CVE-2016-8508

Yandex Browser for desktop before 17.1.1.227 does not show Protect similar to Safebrowsing in Chromium warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site...

Iceni Argus Heap Corruption Vulnerability

Iceni Argus is the British Iceni company's set of PDF document type conversion tool. Iceni Argus loadTrailer function to deal with special PDF files there is a heap destruction vulnerability, attackers can exploit the vulnerability to build malicious PDF files, inducing users to parse, can make t...

IBM WebSphere MQ Data Transformation Denial of Service Vulnerability

IBM WebSphere MQ is a messaging middleware product from IBM, USA. IBM WebSphere MQ fails to properly handle data transformations, allowing remote attackers to exploit the vulnerability by submitting a special request that could crash the application...

CVE-2016-4489

Integer overflow in the gnuspecial function in libiberty allows remote attackers to cause a denial of service segmentation fault and crash via a crafted binary, related to the "demangling of virtual tables."...

IBM WebSphere MQ Denial of Service Vulnerability (CNVD-2017-02457)

IBM WebSphere MQ is a messaging middleware product from IBM, USA. A security vulnerability exists in IBM WebSphere MQ version 8.0, which can be exploited by remote attackers to submit a special request and conduct a denial-of-service attack...

IBM WebSphere MQ Denial of Service Vulnerability (CNVD-2017-02480)

IBM WebSphere MQ is the messaging integration middleware product. A denial of service vulnerability exists in IBM WebSphere MQ 8.0, which can be exploited by a remote attacker to submit a special HTTP request for a denial of service attack...

CVE-2016-9910

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909...

Dropbear: Multiple vulnerabilities

Background Dropbear is an SSH server and client designed with a small memory footprint. Description Multiple vulnerabilities have been discovered in Dropbear. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code with root...

CloudBees Jenkins elevation of privilege vulnerability (CNVD-2017-01682)

CloudBees Jenkins is a U.S. CloudBees company based on Java development of open source , sustainable integration automation server . CloudBees Jenkins has a security vulnerability that allows remote attackers to exploit the vulnerability to submit special requests and elevate privileges...

Geutebrück IP Cameras

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: Geutebrück Equipment: IP Cameras Vulnerabilities: Authentication Bypass and Improper Neutralization of Special Elements AFFECTED PRODUCTS The following Geutebrück G-Cam IP camera version is affected: G-Cam/EFD-2250...

CVE-2016-3063

Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special characters, which allows remote authenticated users to execute arbitrary API calls via unspecified vectors...

CVE-2016-3063

Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special characters, which allows remote authenticated users to execute arbitrary API calls via unspecified vectors...

Denial of Service Vulnerability in Multiple F5 BIG-IP Products (CNVD-2017-01192)

F5 BIG-IP is the popular load balancer. An unspecified security vulnerability exists in F5 BIG-IP, where submitting a special request can cause TMM to restart when TCP FAST OPEN is enabled...

Tcpdump BOOTP Parser Buffer Overflow Vulnerability

Tcpdump is a popular network analysis program. Tcpdump BOOTP parser print-bootp.c:bootpprint suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to crash an application by submitting a special request...

Code injection

IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine...

CVE-2016-2942

IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine...

CVE-2016-0396

IBM Tivoli Endpoint Manager could allow a user under special circumstances to inject commands that would be executed with unnecessary higher privileges than expected...

CVE-2015-7976

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename...

CVE-2015-7976

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename...

Design/Logic Flaw

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename...