1624 matches found
CVE-2017-15701
In Apache Qpid Broker-J versions 6.1.0 through 6.1.4 inclusive the broker does not properly enforce a maximum frame size in AMQP 1.0 frames. A remote unauthenticated attacker could exploit this to cause the broker to exhaust all available memory and eventually terminate. Older AMQP protocols are...
CVE-2017-15701
The CVE-2017-15701 entry applies to Apache Qpid Broker-J versions 6.1.0–6.1.4, where AMQP 1.0 frame size is not properly enforced, allowing a remote unauthenticated attacker to exhaust memory and cause DoS. A fix is available in 6.1.5 and later; upgrade to 6.1.5+ or apply the applicable mitigatio...
PT-2017-14150 · Apache · Apache Qpid Broker-J
Name of the Vulnerable Software and Affected Versions: Apache Qpid Broker-J versions 6.1.0 through 6.1.4 Description: The issue arises from the broker's failure to properly enforce a maximum frame size in AMQP 1.0 frames, allowing a remote unauthenticated attacker to cause the broker to exhaust a...
j-c-m.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-390037 Description| Value ---|--- Affected Website:| j-c-m.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Updated mysql-connector-java packages fix security vulnerabilities
Thijs Alkemade discovered that unexpected automatic deserialisation of Java objects in the MySQL Connector/J JDBC driver may result in the execution of arbitary code CVE-2017-3523. Two vulnerabilities have been found in the MySQL Connector/J JDBC driver CVE-2017-3586, CVE-2017-3589...
Cross site request forgery (csrf)
J-Web does not validate certain input that may lead to cross-site request forgery CSRF issues or cause a denial of J-Web service DoS...
CVE-2016-4923
Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device...
Cross site scripting
Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device...
CVE-2016-1261
J-Web does not validate certain input that may lead to cross-site request forgery CSRF issues or cause a denial of J-Web service DoS...
CVE-2016-4923 Junos J-Web: Cross Site Scripting Vulnerability
Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device...
CVE-2016-1261 Junos: vulnerabilities in J-Web (CVE-2016-1261)
J-Web does not validate certain input that may lead to cross-site request forgery CSRF issues or cause a denial of J-Web service DoS...
CVE-2016-1261
CVE-2016-1261 affects Junos J-Web; the issue arises from input not being validated, which may enable cross-site request forgery (CSRF) and could cause a denial of service (DoS). The provided documents identify CSRF/DoS as outcomes but do not specify affected versions, root cause details beyond in...
Denial Of Service (DoS)
Xerces2-j aka Apache Xerces-J parser is vulnerable to denial of service DoS. The attack can be triggered when malicious XML data is passed to Apache Xerces-J parser and processed by the JRE...
Critical: Red Hat Security Advisory: dnsmasq security update
An update for dnsmasq is now available for Red Hat Enterprise Linux 5.9 Long Life. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
walterjbaird.org XSS vulnerability
Vulnerable URL: http://www.walterjbaird.org/apps/news/shownews.jsp?RECID=415526=0=true=News%20Post%20Boys%20Basketball%20Tryouts%20-%20Walter%20J.%20Baird%20Middle%20School%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 15.10.2017 Latest check fo...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3609)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3609 advisory. - fs/exec.c: account for argv/envp pointers Kees Cook Orabug: 26638900 CVE-2017-1000365 CVE-2017-1000365 - dentry name snapshots Al Viro Orabug:...
Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10775)
According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities : - A carry propagation error exists in the OpenSSL component in the Broadwell-specific Montgomery multiplication procedure when handling input lengths divisible by but longer th...
Bytecode Viewer - A Java 8 Jar & Android Apk Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
Bytecode Viewer is an Advanced Lightweight Java Bytecode Viewer, GUI Java Decompiler, GUI Bytecode Editor, GUI Smali, GUI Baksmali, GUI APK Editor, GUI Dex Editor, GUI APK Decompiler, GUI DEX Decompiler, GUI Procyon Java Decompiler, GUI Krakatau, GUI CFR Java Decompiler, GUI FernFlower Java...
Juniper Junos SRX, vSRX, and J-Series ISC BIND DoS (JSA10799)
According to its self-reported version and model number, the remote Juniper Junos device is affected by a denial of service vulnerability in ISC BIND, specifically in the queryfind function within file bin/named/query.c, when simultaneously using DNS64 and RPZ for query responses. An...