CVE-2015-8084: Improper Input Validation

Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when "DHCP Snooping" is enabled and either "option82 insert" or "option82 rebuild" is enabled on an interface, allow remote attackers to cause a denial of service reboot via crafted DHC...

CVE-2015-8395

PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and...

libtorrent -- remote DoS

X-cela reports: Calls into buildbenocde that use %zu could crash on 64 bit machines due to the size change of sizet. Someone can force READENCIA to fail allowing an internalerror to be thrown and bring down the client...

CVE-2015-8364

Integer overflow in the ffiviinitplanes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service out-of-bounds heap-memory access or possibly have unspecified other impact via crafted image dimensions in...

CVE-2015-6377: Undefined Security Weakness

Cisco Virtual Topology System VTS 2.00 and 2.01 allows remote attackers to cause a denial of service CPU and memory consumption, and TCP port outage via a flood of crafted TCP packets, aka Bug ID CSCux13379...

CVE-2015-8126: Buffer Copy without Checking Size of Input

Multiple buffer overflows in the 1 pngsetPLTE and 2 pnggetPLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service application crash or possibly have...

CVE-2015-5213: Undefined Security Weakness

Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a long DOC file, which triggers a buffer overflow...

PT-2015-6845

Name of the Vulnerable Software and Affected Versions PuTTY versions prior to 0.66 Description The issue is related to an integer overflow in the terminal emulator, which can be triggered by a remote attacker using an ECH erase characters escape sequence with a large parameter value. This can cau...

PT-2015-6758

Name of the Vulnerable Software and Affected Versions IBM Security QRadar QFLOW versions 7.1.x through 7.1 MR2 Patch 11 IF2 and versions 7.2.x through 7.2.5 Patch 4 IF2 Description The issue allows remote attackers to cause a denial of service via unspecified packets. Recommendations For versions...

CVE-2015-6546: Improper Input Validation

The vCMP host in F5 BIG-IP Analytics, APM, ASM, GTM, Link Controller, and LTM 11.0.0 before 11.6.0, BIG-IP AAM 11.4.0 before 11.6.0, BIG-IP AFM and PEM 11.3.0 before 11.6.0, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.0.0 through 11.3.0, BIG-IP PSM 11.0.0 through 11.4.1 allows remote attacker...

CVE-2015-7182

Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services NSS before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service application crash or possibly...

PT-2017-9745

Name of the Vulnerable Software and Affected Versions potrace versions prior to 1.13 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and crash, via a crafted BMP image. This is due to a problem in the bm new function in bitmap.h...

CVE-2015-6482: Undefined Security Weakness

Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted request...

SUSE: Security Advisory for bind (SUSE-SU-2015:1305-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-6757

Use-after-free vulnerability in content/browser/serviceworker/embeddedworkerinstance.cc in the ServiceWorker implementation in Google Chrome before 46.0.2490.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging object destruction in a...

PT-2015-2395

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 46.0.2490.71 PDFium affected versions not specified Opera affected versions not specified Description The issue is related to a use-after-free vulnerability in the CPDFSDK PageView implementation in PDFium, whic...

CVE-2015-6332: Undefined Security Weakness

Cisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service daemon hang by sending many SSL renegotiation requests, aka Bug ID CSCuv56830...

SUSE: Security Advisory for shim (SUSE-SU-2014:1619-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2015-7070

Name of the Vulnerable Software and Affected Versions tnftpd formerly lukemftpd versions prior to 10.11 Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and daemon outage, by sending a STAT command with a crafted pattern. This can be...

CVE-2015-6310: Undefined Security Weakness

The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.51 allows remote attackers to cause a denial of service SIP proxy service restart via a crafted HTTP request, aka Bug ID CSCuw31632...