CVE-2019-20200: Out-of-bounds Read

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the "normalize line endings" feature...

PT-2019-6371

Name of the Vulnerable Software and Affected Versions ezXML versions 0.8.3 through 0.8.6 Description The issue is related to the ezxml decode function in the ezXML library, which performs incorrect memory handling while parsing crafted XML files. This leads to a heap-based buffer over-read in the...

Security update for java-1_8_0-openjdk (important)

openSUSE Security Update: Security update for java-180-openjdk Announcement ID: openSUSE-SU-2019:1912-1 Rating: important References: 1115375 1141780 1141782 1141783 1141784 1141785 1141786 1141787 1141789 Cross-References: CVE-2019-2745 CVE-2019-2762 CVE-2019-2766 CVE-2019-2769 CVE-2019-2786...

F5 Networks BIG-IP : TMM vulnerability (K34514540)

Malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default 'normalize URI' configuration options used in iRules and/or BIG-IP LTM policies...

F5 Networks BIG-IP : TMM vulnerability (K64208870)

Malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with the non-default 'normalize URI' configuration options used in iRules and/or BIG-IP LTM policies. CVE-2018-15319 Impact An attacker may be able to disrupt traffic or cause the...

CVE-2018-15319

On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with the non-default "normalize URI" configuration options used in iRules and/or BIG-IP LTM policies...

CVE-2018-15319: Improper Input Validation

On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with the non-default "normalize URI" configuration options used in iRules and/or BIG-IP LTM policies...

PT-2018-12963

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.1.0 through 12.1.3.6 F5 BIG-IP versions 13.0.0 through 13.1.1.1 F5 BIG-IP versions 14.0.0 through 14.0.0.2 Description The issue allows malicious requests made to virtual servers with an HTTP profile to cause the TMM to...

rubygem-rack: Potential Denial of Service Vulnerability in Rack normalize_params()

A flaw was found in a way Rack processed parameters of incoming requests. An attacker could use this flaw to send a crafted request that would cause an application using Rack to crash...

CVE-2017-6138: Improper Input Validation

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of...

PT-2017-16910

Name of the Vulnerable Software and Affected Versions F5 BIG-IP software versions 12.1.0 through 12.1.2 F5 BIG-IP software version 13.0.0 Description The issue allows malicious requests made to virtual servers with an HTTP profile to cause the TMM to restart. This is exposed with BIG-IP APM...

Trend Micro Control Manager - ImportFile Directory Traversal RCE Exploit

Exploit for windows platform in category remote exploits require 'msf/core' require 'msf/core/exploit/phpexe' class MetasploitModule 'Trend Micro Control Manager importFile Directory Traversal RCE', 'Description' = %q This module exploits a directory traversal vulnerability found in Trend Micro...

CVE-2016-9245

In F5 BIG-IP systems 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default "Normalize URI" configuration options used in...

Information disclosure

In F5 BIG-IP systems 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default "Normalize URI" configuration options used in...

CVE-2016-9245: Improper Access Control

In F5 BIG-IP systems 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default "Normalize URI" configuration options used in...

PT-2017-10019

Name of the Vulnerable Software and Affected Versions F5 BIG-IP systems versions 12.1.0 through 12.1.2 Description The issue allows malicious requests made to virtual servers with an HTTP profile to cause the TMM to restart. This is exposed with BIG-IP APM profiles, regardless of settings, and wi...

chromium-browser: Use-after-free in Blink

The Web Cryptography API aka WebCrypto implementation in Blink, as used in Google Chrome before 52.0.2743.116, does not properly copy data buffers, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via crafted JavaScript code,...

UBUNTU-CVE-2016-5142

The Web Cryptography API aka WebCrypto implementation in Blink, as used in Google Chrome before 52.0.2743.116, does not properly copy data buffers, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via crafted JavaScript code,...

PT-2016-6813

Name of the Vulnerable Software and Affected Versions libidn versions prior to 1.33 Description The issue allows context-dependent attackers to cause a denial of service, resulting in an out-of-bounds read and crash, via crafted UTF-8 data. This is due to a problem in the stringprep utf8 nfkc...

rubygem-rack: Potential Denial of Service Vulnerability in Rack normalize_params()

A flaw was found in a way Rack processed parameters of incoming requests. An attacker could use this flaw to send a crafted request that would cause an application using Rack to crash...