CVE-2016-6437

A vulnerability in the SSL session cache management of Cisco Wide Area Application Services WAAS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to high consumption of disk space. The user would see a performance degradation. More Information:...

CVE-2016-6437: Undefined Security Weakness

A vulnerability in the SSL session cache management of Cisco Wide Area Application Services WAAS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to high consumption of disk space. The user would see a performance degradation. More Information:...

PT-2016-6911

Name of the Vulnerable Software and Affected Versions Cisco Wide Area Application Services WAAS versions 5.35 through 5.35g, 6.11, 6.21 Description A vulnerability in the SSL session cache management could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to...

Juniper Networks Junos Space Multiple Vulnerabilities (JSA10759)

Juniper Networks Junos Space is prone to multiple vulnerabilities in OpenSSL. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Bypassing ASLR in 60 Milliseconds

Address Space Layout Randomization was a champion hardening technology introduced in most major desktop and mobile operating systems as a mitigation against memory-based code-execution attacks. Bypassing ASLR, however, has become somewhat of a parlor game for attackers and white-hat researchers,...

IBM Business Process Manager Cross-Site Scripting Vulnerability (CNVD-2016-10042)

IBM Business Process Manager BPM is a comprehensive business process management platform from IBM in the United States. A cross-site scripting vulnerability in Business Space in IBM Business Process Manager can be exploited by remote authenticated users to inject arbitrary web script or HTML...

Juniper Junos Space XML External Entity Injection Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. An XML external entity injection vulnerability exists in Juniper Junos Space versions prior...

Juniper Junos Space Cross-Site Scripting Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. A cross-site scripting vulnerability exists in Juniper Junos Space versions prior to 15.2R2...

Juniper Junos Space Cross-Site Request Forgery Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. A cross-site request forgery vulnerability exists in Juniper Junos Space versions prior to...

Juniper Junos Space Man-in-the-Middle Attack Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. A security vulnerability exists in Juniper Junos Space versions prior to 15.2R2, which aris...

Juniper Junos Space Command Injection Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. A command injection vulnerability exists in Juniper Junos Space versions prior to 15.2R2. A...

CVE-2016-3262

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync...

CVE-2016-3056

Cross-site scripting XSS vulnerability in Business Space in IBM Business Process Manager 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, and 8.5 before 8.5.7.0 CF2016.09 allows remote authenticated users to inject arbitrary web script or HTML via crafted content...

CVE-2016-3056

CVE-2016-3056: IBM BPM/Business Space HTML injection vulnerability affecting BPM Advanced 7.5.x up to 7.5.1.2, 8.0.x up to 8.0.1.3, and 8.5 up to 8.5.7.0 before 2016.09. A remote authenticated attacker could inject arbitrary HTML via crafted content in Business Space. IBM remediation requires int...

PT-2016-5345

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager versions 7.5 through 7.5.1.2 IBM Business Process Manager versions 8.0 through 8.0.1.3 IBM Business Process Manager versions prior to 8.5.7.0 CF2016.09 Description A cross-site scripting XSS issue exists, allowing...

Juniper Junos Authentication Bypass Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. An authentication bypass vulnerability exists in Juniper Junos Space versions prior to...

CVE-2016-3056: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Business Space in IBM Business Process Manager 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, and 8.5 before 8.5.7.0 CF2016.09 allows remote authenticated users to inject arbitrary web script or HTML via crafted content...

Juniper Networks Junos Space Multiple Vulnerabilities (JSA10760)

Juniper Networks Junos Space is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco Wide Area Application Services Central Manager Denial of Service Vulnerability

A vulnerability in the SSL session cache management of Cisco Wide Area Application Services WAAS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to high consumption of disk space. The user would see a performance degradation. The vulnerability is due...

CVE-2016-7966

Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign = or a space into the injected HTML, which greatly reduces the available HTML functionality...