4001 matches found
TigerVNC Buffer Overflow Vulnerability
TigerVNC is an advanced implementation of VNC remote access. TigerVNC suffers from a buffer overflow vulnerability that allows an attacker to submit a special request to execute arbitrary code in the context of an application...
CVE-2016-4312
XML external entity XXE vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH-4.4.0-0231 allows remote authenticated users with access to XACML features to read arbitrary files, cause a denial of service, conduct server-side request forgery SSRF attacks, o...
IBM Kenexa LCMS Premier on Cloud Information Disclosure Vulnerability (CNVD-2017-01326)
IBM Kenexa LCMS Premier on Cloud is an adjustable Learning Content Management System LCMS for developing, maintaining, and delivering effective employee training from IBM USA. A security vulnerability exists in IBM Kenexa LCMS Premier on Cloud. An attacker could exploit the vulnerability by sendi...
IBM Security Access Manager Information Disclosure Vulnerability (CNVD-2017-01305)
IBM Security Access Manager is a security access manager from IBM USA. A security vulnerability exists in IBM Security Access Manager. An attacker could exploit the vulnerability by sending a specially crafted HTTP request to obtain sensitive information from an error message...
Splunk Enterprise and Splunk Light Denial of Service Vulnerabilities
Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze machine-generated data, including data generated by all IT systems and infrastructures physical, virtual, and cloud.Splunk Enterprise is...
Tcpdump Multiple Parser Buffer Overflow Vulnerability
Tcpdump is a popular network analysis program. A buffer overflow vulnerability in Tcpdump's multiple parsers print-ether.c:etherprint allows remote attackers to exploit the vulnerability by submitting a special request to crash the application...
Tcpdump SNMP Parser Buffer Overflow Vulnerability
Tcpdump is a popular network analysis program. Tcpdump SNMP parser print-snmp.c:asn1parse suffers from a buffer overflow vulnerability that allows remote attackers to exploit the vulnerability by submitting a special request to crash the application...
Tcpdump BOOTP Parser Buffer Overflow Vulnerability
Tcpdump is a popular network analysis program. Tcpdump BOOTP parser print-bootp.c:bootpprint suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to crash an application by submitting a special request...
CVE-2016-5949
IBM Kenexa LCMS Premier on Cloud could allow an authenticated user to obtain sensitive user data with a specially crafted HTTP request...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...
CVE-2016-7980
Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...
CVE-2016-7980
Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...
Cisco IOS and Cisco IOx Software Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential information that is displayed without authenticating to the device. The vulnerability is due to lack of proper input validation of the...
Juniper Junos Code Execution Vulnerability
Juniper Junos is a network operating system dedicated to the company's hardware systems. Insufficient authorization checks in the Juniper Junos Space WEB management interface allow remote attackers to exploit this vulnerability by submitting a special request to execute arbitrary code...
GnuTLS Stack Buffer Overflow Vulnerability
GnuTLS is a free secure communications library for implementing SSL, TLS and DTLS protocols. GnuTLS suffers from a stack buffer overflow vulnerability that could be exploited by a remote attacker to submit a specially crafted request to crash an application linking to this library...
Adobe RoboHelp Unspecified XSS (APSB16-46)
The version of Adobe RoboHelp installed on the remote Windows host is affected by an unspecified cross-site scripting XSS vulnerability due to improper validation of input before returning it to users. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to execu...
Apache 2.4.23 mod_http2 - Denial of Service
Apache 2.4.23 modhttp2 - Denial of Service !/usr/bin/python """ source : http://seclists.org/bugtraq/2016/Dec/3 The modhttp2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote...
DEBIAN-CVE-2016-9862
An issue was discovered in phpMyAdmin. With a crafted login request it is possible to inject BBCode in the login page. All 4.6.x versions prior to 4.6.5 are affected...
CVE-2016-9859
An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to initiate a denial of service attack in import feature. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...
Design/Logic Flaw
An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to bypass the logout timeout. All 4.6.x versions prior to 4.6.5, and 4.4.x versions prior to 4.4.15.9 are affected...