Brother DCP-J132W Denial of Service Vulnerability

Brother DCP-J132W is a printer introduced by Brother. A denial of service vulnerability exists in httpd embedded in the Brother DCP-J132W, which allows a remote attacker to cause the printer to hang disrupting its network connection by sending a large number of HTTP packets...

fli4l HTTP header injection vulnerability

fli4l is a Linux-based ISDN, DSL and Ethernet router product developed by the fli4l team, which can be configured via ASCII files and supports multiple connection methods, displaying and calculating connection times and costs, monitoring traffic and monitoring ISDN calls. An HTTP header injection...

Remote File Inclusion

Magento is vulnerable to remote file inclusion. The vulnerability is possible because the fetchView function in the MageCoreBlockTemplateZend class does not enforce security mechanisms, allowing an authenticated administrator to execute arbitrary PHP code on the web server...

Unspecified Vulnerability in Oracle Fusion Middleware BI Publisher (CNVD-2017-17501)

Oracle Fusion Middleware is a comprehensive middleware product family consisting of SOA and middleware products.BI Publisher is one of the reporting components. Oracle BI Publisher version 11.1.1.7.0 contains a security vulnerability in the implementation of the Web Server component, which can be...

Unspecified Vulnerability in Oracle Fusion Middleware BI Publisher (CNVD-2017-17502)

Oracle Fusion Middleware is a comprehensive middleware product family consisting of SOA and middleware products.BI Publisher is one of the reporting components. A security vulnerability exists in the Web Server component implementation of Oracle BI Publisher version 11.1.1.7.0, which can be...

httpd: Padding Oracle in Apache mod_session_crypto

It was discovered that the modsessioncrypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user's browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack...

CVE-2016-8723

CVE-2016-8723 affects Moxa AWK-3131A Wireless Access Point (firmware 1.1). A null pointer dereference in the Web Application can be triggered by HTTP GET requests not starting with ‘/’, causing the web server to segfault (Denial of Service). Reported CVSS around 7.5 (HIGH). Exploitation details e...

LAquis SCADA Software Web Server Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within global processing of requests inside the web server. The issue results...

CVE-2017-6864

The integrated web server in Siemens RUGGEDCOM ROX I all versions at port 10000/TCP could allow an authenticated user to perform stored Cross-Site Scripting attacks...

CVE-2017-6187

Disk Savvy Enterprise 9.4.18 exposes a buffer overflow in its built-in web server that can be triggered by a long URI in a GET request, potentially allowing remote code execution. This is documented across multiple sources (NVD description, SAINT background entries, and exploit references such as...

CVE-2017-5997

The SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 allows remote attackers to cause a denial of service memory consumption and process crash via multiple msgserver/group?group= requests with a crafted size of the group parameter, aka SAP Security Note 2358972...

CVE-2017-5152

An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator URL on the web server, a malicious user is able to access pages unrestricted AUTHENTICATION BYPASS...

CVE-2016-9334

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...

CVE-2016-7965

DokuWiki 2016-06-26a and older uses $SERVERHTTPHOST instead of the baseurl setting as part of the password-reset URL. This can lead to phishing attacks. A remote unauthenticated attacker can change the URL's hostname via the HTTP Host header. The vulnerability can be triggered only if the Host...

mod_cluster: remotely Segfault Apache http server

It was discovered that it is possible to remotely Segfault Apache http server with a specially crafted string sent to the modcluster via service messages MCMP...

Trane Tracer SC Information Disclosure Vulnerability

The Trane Tracer SC is an intelligent control panel from Trane USA that communicates with HVAC equipment controllers. A security vulnerability exists in the web server in Trane Tracer SC 4.2.1134 and earlier versions. A remote attacker could exploit the vulnerability by sending a direct request t...

Vulnerability of the IBM HTTP Server web server, allowing attackers to execute arbitrary code

The vulnerability of the Administration Server web server component of the IBM HTTP Server arises due to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability of the Cisco Wireless LAN Controller 5500 software, which allows bypassing access restrictions

Vulnerability exists in Cisco Wireless LAN Controller WLC devices due to the widespread use of the Aironet IOS software. This leads to a state where the controller acts as an administrative HTTP server. Exploiting this vulnerability allows malicious actors to bypass access restrictions by...

Design/Logic Flaw

A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

The vulnerability of the server operating system OS X Server, which allows a perpetrator to obtain confidential configuration information

The vulnerability of the Web Server component in the OS X Server operating system arises from an improper restriction on access to the .DSStore and .htaccess files. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain confidential configuration information through...