Microsoft Windows 'Win32k.sys' Local Information Disclosure Vulnerability

Microsoft Windows is the popular operating system. Microsoft Windows Win32k does not properly handle memory objects, allowing an attacker to exploit a vulnerability by submitting a special request that could obtain sensitive information...

WSR-300HP vulnerable to arbitrary code execution

Overview WSR-300HP provided by BUFFALO INC. contains an arbitrary code execution vulnerability. WSR-300HP provided by BUFFALO INC. is a wireless LAN router. WSR-300HP contains an arbitrary code execution vulnerability. Impact By executing a specially crafted request prepared by a remote attacker,...

Eaton ELCSoft ELCSimulator Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Eaton ELCSoft. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of network TCP requests by ELCSimulator.exe. A crafted request will cause...

ManageEngine Desktop Central Remote Code Execution (CVE-2017-11346)

A remote Code Execution vulnerability exists in ManageEngine Desktop Central. The vulnerability is due to insufficient check of parameter. By sending crafted request ,a remote attacker can place a file under a directory that allows server-side scripts to run...

Microsoft Office Outlook Information Disclosure Vulnerability

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. Microsoft Office Outlook has a security vulnerability in the way in-memory content is disclosed, which allows remote attackers to exploit the vulnerability by submitting a special request ...

ZyXEL PK5001Z Device ROOT Access Vulnerability

The ZyXEL PK5001Z devices is a wireless switch device from China's Hopkins Technology. A security vulnerability exists in the ZyXEL PK5001Z devices, which allows remote attackers to exploit the vulnerability to submit a special request and gain root access...

Cisco Web Security Appliance Unauthorized Access Vulnerability

Cisco Web Security Appliance is the United States Cisco Cisco company's set of Web security appliances. An access restriction bypass vulnerability exists in the Cisco Web Security Appliance Web proxy feature, which could be exploited by remote attackers to submit a special request to access the...

Cisco ASR 5000 Series Aggregation Services Router Rules Bypass Vulnerability

Cisco ASR 5000 Series Aggregation Services Routers are the ASR 5000 series multifunction routers from Cisco. A vulnerability in the filtering mechanism of the Cisco ASR 5000 Series Aggregation Services RoutersGGSN ACLs could be exploited by a remote attacker to submit a special request to bypass...

tomcat: Security constrained bypass in error page mechanism

A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page...

tomcat: Security constrained bypass in error page mechanism

A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page...

CVE-2017-11468

It was found that docker-distribution did not properly restrict memory allocation size for a registry instance through the manifest endpoint. An attacker could send a specially crafted request that would exhaust the memory of the docker-distribution service...

GE Communicator Heap Buffer Overflow Vulnerability

GE Communicator is an application for authoring and monitoring metering equipment. A security vulnerability in the handling of the GE Communicator ActiveX control allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary code in the context of the...

Wireshark DOCSIS Parser Denial of Service Vulnerability

Wireshark is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability in the Wireshark DOCSIS parser allows remote attackers to exploit the vulnerability to submit a special request for a denial-of-service attack...

CVE-2017-1000028

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request...

Apache OpenMeetings Security Restriction Bypass Vulnerability

Apache OpenMeetings is audio and video conferencing software. A security restriction bypass vulnerability exists in Apache OpenMeetings, which could be exploited by remote attackers to submit a special request to bypass certain security restrictions and perform an unauthorized operation...

DEBIAN-CVE-2017-7529

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request...

Integer overflow

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request...

CVE-2017-7529

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request...

CVE-2017-7529

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request...

Microsoft Windows Explorer Denial of Service Vulnerability

Microsoft Windows is a popular computer operating system. A security vulnerability in the implementation of Microsoft Windows Explorer when attempting to open a non-existent file allows an attacker to exploit the vulnerability by submitting a special request to crash the application...