Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a denial of service loss of updates due to rate limit...

CVE-2012-0826

Cross-site request forgery CSRF vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a denial of service loss of updates due to rate limit...

CVE-2012-0826

Removed by vendor...

CVE-2013-1188

Cisco Unified Communications Manager (CUCM) is affected by CVE-2013-1188 due to incomplete throttling of authentication requests. The vulnerability allows remote attackers to degrade the CUCM application’s performance (denial of service) by sending a flood of authentication attempts. Affected beh...

CentOS Update for bind CESA-2013:0550 centos6

Check for the Version of bind OpenVAS Vulnerability Test CentOS Update for bind CESA-2013:0550 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS 6 : bind (CESA-2013:0550)

"Updated bind packages that fix one security issue and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Scientific Linux Security Update : bind on SL6.x i386/x86_64 (20130221)

A flaw was found in the DNS64 implementation in BIND when using Response Policy Zones RPZ. If a remote attacker sent a specially crafted query to a named server that is using RPZ rewrite rules, named could exit unexpectedly with an assertion failure. Note that DNS64 support is not enabled by...

bind security update

CentOS Errata and Security Advisory CESA-2013:0550 Updated bind packages that fix one security issue and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scorin...

Unbreakable Enterprise kernel security and bug fix update

2.6.39-400.17.1 - This is a fix on dlmcleanmasterlist Xiaowei.Hu - RDS: fix rds-ping spinlock recursion jeff.liu Orabug: 16223050 - vhost: fix length for cross region descriptor Michael S. Tsirkin Orabug: 16387183 CVE-2013-0311 - kabifix: block/scsi: Allow request and error handling timeouts to b...

RedHat Update for bind RHSA-2013:0550-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

ICMP Unreachable Vulnerability in Cisco 12000 Series Internet Router - Cisco Systems

The performance of Cisco 12000 series routers can be degraded when they have to send a large number of ICMP unreachable packets. This situation usually can occur during heavy network scanning. This vulnerability is tracked by three different bug IDs: CSCdr46528 registered customers only ,...

Debian DSA-1992-1 : chrony - several vulnerabilities

Several vulnerabilities have been discovered in chrony, a pair of programs which are used to maintain the accuracy of the system clock on a computer. This issues are similar to the NTP security flaw CVE-2009-3563. The Common Vulnerabilities and Exposures project identifies the following problems ...

DSA-1992-1 chrony - denial of service

Bulletin has no description...

CVE-2006-6681

Pedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might allow remote attackers to determine passwords via a dictionary attack...

CVE-2006-6681

Pedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might allow remote attackers to determine passwords via a dictionary attack...

CVE-2006-6681

CVE-2006-6681: Pedro Lineu Orso chetcpasswd 2.3.3 is vulnerable because it does not implement a rate limit on client requests, potentially allowing remote attackers to perform dictionary attacks to guess passwords. The cited sources (NVD/NVD page) confirm the issue and its impact as a partial con...

ircd-hybrid.txt

Name : ircd-hybrid-7/ircd-ratbox low-bandwidth DoS Date : June 14th 2004 Author : Erik Sperling Johansen Severity : Medium This has been tested on most the ircd versions currently used on EFNet. Other ircds may be affected. Affected: ircd-hybrid =1.5.2 ircd-ratbox =2.0rc7 ircd-hybrid 6 csircd...

ircd-hybrid-7 / ircd-ratbox low-bandwidth DoS

Name : ircd-hybrid-7/ircd-ratbox low-bandwidth DoS Date : June 14th 2004 Author : Erik Sperling Johansen [email protected] Severity : Medium This has been tested on most the ircd versions currently used on EFNet. Other ircds may be affected. Affected: ircd-hybrid =7.0.1 ircd-ratbox =1.5.1...

CVE-2001-1388

iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator...