Input validation

iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability by sending a specially crafted malicious request to crash the webserver or cause information disclosure...

CVE-2021-36300

iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability by sending a specially crafted malicious request to crash the webserver or cause information disclosure...

CVE-2021-36300

CVE-2021-36300 affects Dell EMC iDRAC9 prior to version 5.00.00.00. The vulnerability is an improper input validation issue in the iDRAC9 webserver that allows an unauthenticated remote attacker to send a crafted request to crash the webserver or cause information disclosure. Affected product: De...

CVE-2021-36300: Improper Neutralization of Special Elements used in an SQL Command

iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability by sending a specially crafted malicious request to crash the webserver or cause information disclosure...

CVE-2021-36320

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and access the webserver by forging the session ID...

CVE-2021-36320

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and access the webserver by forging the session ID...

Authentication flaw

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and access the webserver by forging the session ID...

CVE-2021-36320

CVE-2021-36320 affects Dell Networking X-Series firmware prior to 3.0.1.8, where an authentication bypass allows a remote, unauthenticated attacker to hijack a session by forging the session ID and access the web server. Affected product is Dell Networking X-Series switches; the underlying issue ...

CVE-2021-36320

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and access the webserver by forging the session ID...

PT-2021-21222

Name of the Vulnerable Software and Affected Versions Dell Networking X-Series firmware versions prior to 3.0.1.8 Description The issue allows a remote unauthenticated attacker to potentially hijack a session and access the webserver by forging the session ID. This is due to an authentication...

CVE-2021-36320: Insufficient Entropy

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and access the webserver by forging the session ID...

Mozilla Firefox Security Advisory (MFSA2012-28) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Check Point Response to CVE-2021-36299, CVE-2021-36300, CVE-2021-36301, CVE-2021-20235 - Dell iDRAC9 Vulnerabilities

Cause CVE-2021-36299 - An SQL injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to the affected application. CVE-2021-36300 -...

c-http has an unspecified vulnerability

C-Http is an open source, Http 1.1 WebServer written in C by Marcin Dłubakowski, a Polish individual developer. yotsuyaNight c-http v0.1.0 version has a security vulnerability stemming from a problem with the length of the url in the software's handling of the delimitedread function, which an...

CVE-2021-36320

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and access the webserver by forging the session ID...

CVE-2021-36187

A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to cause a denial of service for webserver daemon via crafted HTTP requests...

CVE-2021-36187

A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to cause a denial of service for webserver daemon via crafted HTTP requests...

CVE-2021-36187

FortiWeb is affected by CVE-2021-36187, causing uncontrolled resource consumption that leads to denial of service of the webserver daemon via crafted HTTP requests. Affected versions include 6.4.0, 6.3.15 and below, and 6.2.5 and below. Root cause: uncontrolled resource consumption in the webserv...

c-http 安全漏洞

C-Http is an open source, Http 1.1 WebServer written in C by Marcin Dłubakowski, a Polish individual developer. yotsuyaNight c-http v0.1.0 version has a security vulnerability stemming from a problem with the length of the url in the software's handling of the delimitedread function, which an...

CVE-2021-36187: Uncontrolled Resource Consumption

A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to cause a denial of service for webserver daemon via crafted HTTP requests...