5340 matches found
Go: sets environmental variable based on user supplied Proxy request header
An input-validation flaw was discovered in the Go programming language built in CGI implementation, which set the environment variable "HTTPPROXY" using the incoming "Proxy" HTTP-request header. The environment variable "HTTPPROXY" is used by numerous web clients, including Go's net/http package,...
Intel Crosswalk Man-in-the-Middle Attack Vulnerability
Intel Crosswalk is the United States Intel Intel company's set of Web engines. A man-in-the-middle attack vulnerability exists in Intel Crosswalk because the program fails to properly validate X.509 certificates. An attacker can exploit this vulnerability with a specially crafted certificate to...
The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions
The vulnerability of the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions by using the default method...
crash: mon_command crashes ceph monitors on receiving empty prefix
A flaw was found in the way handlecommand function would validate prefix value from user. An authenticated attacker could send a specially crafted prefix value resulting in ceph monitor crash...
crash: mon_command crashes ceph monitors on receiving empty prefix
A flaw was found in the way handlecommand function would validate prefix value from user. An authenticated attacker could send a specially crafted prefix value resulting in ceph monitor crash...
The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.
The Internet Explorer browser contains an unspecified vulnerability related to the lack of validation of user-input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to trigger a service failure or execute arbitrary code through a specially created website...
The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges or to disrupt the operation of the program.
In the procedure “sub4101B4”, there is no validation of the correctness of the input data at addresses “0x004104D1”, “0x004105AB”, and “0x004105EA”. This may lead to buffer overflows during the processing of RPC calls numbered 0x13 and 0x12 “0x0040C73C”. This vulnerability allows a malicious...
Vulnerability of the PHP interpreter and the Mac OS X operating system, allowing attackers to execute arbitrary code
The vulnerability of the phpsnmperror function ext/snmp/snmp.c in the PHP interpreter and the Mac OS X operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
squid: Cache poisoning issue in HTTP Request handling
An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid...
Chef Manage cookie data arbitrary code execution vulnerability
Chef is a management system that targets IT professionals and provides configuration management and automation capabilities for the entire infrastructure.Chef Manage is an enterprise-grade Chef plug-in. Chef Manage fails to properly validate user-supplied cookie data, allowing remote attackers to...
CloudBees Jenkins CI and Jenkins LTS redirection vulnerability
CloudBees Jenkins CI formerly known as Hudson Labs is a Java-based continuous integration tool from CloudBees, Inc. It is mainly used to monitor ongoing software releases/testing projects and a number of timed tasks.LTS Long-Term Support is a long-supported version of CloudBees Jenkins CI is a...
DNS BIND server vulnerability, allowing attackers to cause service failures
The vulnerability of the DNS BIND server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures—such as the appearance of an error message “Assertion failure” or the termination of the daemon—by using a specially creat...
HP Universal Configuration Management Database Foundation Redirection Vulnerability
The HP Universal Configuration Management Database UCMDB Foundation is a suite of database software from Hewlett-Packard HP that stores, controls, and manages software and infrastructure components and their interrelationships. A security vulnerability exists in HP UCMDB Foundation that stems fro...
The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure
The vulnerability of the Adobe Type Manager library on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure system freeze using a special OpenType font...
The vulnerability of Xen hypervisors, which allows a malicious actor to trigger a service failure
The vulnerability of Xen hypervisors exists due to insufficient checking of input data. Exploiting this vulnerability can allow a local attacker to trigger a service failure host reboot by manipulating numerous MMIO pages with various cache settings...
The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Broadcom Wi-Fi driver for the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a hacker to execute arbitrary code or cause a service failure memory corruption by using specially crafted message packets...
The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure
The vulnerability of the Network Policy Server component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through specially crafted requests...
The vulnerability of the Firebird database management system allows a perpetrator to cause a service failure.
The vulnerability of the Firebird database management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures by using the service dispatcher to execute the gbak utility with incorrect parameters...
Vulnerabilities of operating systems Mac OS X and iOS, allowing attackers to increase their privileges
The vulnerability of the kernels in Mac OS X and iOS exists due to insufficient checking of input data. Exploiting this vulnerability can allow a local attacker to increase their privileges through a specially crafted message...
Cisco Aironet 1800 Series Access Point Denial of Service Vulnerability
The Cisco Aironet 1800 Series Access Point is a small to medium-sized wireless network access point product. The Cisco Aironet 1800 Series Access Point devices have a security vulnerability in the IP incoming packet processor due to the IP packet header not being properly input validated. It coul...