OpenStack Ironic Authentication Bypass Vulnerability

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration and Rackspace, Inc. Ironic is a component that provides bare-metal and virtual machine hypervisor interaction. A security vulnerability exists in Ironic. An attacker can exploit the...

Oracle Application Testing Suite Authentication Bypass (CVE-2016-0492)

An authentication bypass vulnerability exists in Oracle's Application Testing Suite. The vulnerability is due to insufficient input validation while processing HTTP requests. A remote attacker can exploit this vulnerability by sending crafted request to the vulnerable server...

Shopware getTemplateName Local File Inclusion (CVE-2016-3109)

A local file inclusion vulnerability has been reported in Shopware. This vulnerability is due to insufficient input validation in the getTemplateName method. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitati...

Apache Struts2 Remote Code Execution Vulnerability (CNVD-2016-04089)

Apache Struts is the United States Apache Apache Software Foundation is responsible for maintaining an open source project , is a set of open source MVC framework for creating enterprise-class Java Web applications , mainly provides two versions of the framework products , Struts 1 and Struts 2...

IBM WebSphere MQ Denial of Service Vulnerability (CNVD-2016-03937)

IBM WebSphere MQ is a messaging middleware product. A denial of service vulnerability exists in IBM WebSphere MQ, which can be exploited by remote attackers to submit a special request for a denial of service attack...

CVE-2016-4450

os/unix/ngxfiles.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service NULL pointer dereference and worker process crash via a crafted request, involving writing a client request body to a temporary file...

FreeBSD : nginx -- a specially crafted request might result in worker process crash (36cf7670-2774-11e6-af29-f0def16c5c1b)

Maxim Dounin reports : A problem was identified in nginx code responsible for saving client request body to a temporary file. A specially crafted request might result in worker process crash due to a NULL pointer dereference while writing client request body to a temporary file. %NASLMINLEVEL 703...

UBUNTU-CVE-2016-4450

os/unix/ngxfiles.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service NULL pointer dereference and worker process crash via a crafted request, involving writing a client request body to a temporary file...

Apache Tomcat 6.0.x < 6.0.45 / 7.0.x < 7.0.65 / 8.0.x < 8.0.27 Directory Traversal

Binary data 9317.pasl...

Apple iOS/watchOS/tvOS and OS X El Capitan IOHIDFamily Arbitrary Code Execution Vulnerability

Apple iOS is an operating system for Apple's cell phones.OS X El Capitan is a dedicated operating system for Mac computers.watchOS is a smartwatch operating system. A security vulnerability in IOHIDFamily in Apple iOS, watchOS, and OS X El Capitan allows an attacker to submit a special request to...

Apple iOS/watchOS/tvOS and OS X El Capitan libxml2 arbitrary code execution vulnerability (CNVD-2016-03522)

Apple iOS is an operating system on Apple's cell phones. oS X El Capitan is a dedicated operating system developed for Mac computers. watchOS is a smartwatch operating system. A security vulnerability in libxml2 in Apple iOS, watchOS, and OS X El Capitan could be exploited by an attacker to submi...

Apple iOS/watchOS/tvOS and OS X El Capitan libxml2 arbitrary code execution vulnerability (CNVD-2016-03524)

Apple iOS is an operating system on Apple's cell phones. oS X El Capitan is a dedicated operating system developed for Mac computers. watchOS is a smartwatch operating system. A security vulnerability in libxml2 in Apple iOS, watchOS, and OS X El Capitan could be exploited by an attacker to submi...

Cisco Web Security Appliance HTTP POST Denial of Service Vulnerability

A vulnerability that occurs when parsing an HTTP POST request with Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a denial of service DoS vulnerability due to the proxy process becoming unresponsive. The vulnerability is due to a lack o...

The vulnerability of the microprogramming software of the Cisco wireless LAN controller allows a intruder to execute arbitrary code.

The vulnerability of Cisco wireless LAN controllers’ microprogramming software arises from buffer overflows in the redirection system. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted HTTP request...

Botan BER Decoder Security Bypass Vulnerability

Botan is a C++ library of cryptographic algorithms that supports AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. A security vulnerability in the Botan BER decoder allows remote attackers to exploit the vulnerability by submitting a special request to read untrusted ASN.1 data...

The vulnerability of the SAP NetWeaver software integration platform allows a perpetrator to trigger a service failure.

The vulnerability of the Enqueue Server component of the SAP NetWeaver software integration platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created request...

ImageMagick Unauthorized File Deletion (CVE-2016-3715)

A file deletion vulnerability has been reported in ImageMagick. The vulnerability is due to insufficient filtering of shell characters. A remote attacker may exploit this issue by sending a crafted request containing such characters. Successful exploitation would allow attackers to delete files i...

Cisco Prime Collaboration Assurance Open Redirect Vulnerability

A vulnerability in the web interface of Cisco Prime Collaboration Assurance Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of HTTP request parameters by the affected software. An attacker...

PHP 'mb_strcut()' Function Denial of Service Vulnerability

PHP is an open source general-purpose computer scripting language. The PHP 'mbstrcut' function fails to properly handle string formatting, allowing a remote attacker to exploit the vulnerability by submitting a special request to crash the application...

Squid HTTP Caching Proxy Buffer Overflow Vulnerability (CNVD-2016-02509)

Squid is a suite of proxy server and web caching server software. Squid suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to submit a special request, crash an application, or execute arbitrary code...