UBUNTU-CVE-2015-3227

The 1 jdom.rb and 2 rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2.x before 4.2.2, when JDOM or REXML is enabled, allow remote attackers to cause a denial of service SystemStackError via a large XML document depth...

CVE-2015-5357: Undefined Security Weakness

The Juniper EX4600, QFX3500, QFX3600, and QFX5100 switches with Junos 13.2X51-D15 through 13.2X51-D25, 13.2X51 before 13.2X51-D30, and 14.1X53 before 14.1X53-D10 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors...

PT-2015-4840

Name of the Vulnerable Software and Affected Versions Cisco Videoscape Distribution Suite Service Broker aka VDS-SB versions prior to 3.3.1 R7 Cisco Videoscape Distribution Suite for Internet Streaming aka VDS-IS or CDS-IS versions prior to 4.0.0 R4 Description The issue allows remote attackers t...

PT-2015-6972

Name of the Vulnerable Software and Affected Versions tidy versions prior to 4.9.31 Description The issue allows remote attackers to cause a denial of service crash via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation. This occurs due...

PT-2015-3591

Name of the Vulnerable Software and Affected Versions SQLite version 3.8.2 Description A buffer overflow issue exists in the skip-scan optimization, allowing remote attackers to cause a denial of service by crashing the system via crafted SQL statements. Recommendations For SQLite version 3.8.2,...

PT-2015-1638

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 10.51.99995.9 Description The issue is related to resource management errors in the system. It may allow a remote attacker to cause a denial of service by sending multiple requests. Recommendations...

CVE-2015-3279: Undefined Security Weakness

Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow...

CVE-2015-4240: Undefined Security Weakness

Cisco IP Communicator 8.64 allows remote attackers to cause a denial of service service outage via an unspecified URL in a GET request, aka Bug ID CSCuu37656...

CVE-2015-3204: Improper Input Validation

libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service daemon restart via an IKEv1 packet with 1 unassigned bits set in the IPSEC DOI value or 2 the next payload value set to ISAKMPNEXTSAK...

CVE-2015-1954: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service daemon crash via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948,...

CVE-2015-1962: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service daemon crash via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948,...

PT-2015-5007

Name of the Vulnerable Software and Affected Versions PACTware version 4.1 SP3 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by using a crafted file that triggers an internal error. Recommendations For PACTware...

CVE-2015-4191: Undefined Security Weakness

Cisco IOS XR 5.2.1 allows remote attackers to cause a denial of service ipv6io service reload via a malformed IPv6 packet, aka Bug ID CSCuq95565...

CVE-2015-1788

OpenSSL CVE-2015-1788 affects BN_GF2m_mod_inv in bn_gf2m.c and occurs when ECParameters specify a curve over a malformed binary polynomial field. This can allow a remote attacker to cause a denial-of-service (infinite loop) on a server or client that uses Elliptic Curve algorithms. The issue is f...

CVE-2015-0769: Undefined Security Weakness

Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service NPU ASIC scan and line-card reload via crafted IPv6 extension headers, aka Bug ID CSCtx03546...

CVE-2015-4024: Undefined Security Weakness

Algorithmic complexity vulnerability in the multipartbufferheaders function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service CPU consumption via crafted form data that triggers an improper order-of-growth...

CVE-2015-0743: Undefined Security Weakness

Cisco Headend System Release allows remote attackers to cause a denial of service DHCP and TFTP outage via a flood of crafted UDP traffic, aka Bug ID CSCus04097...

CVE-2015-0756: Improper Input Validation

Cisco Wireless LAN Controller WLC devices with software 7.41.1 allow remote attackers to cause a denial of service wireless-networking outage via crafted TCP traffic on the local network, aka Bug ID CSCug67104...

CVE-2015-1157: Undefined Security Weakness

CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service reboot and messaging disruption via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in 1 an SMS message or 2 a...

CVE-2014-8926: Undefined Security Weakness

Common Inventory Technology CIT before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5 allows remote attackers to cause a denial of service CPU consumption or application crash via a...