672 matches found
[SECURITY] Fedora 16 Update: rubygem-actionpack-3.0.10-3.fc16
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...
[SECURITY] Fedora 17 Update: rubygem-actionpack-3.0.11-2.fc17
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...
libsoup library directory traversal
Directory traversal in Web request handling...
Ecmall全版本本地文件包含漏洞
简要描述： Ecmall的默认处理中犯了一个严重的错误，绕开了系统中的保护逻辑从而导致可以包含任意文件以php代码执行 详细说明： eccore/ecmall.php内 if !getmagicquotesgpc $GET = addslashesdeep$GET; $POST = addslashesdeep$POST; $COOKIE= addslashesdeep$COOKIE; / 请求转发 / $defaultapp = $config'defaultapp' ? $config'defaultapp' : 'default'; $defaultact =...
TrendMicro Control Manager security vulnerabilities
Integer overflow on TCP/20801 request handling. SQL injection...
OpenVAS Manager OMP Request Handling Command Injection Vulnerability
OpenVAS Manager is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 13 Update: rubygem-actionpack-2.3.5-4.fc13
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...
RHEL 4 : seamonkey (RHSA-2011:0313)
Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...
printf(1) via PHP magic_quotes Utility Command Encoder
This encoder uses the printf1 utility to avoid restricted characters. Some shell variable substitution may also be used if needed symbols are blacklisted. Some characters are intentionally left unescaped since it is assumed that PHP with magicquotesgpc enabled will escape them during request...
KLA10386 Multiple vulnerabilities in VMware
Multiple serious vulnerabilities have been found in VMware products. Malicious users can exploit these vulnerabilities to cause denial of service, inject arbitrary scripts, execute arbitrary code and obtain sensitive information. Below is a complete list of vulnerabilities 1. Insecure file...
squid -- Denial of service vulnerability in request handling
Squid security advisory 2010:3 reports: Due to an internal error in string handling Squid is vulnerable to a denial of service attack when processing specially crafted requests. This problem allows any trusted client to perform a denial of service attack on the Squid service...
Apache Tomcat < 6.0.16 Multiple Vulnerabilities
According to its self-reported version number, the instance of Apache Tomcat listening on the remote host is prior to 6.0.16. It is, therefore, affected by multiple vulnerabilities : - The remote Apache Tomcat install may be vulnerable to an information disclosure attack via cookies. The previous...
Apache Httpd < 2.2.16 : mod_cache and mod_dav DoS
A flaw was found in the handling of requests by modcache 2.2 and moddav 2.0 and 2.2. A malicious remote attacker could send a carefully crafted request and cause a httpd child process to crash. This crash would only be a denial of service if using the worker MPM. This issue is further mitigated a...
MX Simulator Server buffer overflow
Buffer overflow on network request handling...
CVE-2010-0408
The approxyajprequest function in modproxyajp.c in modproxyajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service backend server outage via a crafted request,...
lighttpd 1.41.5 - Slow Request Handling Remote Denial of Service
lighttpd 1.41.5 - Slow Request Handling Remote Denial of Service source: https://www.securityfocus.com/bid/38036/info The 'lighttpd' webserver is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to hang, denying service to legitimate...
lighttpd 1.4/1.5 - Slow Request Handling Remote Denial of Service
source: https://www.securityfocus.com/bid/38036/info The 'lighttpd' webserver is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to hang, denying service to legitimate users. slowtest.sh for j=0;j/dev/null 2/dev/null & done& sleep 3 don...
[SECURITY] Fedora 11 Update: rubygem-actionpack-2.3.2-4.fc11
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...
[SECURITY] Fedora 10 Update: rubygem-actionpack-2.1.1-3.fc10
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...