CVE-2016-3974

XML external entity XXE vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to cause a denial of service, conduct SMB Relay attacks, or access arbitrary files via a crafted XML request to tcmonitoringwebserviceweb/ServerNodesWSService, aka SA...

CVE-2016-3974

CVE-2016-3974 affects SAP NetWeaver AS JAVA 7.1–7.5. An XML External Entity (XXE) vulnerability in the Configuration Wizard/ctcprotocol servlet allows remote attackers to cause a denial of service, perform SMB relay actions, or read arbitrary files via a crafted XML to the ServerNodesWSService en...

CVE-2016-3974: Improper Restriction of XML External Entity Reference

XML external entity XXE vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to cause a denial of service, conduct SMB Relay attacks, or access arbitrary files via a crafted XML request to tcmonitoringwebserviceweb/ServerNodesWSService, aka SA...

PT-2016-5786

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Java AS versions 7.1 through 7.5 Description The issue allows remote attackers to cause a denial of service, conduct SMB Relay attacks, or access arbitrary files via a crafted XML request to the "http://...

Cisco IOS XE DHCPv6 Relay Message Handling DoS (cisco-sa-20160323-dhcpv6)

According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the DHCPv6 Relay feature due to improper validation of DHCPv6 relay messages. An unauthenticated, remote attacker can exploit this issue, via a crafte...

Cisco IOS DHCPv6 Relay Message Handling DoS (cisco-sa-20160323-dhcpv6)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the DHCPv6 Relay feature due to improper validation of DHCPv6 relay messages. An unauthenticated, remote attacker can exploit this issue, via a crafted...

CVE-2016-1348

Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service device reload via a crafted DHCPv6 Relay message, aka Bug ID CSCus55821...

CVE-2016-1348

Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service device reload via a crafted DHCPv6 Relay message, aka Bug ID CSCus55821...

Design/Logic Flaw

Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service device reload via a crafted DHCPv6 Relay message, aka Bug ID CSCus55821...

CVE-2016-1348

Summary of the CVE-2016-1348 issue : Cisco IOS and IOS XE DHCPv6 Relay Denial of Service vulnerability arises from insufficient validation of DHCPv6 relay messages. An unauthenticated, remote attacker can trigger a device reload, leading to a DoS condition. Affected software includes Cisco IOS 15...

CVE-2016-1348

Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service device reload via a crafted DHCPv6 Relay message, aka Bug ID CSCus55821...

CVE-2016-1348: Undefined Security Weakness

Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service device reload via a crafted DHCPv6 Relay message, aka Bug ID CSCus55821...

Cisco IOS and IOS XE Software DHCPv6 relay denial of service vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in the DHCP version 6 DHCPv6 relay feature of Cisco IOS and IOS XE Software. A remote attacker could exploit this vulnerability by sending a specially...

Cisco IOS and IOS XE Software DHCPv6 Relay Denial of Service Vulnerability

A vulnerability in the DHCP version 6 DHCPv6 relay feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of DHCPv6 relay messages. An attacker could exploit this...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. Exploitation of these vulnerabilities could allow a remote attacker to create a denial-of-service condition. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply...

PT-2016-1618

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.5 Cisco IOS XE versions 3.3 through 3.16 Description The issue is related to insufficient validation of DHCPv6 relay messages, which could allow an unauthenticated, remote attacker to cause an affected device...

Apache Traffic Server 5.1.x < 5.1.1 Multiple Vulnerabilities (POODLE)

Binary data 9081.prm...

CVE-2016-0457

Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0456. NOTE: the previous information is...

CVE-2016-0456

Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0457. NOTE: the previous information is...

Server side request forgery (ssrf)

Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0457. NOTE: the previous information is...