HP Intelligent Management Center Arbitrary File Download Vulnerability

HP Intelligent Management Center is a set of network intelligent management center solutions from Hewlett-Packard HP. A security vulnerability exists in HP Intelligent Management Center that could be exploited by remote attackers to submit a specific request to download arbitrary files...

Microsoft Hyper-V Network Switch Denial of Service Vulnerability

Microsoft Windows is a popular operating system.Hyper-V is one of the virtualization products. A security vulnerability in the Hyper-V network switch for Microsoft Windows allows an attacker to exploit the vulnerability to crash the system via a specially crafted request...

CVE-2017-6367

In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header...

CVE-2016-9726

IBM QRadar Incident Forensics 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM Reference : 1999542...

Cisco NetFlow Generation Appliance SCTP decoder denial of service vulnerability

Cisco NetFlow Generation Appliance is the United States Cisco Cisco company's set of scalable for data centers to achieve traffic visibility solutions. A denial of service vulnerability exists in the processing of SCTP messages by the SCTP decoder in the Cisco NetFlow Generation Appliance. A remo...

DNS Spoofing Vulnerability in Multiple Veritas Products

Veritas NetBackup Appliance is an enterprise-class backup management appliance; NetBackup Server is a set of enterprise-class backup management servers that can run on multiple operating systems. A DNS spoofing vulnerability exists in multiple Veritas products, which can be exploited by remote...

Denial of Service Vulnerability in Multiple Veritas Products

Veritas NetBackup Appliance is an enterprise-class backup management appliance; NetBackup Server is a set of enterprise-class backup management servers that can run on multiple operating systems. A denial of service vulnerability exists in multiple Veritas products, which can be exploited by remo...

QEMU Denial of Service Vulnerability (CNVD-2017-02735)

QEMU is a suite of analog processor software. A security vulnerability exists in QEMU that allows an attacker to submit a special request that can be exploited to crash an application...

NetCommWireless Wireless Router Remote Command Injection Vulnerability

NetCommWireless Wireless Router is a wireless router from NetComm Australia. A security vulnerability exists in NetCommWireless Wireless Router that allows remote attackers to submit a special request to execute arbitrary commands in an application context...

TigerVNC Buffer Overflow Vulnerability

TigerVNC is an advanced implementation of VNC remote access. TigerVNC suffers from a buffer overflow vulnerability that allows an attacker to submit a special request to execute arbitrary code in the context of an application...

CVE-2016-4312

XML external entity XXE vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH-4.4.0-0231 allows remote authenticated users with access to XACML features to read arbitrary files, cause a denial of service, conduct server-side request forgery SSRF attacks, o...

IBM Security Access Manager Information Disclosure Vulnerability (CNVD-2017-01305)

IBM Security Access Manager is a security access manager from IBM USA. A security vulnerability exists in IBM Security Access Manager. An attacker could exploit the vulnerability by sending a specially crafted HTTP request to obtain sensitive information from an error message...

IBM Kenexa LCMS Premier on Cloud Information Disclosure Vulnerability (CNVD-2017-01326)

IBM Kenexa LCMS Premier on Cloud is an adjustable Learning Content Management System LCMS for developing, maintaining, and delivering effective employee training from IBM USA. A security vulnerability exists in IBM Kenexa LCMS Premier on Cloud. An attacker could exploit the vulnerability by sendi...

Splunk Enterprise and Splunk Light Denial of Service Vulnerabilities

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze machine-generated data, including data generated by all IT systems and infrastructures physical, virtual, and cloud.Splunk Enterprise is...

Tcpdump Multiple Parser Buffer Overflow Vulnerability

Tcpdump is a popular network analysis program. A buffer overflow vulnerability in Tcpdump's multiple parsers print-ether.c:etherprint allows remote attackers to exploit the vulnerability by submitting a special request to crash the application...

Tcpdump SNMP Parser Buffer Overflow Vulnerability

Tcpdump is a popular network analysis program. Tcpdump SNMP parser print-snmp.c:asn1parse suffers from a buffer overflow vulnerability that allows remote attackers to exploit the vulnerability by submitting a special request to crash the application...

Tcpdump BOOTP Parser Buffer Overflow Vulnerability

Tcpdump is a popular network analysis program. Tcpdump BOOTP parser print-bootp.c:bootpprint suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to crash an application by submitting a special request...

CVE-2016-5949

IBM Kenexa LCMS Premier on Cloud could allow an authenticated user to obtain sensitive user data with a specially crafted HTTP request...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...

CVE-2016-7980

Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...