CVE-2014-1278

The CVE-2014-1278 entry concerns an out-of-bounds memory access in the ARM kernel ptmx_get_ioctl function on Apple iOS (pre-7.1) and Apple TV (pre-6.1). This local-privilege/escalation vulnerability could allow a local user to gain privileges or cause a denial of service via a crafted call. Affec...

CVE-2014-1271

CVE-2014-1271 concerns CoreCapture in Apple iOS prior to 7.1 and Apple TV prior to 6.1. The vulnerability arises because CoreCapture does not properly validate IOKit API calls, which can allow a crafted app to trigger a denial of service via assertion failure and device crash. The issue centers o...

CVE-2013-5220

goform/login on the HOT HOTBOX router with software 2.1.11 allows remote attackers to cause a denial of service device crash via crafted HTTP POST data...

CVE-2013-0500

IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed with a non-NFS protocol, which allows remote authenticated users to obtain sensitive information, modify programs or files, or cause a denial of...

CVE-2013-5138

IOCatalogue in IOKitUser in Apple iOS before 7 allows attackers to cause a denial of service NULL pointer dereference and device crash via a crafted application...

Null pointer dereference

IOCatalogue in IOKitUser in Apple iOS before 7 allows attackers to cause a denial of service NULL pointer dereference and device crash via a crafted application...

CVE-2013-5138

CVE-2013-5138 affects Apple iOS (pre-7) with IOCatalogue in IOKitUser. A crafted local app can cause a NULL pointer dereference, leading to a denial of service (device crash). Root cause is described as a NULL pointer dereference in IOCatalogue; no remediation details are provided in the connecte...

PT-2013-4409 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA devices affected versions not specified Description: The issue is related to the improper processing of X.509 certificates in Cisco Adaptive Security Appliances ASA devices when symmetric multi-processor...

CVE-2013-3441

Cisco Aironet 3600 access points allow remote attackers to cause a denial of service memory corruption and device crash by disrupting Cisco Wireless LAN Controller communication and consequently forcing many transitions from FlexConnect mode to Standalone mode, aka Bug ID CSCuh71210...

CVE-2013-3441

Cisco Aironet 3600 access points allow remote attackers to cause a denial of service memory corruption and device crash by disrupting Cisco Wireless LAN Controller communication and consequently forcing many transitions from FlexConnect mode to Standalone mode, aka Bug ID CSCuh71210...

Tri-PLC Nano-10 r81 - Denial of Service

Exploit for hardware platform in category dos / poc Exploit Title: Tri-PLC Nano-10 DoS Date: 07/11/2013 Exploit Author: Sapling Vendor Homepage: www.tri-plc.com Version: Firmware Version r81 and prior CVE : CVE-2013-2784 ICSA: ICSA-13-189-02 / The vulnerability exists due to a flaw in the PLC's...

CVE-2013-0120

The web interface on Dell PowerConnect 6248P switches allows remote attackers to cause a denial of service device crash via a malformed request...

CVE-2013-1100

The CVE-2013-1100 entry concerns Cisco IOS running on Catalyst switches. The HTTP server component fails to properly handle TCP socket events, enabling a remote attacker to trigger a denial-of-service (device crash) by sending crafted packets to TCP ports 80 or 443 (Bug ID CSCuc53853). Multiple c...

Input validation

Cisco Adaptive Security Appliances ASA devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows remote authenticated users to cause a denial of service device crash via unknown vectors, aka Bug ID CSCuc65775...

CVE-2012-6395

Cisco Adaptive Security Appliances ASA devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows remote authenticated users to cause a denial of service device crash via unknown vectors, aka Bug ID CSCuc65775...

Siemens SIMATIC S7-1200 controllers DoS

Malformed data to TCP/102 port causes device to crash...

CVE-2012-3923

The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service device crash via a session involving a PPP over ATM PPPoA interface, aka...

Code injection

Cisco IOS 15.0 through 15.3 allows remote authenticated users to cause a denial of service device crash via an MVPNv6 update, aka Bug ID CSCty89224...

CVE-2012-3924

Cisco IOS SSL VPN DTLS implementation (15.1/15.2) contains a DoS by mis-handling certain outbound ACL configurations, enabling an authenticated remote user to crash the device via a PPPoA session (Bug ID CSCty97961). Exploitation involves SSL VPN traffic terminating over PPPoA; Cisco has released...

Code injection

Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to cause a denial of service segmentation fault and device crash via unspecified vectors, aka Bug ID CSCtq61128...