CVE-2015-1982

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to obtain sensitive information via a crafted request, which reveals the full path in an error message...

HP LoadRunner launcher.dll Stack Buffer Overflow (CVE-2015-2110)

A stack buffer overflow vulnerability exists in HP LoadRunner. The vulnerability is due to insufficient validation of a length value in SSL communication with the HP LoadRunner. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to the vulnerab...

Design/Logic Flaw

Cisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service HTTP service outage via a crafted HTTP request, aka Bug ID CSCum38844...

Cross site request forgery (csrf)

IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attackers to obtain sensitive Java Content Repository JCR information via a crafted request...

IBM WebSphere Application Server Session Hijacking Vulnerability

IBM WebSphere Application Server is an application server product that serves as a platform for Java EE and Web services applications and is the foundation of the IBM WebSphere software platform. A session hijacking vulnerability exists in IBM WebSphere Application Server, which allows remote...

CVE-2015-3281

The bufferslowrealign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information uninitialized memory contents of previous requests via a crafted request...

CVE-2015-3281

The bufferslowrealign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information uninitialized memory contents of previous requests via a crafted request...

UBUNTU-CVE-2015-3281

The bufferslowrealign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information uninitialized memory contents of previous requests via a crafted request...

Tor 'strlcat_chk.c' Remote Denial of Service Vulnerability

Tor is a second-generation implementation of onion routing, used primarily for anonymous access to the Internet. A remote denial of service vulnerability exists in Tor, which allows remote attackers to exploit the vulnerability by submitting a special request to crash the affected application,...

The vulnerability of the SAP Afaria mobile device management program, which allows a hacker to trigger service failures

The vulnerability of the XcListener component in the SAP Afaria mobile device management software allows a malicious actor to trigger service failures through a specially crafted request...

WordPress Zip Attachments Plugin Arbitrary File Download Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file download vulnerability exists in the WordPress Zip Attachments plugin, which allows remote attackers to exploit the vulnerability by submitting a...

Cisco Jabber Information Disclosure Vulnerability

Cisco Jabber is a cross-device collaboration system from Cisco Cisco. The system provides voice, video, desktop sharing and conferencing. A security vulnerability exists in the web-based user interface of Cisco Jabber versions 9.63 and earlier and versions 9.7 through 9.75 for Windows platforms. ...

cURL and libcurl smb_request_state function information disclosure vulnerability

cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A security vulnerability in the cURL and libcurl smbrequeststate functions allows remote attackers to conduct denial-of-service attacks by submitting requests of a speciall...

Cisco WebEx Meeting Center Legitimate Username Disclosure Vulnerability

Cisco WebEx Meetings Server is a Cisco meeting center implementation from Cisco. A security vulnerability exists in the Cisco WebEx Meetings Server WEB management interface that allows an attacker to exploit the vulnerability to submit a special request to determine username information...

Adobe Bridge Integer Overflow Arbitrary Code Execution Vulnerability

Adobe Bridge is the control center for Adobe Creative Suite. You use it to organize, browse, and find the resources you need for creating content for print, websites, and mobile devices. Adobe Bridge suffers from a Count Overflow Arbitrary Code Execution vulnerability that allows remote attackers...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in sec/content/secasauserslocaldbadd.html in the management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, 6855, 6900, 10K, and 6860 with firmware 6.4.5.R02, 6.4.6.R01, 6.6.4.R01, 6.6.5.R02, 7.3.2.R01, 7.3.3.R01, 7.3.4.R01,...

CVE-2015-4108

Multiple cross-site request forgery CSRF vulnerabilities in Wing FTP Server before 4.4.7 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary code via a crafted request to adminluascript.html or 2 add a domain administrator via a crafted...

Marktplaats: Content Spoofing - http://aanbieding.marktplaats.nl/wp-admin/admin-ajax.php

Hello, Content spoofing, also referred to as content injection or virtual defacement, is an attack targeting a user made possible by injection vulnerability in a web application. When an application does not properly handle user supplied data, an attacker can supply content to a web application,...

Arbitrary Command Execution Vulnerability in Multiple Buffalo Routers

Buffalo WHR-1166DHP and others are wireless router products from the Buffalo Group in Japan. A security vulnerability exists in several Buffalo routers, which could be exploited by remote attackers to submit a special request and execute arbitrary OS commands...

CVE-2015-1158

The addjob function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted 1 IPPCREATEJOB or 2 IPPPRINTJOB...