CVE-2016-5840

hotfixupload.cgi in Trend Micro Deep Discovery Inspector DDI 3.7, 3.8 SP1 3.81, and 3.8 SP2 3.82 allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header...

CVE-2016-5840: Improper Input Validation

hotfixupload.cgi in Trend Micro Deep Discovery Inspector DDI 3.7, 3.8 SP1 3.81, and 3.8 SP2 3.82 allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header...

Trend Micro Deep Discovery hotfix_upload.cgi Document Name Remote Code Execution Vulnerability

Trend Micro Deep Discovery detects, analyzes, and responds to ransomware, real-time attacks, and more. Trend Micro Deep Discovery has a remote code execution vulnerability in the hotfixupload.cgi implementation, which can be exploited by a remote attacker to execute arbitrary code in the root...

PT-2016-6708

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Discovery Inspector versions 3.7 through 3.8 SP2 3.82 Description The issue allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header in the...

Trend Micro Deep Discovery hotfix_upload.cgi filename Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Deep Discovery. Authentication is required to exploit this vulnerability. The specific flaw exists within hotfixupload.cgi. The vulnerability is caused by the lack of input validation...

Deep Discovery Inspector vulnerable to remote code execution

Overview Deep Discovery Inspector provided by Trend Micro Incorporated contains a remote code execution vulnerability. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Trend Micro Incorporated coordinated under the...

UBUNTU-CVE-2016-4425

Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service deep recursion, stack consumption, and crash via crafted JSON data...

CVE-2016-4425

Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service deep recursion, stack consumption, and crash via crafted JSON data...

CVE-2016-4425

Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service deep recursion, stack consumption, and crash via crafted JSON data...

CVE-2016-4425

Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service deep recursion, stack consumption, and crash via crafted JSON data...

CVE-2016-4425: Improper Input Validation

Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service deep recursion, stack consumption, and crash via crafted JSON data...

PT-2016-5953

Name of the Vulnerable Software and Affected Versions Jansson versions 2.7 and earlier Description The issue allows context-dependent attackers to cause a denial of service through crafted JSON data, leading to deep recursion, stack consumption, and a crash. Recommendations For Jansson versions 2...

Trend Micro Deep Discovery Inspector 3.8, 3.7 - CSRF Vulnerabilities

No description provided by source...

CVE-2016-4421

epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service deep recursion, stack consumption, and application crash via a packet that specifies deeply nested data...

DEBIAN-CVE-2016-4421

epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service deep recursion, stack consumption, and application crash via a packet that specifies deeply nested data...

Code injection

epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service deep recursion, stack consumption, and application crash via a packet that specifies deeply nested data...

CVE-2016-4421

epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service deep recursion, stack consumption, and application crash via a packet that specifies deeply nested data...

CVE-2016-4421

epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service deep recursion, stack consumption, and application crash via a packet that specifies deeply nested data...

CVE-2016-4421: Improper Input Validation

epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service deep recursion, stack consumption, and application crash via a packet that specifies deeply nested data...

CVE-2016-4078

CVE-2016-4078 affects the Wireshark IEEE 802.11 dissector (Wireshark 1.12.x up to 1.12.10, and 2.0.x up to 2.0.2). A crafted CAPWAP/IEEE802.11 element list can trigger deep recursion and crash the analyzer, enabling a denial of service when a crafted packet is processed. Root cause: improper rest...