DDoS Attacks Take Down Evernote, Feedly

UPDATED — News aggregator Feedly is still offline Thursday as continues to battle a series of distributed denial of service attacks that’s kept the service down for two consecutive days. The site was able to get back online shortly after 3 p.m. Wednesday after it neutralized the first DDoS attack...

CVE-2014-3276: Undefined Security Weakness

Cisco Identity Services Engine ISE 1.2.1 patch 2 and earlier does not properly handle deadlock conditions during reception of crafted RADIUS accounting packets from multiple NAS devices, which allows remote authenticated users to cause a denial of service RADIUS outage by sourcing these packets...

CVE-2014-3425

NCSA Mosaic 2.0 and earlier allows local users to cause a denial of service "remote control" outage by creating a /tmp/xmosaic.pid file for every possible PID...

CVE-2014-3426

Technical details for CVE-2014-3426 are not publicly available in the provided documents; no confirmed affected products or fixes are specified. Monitor for updates.

CVE-2014-3425

NCSA Mosaic 2.0 and earlier allows local users to cause a denial of service "remote control" outage by creating a /tmp/xmosaic.pid file for every possible PID...

Code injection

The ios-authproxy implementation in Cisco IOS before 15.11SY3 allows remote attackers to cause a denial of service webauth and HTTP service outage via vectors that trigger incorrectly terminated HTTP sessions, aka Bug ID CSCtz99447...

PT-2014-2273

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.31T on Cisco 2900 devices Description The issue allows remote attackers to cause a denial of service, resulting in a serial-interface outage, via certain Frame Relay traffic when a VWIC2-2MFT-T1/E1 card is...

CVE-2014-2733

Siemens SINEMA Server prior to 12 SP1 is affected by a vulnerability where specially crafted HTTP requests to ports 4999 or 80 can cause a denial of service of the web interface. The issue is associated with improper input handling on the integrated web servers. Siemens has provided a fix in SINE...

PT-2014-4890

Name of the Vulnerable Software and Affected Versions Siemens SINEMA Server versions prior to 12 SP1 Description The issue allows remote attackers to cause a denial of service, resulting in a web-interface outage, by sending crafted HTTP requests to specific ports. The affected ports are port 499...

CVE-2014-2733: Improper Input Validation

Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service web-interface outage via crafted HTTP requests to port 1 4999 or 2 80...

CVE-2014-2139: Undefined Security Weakness

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service flash write outage via a TCP FIN attack that triggers file-descriptor exhaustion, aka Bug ID CSCug97315...

Design/Logic Flaw

Cisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to cause a denial of service IPv4 and IPv6 transit outage via crafted redirect messages, aka Bug ID CSCum14266...

PT-2014-4509

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue is related to the improper throttling of ICMPv6 redirect packets, which can be exploited by remote attackers to cause a denial of service. This can result in an IPv4 and IPv6...

CVE-2014-2144: Improper Input Validation

Cisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to cause a denial of service IPv4 and IPv6 transit outage via crafted redirect messages, aka Bug ID CSCum14266...

CVE-2014-2590

CVE-2014-2590 concerns Siemens RuggedCom ROS web management interface. The vulnerability stems from improper input validation in the HTTP handling of the device’s web server, allowing remote attackers to cause a denial-of-service (interface outage) via specially crafted HTTP packets. Affected pro...

Command injection

The command-port listener in IBM WebSphere MQ Internet Pass-Thru MQIPT 2.x before 2.1.0.1 allows remote attackers to cause a denial of service remote-administration outage via unspecified vectors...

CVE-2013-5401

The command-port listener in IBM WebSphere MQ Internet Pass-Thru MQIPT 2.x before 2.1.0.1 allows remote attackers to cause a denial of service remote-administration outage via unspecified vectors...

PT-2014-2922

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ Internet Pass-Thru MQIPT versions 2.0 through 2.1.0.0 Description The issue affects the command-port listener, allowing remote attackers to cause a denial of service, which results in a remote-administration outage. The exact...

CVE-2013-5401: Undefined Security Weakness

The command-port listener in IBM WebSphere MQ Internet Pass-Thru MQIPT 2.x before 2.1.0.1 allows remote attackers to cause a denial of service remote-administration outage via unspecified vectors...

Meetup.com Back Online After DDoS Attacks, Extortion

Social networking site Meetup.com is finally back online today, yet officials at the site are warning it could still face future outages following a series of sustained distributed denial of service attacks DDoS over the weekend. Meetup is a social networking portal that allows individuals with...