various vulnerabilities and exploits

(subscribe to this query)

Incorrect handling of url fragment vulnerability of Apache Traffic Server allows an malicious user to poison the cache. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

Apache Traffic Server Debian Debian Linux 8.0

Invalid values in the Content-Length header sent to Apache Traffic Server allows an malicious user to smuggle requests. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

Apache Traffic Server Debian Debian Linux 10.0

Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

Apache Traffic Server Debian Debian Linux 10.0

Blahz-DNS 0.2 and previous versions allows remote malicious users to bypass authentication and modify configuration by directly requesting CGI programs such as dostuff.php instead of going through the login screen.

Blahz-dns Blahz-dns 0.2

1 EDB exploit

connections.c in lighttpd prior to 1.4.16 might accept more connections than the configured maximum, which allows remote malicious users to cause a denial of service (failed assertion) via a large number of connection attempts.

Lighttpd Lighttpd

SQL injection vulnerability in ADOdb prior to 4.71, when using PostgreSQL, allows remote malicious users to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.

John Lim Adodb 4.66 John Lim Adodb 4.68 John Lim Adodb 4.70

An issue exists in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration.

Openbsd Openbsd 6.6

Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote malicious users to execute arbitrary commands via shell metacharacters in an embedded hyperlink.

Adobe Acrobat 5.0.6 Xpdf Xpdf 1.1 Mandrakesoft Mandrake Linux 9.0 Mandrakesoft Mandrake Linux 9.1 Mandrakesoft Mandrake Linux Corporate Server 2.1 Redhat Enterprise Linux 2.1 Redhat Linux 7.1 Redhat Linux 7.2 Redhat Linux 7.3 Redhat Linux 8.0 Redhat Linux 9.0 Redhat Linux Advanced Workstation 2.1

1 EDB exploit

archive_read_support_format_tar.c in libarchive prior to 2.2.4 allows user-assisted remote malicious users to cause a denial of service (infinite loop) via (1) an end-of-file condition within a pax extension header or (2) a malformed pax extension header in an (a) PAX or a (b) TA...

Freebsd Libarchive

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via OracleNet to compromise Core RDBMS. ...

Oracle Database Server 11.2.0.4 Oracle Database Server 12.1.0.2 Oracle Database Server 12.2.0.1 Oracle Database Server 18c Oracle Database Server 19c

1 Article

« PREV 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook