2775 matches found
UBUNTU-CVE-2016-5097
phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading 1 HTTP requests or 2 server logs...
Pidgin Code Execution
The Pidgin software contains a vulnerability in the processchukeddata function. Exploiting this vulnerability allows a malicious actor to cause a service failure or execute arbitrary code by manipulating HTTP requests...
CVE-2016-1395
The web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to execute arbitrary code as root via a crafted HTTP request, aka Bug ID CSCux82428...
CVE-2016-1391
Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID...
squid: Cache poisoning issue in HTTP Request handling
An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid...
OpenNTPD Design Vulnerabilities
OpenNTPD is a network time protocol NTP for Unix systems that can synchronize a computer system's local clock with a remote NTP server. A security vulnerability exists in OpenNTPD that stems from a failure to validate the Common Name when the program is configured for HTTPS requests, which could ...
Google Chrome Competitive Conditions Vulnerability (CNVD-2016-03259)
Google Chrome is a web browser developed by the American company Google Google. Google Chrome versions prior to 50.0.2661.102 have a contention condition vulnerability in the 'ResourceDispatcherHostImpl::' function in the file content/browser/loader/resourcedispatcherhostimpl.cc. BeginRequest'...
UBUNTU-CVE-2016-1670
Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resourcedispatcherhostimpl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID...
ImageMagick: SSRF vulnerability
A server-side request forgery flaw was discovered in the way ImageMagick processed certain images. A remote attacker could exploit this flaw to mislead an application using ImageMagick or an unsuspecting user using the ImageMagick utilities into, for example, performing HTTPS requests or opening...
Cisco TelePresence Server DoS
The vulnerability of the microprogramming software of the Cisco TelePresence Server device is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures such as memory consumption or device restarting through a specially crafted HTTP...
Apache Tomcat Access Bypass
The vulnerability of the Apache Tomcat application server is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions and read arbitrary HTTP requests through a specially created web application...
Debian DSA-3509-1 : rails - security update
Two vulnerabilities have been discovered in Rails, a web application framework written in Ruby. Both vulnerabilities affect Action Pack, which handles the web requests for Rails. - CVE-2016-2097 Crafted requests to Action View, one of the components of Action Pack, might result in rendering files...
Debian Security Advisory DSA 3509-1 (rails - security update)
Two vulnerabilities have been discovered in Rails, a web application framework written in Ruby. Both vulnerabilities affect Action Pack, which handles the web requests for Rails. CVE-2016-2097Crafted requests to Action View, one of the components of Action Pack, might result in rendering files fr...
DSA-3509-1 rails - security update
Bulletin has no description...
CVE-2016-0868
Stack-based buffer overflow on Rockwell Automation Allen-Bradley MicroLogix 1100 devices A through 15.000 and B before 15.002 allows remote attackers to execute arbitrary code via a crafted web request...
Oracle Database Service Outage
The vulnerability of the XML Developer’s Kit component of the Oracle Database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker to cause a partial service failure through HTTP requests via Java Web Start applications or Java applets...
SAP Hostcontrol remote DOS
Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver AS Java 7.0 – 7.5 Vendor URL: SAP Bug: DoS Reported: 01.11.2016 Vendor response: 02.11.2016 Date of Public Advisory: 13.06.2017 Reference: SAP Security Note 2389181 Authors: Mathieu Geli ERPScan VULNERABILITY INFORMATION Class: D...
Apache Camel Java Object Deserialization Vulnerability
Apache Camel is based on the known enterprise-class integration model on the open source integration framework . Camel router , if camel-jetty or camel-servlet used as a consumer , Camel will automatically deserialize HTTP requests using content-header: application/x-java-serialized-object , remo...
Cisco Videoscape Distribution Suite Service Manager REST API Information Disclosure Vulnerability
Cisco Videoscape Distribution Suite Service Manager is an extended and enhanced service manager for content distribution network components. Cisco Videoscape Distribution Suite Service Manager fails to properly handle the target REST API, allowing remote attackers to exploit the vulnerability to...
3S CODESYS Gateway Null Pointer Exception Vulnerability
CODESYS Gateway Server is a software-defined server. A null pointer exception vulnerability exists in CODESYS Gateway Server 2.3.9.47 and earlier versions when processing certain HTTP POST/GET requests. An attacker could exploit this vulnerability to cause a denial of service...