4000 matches found
ZOHO ManageEngine Firewall Analyzer Security Bypass Vulnerability
ZOHO ManageEngine Firewall Analyzer is a suite of web-based firewall log analysis tools that collects, correlates, analyzes, and reports on logs from firewalls, proxy servers, and Radius servers across the enterprise. A security bypass vulnerability exists in ZOHO ManageEngine Firewall Analyzer,...
OpenNMS Java Object Deserialization RCE
The remote OpenNMS server is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated, remote attacker can exploit this, by sending a crafted RMI request, to execute arbitrar...
CVE-2015-6388
Cisco Unified Computing System UCS Central software 1.30.1 allows remote attackers to conduct server-side request forgery SSRF attacks via a crafted request, aka Bug ID CSCux33575...
Cisco UCS Central Software Server-Side Request Forgery Vulnerability
A vulnerability in the Cisco Unified Computing System UCS Central software could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery SSRF on a targeted system. The vulnerability is due to improper validation of user-supplied input on the...
Network Time Protocol Daemon Pidfile Driftfile Arbitrary File Overwrite (CVE-2015-7709)
An arbitrary file overwrite vulnerability exists in the Network Time Protocol daemon NTPD. The vulnerability is due to NTPD allowing remote clients to change the pidfile and driftfile configuration options to any arbitrary file, allowing any file on the target system to be overwritten. A remote,...
The vulnerability of the application interface of the IBM WebSphere Portal server allows a hacker to circumvent existing access restrictions.
The vulnerability of the IBM WebSphere Portal application server’s user interface is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to bypass existing access restrictions by using a specially crafted request...
krb5: unauthenticated denial of service in recvauth_common() and others
It was found that the krb5readmessage function of MIT Kerberos did not correctly sanitize input, and could create invalid krb5data objects. A remote, unauthenticated attacker could use this flaw to crash a Kerberos child process via a specially crafted request...
IBM QRadar Security Information and Event Manager Denial of Service Vulnerability
IBM QRadar Security Information and Event Manager is a solution that consolidates log-sourced event data from thousands of devices and applications dispersed throughout the network. A security vulnerability exists in IBM QRadar Security Information and Event Manager, which can be exploited by...
OpenStack ironic-discoverd remote code execution vulnerability
OpenStack is a cloud platform management project. ironic-discoverd is one of the components that provides hardware internal self-testing service functionality. A security vulnerability exists in OpenStack ironic-discovered that allows remote attackers to exploit the vulnerability by submitting a...
The vulnerability of the Junos operating system, which allows a hacker to trigger a service failure
The vulnerability of the PFE daemon in the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a service failure through a specially crafted request...
Avast Antivirus X.509 Certificate Remote Code Execution Vulnerability
Avast Antivirus is a suite of antivirus programs. Avast Antivirus handles X.509 certificates with a security vulnerability that allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary code...
VMware ESXi 'SLPDProcessMessage()' function remote code execution vulnerability
VMware ESXi is a bare-metal virtualization hypervisor that is installed directly on a physical server and divides the physical server into multiple virtual machines. The program features less disk space, higher reliability and security. A remote code execution vulnerability exists in VMware ESXi,...
PHP PHAR Denial of Service Vulnerability
PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A denial-of-service vulnerability exists in PHP PHAR, which allows an attacker to submit a special request to crash an application, resulting in a denial of service...
Allen-Bradley MicroLogix Denial of Service Vulnerability
Allen-Bradley MicroLogix is a programmable logic controller PLC from Rockwell Automation. A denial of service vulnerability exists in the Allen-Bradley MicroLogix 1100 prior to B FRN 15.000 and 1400 prior to B FRN 15.003. Allows a remote attacker, via a crafted HTTP request, to launch a denial of...
Cross site request forgery (csrf)
IBM WebSphere Portal 8.5.0 before CF08 allows remote attackers to bypass intended access restrictions via a crafted request...
CVE-2015-4997
IBM WebSphere Portal 8.5.0 before CF08 allows remote attackers to bypass intended access restrictions via a crafted request...
ManageEngine Applications Manager CommonAPIUtil moveSubGroup haid tohaid SQL Injection
An SQL injection vulnerability exists in ManageEngine Applications Manager. This vulnerability is due to insufficient validation of the haid and tohaid parameters when processing requests using the moveSubGroup method of the CommonAPIUtil class. By sending crafted request messages, a remote...
Security update for haproxy (important)
haproxy was updated to fix two security issues. These security issues were fixed: - CVE-2015-3281: The bufferslowrealign function in HAProxy did not properly realign a buffer that is used for pending outgoing data, which allowed remote attackers to obtain sensitive information uninitialized memor...
Null pointer dereference
3S-Smart CODESYS Gateway Server before 2.3.9.48 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted 1 GET or 2 POST request...
