CVE-2016-3092

CVE-2016-3092 is a DoS in Apache Commons FileUpload via a crafted long multipart boundary. Affected: Commons FileUpload before 1.3.2 used in Tomcat 7.x up to 7.0.70, Tomcat 8.x up to 8.0.36, Tomcat 8.5.x up to 8.5.3, Tomcat 9.x up to 9.0.0.M7, and other products. Root cause: boundary length trigg...

CVE-2016-2177

OpenSSL vulnerability CVE-2016-2177 arises from pointer arithmetic used for heap-buffer boundary checks in OpenSSL 1.0.2h and earlier, which could allow a remote attacker to trigger a denial of service (integer overflow and crash) due to unexpected malloc behavior. Affected components include s3_...

CVE-2016-2182

CVE-2016-2182 affects the BN_bn2dec() path in OpenSSL (OpenSSL before 1.1.0). The BN_div_word() return value is not reliably checked, enabling an out-of-bounds write that could crash the app or lead to other impact via processing large BIGNUMs. Several advisories (Android OpenSSL bulletin, Linux ...

CVE-2016-6306

CVE-2016-6306 affects OpenSSL and is documented in multiple connected advisories. The issue is an out-of-bounds/read vulnerability in the certificate parsing flow (OpenSSL <= 1.0.1u and 1.0.2

CVE-2015-3196

OpenSSL CVE-2015-3196 affects multi-threaded clients where the PSK identity hint is written to the wrong data structure, allowing a remote server to cause a denial of service via a crafted ServerKeyExchange message (race condition and double free). Affected releases include OpenSSL 1.0.0 before 1...

CVE-2013-4817

HP IceWall SSO Agent Option 8.0–10.0 contains an unspecified vulnerability that could allow remote attackers to obtain sensitive information via unknown vectors (CVE-2013-4817). The HP Security Bulletin HPSBGN02925 rev.1 lists CVE-2013-4817 alongside related CVEs affecting IceWall SSO and related...

CVE-2013-4820

HP IceWall SSO and related components (IceWall SSO 8.0–10.0, IceWall SSO Agent Option, Smart Device Option, SAML2 and JAVA Agent Library, IceWall Federation Agent, and IceWall File Manager 3.0–SP4) contain an unspecified vulnerability that allows remote authenticated users to obtain sensitive inf...

CVE-2013-4818

HP IceWall SSO products (versions 8.0–10.0) and related components (IceWall SSO Agent Option, IceWall SSO Smart Device Option, IceWall File Manager 3.0 SP1–SP4) are affected by CVE-2013-4818, which enables remote unauthorized access to obtain sensitive information. The connected Security Bulletin...

CVE-2013-4819

HP IceWall SSO vulnerability CVE-2013-4819 affects IceWall SSO Agent Option across 8.0–10.0 (including 8.0 Agent Option variants and 10.0 editions). The NVD description notes remote authenticated access could obtain sensitive information via unknown vectors; CVSSv2 base score 3.5 (LOW). The HP se...