2841 matches found
Microsoft Active Directory Federated Authentication Service Denial of Service Vulnerability
Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. Microsoft Active Directory Federation Services ADFS is an Active Directory Federation Service that runs on Windows systems. The service provides Web Single Sign-On SSO technology, which enables...
DEBIAN-CVE-2015-8379
CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to bypass the CSRF protection mechanism via the method parameter...
CVE-2016-1256
Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R7, 14.1 before 14.1R5, 14.1X53 before 14.1X53-D18 or 14.1X53-D30, 14.1X55 before...
UBUNTU-CVE-2015-8931
Multiple integer overflows in the 1 gettimetmax and 2 gettimetmin functions in archivereadsupportformatmtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior...
PT-2015-7833 · Libarchive +5 · Libarchive +5
Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.2.0 Description: The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds stack read, by using a crafted ar file. This is due to a problem in the ar read header function in...
Xen elevation of privilege vulnerability (CNVD-2015-07060)
Xen is an open source virtual machine that is the foundation for virtualizing cloud computing. An elevation of privilege vulnerability exists in versions prior to Xen 3.4. An attacker can elevate privileges to take control of the entire system, leading to the escape of a virtual machine and posin...
The vulnerability of the NX-OS network operating system allows a hacker to induce a maintenance failure.
The vulnerability of the NX-OS network operating system is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure for the IGMP protocol by sending a specially crafted IGMPv3 packet...
BisonWare BisonFTP Information Disclosure Vulnerability
BisonFTP is an FTP service program. A directory traversal vulnerability exists in BisonWare BisonFTP version 3.5. A remote attacker can exploit this vulnerability to read arbitrary files via a RETR command within the '... /' within a RETR command can be exploited to read arbitrary files...
acsno Probe Management and Test System V3.4. Series Directory Traversal Vulnerability
Shenyang ACSNO Communication Equipment Co., Ltd. is a high-tech enterprise specializing in the development, production and sales of communication equipment software and hardware, and a member of MEF Association. There is a directory traversal vulnerability in the acsno probe management and testin...
WordPress wp-powerplaygallery plugin 'upload.php' has multiple SQL injection vulnerabilities
WordPress is a blogging platform developed using the PHP language. WordPress wp-powerplaygallery plugin version 3.3 and earlier, there are multiple sql injection vulnerabilities in the implementation of upload.php, which can be exploited by an attacker to access or modify data, etc...
Rockwell Automation RSLinx Classic Vulnerability
RSLinx Classic is used to enable communication between Rockwell Software applications within an industrial control system. A stack buffer overflow vulnerability exists in the implementation of OPCTest.exe in RSLinx Classic versions prior to 3.73.00. This allows an attacker to exploit this...
The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the samba-3.0.10 package for the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the bash-debuginfo-3.2 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the accessibility of protected information
The dhcp-3.0.5 package on the CentOS operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
UBUNTU-CVE-2015-1799
The symmetric-key feature in the receive function in ntpproto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service synchronization loss by spoofing the...
DEBIAN-CVE-2013-7421
The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AFALG socket with a module name in the salgname field, a different vulnerability than CVE-2014-9644...
UBUNTU-CVE-2014-3578
Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL...
SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack
A flaw was found in the way SSL 3.0 handled padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining CBC mode. This flaw allows a man-in-the-middle MITM attacker to decrypt a selected byte of a cipher text in as few as 256 tries if they are able to force a...
IBM API Management Information Disclosure Vulnerability (CNVD-2015-00567)
IBM API Management is IBM's complete solution to help organizations securely create, manage and connect application program interfaces APIs to extend their products and services to a variety of mobile channels. An information disclosure vulnerability exists in IF1, version 3.0 prior to IBM API...
