CVE-2012-4847

IBM Cognos Business Intelligence BI 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service CPU consumption via a crafted request containing a zero-valued byte...

Design/Logic Flaw

The proxy server in IBM WebSphere Application Server 7.0 before 7.0.0.27, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, and WebSphere Virtual Enterprise, allows remote attackers to cause a denial of service daemon outage via a crafted request...

CVE-2012-3330

The proxy server in IBM WebSphere Application Server 7.0 before 7.0.0.27, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, and WebSphere Virtual Enterprise, allows remote attackers to cause a denial of service daemon outage via a crafted request...

Cross site request forgery (csrf)

The Java servlets in the management console in IBM Tivoli Federated Identity Manager TFIM through 6.2.2 and Tivoli Federated Identity Manager Business Gateway TFIMBG before 6.2.2 do not require authentication for all resource downloads, which allows remote attackers to bypass intended J2EE securi...

Debian Security Advisory DSA 2564-1 (tinyproxy)

The remote host is missing an update to tinyproxy announced via advisory DSA 2564-1. OpenVAS Vulnerability Test $Id: deb25641.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2564-1 tinyproxy Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2564-1 : tinyproxy - denial of service

gpernot discovered that Tinyproxy, a HTTP proxy, is vulnerable to a denial of service by remote attackers by sending crafted request headers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

[SECURITY] [DSA 2564-1] tinyproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2564-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 23, 2012 http://www.debian.org/security/faq -...

DSA-2564-1 tinyproxy - denial of service

Bulletin has no description...

CVE-2012-2972

CA ARCserve Backup for Windows (server and agent components) on r12.5, r15, and r16 is affected by CVE-2012-2972 due to insufficient validation of RPC requests, enabling a remote attacker to trigger a denial of service (service crash). This vulnerability affects the RPC handling in CA ARCserve Ba...

CVE-2012-1833

VMware SpringSource Grails before 1.3.8, and 2.x before 2.0.2, does not properly restrict data binding, which might allow remote attackers to bypass intended access restrictions and modify arbitrary object properties via a crafted request parameter to an application...

Cisco IOS Software DHCP Version 6 Server Denial of Service Vulnerability

Cisco IOS Software and Cisco IOS XE Software contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. An attacker could exploit this vulnerability by sending a crafted request to an affected device that has the DHCP version 6 DHCPv6...

CVE-2012-3011

Directory traversal vulnerability in the web server in Fultek WinTr Scada 4.0.5 and earlier allows remote attackers to read arbitrary files via a crafted request...

Directory traversal

Directory traversal vulnerability in the web server in Fultek WinTr Scada 4.0.5 and earlier allows remote attackers to read arbitrary files via a crafted request...

CVE-2012-3011

Directory traversal vulnerability in the web server in Fultek WinTr Scada 4.0.5 and earlier allows remote attackers to read arbitrary files via a crafted request...

Integer overflow

Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before 8.0.3 HP1 and 2012 before SP1 might allow remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow, as demonstrated by a...

Design/Logic Flaw

Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166...

Design/Logic Flaw

The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service server crash and possibly execute arbitrary code via 1 a crafted request that triggers a client swap in glx/glxcmdsswap.c; or 2 a crafted length or 3 a negative value in the screen field in a...

[SECURITY] [DSA 2532-1] libapache2-mod-rpaf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2532-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 22, 2012 http://www.debian.org/security/faq -...

Alpha Networks ADSL2/2+ Wireless Router ASL-26555 Information Disclosure Vulnerability - Active Check

Alpha Networks ADSL2/2+ ASL-26555 wireless router is prone to an information disclosure vulnerability. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Solar FTP Server 2.2 Remote DOS crash POC

Exploit for windows platform in category dos / poc Exploit Title: Solar FTP Server 2.2 Remote DOS crash POC crash:http://img542.imageshack.us/img542/7633/solar.jpg Date: July 4, 2012 Author: coolkaveh email protected https://twitter.com/coolkaveh Vendor Homepage: http://solarftp.com/ Version: 2.2...