CVE-2016-9752

Serendipity (PHP weblog engine) is affected by CVE-2016-9752 in versions before 2.0.5, where an attacker can bypass SSRF protection by supplying a malformed IP address (for example, http://127.1) or triggering a 30x redirect. The vulnerability enables bypass of server-side request forgery protect...

Design/Logic Flaw

The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Level 1, 4.x before 4.2.2 Patch Level 6, 4.2.3 before Patch Level 2, 5.x before 5.2.0 Patch Level 3, 5.2.1 before Patch Level 1, and 5.2.2 before Patch Level 1 allows remote...

CVE-2016-6483: Server-Side Request Forgery (SSRF)

The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Level 1, 4.x before 4.2.2 Patch Level 6, 4.2.3 before Patch Level 2, 5.x before 5.2.0 Patch Level 3, 5.2.1 before Patch Level 1, and 5.2.2 before Patch Level 1 allows remote...

PT-2016-6949

Name of the Vulnerable Software and Affected Versions vBulletin versions prior to 3.8.7 Patch Level 6 vBulletin versions prior to 3.8.8 Patch Level 2 vBulletin versions prior to 3.8.9 Patch Level 1 vBulletin versions prior to 4.2.2 Patch Level 6 vBulletin versions prior to 4.2.3 Patch Level 2...

RHEL 7 : httpd (RHSA-2016:1422) (httpoxy)

An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CentOS 7 : httpd (CESA-2016:1422) (httpoxy)

An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Scientific Linux Security Update : httpd on SL7.x x86_64 (20160718) (httpoxy)

Security Fixes : - It was discovered that httpd used the value of the Proxy header from HTTP requests to initialize the HTTPPROXY environment variable for CGI scripts, which in turn was incorrectly used by certain HTTP client implementations to configure the proxy for outgoing HTTP requests. A...

RedHat Update for httpd RHSA-2016:1422-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for httpd CESA-2016:1422 centos7

Check the version of httpd SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882521";...

CVE-2016-1383

Memory leak in Cisco AsyncOS through 8.8 on Web Security Appliance WSA devices allows remote attackers to cause a denial of service memory consumption via an unspecified HTTP status code, aka Bug ID CSCur28305...

Memory corruption

Memory leak in Cisco AsyncOS through 8.8 on Web Security Appliance WSA devices allows remote attackers to cause a denial of service memory consumption via an unspecified HTTP status code, aka Bug ID CSCur28305...

CVE-2016-1383: Undefined Security Weakness

Memory leak in Cisco AsyncOS through 8.8 on Web Security Appliance WSA devices allows remote attackers to cause a denial of service memory consumption via an unspecified HTTP status code, aka Bug ID CSCur28305...

PT-2016-4750

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS versions prior to 8.8 on Web Security Appliance WSA devices Description A memory leak issue allows remote attackers to cause a denial of service by consuming memory via an unspecified HTTP status code. Recommendations For Cisco...

CVE-2016-1786: Exposure of Sensitive Information to an Unauthorized Actor

The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles HTTP responses with a 3xx aka redirection status code, which allows remote attackers to spoof the displayed URL, bypass the Same Origin Policy, and obtain sensitive cached information via a crafted...

Veris: Password(s) can be found via login process.

Hello security team, It is possible to find passwords of other users by enumerate the login process. The scenario is quiet simple: 1 Go to https://sandbox.veris.in/portal/login/ 2 Fill in 'Email ID' and 'Password' and click 'Log In' 3 Capture the request via burp suite and send it to intruder. 4...

Blue Coat Systems ProxySG SGOS Information Disclosure Vulnerability

Blue Coat Systems ProxySG is a suite of secure Web gateway appliances from Blue Coat Systems, USA. The appliance provides user authentication, Web filtering, and data loss protection to control all Web traffic. A security vulnerability exists in the default configuration of SGOS in Blue Coat...

CVE-2015-4334

The default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6.6 before 6.6.2.1 forwards authentication challenges from upstream origin content servers OCS when used in an explicit proxy deployment, which makes it easier for remote attackers to obtain sensitive...

Default configuration

The default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6.6 before 6.6.2.1 forwards authentication challenges from upstream origin content servers OCS when used in an explicit proxy deployment, which makes it easier for remote attackers to obtain sensitive...

CVE-2015-4334

The default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6.6 before 6.6.2.1 forwards authentication challenges from upstream origin content servers OCS when used in an explicit proxy deployment, which makes it easier for remote attackers to obtain sensitive...

PT-2015-6521

Name of the Vulnerable Software and Affected Versions Blue Coat ProxySG versions prior to 6.2.16.5 Blue Coat ProxySG versions prior to 6.5.7.1 Blue Coat ProxySG versions prior to 6.6.2.1 Description The default configuration of SGOS in Blue Coat ProxySG forwards authentication challenges from...