Trend Micro OfficeScan cgiShowClientAdm.exe Memory Corruption Code Execution Vulnerability

Trend Micro OfficeScan is a best-of-breed endpoint security solution for mid-sized and large organizations, with a future-proof, resilient architecture that allows you to customize your threat protection and data protection through plug-ins. Trend Micro OfficeScan cgiShowClientAdm.exe suffers fro...

Broadcom BCM4355C0 Wi-Fi chips information disclosure vulnerability

The Broadcom BCM4355C0 Wi-Fi chips is a WIFI chip. An information disclosure vulnerability exists in the Broadcom BCM4355C0 Wi-Fi chips processing messages, which allows remote attackers to exploit the vulnerability by submitting a special request that can be used to obtain sensitive information...

The vulnerability in the web interface of the TP-Link wireless router allows a hacker to cause a complete failure in the service of the web interface server.

The vulnerability of the web interface of the TP-Link wireless router is caused by resource management errors. Exploiting this vulnerability allows a malicious actor to completely disable the web interface by using a specially crafted request. To restore the web interface, the device must be...

CVE-2017-14493

Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted DHCPv6 request...

CVE-2017-14493

A stack buffer overflow was found in dnsmasq in the DHCPv6 code. An attacker on the local network could send a crafted DHCPv6 request to dnsmasq which would cause it to a crash or, potentially, execute arbitrary code...

UBUNTU-CVE-2017-14493

Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted DHCPv6 request...

CVE-2017-1577

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 132117...

Nodejs V8 Debugger Remote Code Execution

A remote code execution vulnerability is exist in Node.js v8 debugger. A remote attacker can exploit this weakness to execute arbitrary code in the Nodejs server via a crafted request...

Schneider Electric ClearSCADA Memory Allocation Vulnerability

Schneider Electric ClearSCADA is an open software platform that allows remote management of critical architectures. A memory allocation vulnerability exists in Schneider Electric ClearSCADA that could be exploited by an attacker to submit a special request for a denial of service attack...

Cisco Wide Area Application Services Denial of Service Vulnerability

Cisco Wide Area Application Services WAAS is the United States Cisco Cisco company's set of WAN link acceleration software. The software is mainly used for small bandwidth and high latency link environment. A denial of service vulnerability exists in the HTTP web interface in Cisco WAAS, which...

Tor 'rend_service_intro_established' function sensitive information disclosure vulnerability

Tor is a second-generation implementation of onion routing, used primarily for anonymous access to the Internet. A security vulnerability in the 'rendserviceintroestablished' function in the or/rendservice.c file in Tor allows remote attackers to exploit the vulnerability by submitting a special...

CVE-2017-6315

Astaro Security Gateway aka ASG 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx...

CVE-2017-6315

Astaro Security Gateway aka ASG 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx...

CVE-2017-14581

The Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to cause a denial of service service crash via a crafted request, aka SAP Security Note 2389181...

Design/Logic Flaw

When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request...

CVE-2017-12615

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled e.g. via setting the readonly initialisation parameter of the Default to false it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it containe...

VMware ESXi Out-of-Bounds Write Code Execution Vulnerability

VMware ESXi is a server virtualization platform that can be installed directly on physical servers. A security vulnerability exists in VMware ESXi that could be exploited by a remote attacker to submit a special request to write and execute arbitrary code across boundaries...

Linux kernel 'iscsi_if_rx' function denial of service vulnerability

Linux kernel is an open source operating system. A security vulnerability in the 'iscsiifrx' function in the Linux kernel drivers/scsi/scsitransportiscsi.c file allows a local attacker to exploit the vulnerability by submitting a special request for a denial of service attack...

Linux kernel XFS_IS_REALTIME_INODE Macro Denial of Service Vulnerability

Linux kernel is an open source operating system. A security vulnerability in the XFSISREALTIMEINODE macro in the Linux kernel fs/xfs/xfslinux.h file allows local attackers to exploit the vulnerability by submitting a special request for a denial of service attack...

Hewlett Packard Enterprise Application Performance Management System Health Authentication Bypass Vulnerability

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Hewlett Packard Enterprise Application Performance Management System Health. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the Syst...