CVE-2014-8020: Undefined Security Weakness

Cisco Unified Communication Domain Manager Platform Software allows remote attackers to cause a denial of service CPU consumption, and performance degradation or service outage via a flood of malformed TCP packets and UDP packets, aka Bug ID CSCup25276...

CVE-2014-9221

strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service invalid pointer dereference via a crafted IKEv2 Key Exchange KE message with Diffie-Hellman DH group 1025...

CVE-2014-9221: Undefined Security Weakness

strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service invalid pointer dereference via a crafted IKEv2 Key Exchange KE message with Diffie-Hellman DH group 1025...

PT-2014-9062

Name of the Vulnerable Software and Affected Versions ImageMagick version 6.8.9.9 Description A logic error in the software allows remote attackers to cause a denial of service through resource consumption. Recommendations For version 6.8.9.9, update to a newer version that contains a fix for thi...

CVE-2011-4720: Improper Input Validation

Hillstone HS TFTP Server 1.3.2 allows remote attackers to cause a denial of service daemon crash via a long filename in a 1 RRQ or 2 WRQ operation...

CVE-2010-1441

Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted byte stream to the 1 A/52, 2 DTS, or 3 MPEG Audio decoder...

CVE-2011-1796

Use-after-free vulnerability in the FrameView::calculateScrollbarModesForLayout function in page/FrameView.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via crafted...

PT-2017-3928

Name of the Vulnerable Software and Affected Versions libical version 1.0 Thunderbird affected versions not specified Description The issue allows remote attackers to cause a denial of service. It is related to a use-after-free error, which can be triggered by a crafted ics file. The vulnerabilit...

PT-2014-2116

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 11.0.696.65 Description The issue is related to an integer overflow in the FilterEffect::copyImageBytes function in the SVG filter implementation. This can be exploited by remote attackers using crafted...

CVE-2014-9380

The dissectorcvs function in dissectors/eccvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service out-of-bounds read via a packet containing only a CVSLOGIN signature...

CVE-2014-8016: Undefined Security Weakness

The Cisco IronPort Email Security Appliance ESA allows remote attackers to cause a denial of service CPU consumption via long Subject headers in e-mail messages, aka Bug ID CSCzv93864...

PT-2014-7209

Name of the Vulnerable Software and Affected Versions Ettercap versions prior to 0.8.1 Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted password length. This is triggered by writing a 0 character to an arbitrary memory...

PT-2014-8427

Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description The issue is related to a double free vulnerability in the jas iccattrval destroy function. This vulnerability allows remote attackers to cause a denial of service crash or possibly execute...

CVE-2014-8117

softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service CPU consumption or crash via unspecified vectors...

CVE-2014-8117: Undefined Security Weakness

softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service CPU consumption or crash via unspecified vectors...

PT-2014-8329

Name of the Vulnerable Software and Affected Versions HP OpenVMS TCP/IP versions 5.7 before ECO5 Description The issue is related to multiple unspecified vulnerabilities in the POP implementation. These vulnerabilities allow remote attackers to cause a denial of service via unspecified vectors...

CVE-2014-6259: Undefined Security Weakness

Zenoss Core through 5 Beta 3 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, aka ZEN-15414, a similar issue to...

SuSE 11.3 Security Update : shim (SAT Patch Number 9997)

shim has been updated to fix three security issues : - OOB read access when parsing DHCPv6 packets remote DoS. CVE-2014-3675 - Heap overflow when parsing IPv6 addresses provided by tftp:// DHCPv6 boot option RCE. CVE-2014-3676 - Memory corruption when processing user provided MOK lists...

CVE-2014-8124

OpenStack Dashboard Horizon before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page...

CVE-2014-9374

Double free vulnerability in the WebSocket Server reshttpwebsocket module in Asterisk Open Source 11.x before 11.14.2, 12.x before 12.7.2, and 13.x before 13.0.2 and Certified Asterisk 11.6 before 11.6-cert9 allows remote attackers to cause a denial of service crash by sending a zero length frame...