1654 matches found
Wireshark WCP Dissector 'epan/dissectors/usb.c' Remote Denial of Service Vulnerability
Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A remote denial of service vulnerability exists in Wireshark. An attacker could exploit...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.
The vulnerability of Google Chrome’s browser in the implementation of SVG components arises from the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure by using a specially crafted document...
Security update for xen (important)
The XEN hypervisor was updated to fix two security issues: - Fixed a buffer overflow in the floppy drive emulation, which could be used to denial of service attacks or potential code execution against the host. CVE-2015-3456 - Xen did not initialize certain fields, which allowed certain remote...
SUSE-SU-2015:0923-1 Security update for xen
XEN was updated to fix two security issues and bugs. Security issues fixed: CVE-2015-3340: Xen did not initialize certain fields, which allowed certain remote service domains to obtain sensitive information from memory via a 1 XENDOMCTLgettscinfo or 2 XENSYSCTLgetdomaininfolist request...
CVE-2015-3340
Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a 1 XENDOMCTLgettscinfo or 2 XENSYSCTLgetdomaininfolist request...
CVE-2015-3340
Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a 1 XENDOMCTLgettscinfo or 2 XENSYSCTLgetdomaininfolist request...
Cross site request forgery (csrf)
Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a 1 XENDOMCTLgettscinfo or 2 XENSYSCTLgetdomaininfolist request...
CVE-2015-3340
CVE-2015-3340 affects Xen 4.2.x through 4.5.x and involves uninitialized fields, allowing certain remote domains to read sensitive memory content via XEN_DOMCTL_gettscinfo or XEN_SYSCTL_getdomaininfolist. Public advisories (e.g., Debian DSA-3414) classify this as a denial of information disclosur...
CVE-2015-3340
Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a 1 XENDOMCTLgettscinfo or 2 XENSYSCTLgetdomaininfolist request...
USN-2553-1 tiff vulnerabilities
William Robinet discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user...
Cisco IOS TCP Input Module Denial of Service Vulnerability
Cisco IOS is a popular Internet operating system. A memory leak vulnerability exists in the Cisco IOS TCP input module, which allows remote attackers to conduct denial-of-service attacks via specially crafted TCP messages...
Cybozu Remote Service Manager Denial of Service Vulnerability
Cybozu Remote Service Manager is Cybozu's remote service management software for accessing Cybozu's internal systems. A security vulnerability exists in Cybozu Remote Service Manager version 2.3.0 and earlier, and version 3.x to 3.1.2. A remote attacker can exploit the vulnerability to cause a...
Design/Logic Flaw
Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a denial of service CPU consumption via vectors that trigger colliding hash-table keys. NOTE: this vulnerability exists because of an incomplete fix for...
CVE-2014-7266
Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a denial of service CPU consumption via vectors that trigger colliding hash-table keys. NOTE: this vulnerability exists because of an incomplete fix for...
CVE-2014-7266
Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a denial of service CPU consumption via vectors that trigger colliding hash-table keys. NOTE: this vulnerability exists because of an incomplete fix for...
CVE-2014-7266
CVE-2014-7266 affects Cybozu Remote Service Manager (versions 2.3.0 and 3.x up to 3.1.2). It is an algorithmic complexity DoS vulnerability caused by an incomplete fix for CVE-2014-1983, allowing remote attackers to trigger colliding hash-table keys and cause CPU exhaustion. The DoS impact is a d...
Cybozu Remote Service Manager vulnerable to denial-of-service (DoS)
Overview Remote Service Manager contains a denial-of-service DoS vulnerability. Remote Service Manager provided by Cybozu, Inc. is a software to access internal systems such as Cybozu products via "Cybozu Remote Service". Remote Service Manager contains a denial-of-service DoS vulnerability. Note...
JVN#13566542: Cybozu Remote Service Manager vulnerable to denial-of-service (DoS)
Remote Service Manager provided by Cybozu, Inc. is a software to access internal systems such as Cybozu products via "Cybozu Remote Service". Remote Service Manager contains a denial-of-service DoS vulnerability. Note that this vulnerability was caused due to an incomplete fix of JVN10319260...
EffectOffice Server 2.6 - Remote Service Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9077/info A problem has been reported the service used by EffectOffice Server. Because of this, it may be possible for a remote user to deny service to legitimate users of the software. hacker telnet telnet open to...