CVE-2016-1326

The administration interface on Cisco DPQ3925 devices with firmware r1 allows remote attackers to cause a denial of service device restart via a crafted HTTP request, aka Bug ID CSCup48105...

[SECURITY] Fedora 23 Update: rubygem-actionpack-4.2.3-4.fc23

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

[SECURITY] Fedora 22 Update: rubygem-actionpack-4.2.0-3.fc22

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

SAP NetWeaver Information Disclosure Vulnerability (CNVD-2016-01148)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A security vulnerability exists in the Universal Worklist Configuration of SAP NetWeaver version 7.4. A remote...

CVE-2016-2388

The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846...

The vulnerability of the SAP HANA database management system allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the XS engine hdbxsengine of the SAP HANA database management system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code using a specially crafted HTTP request related to JSON...

Vulnerabilities in IniNet Solutions GmbH’s SCADA Web Server, allowing a perpetrator to execute arbitrary code

The multiple vulnerabilities of IniNet Solutions GmbH’s SCADA Web Server are caused by buffer overflows in the stack. Exploitation of these vulnerabilities could allow a malicious actor to execute arbitrary code using a long HTTP request field...

Cisco Small Business 500 Device Web GUI Denial of Service Vulnerability

The Cisco Small Business 500 Device is a 500 series stackable managed switch product from Cisco. A security vulnerability in the Web GUI of the Cisco Small Business 500 Device allows a remote attacker to perform a denial of service by sending a specially crafted HTTP request...

CVE-2016-0868

Stack-based buffer overflow on Rockwell Automation Allen-Bradley MicroLogix 1100 devices A through 15.000 and B before 15.002 allows remote attackers to execute arbitrary code via a crafted web request...

Samsung Note 3 and Galaxy S6 Denial of Service Vulnerability

The Samsung Note 3 and Galaxy S6 are both smartphones released by the South Korean company Samsung Samsung. A security vulnerability exists in the Samsung Note 3 and Galaxy S6. An attacker can exploit the vulnerability to cause a denial of service null pointer backreference by sending an HTTP...

SAP HANA Denial of Service Vulnerability (CNVD-2016-00460)

SAP HANA is a high-performance analytics application from SAP, Germany, that provides high-performance data querying capabilities. A denial of service vulnerability exists in SAP HANA that could allow a remote attacker to cause a denial of service via a carefully crafted HTTP request to trace log...

Cisco DPQ3925 devices with EDVA r1 Base Information Disclosure Vulnerability

The Cisco DPQ3925 devices is a wireless router device from Cisco USA. An information disclosure vulnerability exists in Cisco DPQ3925 devices with EDVA r1 Base. This allows remote attackers to obtain sensitive information via a crafted HTTP request...

The vulnerability of the SAP HANA database management system allows a perpetrator to execute arbitrary code or trigger a service failure.

The vulnerability of the index server component hdbindexserver in the SAP HANA database management system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure using a specially crafted HTTP request...

TIBCO LogLogic Unity Information Disclosure Vulnerability

TIBCO LogLogic Unity is an acquisition by U.S.-based infrastructure software provider TIBCO to deliver the industry's leading scalable logging and security management platform specifically designed for the enterprise and cloud. An information disclosure vulnerability exists in versions of TIBCO...

SAP HANA Denial of Service Vulnerability

SAP HANA is a high-performance analytics application from SAP, Germany, that provides high-performance data querying capabilities. A denial of service vulnerability exists in SAP HANA 1.00.095. It allows remote attackers to execute arbitrary code or launch a denial of service attack via an HTTP...

CVE-2015-7986

The index server hdbindexserver in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via an HTTP request, aka SAP Security Note 2197428...

Cisco Web Security Appliance Denial of Service Vulnerability (CNVD-2015-06006)

Cisco Web Security Appliance WSA is a set of Web security appliances from the U.S. company Cisco Cisco. A security vulnerability exists in Cisco WSA version 8.0.7, which can be exploited by a remote attacker to cause a denial of service memory consumption for expired TCP connections by sending a...

Cisco Email Security Appliance Format String Vulnerability

The Cisco Email Security Appliance is an email security protection solution. The Cisco Email Security Appliance has a format string vulnerability that can be exploited by an attacker to cause a denial of service by sending a constructed HTTP request...

KLA10658 Multiple vulnerabilities in Microsoft Exchange Server

Multiple serious vulnerabilities have been found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to spoof user interface or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improper web request handling at Outlook Web Access can be...

Cisco Identity Services Engine Access Control Bypass Vulnerability

Cisco Identity Services Engine A centralized policy engine for Cisco TrustSec solutions. A security vulnerability exists in the Cisco Identity Services Engine that allows a remote user to submit a special HTTP request to access arbitrarily customized HTML pages on the target Guest portal system...