The vulnerability of the SAP HANA database management system allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the XS engine hdbxsengine of the SAP HANA database management system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code using a specially crafted HTTP request related to JSON...

Vulnerabilities in IniNet Solutions GmbH’s SCADA Web Server, allowing a perpetrator to execute arbitrary code

The multiple vulnerabilities of IniNet Solutions GmbH’s SCADA Web Server are caused by buffer overflows in the stack. Exploitation of these vulnerabilities could allow a malicious actor to execute arbitrary code using a long HTTP request field...

Cisco Small Business 500 Device Web GUI Denial of Service Vulnerability

The Cisco Small Business 500 Device is a 500 series stackable managed switch product from Cisco. A security vulnerability in the Web GUI of the Cisco Small Business 500 Device allows a remote attacker to perform a denial of service by sending a specially crafted HTTP request...

CVE-2016-0868

Stack-based buffer overflow on Rockwell Automation Allen-Bradley MicroLogix 1100 devices A through 15.000 and B before 15.002 allows remote attackers to execute arbitrary code via a crafted web request...

Samsung Note 3 and Galaxy S6 Denial of Service Vulnerability

The Samsung Note 3 and Galaxy S6 are both smartphones released by the South Korean company Samsung Samsung. A security vulnerability exists in the Samsung Note 3 and Galaxy S6. An attacker can exploit the vulnerability to cause a denial of service null pointer backreference by sending an HTTP...

SAP HANA Denial of Service Vulnerability (CNVD-2016-00460)

SAP HANA is a high-performance analytics application from SAP, Germany, that provides high-performance data querying capabilities. A denial of service vulnerability exists in SAP HANA that could allow a remote attacker to cause a denial of service via a carefully crafted HTTP request to trace log...

Cisco DPQ3925 devices with EDVA r1 Base Information Disclosure Vulnerability

The Cisco DPQ3925 devices is a wireless router device from Cisco USA. An information disclosure vulnerability exists in Cisco DPQ3925 devices with EDVA r1 Base. This allows remote attackers to obtain sensitive information via a crafted HTTP request...

The vulnerability of the SAP HANA database management system allows a perpetrator to execute arbitrary code or trigger a service failure.

The vulnerability of the index server component hdbindexserver in the SAP HANA database management system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure using a specially crafted HTTP request...

TIBCO LogLogic Unity Information Disclosure Vulnerability

TIBCO LogLogic Unity is an acquisition by U.S.-based infrastructure software provider TIBCO to deliver the industry's leading scalable logging and security management platform specifically designed for the enterprise and cloud. An information disclosure vulnerability exists in versions of TIBCO...

SAP HANA Denial of Service Vulnerability

SAP HANA is a high-performance analytics application from SAP, Germany, that provides high-performance data querying capabilities. A denial of service vulnerability exists in SAP HANA 1.00.095. It allows remote attackers to execute arbitrary code or launch a denial of service attack via an HTTP...

CVE-2015-7986

The index server hdbindexserver in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via an HTTP request, aka SAP Security Note 2197428...

Cisco Web Security Appliance Denial of Service Vulnerability (CNVD-2015-06006)

Cisco Web Security Appliance WSA is a set of Web security appliances from the U.S. company Cisco Cisco. A security vulnerability exists in Cisco WSA version 8.0.7, which can be exploited by a remote attacker to cause a denial of service memory consumption for expired TCP connections by sending a...

Cisco Email Security Appliance Format String Vulnerability

The Cisco Email Security Appliance is an email security protection solution. The Cisco Email Security Appliance has a format string vulnerability that can be exploited by an attacker to cause a denial of service by sending a constructed HTTP request...

KLA10658 Multiple vulnerabilities in Microsoft Exchange Server

Multiple serious vulnerabilities have been found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to spoof user interface or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improper web request handling at Outlook Web Access can be...

Cisco Identity Services Engine Access Control Bypass Vulnerability

Cisco Identity Services Engine A centralized policy engine for Cisco TrustSec solutions. A security vulnerability exists in the Cisco Identity Services Engine that allows a remote user to submit a special HTTP request to access arbitrarily customized HTML pages on the target Guest portal system...

httpd: HTTP request smuggling attack against chunked request parser

Multiple flaws were found in the way httpd parsed HTTP requests and responses using chunked transfer encoding. A remote attacker could use these flaws to create a specially crafted request, which httpd would decode differently from an HTTP proxy software in front of it, possibly leading to HTTP...

The vulnerability of the Cisco UCS Central operating system, allowing a hacker to read arbitrary files

The vulnerability of the Cisco UCS Central operating system’s web framework exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially crafted HTTP request...

UBUNTU-CVE-2015-4483

Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request...

Kaseya Virtual System Administrator Directory Traversal Vulnerability

Kaseya Virtual System Administrator VSA is a suite of IT system management platforms for simplifying and automating IT services from Kaseya, Switzerland. A directory traversal vulnerability exists in Kaseya VSA. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP...

Cisco Videoscape Distribution Suite HTTP Request Remote Denial of Service Vulnerability

Cisco Videoscape is a business provider solution that helps consumers integrate content from pay TV, online video and video-on-demand sources. A denial of service vulnerability exists in Cisco Videoscape Distribution Suite, which could be exploited by a remote attacker to submit a special HTTP...