4412 matches found
NotifyLink server provides inadequate protection for cryptographic key material
Overview The NotifyLink key exchange protocol contains a vulnerability that significantly reduces the strength of cryptographic keys used to encrypt mail messages. Description Notify Technology NotifyLink Enterprise Server allows users to synchronize e-mail between a PDA and a mail server. The...
CVE-2005-0674
The CVE-2005-0674 entry concerns the paBox 1.6 News module, where a cross-site scripting (XSS) flaw exists in the News module’s handling of the hidden text parameter in an HTTP POST. The connected documents corroborate an XSS issue affecting paBox/Nuke-based deployments (e.g., Nessus plugin refer...
CVE-2005-0674: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML via the text hidden parameter in an HTTP POST request...
CVE-2005-0645
Cross-site scripting XSS vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the 1 CLIENT-IP or 2 X-FORWARDED-FOR header in an HTTP POST request to shownews.php...
CVE-2005-0645: Undefined Security Weakness
Cross-site scripting XSS vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the 1 CLIENT-IP or 2 X-FORWARDED-FOR header in an HTTP POST request to shownews.php...
Thomson TCW690 Cable Modem ST42.03.0a - GET Denial of Service
Thomson TCW690 Cable Modem ST42.03.0a - GET Denial of Service source: https://www.securityfocus.com/bid/12595/info Thomson TCW690 cable modem is reported prone to multiple remote vulnerabilities. These issues may allow an attacker to cause a denial of service condition and/or gain unauthorized...
Thomson TCW690 Cable Modem ST42.03.0a - GET Denial of Service
source: https://www.securityfocus.com/bid/12595/info Thomson TCW690 cable modem is reported prone to multiple remote vulnerabilities. These issues may allow an attacker to cause a denial of service condition and/or gain unauthorized access to the device. The following specific issues were...
CVE-2003-1084
Monit 1.4 to 4.1 allows remote attackers to cause a denial of service daemon crash via an HTTP POST request with a negative Content-Length field...
CVE-2003-1084: Undefined Security Weakness
Monit 1.4 to 4.1 allows remote attackers to cause a denial of service daemon crash via an HTTP POST request with a negative Content-Length field...
CVE-2005-0334
Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service device crash via an HTTP POST request containing an unknown parameter without a value...
CVE-2005-0334
This CVE (CVE-2005-0334) affects Linksys PSUS4 with firmware 6032, where remote attackers can cause a device crash (DoS) by sending an HTTP POST containing an unknown parameter without a value. The available sources confirm the vulnerable component and impact, but do not provide a published remed...
CVE-2005-0334: Undefined Security Weakness
Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service device crash via an HTTP POST request containing an unknown parameter without a value...
Linksys PSUS4 PrintServer - POST Denial of Service
Linksys PSUS4 PrintServer - POST Denial of Service source: https://www.securityfocus.com/bid/12443/info Linksys PSUS4 PrintServer is reported prone to a remote denial of service vulnerability while handling certain HTTP POST requests received on TCP port 80. An attacker may exploit this condition...
Linksys PSUS4 PrintServer - POST Denial of Service
source: https://www.securityfocus.com/bid/12443/info Linksys PSUS4 PrintServer is reported prone to a remote denial of service vulnerability while handling certain HTTP POST requests received on TCP port 80. An attacker may exploit this condition to deny service to the affected PrintServer. $ wge...
CVE-2004-2517
myServer 0.7.1 allows remote attackers to cause a denial of service crash via a long HTTP POST request in a View=Logon operation to index.html...
phpBB Attachment Mod Directory Traversal HTTP POST Injection
//------------------------------------------------------------------- CastleCopsSM Security Advisory 14 Dec 2004 --------------------------------------------------------------------- http://castlecops.com/ --------------------------------------------------------------------- Severity: High Title:...
CVE-2004-0331
Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service crash via a HTTP POST with a long application variable...
Cherokee Web Server Malformed POST Request Remote DoS
The remote host is running Cherokee - a fast and tiny web server. The remote version of this software is affected by a remote denial of service vulnerability when handling a specially crafted HTTP 'POST' request. An attacker may exploit this flaw to disable this service remotely. C Tenable Networ...
MyServer HTTP POST Request Remote Overflow DoS
The remote host is running MyServer, an open source web server. The installed version is vulnerable to remote denial of service attack. Using a specially crafted HTTP POST request to 'index.html' when 'View' is set to 'Logon', an unauthenticated, remote attacker can cause the server to stop...