4390 matches found
MaraDNS 1.2.12.06 / 1.3.05 Wildcard Resource Record Remote DoS
According to its self-reported version number, the MaraDNS server running on the remote host is affected by a memory leak issue when handling wildcard records. This issue could allow a remote attacker to cause a remote denial of service by querying for wildcard records. Note that issue only affec...
CVE-2014-2742: Undefined Security Weakness
Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service resource consumption via a crafted XMPP stream, aka an "xmppbomb" attack...
MaraDNS 1.2.x < 1.2.12.05 / 1.3.x < 1.3.03 IPv6 Memory Leak Remote DoS
According to its self-reported version number, the MaraDNS server running on the remote host is affected by a memory leak issue due to improperly deallocating memory in the IPv6 code. This issue could allow a remote attacker to cause a remote denial of service via memory exhaustion by sending lar...
CVE-2014-1718
Integer overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser/rendererhost/softwareframemanager.cc in the software compositor in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors...
PT-2014-1070
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 34.0.1847.116 Description The issue is related to an integer overflow in the SoftwareFrameManager::SwapToNewFrame function in the software compositor. This allows remote attackers to cause a denial of service or...
PT-2014-3843
Name of the Vulnerable Software and Affected Versions Schneider Electric OPC Factory Server OFS versions 3.5 and earlier Description The issue is related to multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control. This can be exploited by remote attackers to cause a deni...
CVE-2014-0050: Undefined Security Weakness
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted Content-Type header that bypasses a loop's intended exit conditions...
CVE-2014-2109: Improper Input Validation
The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service memory consumption or device reload via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494...
PT-2014-3724
Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x before 4.0.5 Description The server does not properly process certificate chains, which allows remote attackers to cause a denial of service daemon crash via unspecified vectors...
CVE-2014-2252: Undefined Security Weakness
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service defect-mode transition via crafted PROFINET packets, a different vulnerability than CVE-2014-2253...
CVE-2014-2258: Undefined Security Weakness
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service defect-mode transition via crafted HTTPS packets, a different vulnerability than CVE-2014-2259...
PT-2014-1004
Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 CPU PLC devices with firmware prior to 4.0 Description The issue allows remote attackers to cause a denial of service, resulting in the device transitioning to defect mode, which lasts until a hardware reset is performe...
CVE-2014-1493: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary cod...
CVE-2014-2253: Undefined Security Weakness
Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service defect-mode transition via crafted Profinet packets...
PT-2014-4587
Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1500 CPU PLC devices versions prior to 1.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a defect-mode transition, by sending crafted HTTP packets. Recommendations For versions...
PT-2014-4309
Name of the Vulnerable Software and Affected Versions Google Chrome OS versions prior to 33.0.1750.152 Description The issue is related to the GPU driver in the kernel, allowing remote attackers to cause a denial of service or possibly have other unspecified impacts. The exact vectors used for th...
CVE-2013-6209: Undefined Security Weakness
Unspecified vulnerability in rpc.lockd in the NFS subsystem in HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service via unknown vectors...
PT-2014-2751
Name of the Vulnerable Software and Affected Versions Plone versions 2.1 through 4.1 Plone versions 4.2.x through 4.2.5 Plone versions 4.3.x through 4.3.1 Description The issue allows remote attackers with administrator privileges to cause a denial of service, resulting in an infinite loop and...
PT-2015-4378
Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.3 Description The issue allows remote attackers to cause a denial of service, specifically an infinite loop, by providing a "broken number-with-base" in a Postscript stream. This can be demonstrated with input su...
IBM WebSphere Portal Oracle Outside In Technology Component Remote DoS (PI10280)
The version of IBM WebSphere Portal on the remote host is affected by a denial of service vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid72903; scriptversion"1.9";...