CVE-2021-34704

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...

CVE-2021-1573 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...

CVE-2021-1573 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...

CVE-2021-34704

CVE-2021-34704 affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Web Services. The issue stems from improper input validation when parsing HTTPS requests, allowing an unauthenticated remote attacker to trigger a reload and cause a DoS. Multiple connected sources confirm a DoS vi...

CVE-2021-34704 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...

CVE-2022-22847

Formpipe Lasernet before 9.13.3 allows file inclusion in Client Web Services either by an authenticated attacker, or in a configuration that does not require authentication...

CVE-2022-22847

Formpipe Lasernet before 9.13.3 allows file inclusion in Client Web Services either by an authenticated attacker, or in a configuration that does not require authentication...

Authentication flaw

Formpipe Lasernet before 9.13.3 allows file inclusion in Client Web Services either by an authenticated attacker, or in a configuration that does not require authentication...

CVE-2022-22847

Formpipe Lasernet before 9.13.3 allows file inclusion in Client Web Services either by an authenticated attacker, or in a configuration that does not require authentication...

CVE-2022-22847

Formpipe Lasernet before 9.13.3 allows file inclusion in Client Web Services either by an authenticated attacker, or in a configuration that does not require authentication...

CVE-2022-22847

CVE-2022-22847 affects Formpipe Lasernet before 9.13.3, enabling file inclusion in Client Web Services. Exploitation could occur with authentication or in configurations that do not require authentication. CVSS metrics indicate high impact (C/I/A: partial to high) with network attack vector and v...

Oracle WebLogic Server, Injection

Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services...

Security Bulletin: Apache Log4j vulnerabilities impacts IBM Sterling Connect:Direct Web Services (CVE-2021-45105, CVE-2021-45046)

Summary There are denial of service and remote code execution vulnerabilities in the Apache Log4j open source library is used by IBM Sterling Connect:Direct Web Services for logging. The fix includes Apache Log4j 2.17. Vulnerability Details CVEID: CVE-2021-45105 DESCRIPTION: Apache Log4j is...

Security Bulletin: Apache Log4j Vulnerability Affects IBM Sterling Connect:Direct Web Services (CVE-2021-44228)

Summary There is a vulnerability in the Apache Log4j open source library used by IBM Sterling Connect:Direct Web Services. This affects IBM Sterling Connect:Direct Web Services. This vulnerability has been addressed. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allo...

The vulnerability of the WS-Addressing plugin in the gSOAP software development environment allows a perpetrator to execute arbitrary code.

The vulnerability of the WS-Addressing plugin in the gSOAP software development environment is related to integer overflow during SOAP request processing. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted HTTP requests...

cxf: OAuth 2 authorization service vulnerable to DDos attacks

CXF supports via JwtRequestCodeFilter passing OAuth 2 parameters via a JWT token as opposed to query parameters see: The OAuth 2.0 Authorization Framework: JWT Secured Authorization Request JAR. Instead of sending a JWT token as a "request" parameter, the spec also supports specifying a URI from...

CVE-2021-44833

The CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions for the configuration file...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-vulnerable-app-cve-2021-44228-terraform A Terraform to d...

CVE-2021-41265

Flask-AppBuilder is a development framework built on top of Flask. Verions prior to 3.3.4 contain an improper authentication vulnerability in the REST API. The issue allows for a malicious actor with a carefully crafted request to successfully authenticate and gain access to existing protected RE...

CVE-2021-20146

An unprotected ssh private key exists on the Gryphon devices which could be used to achieve root access to a server affiliated with Gryphon's development and infrastructure. At the time of discovery, the ssh key could be used to login to the development server hosted in Amazon Web Services...