937 matches found
Amazon Linux AMI : httpd (ALAS-2011-9)
It was discovered that the Apache HTTP Server did not properly validate the request URI for proxied requests. In certain configurations, if a reverse proxy used the ProxyPassMatch directive, or if it used the RewriteRule directive with the proxy flag, a remote attacker could make the proxy connec...
[SECURITY] Fedora 20 Update: pen-0.25.1-1.fc20
pen is a load balancer for "simple" tcp based protocols such as http or smtp. It allows several servers to appear as one to the outside and automatically detects servers that are down and distributes clients among t he available servers. This gives high availability and scalable performance...
CVE-2014-4764
IBM WebSphere Application Server WAS 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Dispatcher is enabled, allows remote attackers to cause a denial of service Load Balancer crash via unspecified vectors...
Code injection
IBM WebSphere Application Server WAS 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Dispatcher is enabled, allows remote attackers to cause a denial of service Load Balancer crash via unspecified vectors...
CVE-2014-4764
IBM WebSphere Application Server WAS 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Dispatcher is enabled, allows remote attackers to cause a denial of service Load Balancer crash via unspecified vectors...
CVE-2014-4764
CVE-2014-4764 affects IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3 when the Load Balancer for IPv4 Dispatcher is enabled. The vulnerability allows remote attackers to cause a denial of service by crashing the Load Balancer, via unspecified vectors. The cur...
PT-2014-6106
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 8.0.x before 8.0.0.10 IBM WebSphere Application Server WAS versions 8.5.x before 8.5.5.3 Description The issue allows remote attackers to cause a denial of service, resulting in a Load Balancer...
CVE-2014-4764: Undefined Security Weakness
IBM WebSphere Application Server WAS 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Dispatcher is enabled, allows remote attackers to cause a denial of service Load Balancer crash via unspecified vectors...
Barracuda Networks Web Application Firewall v6.1.5 & LoadBalancer v4.2.2 #37 - Filter Bypass & Multiple Vulnerabilities
Document Title: =============== Barracuda Networks Web Application Firewall v6.1.5 & LoadBalancer v4.2.2 37 - Filter Bypass & Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1103 Barracuda Networks Security ID BNSEC: BNSEC-1263...
Barracuda WAF & LB #37 - Persistent Vulnerabilities
Document Title: =============== Barracuda WAF & LB 37 - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1103 Barracuda Networks Security ID BNSEC: BNSEC-1263 https://www.barracuda.com/support/knowledgebase/501600000013gvr...
Barracuda WAF & LB #37 - Persistent Vulnerabilities
Document Title: =============== Barracuda WAF & LB 37 - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1103 Barracuda Networks Security ID BNSEC: BNSEC-1263 https://www.barracuda.com/support/knowledgebase/501600000013gvr...
Barracuda Load Balancer 'realm' Parameter Cross Site Scripting Vulnerability
No description provided by source...
ZEN Load Balancer Filelog Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Enterpriser16 Load Balancer 7.1 - Multiple XSS Vulnerabilities
No description provided by source...
SNMP Public Community String Zero Day in Routers Disclosed
Researchers have discovered previously unreported problems in SNMP on embedded devices where devices such as secondary market home routers and a popular enterprise-grade load balancer are leaking authentication details in plain text. The data could be extracted by gaining access to the read-only...
Yahoo!: information disclosure (LOAD BALANCER + URI XSS)
Thank you for your submission to the Yahoo Bug Bounty program. We were able to reproduce the issue you reported and have implemented appropriate fixes. We appreciate your adherence to responsible disclosure guidelines and look forward to your future participation in the program...
Yahoo!: Significant Information Disclosure/Load balancer access, http://extprodweb11.cc.gq1.yahoo.com/, 4/8/14, #SpringClean
Thank you for your submission to the Yahoo Bug Bounty program. We were able to reproduce the issue you reported and have implemented appropriate fixes. We appreciate your adherence to responsible disclosure guidelines and look forward to your future participation in the program...
Barracuda Load Balancer‘/cgi-mod/index.cgi’远程命令注入漏洞
BUGTRAQ ID: 65508 Barracuda Load Balancer是美国梭子鱼(Barracuda Networks)公司的一款应用交付控制器。该控制器提供对入侵和攻击事件的防护功能,并同时优化应用负载和提供强大的性能支持。 Barracuda Load Balancer中存在远程命令注入漏洞。攻击者可利用该漏洞在受影响应用程序上下文中执行任意命令。Barracuda Load Balancer 340 4.2.2.007版本中存在漏洞,其他版本也可能受到影响。 0 Barracuda Load Balancer 340 4.2.2.007...
piranha: web UI authentication bypass using POST requests
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request...
Cisco GSS Version
The remote host is running GSS, an operating system for Cisco load balancers. It is possible to read the GSS version number by connecting to the router by SSH or by using SNMP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid68960; scriptversion"1.6";...