3949 matches found
Avast Antivirus X.509 Certificate Remote Code Execution Vulnerability
Avast Antivirus is a suite of antivirus programs. Avast Antivirus handles X.509 certificates with a security vulnerability that allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary code...
PHP PHAR Denial of Service Vulnerability
PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A denial-of-service vulnerability exists in PHP PHAR, which allows an attacker to submit a special request to crash an application, resulting in a denial of service...
Allen-Bradley MicroLogix Denial of Service Vulnerability
Allen-Bradley MicroLogix is a programmable logic controller PLC from Rockwell Automation. A denial of service vulnerability exists in the Allen-Bradley MicroLogix 1100 prior to B FRN 15.000 and 1400 prior to B FRN 15.003. Allows a remote attacker, via a crafted HTTP request, to launch a denial of...
Cross site request forgery (csrf)
IBM WebSphere Portal 8.5.0 before CF08 allows remote attackers to bypass intended access restrictions via a crafted request...
CVE-2015-4997
IBM WebSphere Portal 8.5.0 before CF08 allows remote attackers to bypass intended access restrictions via a crafted request...
ManageEngine Applications Manager CommonAPIUtil moveSubGroup haid tohaid SQL Injection
An SQL injection vulnerability exists in ManageEngine Applications Manager. This vulnerability is due to insufficient validation of the haid and tohaid parameters when processing requests using the moveSubGroup method of the CommonAPIUtil class. By sending crafted request messages, a remote...
Security update for haproxy (important)
haproxy was updated to fix two security issues. These security issues were fixed: - CVE-2015-3281: The bufferslowrealign function in HAProxy did not properly realign a buffer that is used for pending outgoing data, which allowed remote attackers to obtain sensitive information uninitialized memor...
Null pointer dereference
3S-Smart CODESYS Gateway Server before 2.3.9.48 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted 1 GET or 2 POST request...
DEBIAN-CVE-2015-0275
The ext4zerorange function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service BUG via a crafted fallocate zero-range request...
Null pointer dereference
Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted request...
CVE-2015-5640
baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request...
CVE-2015-5640
CVE-2015-5640 relates to baserCMS prior to 3.0.8. Multiple connected sources confirm a vulnerability where a logged-in, authenticated user can modify arbitrary user settings by sending a specially crafted request, effectively an access-control bypass. The impact described across advisories is tha...
Devellion CubeCart Password Reset Vulnerability
Devellion CubeCart is a free and open source e-commerce shopping cart software. The classes/admin.class.php script in Devellion CubeCart fails to properly validate that a password reset request is occurring, allowing a remote attacker to change the administrator password by sending a specially...
CVE-2015-5075
Cross-site request forgery CSRF vulnerability in X2Engine X2CRM before 5.2 allows remote attackers to hijack the authentication of administrators for requests that create an administrative account via a crafted request to index.php/users/create...
Apache CXF Fediz Denial of Service Vulnerability
Apache CXF is an open source Web services framework . Apache CXF Fediz is one of the subprojects , mainly used to provide authentication . A denial of service vulnerability exists in Apache CXF Fediz that allows remote attackers to exploit the vulnerability to submit a special request for a denia...
Huawei FusionAccess Denial of Service Vulnerability
Huawei FusionAccess is a desktop management system for Huawei's FusionCloud desktop cloud solution. A denial of service vulnerability exists in Huawei FusionAccess, which can be exploited by a remote attacker to crash the system by submitting a special request...
VuFind 1.0 Cross Site Scripting
VuFind 1.0 Web Application Reflected XSS Cross-site Scripting 0-Day Bug Security Issue Exploit Title: VuFind Results? &lookfor parameter Reflected XSS Web Security Vulnerability Product: VuFind Vendor: VuFind Vulnerable Versions: 1.0 Tested Version: 1.0 Advisory Publication: September 20, 2015...
The vulnerability of the Microsoft .NET Framework software allows a hacker to cause a service failure for a web resource based on ASP.NET.
The vulnerability of the Microsoft .NET Framework software platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure for a web resource based on ASP.NET, using a specially crafted request...
