1175 matches found
Improper access control
The REST API in Cisco Access Control Server ACS 5.50.46.2 allows remote attackers to cause a denial of service API outage by sending many requests, aka Bug ID CSCut62022...
CVE-2015-0189
The cluster repository manager in IBM WebSphere MQ 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allows remote authenticated administrators to cause a denial of service memory overwrite and daemon outage by triggering multiple transmit-queue records...
CVE-2015-0189
The cluster repository manager in IBM WebSphere MQ 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allows remote authenticated administrators to cause a denial of service memory overwrite and daemon outage by triggering multiple transmit-queue records...
Code injection
IBM Curam Social Program Management SPM 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.6 requires failed-login handling for web-service accounts to have the same lockout policy as for standard user accounts, which makes it easier for remote attackers to caus...
F5 Networks BIG-IP : Linux kernel vulnerability (SOL16479)
drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to 1 cause a denial of service temporary network outage via a packet with a crafted size, in conjunction with...
Design/Logic Flaw
The XML parser in Cisco Adaptive Security Appliance ASA Software 8.4 before 8.47.28, 8.6 before 8.61.17, 9.0 before 9.04.33, 9.1 before 9.16, 9.2 before 9.23.4, and 9.3 before 9.33, when Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN is used, allows remote attackers to cause a...
CVE-2015-0676
Cisco ASA DNS Memory Exhaustion Vulnerability (CVE-2015-0676) affects ASA Software versions listed in the Cisco advisory/PT-2015-1056. The issue arises in the DNS code when handling outbound queries, enabling a MITM-like sequence to trigger crafted DNS responses that exhaust memory and can cause ...
CVE-2015-1103
The CVE-2015-1103 entry covers a kernel-level issue in Apple devices (iOS before 8.3, OS X before 10.10.3, Apple TV before 7.2): ICMP_REDIRECT handling allows remote attackers to cause a denial of service (network outage) or to obtain sensitive packet content via a crafted ICMP packet. The descri...
CVE-2015-0672
The DHCPv4 server in Cisco IOS XR 5.2.2 on ASR 9000 devices allows remote attackers to cause a denial of service service outage via a flood of crafted DHCP packets, aka Bug ID CSCup67822...
Design/Logic Flaw
The Remote Desktop Protocol RDP implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to cause a denial of service memory consumption and RDP outage by establishing many RDP sessions that do not properly free allocated memor...
CVE-2015-0617
CVE-2015-0617 affects Cisco ASR 5500 SAE Gateway devices. The vulnerability lies in the SNMP code failing to properly validate malformed SNMP packets, allowing an unauthenticated remote attacker to cause high CPU utilization and SNMP process outage (DoS). Cisco’s advisory notes that public softwa...
Memory corruption
Memory leak in the embedded web server in the WebVPN subsystem in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and SSL outage via multiple crafted HTTP requests, aka Bug ID CSCue05458...
CVE-2015-0619
Memory leak in the embedded web server in the WebVPN subsystem in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and SSL outage via multiple crafted HTTP requests, aka Bug ID CSCue05458...
KickAss Torrent Download Website Seized
So far, the torrent users didn’t forget the incident of The Pirate Bay seizer, that another most popular Torrent website, KickAss Torrents, has been kicked off by the Somalian registry. KickAss Torrent download website has lost access to its Kickass.so - the Somalian domain with millions of uniqu...
The Pirate Bay Returns From The Dead
A wave of excitement in The Pirate Bay lovers. After almost two months of untimely and unexpected outage, the infamous torrent-indexing website The Pirate Bay TPB made a defiant return on Saturday. The Pirate Bay — a widely popular file-sharing website predominantly used to share copyrighted...
CVE-2014-9191
CVE-2014-9191 is an improper input validation vulnerability in CodeWrights HART DTM libraries used by multiple vendors (ABB, Emerson, Honeywell, Magnetrol, Pepperl+Fuchs, etc.). A specially crafted response on the 4–20 mA loop can trigger a buffer overflow, causing the HART DTM component to crash...
Lizard Squad vs Anonymous — 'PlayStation, Xbox and Tor Network' Attacks
It was the sad Christmas day for gamers all around the world!! A lot of people get new PlayStations and Xboxes on Christmas, but this Christmas they bought the game, popped it into the console for online gaming, and what they found? Oh Crap! I can't log on. It was the notorious hacker group "Liza...
North Korea Online Amid 'Proportional Response' Speculation
Ten hours after North Korea’s fragile and limited Internet connectivity disappeared on Monday, the isolated country was back online last night. While that much is certain, it’s still unknown who was behind the outage and why. Naturally, after promising on Friday a “proportional response,” immedia...
Juniper Networks Junos OS RSVP DoS Vulnerability (JSA10652)
Juniper Networks Junos OS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...