CVE-2019-1982

A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due t...

Denial Of Service (DoS)

actionpack is vulnerable to information disclosure. A remote attacker is able crash to the application by sending malicious Accept headers that would cause the application to consume a large amount of resources...

Information Disclosure

actionpack is vulnerable to information disclosure. A remote attacker is able to retrieve arbitrary files on the target server when sending malicious Accept headers that are parsed with render file:...

BSA-2017-364

Security Advisory ID : BSA-2017-364 Component : Apache HTTPD Revision : 2.0: Final The HTTP strict parsing changes added in Apachehttpd2.2.32 and 2.4.24 introduced a bug in token list parsing, which allowsapfindtokento search past the end of its input string. By maliciously crafting a sequence of...

PT-1997-1020 · Metamail · Metamail

Name of the Vulnerable Software and Affected Versions: metamail affected versions not specified Description: The issue allows for arbitrary command execution via the metamail package. This occurs when a user processes an attacker's message using metamail, and the message contains malicious conten...