Apache Tomcat hash collision DoS Vulnerability Solution

Cause:Wed, 28 Dec 2011 22:28:16 GMT apache tomcat released a security vulnerability. Http://mail-archives.apache.org/mod_mbox/www-announce/201112.mbox/%3C4EFB9800.5010106@apache.org%3E Vulnerability principle: In most web Container Designs, requests

IBM WebSphere Application Server for z/OS CBIND vulnerability check

Release date:Updated on: Affected Systems:IBM Websphere Application Server 8.5.xIBM Websphere Application Server 8.0.xIBM Websphere Application Server 7.0.xIBM Websphere Application Server 6.1.xDescription:-------------------------------------------

Python Insecure File Permission Vulnerability

Release date:Updated on: Affected Systems:Python python 3.xDescription:--------------------------------------------------------------------------------Bugtraq id: 55882 Python is an object-oriented, literal translation computer programming

ATutor AContent 1.2-1 arbitrary User Password Modification Vulnerability

Release date:Updated on: Affected Systems:ATutor AContent 1.1Description:--------------------------------------------------------------------------------Bugtraq id: 56100Cve id: CVE-2012-5168 AContent is an e-learning content creation tool and

Multiple HTML injection vulnerabilities in Winmail Server

Release date:Updated on: Affected Systems:Magicwinmail Winmail Server 5.xDescription:--------------------------------------------------------------------------------Bugtraq id: 56231 Winmail Server is a secure, easy-to-use, full-featured mail

Local DoS vulnerability in Xen get_page_from_gfn () function

Release date: 2012-4 4Updated on: 2012-12-06 Affected Systems:XenSource Xen 4.xXenSource Xen 3.xDescription:--------------------------------------------------------------------------------Bugtraq id: 56805CVE (CAN) ID: CVE-2012-5525 Xen is an open-

TVMOBiLi length parameter inconsistency Error Handling Vulnerability

Release date:Updated on: Affected Systems:TVMOBiLi 2.1.3557Description:--------------------------------------------------------------------------------Bugtraq id: 56853CVE (CAN) ID: CVE-2012-5451 Tv1_ I is a free UPnP/DLNA Media Server on Mac,

Havbid CMS 'data/havbid. db3' file database information leakage Vulnerability

Release date:Updated on: Affected Systems:Havbid CMS 1.1.0Description:--------------------------------------------------------------------------------Bugtraq id: 56878CVE (CAN) ID: CVE-2012-5892 Havbid is an open-source lightweight CMS blog

Ruby multi_xml Remote Arbitrary Command Execution Vulnerability

Release date:Updated on: Affected Systems:Rubygems multi_xml 0.5.1Description:--------------------------------------------------------------------------------Bugtraq id: 57281CVE (CAN) ID: CVE-2013-0175 Multi_xml provides an Interchangeable XML

Microsoft confirmed Windows RT update Bug and promised to fix it in May

Today, a Microsoft spokesman responded to previous reports about update bug on the Surface RT device, saying: it is still unclear whether the problem is related to Windows RT or the Surface tablet. It turns out that this problem is caused by

Multiple security vulnerabilities in versions earlier than Opera Web Browser 12.13

Release date:Updated on: 2013-02-01 Affected Systems:Opera Software Opera Web Browser 12.xOpera Software Opera Web Browser 12.xDescription:--------------------------------------------------------------------------------Bugtraq id: 57633 Opera is a

Wireshark PER Dissector DoS Vulnerability

Release date:Updated on: 2013-02-04 Affected Systems:Wireshark 1.6.xDescription:--------------------------------------------------------------------------------Bugtraq id: 57622 Wireshark is the most popular network protocol parser. Wireshark 1.6.0-

Alt-N MDaemon WebAdmin Arbitrary Command Execution Vulnerability

Release date:Updated on: 2013-02-23 Affected Systems:Alt-N MDaemon Description:--------------------------------------------------------------------------------Bugtraq id: 58084 Alt-N MDaemon is a Windows-based email service program, and WorldClient

RubyGems 'Ruby _ parser 'insecure temporary File Creation Vulnerability

Release date:Updated on: 2013-02-26 Affected Systems:Rubygems ruby_parser Description:--------------------------------------------------------------------------------Bugtraq id: 58110CVE (CAN) ID: CVE-2013-0162 Ruby_parser is a Ruby source code

Multiple SQL injection and cross-site scripting vulnerabilities in PHP-Fusion

Release date:Updated on: 2013-03-01 Affected Systems:PHP-Fusion 7.xDescription:--------------------------------------------------------------------------------Bugtraq id: 58226 PHP-Fusion is a lightweight open-source content management system

Multiple Xerox device Authentication Bypass Vulnerability

Release date:Updated on: Affected Systems:Xerox WorkCentreXerox ColorQube 9300Xerox ColorQube 9200Description:--------------------------------------------------------------------------------Bugtraq id: 58289 Xerox is an American copywriting

Github is under continuous attack, the most serious today

Github has suffered frequent attacks in recent days, starting from the 7th, the 8th was normal, and the 9th and 10th were faulty. Especially today, the fault lasted for three hours. The following is a fault report from status.github.com:At UTC, all

Yum Remote Denial of Service Vulnerability

Released on: 2013-03-18Updated on: 2013-03-19 Affected Systems:Baseurl yumDescription:--------------------------------------------------------------------------------Bugtraq id: 58533 Yum is a package manager under Fedora and RedHat linux. Yum 3.4.3

VBulletin 'nodeid' parameter SQL Injection Vulnerability

Release date:Updated on: 2013-03-30 Affected Systems:VBulletinDescription:--------------------------------------------------------------------------------Bugtraq id: 58754 VBulletin is a powerful and flexible forum program suite that can be

Cisco ASA Clientless ssl vpn rewriter Module Denial of Service Vulnerability

Release date:Updated on: Affected Systems:Cisco ASADescription:--------------------------------------------------------------------------------Bugtraq id: 59359CVE (CAN) ID: CVE-2013-1199 The Cisco ASA 5500 Series Adaptive Security Device is a

Total Pages: 1330 1 .... 894 895 896 897 898 .... 1330 Go to: GO

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.