USN-3204-1 tomcat6, tomcat7 vulnerability

It was discovered that Tomcat incorrectly handled certain HTTP requests. A remote attacker could possibly use this issue to cause Tomcat to consume resources, resulting in a denial of service...

MS15-041: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: April 14, 2015

MS15-041: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: April 14, 2015 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could...

MS15-041: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: April 14, 2015

MS15-041: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: April 14, 2015 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could allow information disclosure i...

XenForo Remote Code Execution Vulnerability

XenForo is a community forum software with a fresh interface and a powerful engine. A remote code execution vulnerability exists in XenForo versions between 1.5.x and 1.5.11a, which can be exploited by an attacker to execute arbitrary code by constructing a specific HTTP request...

IBM BigFix Remote Control Denial of Service Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A denial of service vulnerability exists in the broker application in IBM BigFix Remote Control 9.1.2 and prior versions. A remote attacker can exploit this vulnerability to cause a denial of service by...

TYPO3 'API method' Directory Traversal Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. A directory traversal vulnerability exists in the TYPO3 'API method', which can be exploited by an attacker by sending a UTL request containing a directory traversal sequence '...

IBM Rational Team Concert Injection Vulnerability

IBM Rational Team Concert RTC is the U.S. IBM's set of Jazz-based platform and support decentralized teams for real-time collaboration related to software lifecycle management solutions. An injection vulnerability exists in IBM RTC. An attacker could exploit this vulnerability by sending a...

Acoem 01dB DUO Smart Noise Monitor Remote Password Change

!/bin/sh Acoem 01dB DUO Smart Noise Monitor Remote Password Change HW version: LIS1005G Application FW: 2.34 Metrology FW: 2.10 Modem FW: 08.01.108 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for...

CVE-2016-0326

IBM Rational Quality Manager RQM and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."...

OpenJDK: insufficient checks of JDWP packets (Hotspot, 8159519)

It was discovered that the Hotspot component of OpenJDK did not properly check received Java Debug Wire Protocol JDWP packets. An attacker could possibly use this flaw to send debugging commands to a Java program running with debugging enabled if they could make victim's browser send HTTP request...

Microsoft SharePoint Server and Foundation Multiple Vulnerabilities (3134226)

This host is missing a critical security update according to Microsoft Bulletin MS16-015. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

IBM Spectrum Control and IBM Storage Insights Arbitrary File Upload Vulnerability

IBM Spectrum Control and IBM Storage Insights are both storage resource management software from IBM USA. An arbitrary file upload vulnerability exists in IBM Spectrum Control versions 5.2.8 through 5.2.10.1 and IBM Storage Insights. An attacker could exploit this vulnerability by sending a...

Pivotal Cloud Foundry Elastic Runtime Information Disclosure Vulnerability

Pivotal Cloud Foundry PCF is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.Elastic Runtime is a runtime environment for Pivotal Cloud Foundry. Cloud Foundry PHP...

Cisco Hosted Collaboration Mediation Fulfillment Directory Traversal Vulnerability

Cisco Hosted Collaboration Mediation Fulfillment HCM-F is a set of software for centralized management of Cisco HCS solutions from Cisco USA. The software provides configuration, management and monitoring of Cisco HCM-F services and other functions. A directory traversal vulnerability exists in...

[SECURITY] Fedora 23 Update: rubygem-actionpack-4.2.3-6.fc23

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

[SECURITY] Fedora 24 Update: rubygem-actionpack-4.2.5.2-3.fc24

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

[SECURITY] Fedora 25 Update: rubygem-actionpack-5.0.0.1-2.fc25

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

FortiGate firmware Cookie Parser Buffer Overflow Vulnerability

FortiGate is an ASIC-accelerated UTM solution that effectively defends against network- and content-layer attacks, detecting and eliminating multi-layer attacks such as viruses, worms, intrusions, and Web-based malicious content in real-time applications without degrading network performance. A...

CVE-2016-1479

Cisco IP Phone 8800 devices with software 11.01 allow remote attackers to cause a denial of service memory corruption via a crafted HTTP request, aka Bug ID CSCuz03038...

DEBIAN-CVE-2016-6293

The ulocacceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode ICU through 57.1 for C/C++ does not ensure that there is a '\0' character at the end of a certain temporary array, which allows remote attackers to cause a denial of service out-of-bounds read or...