The vulnerability of the FortiAnalyzer network firewall’s syslog server allows a hacker to send arbitrary messages to the server.

The vulnerability of the FortiAnalyzer network switch’s syslog server is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to send arbitrary messages to the server remotely...

Unspecified Vulnerability in Pivotal Software Spring Framework Java SockJS Client

Pivotal Software Spring Framework is the U.S. Pivotal Software, Inc. of a set of open source Java, Java EE application framework. The framework helps developers build high-quality applications . A security vulnerability exists in the Java SockJS client in Pivotal Software Spring Framework version...

CVE-2015-0201: Undefined Security Weakness

The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors...