CVE-2014-4151

The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to create arbitrary files and execute arbitrary code via a crafted setfile request...

CVE-2014-4152

The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remotetask request, related to injecting an ssh public key...

CVE-2014-0186

A certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux RHEL 7 allows remote attackers to cause a denial of service CPU consumption via a crafted request. NOTE: this vulnerability exists because of an unspecified regression...

Design/Logic Flaw

A certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux RHEL 7 allows remote attackers to cause a denial of service CPU consumption via a crafted request. NOTE: this vulnerability exists because of an unspecified regression...

CVE-2014-0186

A certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux RHEL 7 allows remote attackers to cause a denial of service CPU consumption via a crafted request. NOTE: this vulnerability exists because of an unspecified regression...

CVE-2014-0186

CVE-2014-0186 affects Apache Tomcat 7 running on Red Hat Enterprise Linux 7 (RHEL 7). The issue is a regression that can allow remote attackers to cause high CPU/denial of service by sending a crafted request. The available connected advisory notes that a fix for this regression was backported to...

CVE-2014-0186

A certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux RHEL 7 allows remote attackers to cause a denial of service CPU consumption via a crafted request. NOTE: this vulnerability exists because of an unspecified regression...

Advantech WebAccess SQL Injection Information Disclosure (CVE-2014-0763)

Multiple vulnerabilities have been reported in Advantech WebAccess. A remote attacker can exploit these vulnerabilities by sending a specially crafted request to the affected server...

Class Loader Manipulation With CookieInterceptor

Struts 2 Core is vulnerable to class loader manipulation vulnerability. The vulnerability exists because the getClass method does not properly restrict access to cookies as it accepts all cookie names when "\" is used to configure cookiesName parameter which allows remote attackers to manipulate...

Null pointer dereference

ZNC 1.0 allows remote authenticated users to cause a denial of service NULL pointer reference and crash via a crafted request to the 1 editnetwork, 2 editchan, 3 addchan, or 4 delchan page in modules/webadmin.cpp...

CVE-2013-2130

CVE-2013-2130 affects ZNC 1.0: remote authenticated users can trigger a denial of service by sending crafted requests to WebAdmin pages (editnetwork, editchan, addchan, delchan), causing NULL pointer dereferences and crashes. The connected sources corroborate multiple NULL pointer dereferences an...

CVE-2013-2130

ZNC 1.0 allows remote authenticated users to cause a denial of service NULL pointer reference and crash via a crafted request to the 1 editnetwork, 2 editchan, 3 addchan, or 4 delchan page in modules/webadmin.cpp...

Caldera 'cdir' Parameter Absolute Path Directory Traversal

The Caldera installation on the remote host contains a PHP script that is affected by a directory traversal vulnerability. A remote, unauthenticated attacker can exploit this issue by sending a crafted request to the '/dirmng/index.php' script, allowing access to arbitrary directories on the remo...

CVE-2012-6142

Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized...

CVE-2012-6143

Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized...

Code injection

The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request to 1 App::Session::Cookie or 2 App::Session::HTMLHidden, which is not properly handled when it is deserialized...

Design/Logic Flaw

Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized...

Design/Logic Flaw

Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized...

CVE-2012-6141

The CVE-2012-6141 issue affects the Perl App::Context module (versions 0.01–0.968). Root cause: improper handling of Storable::thaw during deserialization. Impact: remote attackers can execute arbitrary code via crafted requests to App::Session::Cookie or App::Session::HTMLHidden, as described in...

[SECURITY] CVE-2014-0075 Apache Tomcat denial of service

CVE-2014-0075 Denial of Service Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Apache Tomcat 8.0.0-RC1 to 8.0.3 - Apache Tomcat 7.0.0 to 7.0.52 - Apache Tomcat 6.0.0 to 6.0.39 Description: It was possible to craft a malformed chunk size as part of a chucked reques...