UBUNTU-CVE-2016-2525

epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted packet...

PT-2016-1245

Name of the Vulnerable Software and Affected Versions Cisco RV220W devices affected versions not specified Description The issue is related to a SQL injection vulnerability in the web-based management interface. This vulnerability allows remote attackers to execute arbitrary SQL commands via a...

PT-2016-3706

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1800 devices with software 8.1112.3 and 8.1112.4 Description The issue allows remote attackers to cause a denial of service via a crafted header in an IP packet. Recommendations For version 8.1112.3, update to a version that fixe...

CVE-2015-6320: Undefined Security Weakness

The IP ingress packet handler on Cisco Aironet 1800 devices with software 8.1112.3 and 8.1112.4 allows remote attackers to cause a denial of service via a crafted header in an IP packet, aka Bug ID CSCuv63138...

UBUNTU-CVE-2015-8396

Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM aka GDCM before 2.6.2 allows attackers to execute arbitrary code via crafted header dimensions in a DICOM image file, which triggers a buffer overflow...

PT-2015-7195

Name of the Vulnerable Software and Affected Versions Cisco ASR 5500 System Architecture Evolution SAE Gateway devices versions 19.1.0.61559 through 19.2.0 Description The issue allows remote attackers to cause a denial of service by restarting the BGP process via a crafted header in a BGP packet...

CVE-2015-6351: Improper Input Validation

Cisco ASR 5500 System Architecture Evolution SAE Gateway devices with software 19.1.0.61559 and 19.2.0 allow remote attackers to cause a denial of service BGP process restart via a crafted header in a BGP packet, aka Bug ID CSCuw65781...

PT-2015-7190

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 devices with software 19.0.M0.60737 Description The issue allows remote attackers to cause a denial of service, resulting in the restart of the hamgr process, by sending a crafted header in a PMIPv6 packet. Recommendations For...

CVE-2015-6340: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Proxy Mobile IPv6 PMIPv6 component in the CDMA implementation on Cisco ASR 5000 devices with software 19.0.M0.60737 allows remote attackers to cause a denial of service hamgr process restart via a crafted header in a PMIPv6 packet, aka Bug ID CSCuv63280...

The vulnerability of the iOS operating system, which allows a hacker to trigger a service failure

The vulnerability of the XNU kernel component of the iOS operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a TCP packet containing a specially crafted header...

Mozilla: Buffer overflow while decoding WebM video (MFSA 2015-105)

Heap-based buffer overflow in the nesteggtrackcodecdata function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via a crafted header in a WebM video...

namshi/jose input validation vulnerability

namshi/jose is a PHP library for processing JSON Web markup . A security vulnerability exists in namshi/jose. A remote attacker can exploit the vulnerability to bypass signature verification via a specially crafted token in a JSON Web Tokens JWT header...

DEBIAN-CVE-2015-2666

Stack-based buffer overflow in the getmatchingmodelmicrocode function in arch/x86/kernel/cpu/microcode/intelearly.c in the Linux kernel before 4.0 allows context-dependent attackers to gain privileges by constructing a crafted microcode header and leveraging root privileges for write access to th...

Cisco FireSIGHT Management Center FireSIGHT System Software Open Redirect Vulnerability

Cisco FireSIGHT Management Center is the United States Cisco Cisco company's set of support for centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security equipment network security and operational functions of the management center software. An open...

CVE-2015-2153

The rpkirtrpduprint function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via a crafted header length in an RPKI-RTR Protocol Data Unit PDU...

CVE-2015-0881

CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted header in a response...

RabbitMQ Server < 3.4.0 Security Bypass Vulnerability - Active Check

RabbitMQ Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:rabbitmq";...

CVE-2014-9494

RabbitMQ before 3.4.0 allows remote attackers to bypass the loopbackusers restriction via a crafted X-Forwareded-For header...

CVE-2014-9494

RabbitMQ before 3.4.0 allows remote attackers to bypass the loopbackusers restriction via a crafted X-Forwareded-For header...

UBUNTU-CVE-2014-8501

The bfdXXiswapaouthdrin function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service out-of-bounds write and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable...