The vulnerability of the Windows operating system allows a remote attacker to execute arbitrary code within the system account context.

The vulnerability of the HTTP.sys driver on Windows operating systems, which implements the HTTP protocol, lies in the improper handling of HTTP requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the system account’s context. To exploit this...

The vulnerability of Cisco ASA software allows a malicious actor to induce a service failure.

The vulnerability in the implementation of SSL VPN for Cisco’s multi-functional security devices ASA allows malicious actors to bypass authentication by using specially crafted HTTP POST requests, along with values of cookies or URLs that have been altered...

UBUNTU-CVE-2016-5097

phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading 1 HTTP requests or 2 server logs...

The vulnerability of the Pidgin instant messaging system allows a remote attacker to trigger a service denial or execute arbitrary code.

The Pidgin software contains a vulnerability in the processchukeddata function. Exploiting this vulnerability allows a malicious actor to cause a service failure or execute arbitrary code by manipulating HTTP requests...

CVE-2016-1395

The web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to execute arbitrary code as root via a crafted HTTP request, aka Bug ID CSCux82428...

CVE-2016-1391

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID...

squid: Cache poisoning issue in HTTP Request handling

An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid...

OpenNTPD Design Vulnerabilities

OpenNTPD is a network time protocol NTP for Unix systems that can synchronize a computer system's local clock with a remote NTP server. A security vulnerability exists in OpenNTPD that stems from a failure to validate the Common Name when the program is configured for HTTPS requests, which could ...

Google Chrome Competitive Conditions Vulnerability (CNVD-2016-03259)

Google Chrome is a web browser developed by the American company Google Google. Google Chrome versions prior to 50.0.2661.102 have a contention condition vulnerability in the 'ResourceDispatcherHostImpl::' function in the file content/browser/loader/resourcedispatcherhostimpl.cc. BeginRequest'...

UBUNTU-CVE-2016-1670

Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resourcedispatcherhostimpl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID...

ImageMagick: SSRF vulnerability

A server-side request forgery flaw was discovered in the way ImageMagick processed certain images. A remote attacker could exploit this flaw to mislead an application using ImageMagick or an unsuspecting user using the ImageMagick utilities into, for example, performing HTTPS requests or opening...

The vulnerability of the microprogramming software of the Cisco TelePresence Server allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of the Cisco TelePresence Server device is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures such as memory consumption or device restarting through a specially crafted HTTP...

The vulnerability of the Apache Tomcat application server allows attackers to bypass access restrictions and execute arbitrary HTTP requests.

The vulnerability of the Apache Tomcat application server is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions and read arbitrary HTTP requests through a specially created web application...

Debian DSA-3509-1 : rails - security update

Two vulnerabilities have been discovered in Rails, a web application framework written in Ruby. Both vulnerabilities affect Action Pack, which handles the web requests for Rails. - CVE-2016-2097 Crafted requests to Action View, one of the components of Action Pack, might result in rendering files...

DSA-3509-1 rails - security update

Bulletin has no description...

Debian Security Advisory DSA 3509-1 (rails - security update)

Two vulnerabilities have been discovered in Rails, a web application framework written in Ruby. Both vulnerabilities affect Action Pack, which handles the web requests for Rails. CVE-2016-2097Crafted requests to Action View, one of the components of Action Pack, might result in rendering files fr...

CVE-2016-0868

Stack-based buffer overflow on Rockwell Automation Allen-Bradley MicroLogix 1100 devices A through 15.000 and B before 15.002 allows remote attackers to execute arbitrary code via a crafted web request...

The vulnerability of the Oracle Database database management system allows a hacker to cause a partial service outage.

The vulnerability of the XML Developer’s Kit component of the Oracle Database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker to cause a partial service failure through HTTP requests via Java Web Start applications or Java applets...

SAP Hostcontrol remote DOS

Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver AS Java 7.0 – 7.5 Vendor URL: SAP Bug: DoS Reported: 01.11.2016 Vendor response: 02.11.2016 Date of Public Advisory: 13.06.2017 Reference: SAP Security Note 2389181 Authors: Mathieu Geli ERPScan VULNERABILITY INFORMATION Class: D...

Apache Camel Java Object Deserialization Vulnerability

Apache Camel is based on the known enterprise-class integration model on the open source integration framework . Camel router , if camel-jetty or camel-servlet used as a consumer , Camel will automatically deserialize HTTP requests using content-header: application/x-java-serialized-object , remo...