Cross site request forgery (csrf)

Dell Netvault Backup before 10.0.5 allows remote attackers to cause a denial of service crash via a crafted request...

CVE-2015-5696

Dell NetVault Backup (Dell) 10.0.x before 10.0.5 is affected by CVE-2015-5696 in nvpmgr.exe, where specially crafted strings/requests trigger a crash (remote DoS). A related issue (CVE-2015-4067) in libnv6 may allow overflow leading to DoS or arbitrary code execution; both are addressed by upgrad...

Apache HTTP Server Denial Of Service Vulnerability (Aug 2015) - Linux

Apache HTTP Server is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apache HTTP Server Denial Of Service Vulnerability (Aug 2015) - Windows

Apache HTTP Server is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

AJAX Control Toolkit Directory Traversal Vulnerability

AJAX Control Toolkit is a toolkit of extended controls for ASP.NET WebForms. A directory traversal vulnerability exists in AJAX Control Toolkit. A remote attacker can exploit this vulnerability by sending a specially crafted request with the directory traversal character '...' A remote attacker c...

D-Link DIR-636L Remote Command Injection and Authentication Bypass (CVE-2015-1187)

Remote command injection and authentication bypass vulnerabilities exist in D-Link routers. The vulnerabilities are due to incorrectly filtering input on the 'ping' and 'fwupgrade' tools which allows to inject arbitrary commands into the router and file upload without authentication. A remote...

GE Healthcare Optima MR360 Built-in Account Vulnerability

The GE Healthcare Optima MR360 is a magnetic resonance imaging MRI system for the healthcare industry. The GE Healthcare Optima MR360 fails to properly verify login authentication, allowing remote attackers to exploit the vulnerability by submitting a special request to gain access...

Dell NetVault Backup Denial of Service Vulnerability

Dell NetVault Backup is a comprehensive backup and recovery software solution. A security vulnerability in Dell NetVault Backup allows remote attackers to exploit the vulnerability by submitting a special request to TCP port 20031, which could cause the application to crash...

The vulnerability of the Debian GNU/Linux operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the bufferslowrealign function in the HAProxy package for the Debian GNU/Linux operating system arises due to overflow in the buffer in dynamic memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information throu...

bind: denial of service

A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named functioning as an authoritative DNS server or a DNS resolver exit unexpectedly with an assertion failure via a specially crafted DNS request packet leading to denia...

PHP 'phar_fix_filepath()' function stack buffer overflow vulnerability

PHP is an open source general-purpose computer scripting language. A stack-based buffer overflow vulnerability exists in the PHP 'pharfixfilepath' function, which allows remote attackers to exploit the vulnerability by submitting a special request to crash the application or execute arbitrary cod...

CVE-2015-1982

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to obtain sensitive information via a crafted request, which reveals the full path in an error message...

HP LoadRunner launcher.dll Stack Buffer Overflow (CVE-2015-2110)

A stack buffer overflow vulnerability exists in HP LoadRunner. The vulnerability is due to insufficient validation of a length value in SSL communication with the HP LoadRunner. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to the vulnerab...

Design/Logic Flaw

Cisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service HTTP service outage via a crafted HTTP request, aka Bug ID CSCum38844...

Cross site request forgery (csrf)

IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attackers to obtain sensitive Java Content Repository JCR information via a crafted request...

IBM WebSphere Application Server Session Hijacking Vulnerability

IBM WebSphere Application Server is an application server product that serves as a platform for Java EE and Web services applications and is the foundation of the IBM WebSphere software platform. A session hijacking vulnerability exists in IBM WebSphere Application Server, which allows remote...

CVE-2015-3281

The bufferslowrealign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information uninitialized memory contents of previous requests via a crafted request...

CVE-2015-3281

The bufferslowrealign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information uninitialized memory contents of previous requests via a crafted request...

UBUNTU-CVE-2015-3281

The bufferslowrealign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information uninitialized memory contents of previous requests via a crafted request...

Tor 'strlcat_chk.c' Remote Denial of Service Vulnerability

Tor is a second-generation implementation of onion routing, used primarily for anonymous access to the Internet. A remote denial of service vulnerability exists in Tor, which allows remote attackers to exploit the vulnerability by submitting a special request to crash the affected application,...