Cross site scripting

Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, and other products, allows remote attackers to obtain sensitive information from another domain and corrupt the session state via HTTP request header fields, ...

[VulnWatch] Cisco Security Advisory: Cisco 11500 Content Services Switch HTTP Request Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco 11500 Content Services Switch HTTP Request Vulnerability Advisory ID: cisco-sa-20060405-css http://www.cisco.com/warp/public/707/cisco-sa-20060405-css.shtml Revision 1.0 For Public Release 2006 April 05 1500 GMT UTC -...

CVE-2006-0042

Unspecified vulnerability in 1 apreqparseheaders and 2 apreqparseurlencoded functions in Apache2::Request Libapreq2 before 2.07 allows remote attackers to cause a denial of service CPU consumption via unknown attack vectors that result in quadratic computational complexity...

CVE-2006-0707

PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP request with multiple leading / slash characters, which is accessed using the PATHINFO variable...

CVE-2005-3751

HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers...

CVE-2002-1860

Pramati Server 3.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

CVE-2003-1152

CVE-2003-1152 affects WebTide 7.04, where an HTTP request for %3f.jsp (encoded “?”) can cause remote attackers to list arbitrary directories. The vulnerability description confirms the issue exists in WebTide 7.04; no detailed root-cause or affected subcomponents are provided beyond this director...

HP-UX Security patch : PHNE_9030

The remote host is missing HP-UX Security Patch number PHNE9030 . Vulnerability with incoming ICMP Echo Request ping packets %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17063;...

HP-UX Security patch : PHNE_9037

The remote host is missing HP-UX Security Patch number PHNE9037 . Vulnerability with incoming ICMP Echo Request ping packets %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17056;...

HP-UX Security patch : PHNE_8064

The remote host is missing HP-UX Security Patch number PHNE8064 . Vulnerability with incoming ICMP Echo Request ping packets %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16825;...

CVE-2003-1083

Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request...

RaidenHTTPd < 1.1.31 Crafted Request Remote File Access

Binary data 2594.prm...

[ RSTACK Public Security Advisory ] Remote DOS against Linksys PSUS4

Rstack Public Security Advisory RSTACK SA200502-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://rstack.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2004-1887

Ada Image Server ImgSvr 0.4 allows remote attackers to view directories or download files via an HTTP request with a trailing %00 null...

CVE-2004-0577

WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files from the root directory via a URL request to the wingate-internal directory...

CVE-2004-0917

CVE-2004-0917 affects Vignette Application Portal. The default installation exposes an unauthenticated diagnostic utility accessible at /portal/diag (and related paths), enabling remote attackers to disclose sensitive information about the server, OS version, database parameters, and Vignette con...

[Full-Disclosure] iDEFENSE Security Advisory 10.07.04: RealNetworks Helix Server Content-Length Denial of Service Vulnerability

RealNetworks Helix Server Content-Length Denial of Service Vulnerability iDEFENSE Security Advisory 10.07.04: www.idefense.com/application/poi/display?id=151&type=vulnerabilities October 7, 2004 I. BACKGROUND RealNetworks Helix Universal Server is a universal digital media delivery platform with...

Pingtel Xpressa 1.2.x/2.0/2.1 - Handset Remote Denial of Service

source: https://www.securityfocus.com/bid/11161/info Pingtel Xpressa handsets are reported prone to a remote denial of service vulnerability. The issue is reported to exist because of a lack of sufficient boundary checks performed on HTTP request data handled by the Xpressa administration web...

Easy File Sharing Large HTTP Request Remote DoS

Binary data 2148.prm...

CVE-2004-0606

Cross-site scripting XSS vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the 1 CLIENTID or 2 HOSTNAME option of a DHCP request...