3949 matches found
CVE-2015-2248
Dell SonicWALL Secure Remote Access (SRA) appliances are affected by CVE-2015-2248 (CSRF in the user portal) affecting firmware prior to 7.5.1.0-38sv and 8.x prior to 8.0.0.1-16sv. The vulnerability enables an attacker to hijack a logged-in user’s authentication to create bookmarks via a crafted ...
CVE-2015-0914
EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request...
Linux kernel TCP Fast Open Denial of Service Vulnerability
Linux kernel is an open source operating system. A security vulnerability exists in the Linux kernel when TCP Fast Open is enabled, which allows a local attacker to exploit the vulnerability by submitting a special request to crash the system...
Linux kernel Netfilter Connection Tracking Extension Load Denial of Service Vulnerability
Linux kernel is an open source operating system. A security vulnerability in the Linux kernel Netfilter Connection Tracking Extension loading feature allows an attacker to exploit the vulnerability to submit a special request to crash the system...
WebDepo CMS 'wood' Parameter SQL Injection Vulnerability
WebDepo CMS is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Buffer overflow
Multiple off-by-one errors in the 1 MakeBigReq and 2 SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow...
CVE-2013-7439
Multiple off-by-one errors in the 1 MakeBigReq and 2 SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow...
GNU Mailman Directory Traversal Vulnerability
GNU Mailman is a mailing list application. A directory traversal vulnerability exists in GNU Mailman. This allows remote attackers to submit a special directory traversal request to obtain the contents of sensitive files...
CVE-2015-1653
Cross-site scripting XSS vulnerability in Microsoft SharePoint Foundation 2013 SP1 and SharePoint Server 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...
CVE-2015-1640
Cross-site scripting XSS vulnerability in Microsoft Project Server 2010 SP2 and 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...
Cross site scripting
Cross-site scripting XSS vulnerability in Microsoft SharePoint Foundation 2013 SP1 and SharePoint Server 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...
Cross site scripting
Cross-site scripting XSS vulnerability in Microsoft Project Server 2010 SP2 and 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...
CVE-2015-1640
Cross-site scripting XSS vulnerability in Microsoft Project Server 2010 SP2 and 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...
MS15-036: Vulnerabilities in SharePoint Server could allow elevation of privilege: April 14, 2015
Resolves vulnerabilities in Microsoft Office server and productivity software that could allow elevation of privilege if an attacker sends a specially crafted request to an affected SharePoint Server.SummaryThis security update resolves vulnerabilities in Microsoft SharePoint Server and Microsoft...
Red Hat slapi-nis plugin denial of service vulnerability
slapi-nis is a directory server plug-ins, it contains a NIS server mainly provides is the user's account, password, home directory filename, UID and other information plug-ins and the use of Red Hat Directory Server, 389 Directory Server architecture compatibility plug-ins. A security vulnerabili...
CVE-2015-2819
SAP Sybase SQL Anywhere 11 and 16 allows remote attackers to cause a denial of service crash via a crafted request, aka SAP Security Note 2108161...
Buffer overflow
Buffer overflow in XcListener in SAP Afaria 7.0.6001.5 allows remote attackers to cause a denial of service process termination via a crafted request, aka SAP Security Note 2132584...
Design/Logic Flaw
SAP Sybase SQL Anywhere 11 and 16 allows remote attackers to cause a denial of service crash via a crafted request, aka SAP Security Note 2108161...