D-Link DIR-636L Remote Command Injection and Authentication Bypass (CVE-2015-1187)

Remote command injection and authentication bypass vulnerabilities exist in D-Link routers. The vulnerabilities are due to incorrectly filtering input on the 'ping' and 'fwupgrade' tools which allows to inject arbitrary commands into the router and file upload without authentication. A remote...

GE Healthcare Optima MR360 Built-in Account Vulnerability

The GE Healthcare Optima MR360 is a magnetic resonance imaging MRI system for the healthcare industry. The GE Healthcare Optima MR360 fails to properly verify login authentication, allowing remote attackers to exploit the vulnerability by submitting a special request to gain access...

Dell NetVault Backup Denial of Service Vulnerability

Dell NetVault Backup is a comprehensive backup and recovery software solution. A security vulnerability in Dell NetVault Backup allows remote attackers to exploit the vulnerability by submitting a special request to TCP port 20031, which could cause the application to crash...

The vulnerability of the Debian GNU/Linux operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the bufferslowrealign function in the HAProxy package for the Debian GNU/Linux operating system arises due to overflow in the buffer in dynamic memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information throu...

bind: denial of service

A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named functioning as an authoritative DNS server or a DNS resolver exit unexpectedly with an assertion failure via a specially crafted DNS request packet leading to denia...

PHP 'phar_fix_filepath()' function stack buffer overflow vulnerability

PHP is an open source general-purpose computer scripting language. A stack-based buffer overflow vulnerability exists in the PHP 'pharfixfilepath' function, which allows remote attackers to exploit the vulnerability by submitting a special request to crash the application or execute arbitrary cod...

CVE-2015-1982

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to obtain sensitive information via a crafted request, which reveals the full path in an error message...

HP LoadRunner launcher.dll Stack Buffer Overflow (CVE-2015-2110)

A stack buffer overflow vulnerability exists in HP LoadRunner. The vulnerability is due to insufficient validation of a length value in SSL communication with the HP LoadRunner. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to the vulnerab...

Design/Logic Flaw

Cisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service HTTP service outage via a crafted HTTP request, aka Bug ID CSCum38844...

Cross site request forgery (csrf)

IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attackers to obtain sensitive Java Content Repository JCR information via a crafted request...

IBM WebSphere Application Server Session Hijacking Vulnerability

IBM WebSphere Application Server is an application server product that serves as a platform for Java EE and Web services applications and is the foundation of the IBM WebSphere software platform. A session hijacking vulnerability exists in IBM WebSphere Application Server, which allows remote...

CVE-2015-3281

The bufferslowrealign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information uninitialized memory contents of previous requests via a crafted request...

CVE-2015-3281

The bufferslowrealign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information uninitialized memory contents of previous requests via a crafted request...

UBUNTU-CVE-2015-3281

The bufferslowrealign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information uninitialized memory contents of previous requests via a crafted request...

Tor 'strlcat_chk.c' Remote Denial of Service Vulnerability

Tor is a second-generation implementation of onion routing, used primarily for anonymous access to the Internet. A remote denial of service vulnerability exists in Tor, which allows remote attackers to exploit the vulnerability by submitting a special request to crash the affected application,...

The vulnerability of the SAP Afaria mobile device management program, which allows a hacker to trigger service failures

The vulnerability of the XcListener component in the SAP Afaria mobile device management software allows a malicious actor to trigger service failures through a specially crafted request...

WordPress Zip Attachments Plugin Arbitrary File Download Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file download vulnerability exists in the WordPress Zip Attachments plugin, which allows remote attackers to exploit the vulnerability by submitting a...

Cisco Jabber Information Disclosure Vulnerability

Cisco Jabber is a cross-device collaboration system from Cisco Cisco. The system provides voice, video, desktop sharing and conferencing. A security vulnerability exists in the web-based user interface of Cisco Jabber versions 9.63 and earlier and versions 9.7 through 9.75 for Windows platforms. ...

cURL and libcurl smb_request_state function information disclosure vulnerability

cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A security vulnerability in the cURL and libcurl smbrequeststate functions allows remote attackers to conduct denial-of-service attacks by submitting requests of a speciall...

Cisco WebEx Meeting Center Legitimate Username Disclosure Vulnerability

Cisco WebEx Meetings Server is a Cisco meeting center implementation from Cisco. A security vulnerability exists in the Cisco WebEx Meetings Server WEB management interface that allows an attacker to exploit the vulnerability to submit a special request to determine username information...