Denial of Service Vulnerability in Multiple F5 Products (CNVD-2018-09412)

F5 BIG-IP LTM, etc. are products of F5 Corporation, U.S.A. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager. Security vulnerabilities exist in several F5 products. An attacker can exploit this vulnerability by sending malformed SPDY or HTTP/2 requests to...

CVE-2017-6155

The CVE-2017-6155 issue affects F5 BIG-IP TMM in versions with SPDY or HTTP/2 profiles (BIG-IP 11.2.x, 11.4.1–11.5.5, 11.6.0–11.6.2, 12.0.0–12.1.3.1, 13.0.0). Malformed SPDY/HTTP/2 requests can disrupt service on TMM when such profiles are attached; no control-plane exposure is reported. Impact i...

CVE-2017-9962

Schneider Electric's ClearSCADA versions released prior to August 2017 are susceptible to a memory allocation vulnerability, whereby malformed requests can be sent to ClearSCADA client applications to cause unexpected behavior. Client applications affected include ViewX and the Server Icon...

Memory corruption

Schneider Electric's ClearSCADA versions released prior to August 2017 are susceptible to a memory allocation vulnerability, whereby malformed requests can be sent to ClearSCADA client applications to cause unexpected behavior. Client applications affected include ViewX and the Server Icon...

CVE-2016-9736

IBM WebSphere Application Server using malformed SOAP requests could allow a remote attacker to obtain sensitive information...

CVE-2016-1469

The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service device outage via a series of malformed HTTP requests, aka Bug ID CSCut67385...

PT-2016-4817 · Cisco · Cisco Spa300 +2

Name of the Vulnerable Software and Affected Versions: Cisco SPA300, SPA500, and SPA51x devices affected versions not specified Description: The issue allows remote attackers to cause a denial of service, resulting in a device outage, by sending a series of malformed HTTP requests to the HTTP...

Cisco IOS XE SNMP Subsystem Denial of Service Vulnerability

Cisco IOS XE is an operating system developed by the American company Cisco Cisco for its network equipment. A security vulnerability exists in the SNMP subsystem of Cisco IOS XE. A remote attacker can exploit this vulnerability to cause a denial of service device reload by sending a large number...

nginx null pointer indirect reference vulnerability

Nginx is a very widely used high-performance web server. A null pointer indirect reference vulnerability exists in the code where Nginx saves client requests to a temporary file, where malformed requests can cause a denial of service...

RPC Network Data Representation Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way Microsoft Windows handles specially crafted Remote Procedure Call RPC requests. The remote code execution can occur when the RPC Network Data Representation NDR Engine improperly frees memory. An authenticated attacker who successfully...

IBM Security Identity Manager Virtual Appliance Cross-Site Request Forgery Vulnerability

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

Cisco Unified Communications Domain Manager Denial of Service Vulnerability

A vulnerability in Cisco Unified Communications Domain Manager CUCDM could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of malformed requests by the self-service application on an affected CUCDM device. An...

RichFaces: remote denial of service via memory exhaustion

It was found that certain malformed requests caused RichFaces to leak memory. A remote, unauthenticated attacker could use this flaw to send a large number of malformed requests to a RichFaces application that uses the Atmosphere framework, leading to a denial of service excessive memory...

Multiple Lenovo ThinkServer Products ThinkServer System Manager Baseboard Management Controller Denial of Service Vulnerability

Lenovo ThinkServer System Manager TSM Baseboard Management Controller BMC for ThinkServer RD350, etc. is a controller from Lenovo, China, embedded in the hardware devices of ThinkServer RD350, etc. for managing and monitoring server status. Lenovo's Baseboard Management Controller BMC for...

Multiple Products Directory Server LDAP Buffer Overflows - Ver2 (CVE-2006-0717)

An error was found in the way several LDAP servers from several vendors handle malformed LDAP requests. This can be exploited to crash the service via a specially-crafted request sent to the LDAP server port...

BlueDragon Server 6.2.1 .CFM Files Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18624/info BlueDragon is prone to a remote denial-of-service vulnerability. This issue is due to the application's failure to efficiently handle malformed GET requests. An attacker can exploit this issue to cause the...

Compaq Web-Based Management Agent Remote Stack Overflow Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8014/info Compaq Web-Based Management Agent has been reported prone to a remote denial of service vulnerability. The problem occurs when making malformed requests to the service. The resulting error reports a stack...

Spinworks Application Server 3.0 - Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12794/info A remote denial of service vulnerability affects Spinworks Application Server. This issue is due to a failure of the application to properly handle malformed requests. An attacker may leverage this issue to...

Web Wiz Forum 6.34/7.0/7.5 Unauthorized Private Forum Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8957/info A vulnerability has been reported in Web Wiz Forum that could allow unauthorized access to private forums. The problem occurs when handling malformed requests that make use of 'quote' mode. When this mode is use...

Working Resources BadBlue 1.7.3 Get Request Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5187/info Working Resources BadBlue is reportedly prone to a denial of service condition when handling malformed GET requests. It has been discovered that BadBlue does not properly handle requests that do not adhere to RF...