4403 matches found
Cisco IOS XE NTP Packet Handling Remote DoS (cisco-sa-20160804-wedge)
According to its self-reported version and configuration, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability due to insufficient checks on clearing invalid Network Time Protocol NTP packets from the interface queue. An unauthenticated, remote...
PT-2016-6342
Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services affected versions not specified Description A Null pointer dereference issue exists due to a missing NULL check in PK11 SignWithSymKey / ssl3 ComputeRecordMACConstantTime, which could let a remote malicious us...
CVE-2016-1478: Improper Input Validation
Cisco IOS 15.53S3, 15.61S2, 15.62S1, and 15.62T1 does not properly dequeue invalid NTP packets, which allows remote attackers to cause a denial of service interface wedge by sending many crafted NTP packets, aka Bug ID CSCva35619...
CVE-2016-5095
Integer overflow in the phpescapehtmlentitiesex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from a FILTERSANITIZEFULLSPECIALCHARS...
CVE-2016-5769
Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted length value,...
PT-2016-6962
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.12 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, via a crafted packet. This is related to the MMSE dissector in the epan/dissectors/packet-mmse...
Kodi Web Server 16.1 - Denial of Service
Exploit Title: Kodi 16.1 Web Server Remote DoS Date: 06/08/2016 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: https://networkfilter.blogspot.com GitHub: https://github.com/gkweb76/exploits Vendor Homepage: https://kodi.tv/ Software Link:...
PT-2016-6258
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.85 Description The issue is related to an integer overflow in the kbasep vinstr attach client function, which can be exploited by remote attackers to cause a denial of service. This is achieved through...
PT-2016-6814
Name of the Vulnerable Software and Affected Versions MuPDF affected versions not specified Description The issue is related to a use-after-free vulnerability in the pdf load xref function, which can be exploited by remote attackers using a crafted PDF file, leading to a denial of service crash...
CVE-2016-3424: Undefined Security Weakness
Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Optimizer...
PT-2016-6065
Name of the Vulnerable Software and Affected Versions: libxslt for Apple iOS, OS X, iTunes, iCloud, tvOS, and watchOS affected versions not specified Description: The issue allows remote attackers to cause a denial of service memory corruption or have other impacts on the system. Recommendations:...
CVE-2015-3192: Improper Restriction of Operations within the Bounds of a Memory Buffer
Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service memory consumption and out-of-memory errors via a crafted XML file...
Palo Alto Networks PAN-OS Management Interface API Remote DoS (PAN-SA-2016-0008)
The Palo Alto Networks PAN-OS running on the remote host is affected by a denial of service vulnerability in the API hosted on the management interface, specifically in the panUserLogin function within panmodule.so, due to improper validation of user-supplied input to the 'username' and 'password...
CVE-2016-4956
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service interleaved-mode transition and time change via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548...
CVE-2016-4955: Concurrent Execution using Shared Resource with Improper Synchronization
ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service peer-variable clearing and association outage by sending 1 a spoofed crypto-NAK packet or 2 a packet with an incorrect MAC value at a certain time...
CVE-2016-4953: Improper Authentication
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service ephemeral-association demobilization by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time...
PT-2016-3403
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.37 PHP versions 5.6.x prior to 5.6.23 Description The issue is caused by an integer overflow in the SplFileObject::fread function, which can be exploited by remote attackers to cause a denial of service or possibly ha...
CVE-2016-1328: Improper Input Validation
goform/WClientMACList on Cisco EPC3928 devices allows remote attackers to cause a denial of service device crash via a long hsortWireless parameter, related to a "Gateway Client List Denial of Service" issue, aka Bug ID CSCux24948...
CVE-2016-1425: Improper Restriction of Operations within the Bounds of a Memory Buffer
Cisco IOS 15.02SG5, 15.12SG3, 15.21E, 15.33S, and 15.41.13S allows remote attackers to cause a denial of service device crash via a crafted LLDP packet, aka Bug ID CSCun66735...