ISC BIND openpgpkey_61.c Denial of Service (CVE-2015-5986)

A denial-of-service vulnerability exists in ISC BIND. The vulnerability is due to an incorrect boundary check, leading to a REQUIRE assertion failure in openpgpkey61.c. A remote, unauthenticated attacker can exploit this vulnerability by sending crafted queries under certain circumstances...

ISC BIND DNSSEC Key Parsing buffer.c Denial of Service (CVE-2015-5722)

A denial of service vulnerability exists in ISC BIND. The vulnerability is due to an error in buffer.c while parsing certain malformed DNSSEC keys. A remote attacker can exploit this vulnerability by sending crafted queries under certain circumstances. Successful exploitation will result in a...

ISC BIND DNSSEC Validation Denial of Service (CVE-2015-4620)

A denial of service vulnerability exists in ISC BIND. The vulnerability is due to an error during DNSSEC validation. A remote attacker can exploit this vulnerability by sending crafted queries under certain circumstances...

PT-2016-5213

Name of the Vulnerable Software and Affected Versions ISC BIND 9 versions 9.9.9 before 9.9.9-P3 ISC BIND 9 versions 9.10.x before 9.10.4-P3 ISC BIND 9 versions 9.11.x before 9.11.0rc3 Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and...

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft SQL Server is the United States Microsoft Microsoft company develops and maintains a set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists when Microsoft SQL Server fails to properly handle internal...

WordPress Plugin Simple Photo Gallery 'index.php' SQL Injection Vulnerability

WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up personal blog site.Simple Photo Gallery is an image gallery plugin. A SQL injection vulnerability exists in the WordPress plugin Simple Photo Gallery 'index.php. The...

MetalGenix GeniXCMS SQL Injection Vulnerability

MetalGenix GeniXCMS is a content management system. MetalGenix GeniXCMS suffers from a SQL injection vulnerability. This vulnerability allows attackers to submit specially crafted SQL queries to manipulate or obtain database data...

WordPress Daily Edition Theme SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.WordPress Daily Edition Theme is a theme plugin for wordpress. WordPress Daily Edition Theme "fiche-disque.php...

ProjectSend r561 SQL Injection Vulnerability

ProjectSend is a WEB-based application. ProjectSend suffers from a SQL injection vulnerability that allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...

bind: named crash when handling malformed NSEC3-signed zones

A denial of service flaw was found in the way BIND handled queries for NSEC3-signed zones. A remote attacker could use this flaw against an authoritative name server that served NCES3-signed zones by sending a specially crafted query, which, when processed, would cause named to crash...

MySQL 5.0.x - IF Query Handling Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23911/info MySQL is prone to a remote denial-of-service vulnerability because it fails to handle certain specially crafted queries. An attacker can exploit this issue to crash the application, denying access to legitimate...

MySQL 5.0.x Denial Of Service

source: http://www.securityfocus.com/bid/23911/info MySQL is prone to a remote denial-of-service vulnerability because it fails to handle certain specially crafted queries. An attacker can exploit this issue to crash the application, denying access to legitimate users. NOTE: An attacker must be...

Ubuntu: Security Advisory (USN-1657-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-5055

MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted queries with the Recursion Desired RD bit set. NOTE:...

DEBIAN-CVE-2011-5055

MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted queries with the Recursion Desired RD bit set. NOTE:...

CVE-2011-5055

MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted queries with the Recursion Desired RD bit set. NOTE:...

Code injection

MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted queries with the Recursion Desired RD bit set. NOTE:...

bind (important)

specially crafted DNS queries could crash the bind name server CVE-2011-4313...

GLSA-200703-15 : PostgreSQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200703-15 PostgreSQL: Multiple vulnerabilities PostgreSQL does not correctly check the data types of the SQL function arguments under unspecified circumstances nor the format of the provided tables in the query planner. Impact : A...

GLSA-200702-06 : BIND: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200702-06 BIND: Denial of Service An unspecified improper usage of an already freed context has been reported. Additionally, an assertion error could be triggered in the DNSSEC validation of some responses to type ANY queries with...