Pidgin DoS

The Pidgin software contains a vulnerability in its component designed to work with the IRC protocol. Exploiting this vulnerability allows a malicious actor to induce a service failure by sending a specially crafted message...

CVE-2016-0365: Exposure of Sensitive Information to an Unauthorized Actor

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass authentication and obtain sensitive artifact information via unspecified vectors...

PT-2016-4165

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy versions 6.0.x through 6.0.1.12 IBM UrbanCode Deploy versions 6.1.x through 6.1.3.2 IBM UrbanCode Deploy versions 6.2.x through 6.2.1.0 Description The issue allows remote attackers to bypass authentication and obtain...

SAP NetWeaver AS JAVA 7.1 < 7.5 - ctcprotocol Servlet XXE

Exploit for java platform in category web applications Application: SAP NetWeaver AS JAVA Versions Affected: SAP NetWeaver AS JAVA 7.1 - 7.5 Vendor URL: http://SAP.com Bug: XXE Sent: 20.10.2015 Reported: 21.10.2015 Vendor response: 21.10.2015 Date of Public Advisory: 08.03.2016 Reference: SAP...

Paragon Initiative Enterprises: SMTP server allows anonymous relay from internal addresses to internal addresses

Hello, Issue descripton your incoming SMTP servers, provided by google , seems to be accepting without authentication mails from addresses @paragonie.com and destined for addresses @paragonie.com. This can greatly ease spear-phishing attacks, as users usually put much trust into emails coming fro...

Relay Ajax Directory Manager relayb01-071706 / 1.5.1 / 1.5.3 - Unauthenticated Arbitrary File Upload

Exploit for php platform in category web applications Unauthenticated File Upload in Relay Ajax Directory Manager may Lead to Remote Command Execution A vulnerability within the Relay Ajax Directory Manager web application allows unauthenticated attackers to upload arbitrary files to the web serv...

Relay Ajax Directory Manager relayb01-071706/1.5.1/1.5.3 - Arbitrary File Upload

Advisory: Unauthenticated File Upload in Relay Ajax Directory Manager may Lead to Remote Command Execution A vulnerability within the Relay Ajax Directory Manager web application allows unauthenticated attackers to upload arbitrary files to the web server running the web application. Details...

Relay Ajax Directory Manager 1.5.3 File Upload / Command Execution

Advisory: Unauthenticated File Upload in Relay Ajax Directory Manager may Lead to Remote Command Execution A vulnerability within the Relay Ajax Directory Manager web application allows unauthenticated attackers to upload arbitrary files to the web server running the web application. Details...

Siemens SIPROTEC 4 and SIPROTEC Information Disclosure Vulnerability

Siemens SIPROTEC 4 is a family of multifunctional relays; SIPROTEC Compact is a microcomputer protection device in which EN100 is a multi-format encoder module. An information disclosure vulnerability exists in the integrated web server of SIPROTEC 4 and SIPROTEC Compact. A remote attacker with...

Cisco IOS and IOS XE Software DHCPv6 Relay Denial of Service Vulnerability

A vulnerability in the DHCP version 6 DHCPv6 relay feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of DHCPv6 relay messages. An attacker could exploit this...

Cisco IOS Software DHCPv6 Relay Denial of Service Vulnerability (cisco-sa-20160323-dhcpv6)

A vulnerability in the DHCP version 6 DHCPv6 relay feature of Cisco IOS Software could allow an unauthenticated, remote attacker to cause an affected device to reload. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

CVE-2016-1367

The DHCPv6 relay implementation in Cisco Adaptive Security Appliance ASA Software 9.4.1 allows remote attackers to cause a denial of service device reload via crafted DHCPv6 packets, aka Bug ID CSCus23248...

CVE-2016-1367

The DHCPv6 relay implementation in Cisco Adaptive Security Appliance ASA Software 9.4.1 allows remote attackers to cause a denial of service device reload via crafted DHCPv6 packets, aka Bug ID CSCus23248...

Design/Logic Flaw

The DHCPv6 relay implementation in Cisco Adaptive Security Appliance ASA Software 9.4.1 allows remote attackers to cause a denial of service device reload via crafted DHCPv6 packets, aka Bug ID CSCus23248...

CVE-2016-1367: Undefined Security Weakness

The DHCPv6 relay implementation in Cisco Adaptive Security Appliance ASA Software 9.4.1 allows remote attackers to cause a denial of service device reload via crafted DHCPv6 packets, aka Bug ID CSCus23248...

Cisco Adaptive Security Appliance Software DHCPv6 Relay Denial of Service Vulnerability

A vulnerability in the DHCPv6 relay feature of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of DHCPv6 packets. An attacker could exploit this vulnerability ...

PT-2016-4736 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software version 9.4.1 Description: A issue in the DHCPv6 relay implementation allows remote attackers to cause a denial of service, resulting in a device reload, via crafted DHCPv6 packets. This could be...

SAP NetWeaver Java AS XXE Vulnerability

SAP NetWeaver is SAP's integrated technology platform and the technology foundation for all SAP applications since SAP Business Suite. A xxe security vulnerability exists in the SAP NetWeaver Java AS version 7.4 Configuration Wizard, which can be exploited by remote attackers to cause a denial of...

CVE-2016-3974

XML external entity XXE vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to cause a denial of service, conduct SMB Relay attacks, or access arbitrary files via a crafted XML request to tcmonitoringwebserviceweb/ServerNodesWSService, aka SA...

Xxe

XML external entity XXE vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to cause a denial of service, conduct SMB Relay attacks, or access arbitrary files via a crafted XML request to tcmonitoringwebserviceweb/ServerNodesWSService, aka SA...