135 matches found
The vulnerability of the NVBUBackup request handler’s software for data archiving and restoration by NetVault Backup allows a perpetrator to execute arbitrary code.
The vulnerability of the NVBUBackup request handler in software for data archiving and restoration by NetVault Backup is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ISC BIND DNS64 Denial of Service Vulnerability - Windows
ISC BIND is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...
MariaDB Server 10.1.x < 10.1.16 Multiple DoS
Binary data 9545.prm...
OracleVM 3.2 : sudo (OVMSA-2016-0079)
The remote OracleVM system is missing necessary patches to address critical security updates : - added patch for CVE-2014-0106: certain environment variables not sanitized when envreset is disabled Resolves: rhbz1072210 - backported fixes for CVE-2013-1775 CVE-2013-1776 CVE-2013-2776 CVE-2013-277...
Adobe RoboHelp Server Information Disclosure Vulnerability
Adobe RoboHelp Server is the United States of America Odooby Adobe company's set of server-based solutions. The program through the collection and recording of user questions and queries data to provide real-time end-user feedback. An information disclosure vulnerability exists in version 9.0.1 o...
Juniper Junos TKEY Query Handling DoS (JSA10718)
According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to a flaw in ISC BIND when handling queries for TKEY records. An unauthenticated, remote attacker can exploit this, via crafted TKEY queries, to cause an REQUIRE...
UBUNTU-CVE-2015-8547
The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service application crash via the "/op " command in a query...
KLA10503 Multiple vulnerabilities in IBM products
Multiple serious vulnerabilities have been found in IBM products. Below is a complete list of vulnerabilities 1. Improper WAR applications support in IBM Bluemix can be exploited remotely via unspecified vectors related to Java overlay feature; 2. Improper API access restrictions in IBM API...
IBM Content Collector for Email Information Disclosure Vulnerability
IBM Content Collector for Email is an email archiving solution for regulatory, compliance and IT management from IBM USA. The solution supports customized policies for collecting and archiving messages, managing legal evidence retention and record retention on the same system, and more. A securit...
MySQL 5.0.x - IF Query Handling Remote Denial of Service
MySQL 5.0.x - IF Query Handling Remote Denial of Service source: https://www.securityfocus.com/bid/23911/info MySQL is prone to a remote denial-of-service vulnerability because it fails to handle certain specially crafted queries. An attacker can exploit this issue to crash the application, denyi...
kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries
The igmpheardquery function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service divide-by-zero error and panic via IGMP packets...
Kerio MailServer < 6.3.1 remote Denial of Service
Hi, Kerio MailServer 6.3.1 changelog mentions the following bug fix: 'Fixed possible service stop when handling certain LDAP query' It turns out that vdkms6 vulnerability which is a part of VulnDisco since Oct, 2006 has been fixed. Below is a simple proof of concept code for this bug: !/usr/bin/e...
[SA18532] MyDNS Query Handling Denial of Service Vulnerability
TITLE: MyDNS Query Handling Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18532 VERIFY ADVISORY: http://secunia.com/advisories/18532/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: MyDNS 0.x http://secunia.com/product/3752/ DESCRIPTION: A vulnerability has been...
IBM DB2 - Universal Database for Windows NT 6.17.1 SQL Denial of Service
IBM DB2 - Universal Database for Windows NT 6.17.1 SQL Denial of Service source: https://www.securityfocus.com/bid/2067/info IBM DB2 Universal Database is a distributed database application. It may be possible for a database user to crash the server through a bug in handling certain queries. If a...
Ralf S. Engelschall ePerl 2.2.12 - Handling of ISINDEX Query
Ralf S. Engelschall ePerl 2.2.12 - Handling of ISINDEX Query source: https://www.securityfocus.com/bid/151/info A bug exists in ePerl's handling of the ISINDEX queries. When ISINDEX is used, the query is passed on the command line by the web server. This would allow an attacker to execute arbitra...