches found
CVE-2002-1436
The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request...
CVE-2004-0049
RealNetworks Helix Server/Proxy 9 and Helix Mobile Server 10 are affected by a buffer overflow in the Administration Interface over HTTP. An authenticated user can submit malformed HTTP POST requests to trigger code execution on the server. Affected versions include Helix Universal Server/Gateway...
CVE-2002-1436
Novell NetWare Web Server (Netscape/IPlanet) contains a Perl handler that will execute arbitrary code when a POST request is sent to the HTTP endpoint. Affected: NetWare 5.x (up to SP4) and 6.x (up to SP1). Root cause: the Perl handler (for Perl 5.003) processes HTTP POST data in a way that enabl...
CVE-2002-1252
The CVE-2002-1252 entry concerns the Application Messaging Gateway for PeopleTools 8.1x (used in PeopleSoft products). Affected component/attack surface involves XML External Entities (XXE) fields in an HTTP POST processed by the SimpleFileHandler, allowing remote attackers to read arbitrary file...
Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal
Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal source: https://www.securityfocus.com/bid/11011/info A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authenticatio...
Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal
source: https://www.securityfocus.com/bid/11011/info A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authentication checks and gives anonymous users remote adminitration of the...
Apache < 2.0.43 HTTP POST Request Source Disclosure
Binary data 1489.prm...
CVE-2004-0038
McAfee ePolicy Orchestrator ePO 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81...
CVE-2004-0245
Web Crossing 4.x and 5.x are affected. The vulnerability allows remote attackers to cause a crash/denial of service by sending an HTTP POST with a large or negative Content-Length, triggering an integer divide-by-zero in the affected component. The available sources (NVD entry) describe the issue...
CVE-2004-0331
CVE-2004-0331 describes a heap-based buffer overflow in Dell OpenManage Web Server (omws32.exe) due to a boundary error when handling POST requests. Affected versions include 3.2.0–3.7.1 (per connected advisories and the MSF module), with exploitation possible via a remote HTTP POST containing an...
CVE-2004-0245
Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service crash by sending a HTTP POST request with a large or negative Content-Length, which causes an integer divide-by-zero...
CVE-2004-0049
Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port...
CVE-2004-0095
McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service memory consumption and crash and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow...
CVE-2004-2086
Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP POST request with a long query parameter...
WebCrossing DoS
DoS on negative Content-Length in HTTP POST request...
McAfee ePolicy Orchestrator 1.x2.x3.0 Agent - POST Buffer Mismanagement
McAfee ePolicy Orchestrator 1.x2.x3.0 Agent - POST Buffer Mismanagement // source: https://www.securityfocus.com/bid/9476/info The McAfee ePolicy Orchestrator agent has been reported to a buffer management vulnerability that may be exploited to crash the affected agent. Although unconfirmed, it h...
McAfee ePolicy Orchestrator 1.x/2.x/3.0 Agent - POST Buffer Mismanagement
// source: https://www.securityfocus.com/bid/9476/info The McAfee ePolicy Orchestrator agent has been reported to a buffer management vulnerability that may be exploited to crash the affected agent. Although unconfirmed, it has been reported that the issue may also allow a remote attacker to...
CVE-2003-1490
SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service device reset via a long HTTP POST to the internal interface, possibly due to a buffer overflow...
SonicWALL PRO HTTP POST request denial of service
SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service device reset via a long HTTP POST to the internal interface, possibly due to a buffer overflow. CVE: CVE-2003-1490 Last updated: July 29, 2017, 1:29 a.m...