tomcat: Information disclosure in asynchronous context when using AsyncListeners that threw RuntimeExceptions

java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other application...

tomcat: Information disclosure in asynchronous context when using AsyncListeners that threw RuntimeExceptions

java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other application...

tomcat: Information disclosure in asynchronous context when using AsyncListeners that threw RuntimeExceptions

java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other application...

CVE-2013-0481

The console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to read stack traces by triggering 1 an error or 2 an exception...

CVE-2013-0481

CVE-2013-0481 affects IBM Sterling B2B Integrator (versions 5.0–5.2) and IBM Sterling File Gateway (versions 2.0–2.2). The issue: errors or exceptions in the console processing may cause stack traces to be displayed in responses, potentially exposing internal implementation details. The CVE is do...

Barracuda Backup - Cross Site Scripting Vulnerability

Document Title: =============== Barracuda Backup - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=799 BARRACUDA NETWORK SECURITY ID: BNSEC-1949 Release Date: ============= 2013-06-10 Vulnerability Laboratory ID VL-ID:...

Barracuda Backup - Cross Site Scripting Vulnerability

Document Title: =============== Barracuda Backup - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=799 BARRACUDA NETWORK SECURITY ID: BNSEC-1949 Release Date: ============= 2013-06-10 Vulnerability Laboratory ID VL-ID:...

Mobile Atlas Creator 1.9.12 - Persistent Command Injection

Document Title: =============== Mobile Atlas Creator 1.9.12 - Persistent Command Injection References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=970 Release Date: ============= 2013-06-10 Vulnerability Laboratory ID VL-ID: ====================================...

Hypervisor crash due to missing exception recovery on XRSTOR

ISSUE DESCRIPTION Processors do certain validity checks on the data passed to XRSTOR. While the hypervisor controls the placement of that memory block, it doesn't restrict the contents in any way. Thus the hypervisor exposes itself to a fault occurring on XRSTOR. Other than for FXRSTOR, which...

guest denial of service on syscall/sysenter exception generation

ISSUE DESCRIPTION When guest user code running inside a Xen guest operating system attempts to execute a syscall or sysenter instruction, but when the guest operating system has not registered a handler for that instruction, a General Protection Fault may need to be injected into the guest. It ha...

Apache Tomcat 信息泄露漏洞(CVE-2013-2071)

BUGTRAQ ID: 59798 CVECAN ID: CVE-2013-2071 Apache Tomcat是一个流行的开源JSP应用服务器程序。 Tomcat 7.0.0 - 7.0.39内，AsyncListener的onComplete在执行某些情况下的请求管理时存在运行时异常，org.apache.catalina.connector.Request会因此不再循环。远程攻击者可利用此漏洞获取敏感信息。 0 Apache Group Tomcat 7.0.0 - 7.0.39 厂商补丁： Apache Group ------------...

ruby -- Object taint bypassing in DL and Fiddle in Ruby

Ruby Developers report: There is a vulnerability in DL and Fiddle in Ruby where tainted strings can be used by system calls regardless of the $SAFE level set in Ruby. Native functions exposed to Ruby with DL or Fiddle do not check the taint values set on the objects passed in. This can result in...

Barracuda Bug Bounty #9 CT - Cross Site Vulnerabilities

Document Title: =============== Barracuda Bug Bounty 9 CT - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=577 Barracuda Networks Security ID: BNSEC-305 Release Date: ============= 2013-05-09 Vulnerability Laboratory ID VL-ID:...

Barracuda Bug Bounty #9 CT - Cross Site Vulnerabilities

Document Title: =============== Barracuda Bug Bounty 9 CT - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=577 Barracuda Networks Security ID: BNSEC-305 Release Date: ============= 2013-05-09 Vulnerability Laboratory ID VL-ID:...

CVE-2013-0666

The configuration utility in MatrikonOPC Security Gateway 1.0 allows remote attackers to cause a denial of service unhandled exception and application crash via a TCP RST packet...

CVE-2013-0666

CVE-2013-0666 affects MatrikonOPC Security Gateway 1.0. The vulnerability is a remotely exploitable DoS: sending a TCP RST packet to the active Health Monitor/Configuration paths (Port 30544/TCP) can trigger an unhandled exception in the configuration utility and crash the application. The incide...

CVE-2013-0109

The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not properly handle exceptions, which allows local users to gain privileges or cause a denial of service memory overwrite via a crafted application...

CVE-2013-1831

lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the absolute path in an exception message...

Design/Logic Flaw

lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the absolute path in an exception message...

Google Chrome 21.0.1180.57 NULL Pointer

---| overview Vulnerability: Chrome Null Pointer in InspectDataSource::StartDataRequest Date: 03/14/2012 Author: @HeyderAndrade heyder.andradeatgmaildotcom Chrome Version: = 21.0.1180.57 stable Operating System Tested: Win XP SP2, WIN7, Mac OS X 10.6.8 10K549,Linux Ubuntu 12.04 Architecture: x86...