683 matches found
Information Leakage
Red Hat OpenShift Container Platform is vulnerable to information leakage. The vulnerability is possible because of a missing input validation in OpenShift request handling for images. A user, with a copy of the manifest associated with an image, can pull an image even if they do not have access ...
The vulnerability of the Microsoft .NET Framework software lies in errors related to the handling of specific web requests, which allows a hacker to cause a service failure.
The vulnerability of the Microsoft .NET Framework software platform is related to errors in the mechanism for processing special web requests. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially crafted request...
Microsoft Edge’s browser vulnerability, related to errors in request handling mechanisms, allows for breaches of the confidentiality and integrity of protected information.
The vulnerability of Microsoft Edge is related to errors in the request processing mechanisms. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through a specially crafted web page...
The vulnerability of Microsoft Edge browser, related to errors in request handling mechanisms, allows attackers to disclose protected information.
The vulnerability of Microsoft Edge relates to errors in the request processing mechanism. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially crafted web page...
Rancher < 1.6.25 / 2.0.9 / 2.1.3 Kubernetes Proxy Request Handling
The version of a Docker container of Rancher is prior to 1.6.25, 2.0.9, or 2.1.3 and, thus, is affected by a proxy request handling flaw contained in Kubernetes. A remote, unauthenticated attacker may be able to leverage API calls to escalate privileges via proxy request handling vulnerability...
CVE-2018-1000864
A denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop...
CVE-2018-0700
YukiWiki 2.1.3 and earlier does not process a particular request properly that may allow consumption of large amounts of CPU and memory resources and may result in causing a denial of service condition...
CVE-2018-11759
The Apache Web Server httpd specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 did not handle some edge cases correctly. If only a sub-set of the URLs supported by Tomcat were exposed via httpd, then it was...
Access Restriction Bypass
gateway.transport.http is vulnerable to access restriction bypass. Access restriction controls can be bypassed due to improper HTTP request handling via a specially crafted HTTP request, allowing a remote attacker to obtain confidential information...
Micro Focus Enterprise Developer Denial of Service Vulnerability
Micro Focus Enterprise Developer and Enterprise Server are both products of Micro Focus, a British company. micro Focus Enterprise Developer is a set of integrated development environments for the mainframe. enterprise Server is a set of Enterprise Server is a production deployment platform for...
SUSE-SU-2018:2887-1 Security update for php7
This update for php7 fixes the following issues: - CVE-2018-17082: The Apache2 component in PHP allowed XSS via the body of a 'Transfer-Encoding: chunked' request, because the bucket brigade was mishandled in the phphandler function bsc1108753...
NUUO NVRMini2 3.8 Buffer Overflow
Exploit Title: NUUO NVRMini2 3.8 - 'cgisystem' Buffer Overflow Enable Telnet Date: 2018-09-17 Exploit Author: Jacob Baines Vendor Homepage: https://www.nuuo.com/ Device: NRVMini2 Software Link: https://www.nuuo.com/ProductNode.php?node=2 Versions: 3.8.0 and below Tested Against: 03.07.0000.0011 a...
Multiple Trend Micro Products Privilege Access Control Vulnerabilities
Trend Micro Premium Security and others are cross-platform antivirus products from Trend Micro that feature anti-ransomware, anti-malware email and system optimization. A privilege access control vulnerability exists in the handling of IDAMSPMASTER requests in multiple Trend Micro products, which...
Trend Micro OfficeScan Information Disclosure Vulnerability (CNVD-2019-06185)
Trend Micro OfficeScan provides protection against modern threats through anti-malware, ransomware protection, memory inspection, device control and and command and control C&C traffic. A "Named Pipeline Request Handling" out-of-bounds read disclosure vulnerability exists in Trend Micro OfficeSca...
CVE-2018-1999044
A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop...
CVE-2018-1999044
A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop...
CVE-2018-14926
Matera Banco 1.0.0 allows CSRF, as demonstrated by a /contingency/web/messageSend/messageSendHandler.jsp request...
Disk Savvy HTTP POST Request Handling Remote Stack Buffer Overflow
Disk Savvy product contains an overflow condition that is triggered when handling overly large HTTP POST requests e.g. sent to /login. This may allow a remote attacker to cause a stack-based buffer overflow and execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if...
CVE-2018-8247
An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests, aka "Microsoft Office Elevation of Privilege Vulnerability." This affects Microsoft Office, Microsoft Office Online Server. This CVE ID is unique from...