1175 matches found
Input validation
The DNP3 service in the Outstation component on Elecsys Director Gateway devices with kernel 2.6.32.11ael1 and earlier allows remote attackers to cause a denial of service CPU consumption and communication outage via crafted input...
CVE-2013-2825
CVE-2013-2825 affects the DNP3 Outstation service on Elecsys Director Gateway devices (kernel 2.6.32.11ael1 and earlier). The vulnerability is due to improper input validation, allowing remote attackers to cause a denial of service (CPU load spike and communication outage) via crafted input. A pa...
CVE-2013-4484
Varnish before 3.0.5 allows remote attackers to cause a denial of service child-process crash and temporary caching outage via a GET request with trailing whitespace characters and no URI...
CVE-2013-5970
hostd-vmdb in VMware ESXi 4.0 through 5.0 and ESX 4.0 through 4.1 allows remote attackers to cause a denial of service hostd-vmdb service outage by modifying management traffic...
CVE-2013-5540
The file-upload feature in Cisco Identity Services Engine ISE allows remote authenticated users to cause a denial of service disk consumption and administration-interface outage by uploading many files, aka Bug ID CSCui67519...
Unrestricted file upload
The file-upload feature in Cisco Identity Services Engine ISE allows remote authenticated users to cause a denial of service disk consumption and administration-interface outage by uploading many files, aka Bug ID CSCui67519...
Authentication flaw
The high-availability service in the Fabric Interconnect component in Cisco Unified Computing System UCS does not properly bind the cluster service to the management interface, which allows remote attackers to obtain sensitive information or cause a denial of service peer-syncing outage via a...
CVE-2012-4079
The XML API service in the Fabric Interconnect component in Cisco Unified Computing System UCS allows remote attackers to cause a denial of service API service outage via a malformed XML document in a packet, aka Bug ID CSCtg48206...
NASDAQ Patches Reported XSS Vulnerability
A NASDAQ representative confirmed this morning that a cross-site scripting vulnerability on the exchange’s website discovered by an ethical hacker has been patched. The issue was reported on Sept. 2 by Ilia Kolochenko, chief executive of High-Tech Bridge, a Swiss penetration testing company...
China hit by massive DDoS attack causing the Internet inaccessibility for hours
During the weekend China's Internet was taken down by a powerful distributed denial of service DDoS attack on the .cn domain slowed and blocked Internet access inaccessibility for hours. Security expert clarified that China could have been perpetrated by sophisticated hackers or by a single...
Design/Logic Flaw
The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service instance shutdown and data-collection outage via crafted C37.118 configuration packets that trigger an invalid read operation...
Memory corruption
The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service memory consumption or memory corruption, instance shutdown, and data-collection outage via crafted C37.118 configuration packets...
CVE-2013-2800
The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service memory consumption or memory corruption, instance shutdown, and data-collection outage via crafted C37.118 configuration packets...
CVE-2013-3724
The mkrequestheaderprocess function in mkrequest.c in Monkey 1.1.1 allows remote attackers to cause a denial of service thread crash and service outage via a '\0' character in an HTTP request...
Code injection
The Cisco VC220 and VC240 cameras allow remote attackers to cause a denial of service WebUI outage via crafted packets, aka Bug IDs CSCtf73188, CSCtf88059, CSCtf87951, CSCtf87908, and CSCtf88019...
CVE-2013-3724
The mkrequestheaderprocess function in mkrequest.c in Monkey 1.1.1 allows remote attackers to cause a denial of service thread crash and service outage via a '\0' character in an HTTP request...
CVE-2013-3435
The Cisco Unified IP Conference Station 7937G allows remote attackers to cause a denial of service networking outage via a flood of TCP packets, aka Bug ID CSCuh42052...
Code injection
The Cisco Unified IP Conference Station 7937G allows remote attackers to cause a denial of service networking outage via a flood of TCP packets, aka Bug ID CSCuh42052...
CVE-2013-3435
Cisco Unified IP Conference Station 7937G is affected by CVE-2013-3435, where a remote unauthenticated attacker can cause a DoS (networking outage) by sending a high rate of TCP packets. The root cause relates to resource constraints in processing network traffic. Impact is a device-wide DoS unti...