PT-2015-4395

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server versions 2003 SP2, 2008 SP2 and R2 SP1, and 2012 Gold and R2 Description This issue allows remote attackers to cause a denial of service condition, resulting in a system hang and RADIUS outage, by sending crafted...

CVE-2014-9191

CVE-2014-9191 is an improper input validation vulnerability in CodeWrights HART DTM libraries used by multiple vendors (ABB, Emerson, Honeywell, Magnetrol, Pepperl+Fuchs, etc.). A specially crafted response on the 4–20 mA loop can trigger a buffer overflow, causing the HART DTM component to crash...

PT-2015-4149

Name of the Vulnerable Software and Affected Versions Emerson HART DTM version prior to 1.4.181 Description The issue allows physically proximate attackers to cause a denial of service, resulting in a DTM outage and FDT Frame application hang, by transmitting crafted response packets on the 4-20 ...

CVE-2014-8020: Undefined Security Weakness

Cisco Unified Communication Domain Manager Platform Software allows remote attackers to cause a denial of service CPU consumption, and performance degradation or service outage via a flood of malformed TCP packets and UDP packets, aka Bug ID CSCup25276...

CVE-2014-9191: Undefined Security Weakness

The CodeWrights HART Device Type Manager DTM library in Emerson HART DTM before 1.4.181 allows physically proximate attackers to cause a denial of service DTM outage and FDT Frame application hang by transmitting crafted response packets on the 4-20 mA current loop...

Lizard Squad vs Anonymous — 'PlayStation, Xbox and Tor Network' Attacks

It was the sad Christmas day for gamers all around the world!! A lot of people get new PlayStations and Xboxes on Christmas, but this Christmas they bought the game, popped it into the console for online gaming, and what they found? Oh Crap! I can't log on. It was the notorious hacker group "Liza...

North Korea Online Amid 'Proportional Response' Speculation

Ten hours after North Korea’s fragile and limited Internet connectivity disappeared on Monday, the isolated country was back online last night. While that much is certain, it’s still unknown who was behind the outage and why. Naturally, after promising on Friday a “proportional response,” immedia...

PT-2014-7031

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager for Mobile versions 8.x before 8.0.1 IBM Security Access Manager for Web versions 7.x before 7.0.0 FP10 IBM Security Access Manager for Web versions 8.x before 8.0.1 Description The issue allows remote authenticated...

CVE-2014-6082: Undefined Security Weakness

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a denial of service administration UI outage via unspecified vectors...

Juniper Networks Junos OS RSVP DoS Vulnerability (JSA10652)

Juniper Networks Junos OS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-8652

Elipse E3 3.x and earlier allows remote attackers to cause a denial of service application crash and plant outage via a rapid series of HTTP requests to index.html on TCP port 1681...

CVE-2014-8652

Elipse E3 3.x and earlier is affected by CVE-2014-8652. The issue allows remote attackers to cause a denial of service (application crash and plant outage) by sending a rapid series of HTTP requests to index.html on TCP port 1681. The Exploit/Malware entries corroborate a Windows-based PoC/DoS te...

April 911 Outage Impacted 3.5 Percent of U.S. Population

In the early hours of April 10, a series of errors led to a massive, multi-state outage in the emergency call management centers ECMCs that handle 911 calls in seven geographically dispersed states. The incident originated at an obscure but critical call routing hub in Englewood, Colo., and ended...

Design/Logic Flaw

The login page on the ZyXEL SBG-3300 Security Gateway with firmware 1.00AADY.4C0 and earlier allows remote attackers to cause a denial of service persistent web-interface outage via JavaScript code within unspecified "welcome message" form data that is improperly handled during use for the loginM...

PT-2014-7877

Name of the Vulnerable Software and Affected Versions ZyXEL SBG-3300 Security Gateway versions 1.00AADY.4C0 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a persistent web-interface outage. This is achieved by injecting JavaScript code into th...

CVE-2014-6754

The Vector Outage Manager aka nz.co.vector.outagemanager application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6754

The Vector Outage Manager aka nz.co.vector.outagemanager application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6754

CVE-2014-6754 affects the Vector Outage Manager (nz.co.vector.outagemanager) Android app version 1.7. The vulnerability is that the app does not verify X.509 certificates when communicating with SSL servers, enabling man-in-the-middle attackers to spoof servers and capture sensitive information v...

PT-2014-7432

Name of the Vulnerable Software and Affected Versions Vector Outage Manager version 1.7 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL servers...

CVE-2014-6754: Undefined Security Weakness

The Vector Outage Manager aka nz.co.vector.outagemanager application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...