4707 matches found
CVE-2015-4060: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the TermProxy WLTermProxyService.exe service in Wavelink ConnectPro allows remote attackers to execute arbitrary code via a large HTTP header...
Juniper Networks Junos OS J-Web Clickjacking Vulnerability
Junos OS is prone to Clickjacking vulnerability on J-Web. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...
PT-2015-6401
Name of the Vulnerable Software and Affected Versions Wavelink Terminal Emulation TE affected versions not specified Description The issue is related to a heap-based buffer overflow in the License Server LicenseServer.exe of Wavelink Terminal Emulation TE. This allows remote attackers to execute...
PT-2015-6402
Name of the Vulnerable Software and Affected Versions Wavelink ConnectPro affected versions not specified Description The issue is related to a heap-based buffer overflow in the TermProxy service, allowing remote attackers to execute arbitrary code via a large HTTP header. This can be exploited...
CVE-2014-4778
IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 do not send an X-Frame-Options HTTP header in response to requests for the login page, which allows remote attackers to conduct clickjacking attacks via vectors involving a FRAME element...
Design/Logic Flaw
IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 do not send an X-Frame-Options HTTP header in response to requests for the login page, which allows remote attackers to conduct clickjacking attacks via vectors involving a FRAME element...
Squid 2.7.x < 3.0 DoS
Binary data 8636.prm...
Squid < 3.1.1 HTTP Header Injection
Binary data 8698.prm...
Squid 3.x < 3.2.9 / 3.3.x < 3.3.3 DoS
Binary data 8635.prm...
PT-2020-7833
Name of the Vulnerable Software and Affected Versions: Zend Framework versions prior to 1.12.12 Zend Framework 2.x versions prior to 2.3.8 Zend Framework 2.4.x versions prior to 2.4.1 Description: A CRLF injection vulnerability in ZendMail Zend Mail allows remote attackers to inject arbitrary HTT...
HP OpenView Network Node Manager Accept-Language Buffer Overflow - Ver2 (CVE-2009-4179)
A stack buffer overflow exists in HP OpenView Network Node Manager NNM CGI program ovalarm.exe. The vulnerability is due to a boundary error when processing the Accept-Language HTTP header and the OvAcceptLang cookie value in a crafted HTTP request. A remote unauthenticated attacker can exploit...
Referrer policy ignored when links opened by middle-click and context menu — Mozilla
Security researcher Alex Verstak reported that is ignored when a link is opened through the context menu or a middle-click by mouse. This means that, in some situations, the referrer policy is ignored when opening links in new tabs and may cause some pages to open without an HTTP Referer header...
vBulletin 4.x.x 'visitormessage.php' Remote Code Injection Vulnerability
Exploit Title: vBulletin 4.x.x 'visitormessage.php' Remote Code Injection Vulnerability + Discovered By: Dariush Nasirpour Net.Edit0r + My Homepage: black-hg.org / nasirpour.info + Date: 2015 27 February + Vendor Homepage: vBulletin.com + Tested on: vBulletin 4.2.2 + Greeting : Ali Razmjoo -...
F5 BigIP HTTP Virtual Server Scanner
This module scans for BigIP HTTP virtual servers using banner grabbing. BigIP system uses different HTTP profiles for managing HTTP traffic and these profiles allow to customize the string used as Server HTTP header. The default values are "BigIP" or "BIG-IP" depending on the BigIP system version...
Concrete CMS: Unsafe usage of Host HTTP header in Concrete5 version 5.7.3.1
Concrete5 is affected by a design issue related to the Host HTTP header. Such header is being used to define the base URL for the application. Since the Host header can be arbitrarily manipulated by an attacker, this can have some security impacts...
CVE-2015-0706
Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header, aka Bug IDs CSCut06060, CSCut06056, and CSCus98966...
Open redirect
Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header, aka Bug IDs CSCut06060, CSCut06056, and CSCus98966...
CVE-2015-0706
Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header, aka Bug IDs CSCut06060, CSCut06056, and CSCus98966...
PT-2015-4827
Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software versions 5.3.1.1 through 5.3.1.2 Cisco FireSIGHT System Software version 6.0.0 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HT...
CVE-2015-0706: Undefined Security Weakness
Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header, aka Bug IDs CSCut06060, CSCut06056, and CSCus98966...