CVE-2016-1546: Undefined Security Weakness

The Apache HTTP Server 2.4.17 and 2.4.18, when modhttp2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection, which allows remote attackers to cause a denial of service stream-processing outage via modified flow-control windows...

CVE-2016-4955

Removed by vendor...

VMware vCenter Server Access Bypass

The OpenSSH software mechanism for managing VMware vCenter Server’s virtual infrastructure contains a vulnerability that can lead to service interruptions during authentication processes. A service interruption occurs when the values of logingraceTime and maxStartup differ from the default values...

CVE-2016-4530

OSIsoft PI SQL Data Access Server aka OLE DB 2016 1.5 allows remote authenticated users to cause a denial of service service outage and data loss via a message...

PT-2016-6004

Name of the Vulnerable Software and Affected Versions OSIsoft PI SQL Data Access Server aka OLE DB version 2016 1.5 Description The issue allows remote authenticated users to cause a denial of service, resulting in service outage and data loss, via a message. Recommendations For OSIsoft PI SQL Da...

CVE-2016-4530: Improper Input Validation

OSIsoft PI SQL Data Access Server aka OLE DB 2016 1.5 allows remote authenticated users to cause a denial of service service outage and data loss via a message...

CVE-2016-2831

Mozilla Firefox and Firefox ESR are affected by CVE-2016-2831 where an error during fullscreen and pointerlock handling (and window closing) could allow a pointerlock in a fullscreen window without user permission, enabling UI outage, spoofing, and clickjacking. A fix is available in later Firefo...

CVE-2016-1370

Cisco Prime Network Analysis Module NAM before 6.21-b miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service mond process crash and monitoring outage via crafted IPv6 packets, aka Bug ID CSCuy37324...

USN-2970-1 Linux kernel (Vivid HWE) vulnerabilities | Cloud Foundry

USN-2970-1 Linux kernel Vivid HWE vulnerabilities Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 LTS Description Ralf Spenneberg discovered that the Aiptek Tablet USB device driver in the Linux kernel did not properly sanity check the endpoints reported by the device. An...

PT-2016-4739

Name of the Vulnerable Software and Affected Versions Cisco Prime Network Analysis Module NAM versions prior to 6.21-b Description The issue allows remote attackers to cause a denial of service, resulting in a process crash and monitoring outage, by sending crafted IPv6 packets. This is due to a...

CVE-2016-1409

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a denial of service packet-processing outage via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in Ma...

VulnCheck KEV: CVE-2016-1409

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a denial of service packet-processing outage via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in Ma...

CVE-2016-1402: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Active Directory AD integration component in Cisco Identity Service Engine ISE before 1.2.0.899 patch 7, when AD group-membership authorization is enabled, allows remote attackers to cause a denial of service authentication outage via a crafted Password Authentication Protocol PAP...

PT-2016-2115

Name of the Vulnerable Software and Affected Versions Cisco Identity Service Engine versions prior to 1.2.0.899 patch 7 Description The issue is related to the Active Directory integration component when AD group-membership authorization is enabled. It allows remote attackers to cause a denial of...

PDF viewer Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are due to buffer overflow vulnerabilities. Exploiting these vulnerabilities can allow attackers to execute arbitra...

PDF viewer Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are due to buffer overflow vulnerabilities. Exploiting these vulnerabilities can allow a malicious actor to execute...

IBM Cognos TM1 Denial of Service Vulnerability

IBM Cognos TM1 is a suite of enterprise planning software for planning, budgeting, forecasting and analyzing from IBM in the United States. The software quickly analyzes data, models business needs, and collaborates on plans, budgets, and forecasts. A security vulnerability exists in IBM Cognos T...

CVE-2016-0381: Improper Input Validation

IBM Cognos TM1 10.2.2 before FP5, when the host/pmhub/pm/admin AdminGroups setting is empty, allows remote authenticated users to cause a denial of service configuration outage via a non-empty value...

PT-2016-4175

Name of the Vulnerable Software and Affected Versions IBM Cognos TM1 version 10.2.2 before FP5 Description The issue allows remote authenticated users to cause a denial of service, resulting in a configuration outage, when the host/pmhub/pm/admin AdminGroups setting is empty and a non-empty value...

Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerabilities (USN-2969-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2969-1 advisory. Ralf Spenneberg discovered that the Aiptek Tablet USB device driver in the Linux kernel did not properly validate the endpoints reported by the device. A...