Juniper Networks Junos OS SSH Denial of Service Vulnerability

Junos OS is prone to a denial of service DoS vulnerability. on the SSH server. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[ERPSCAN-15-026] Oracle E-Business Suite - SQL injection Vulnerability

ADVISORY INFORMATION Title: Oracle E-Business Suite SQL injection Advisory ID: ERPSCAN-15-026 Advisory URL: http://erpscan.com/advisories/erpscan-15-026-oracle-e-business-suite-sql-injection-vulnerability/ Date published: 20.10.2015 Vendors contacted: Oracle 2. VULNERABILITY INFORMATION Class:...

Cisco ASR 5000 CDMA PMIpv6 Denial of Service Vulnerability

A vulnerability in the Proxy Mobile IPv6 PMIPv6 protocol implementation of the Cisco Aggregation Services Router ASR ASR 5000 for Cisco Code Division Multiple Access CDMA System Software could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the...

openSUSE: Security Advisory for java-1_8_0-openjdk (openSUSE-SU-2015:0773-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Email Security Appliance Format String Vulnerability

The Cisco Email Security Appliance ESA contains a vulnerability that could allow an unauthenticated, remote attacker to impact the integrity and availability of services and data on the affected device. The impact includes a partial denial of service DoS. In addition, the attacker could override...

Xen xenmem_add_to_physmap_one() printk rate limit denial of service vulnerability

Xen is an open source virtual machine. There is a problem with the printk rate limit in Xen xenmemaddtophysmapone, which allows Guest domains with partial administrative control and the ability to map other Guest domains to send large numbers of messages to the Xen console...

printk is not rate-limited in xenmem_add_to_physmap_one

ISSUE DESCRIPTION XENMAPSPACEgmfnforeign dumps the p2m, on ARM, when it fails to get a reference on the foreign page. However, dumpp2mlookup does not use rate-limited printk. A malicious infrastructure domain, which is allowed to map memory of a foreign guest, would be able to flood the Xen...

XSS, Code Execution, DOS, Password Leak, Weak Authentication in GetSimpleCMS 3.3.5

Vulnerability: XSS, Code Execution, DOS, Password Leak, Weak Authentication Affected Software: GetSimpleCMS http://get-simple.info/ Affected Version: 3.3.5 probably also prior versions Patched Version: 3.3.6 partial fix Risk: Medium-High Vendor Contacted: 2015-06-14 Vendor Partial Fix: 2015-07-14...

USN-2676-1 nbd vulnerabilities

It was discovered that NBD incorrectly handled IP address matching. A remote attacker could use this issue with an IP address that has a partial match and bypass access restrictions. This issue only affected Ubuntu 12.04 LTS. CVE-2013-6410 Tuomas Räsänen discovered that NBD incorrectly handled...

kernel: partial ASLR bypass through TLS base addresses leak

An information leak flaw was found in the way the Linux kernel changed certain segment registers and thread-local storage TLS during a context switch. A local, unprivileged user could use this flaw to leak the user space TLS base address of an arbitrary process...

The vulnerability of Google Chrome browser allows a perpetrator to bypass the sandboxing mechanism or trigger a service failure.

The common/partialcircularbuffer.cc file in Google Chrome’s browser contains errors when dealing with pointers. As a result, attackers may bypass the sandbox mechanism or cause failures in the processing of large data writes using the PartialCircularBuffer::Write and PartialCircularBuffer::DoWrit...

CVE-2015-0217

filter/mediaplugin/filter.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to cause a denial of service CPU consumption or partial outage via a crafted string that is matched against an improper regular expression...

Input validation

filter/mediaplugin/filter.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to cause a denial of service CPU consumption or partial outage via a crafted string that is matched against an improper regular expression...

CVE-2015-2268

CVE-2015-2268 affects Moodle’s filter/urltolink/filter.php across multiple branches (2.5.9, 2.6.x prior to 2.6.9, 2.7.x prior to 2.7.6, 2.8.x prior to 2.8.4). The vulnerability allows remote authenticated users to cause a denial of service (CPU consumption or partial outage) via a crafted string ...

chromium-browser: Sandbox escape in Chrome.

common/partialcircularbuffer.cc in Google Chrome before 43.0.2357.65 does not properly handle wraps, which allows remote attackers to bypass a sandbox protection mechanism or cause a denial of service out-of-bounds write via vectors that trigger a write operation with a large amount of data,...

Google Chrome Buffer Overflow Vulnerability (CNVD-2015-03355)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the Google Chrome 'common/partialcircularbuffer.cc' file. As the program fails to handle encapsulation properly. A remote attacker can exploit this vulnerability by a large number of...

UBUNTU-CVE-2015-1252

common/partialcircularbuffer.cc in Google Chrome before 43.0.2357.65 does not properly handle wraps, which allows remote attackers to bypass a sandbox protection mechanism or cause a denial of service out-of-bounds write via vectors that trigger a write operation with a large amount of data,...

PT-2015-1191

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 43.0.2357.65 Opera affected versions not specified Description The issue is related to errors in handling pointers in the common/partial circular buffer.cc file of Google Chrome, which can be exploited by remote...

Cisco Wide Area Application Services Server Message Block Protocol Module Denial of Service Vulnerability

A vulnerability in the Server Message Block Protocol SMB module of Cisco Wide Area Application Services WAAS could allow an unauthenticated, remote attacker to cause a reload of the SMB module. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by...

CVE-2015-1673: Undefined Security Weakness

The Windows Forms aka WinForms libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allow user-assisted remote attackers to execute arbitrary code via a crafted partial-trust application, aka "Windows Forms Elevation of Privilege Vulnerability."...