CVE-2018-1000538

Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling similar to CWE-774 vulnerability in write-to-RAM that can result in Denial of Service. This attack appear to be exploitable via Sending V4-presigned requests with...

CVE-2018-1000538

Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling similar to CWE-774 vulnerability in write-to-RAM that can result in Denial of Service. This attack appear to be exploitable via Sending V4-presigned requests with...

CVE-2018-1000538

Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling similar to CWE-774 vulnerability in write-to-RAM that can result in Denial of Service. This attack appear to be exploitable via Sending V4-presigned requests with...

CVE-2018-1000538: Allocation of File Descriptors or Handles Without Limits or Throttling

Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling similar to CWE-774 vulnerability in write-to-RAM that can result in Denial of Service. This attack appear to be exploitable via Sending V4-presigned requests with...

PT-2018-9434

Name of the Vulnerable Software and Affected Versions Minio S3 server versions prior to RELEASE.2018-05-16T23-35-33Z Description The issue is related to an Allocation of Memory Without Limits or Throttling in the write-to-RAM functionality, which can result in a Denial of Service. This can be...

wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property

It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request...

CVE-2011-0910

The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks...

Code injection

The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks...

PT-2011-2753

Name of the Vulnerable Software and Affected Versions Vanilla Forums versions prior to 2.0.17.6 Description The issue makes it easier for remote attackers to spoof signed requests and obtain access to arbitrary user accounts via HMAC timing attacks. This allows attackers to potentially gain...

CVE-2011-0910: Undefined Security Weakness

The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks...

CVE-2008-6910

Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not use timeouts for signed requests, which allows remote attackers to impersonate other users and gain privileges via a replay attack that sends the same request...

CVE-2008-6910

Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not use timeouts for signed requests, which allows remote attackers to impersonate other users and gain privileges via a replay attack that sends the same request...