4395 matches found
CVE-2016-2515
Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service CPU consumption or partial outage via a long 1 header or 2 URI that is matched against an improper regular expression...
CVE-2016-2116: Undefined Security Weakness
Memory leak in the jasiccprofcreatefrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service memory consumption via a crafted ICC color profile in a JPEG 2000 image file...
CVE-2016-3986: Improper Restriction of Operations within the Bounds of a Memory Buffer
Avast allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a crafted PE file, related to authenticode parsing...
CVE-2016-3948
Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers...
CVE-2016-3948: Improper Restriction of Operations within the Bounds of a Memory Buffer
Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers...
CVE-2015-6313: Undefined Security Weakness
Cisco TelePresence Server 4.12.29 through 4.24.17 on 7010; Mobility Services Engine MSE 8710; Multiparty Media 310, 320, and 820; and Virtual Machine VM devices allows remote attackers to cause a denial of service memory consumption or device reload via crafted HTTP requests that are not followed...
CVE-2016-1771: Undefined Security Weakness
The Downloads feature in Apple Safari before 9.1 mishandles file expansion, which allows remote attackers to cause a denial of service via a crafted web site...
Squid remote denial of service vulnerability analysis-vulnerability warning-the black bar safety net
Introduction The Squid Cache is an HTTP proxy server software. The Squid a wide range of uses, can be used as a cache server, may filter traffic help network security, but also can be used as a proxy server in the chain of a ring, the up-level proxy to forward the data or directly connected to th...
CVE-2016-1978: Undefined Security Weakness
Use-after-free vulnerability in the ssl3HandleECDHServerKeyExchange function in Mozilla Network Security Services NSS before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact by making an SSL 1 DHE or 2 ECD...
PT-2016-1438
Name of the Vulnerable Software and Affected Versions Network Security Services NSS versions prior to 3.21.1 Mozilla Firefox versions prior to 45.0 Description The issue is related to a use-after-free vulnerability in the PK11 ImportDERPrivateKeyInfoAndReturnKey function. This vulnerability can b...
PT-2016-5055
Name of the Vulnerable Software and Affected Versions Botan versions prior to 1.10.11 Botan versions 1.11.x prior to 1.11.27 Description The issue allows remote attackers to cause a denial of service, specifically an infinite loop, via unspecified input to the OS2ECP function. This is related to ...
CVE-2016-1639
Use-after-free vulnerability in browser/extensions/api/webrtcaudioprivate/webrtcaudioprivateapi.cc in the WebRTC Audio Private API implementation in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging...
CVE-2016-1634
Use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/StyleResolver.cpp in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted...
CVE-2016-1635
extensions/renderer/renderframeobservernatives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy issues during OnDocumentElementCreated handling, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecifie...
Fedora 23 : qemu-2.4.0.1-1.fc23 (2015-ca9f0952f1)
Rebased to version 2.4.0.1 CVE-2015-7295: virtio-net possible remote DoS bz 1264393 drive-mirror: Fix coroutine reentrance bz 1266936 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...
FreeProxy Internet Suite 4.10 - Denial of Service
Exploit Title: Freeproxy Internet Suite 4.10 Remote DoS Date: 01/03/2016 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: https://networkfilter.blogspot.com GitHub: https://github.com/gkweb76/exploits Vendor Homepage: http://www.handcraftedsoftware.org/ Software Link:...
PT-2016-1325
Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack affected versions not specified Description The issue is caused by a stack-based buffer overflow. Exploitation of this issue may allow a remote attacker to cause a denial of service. Recommendations At the...
PT-2016-1327
Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack affected versions not specified Description The issue is caused by a stack-based buffer overflow. Exploitation of this issue may allow a remote attacker to cause a denial of service. Recommendations At the...
CVE-2016-2532: Improper Restriction of Operations within the Bounds of a Memory Buffer
The dissectllrpparameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 does not limit the recursion depth, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted...
CVE-2016-2571
http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a denial of service assertion failure and daemon exit via a malformed response...