CVE-2015-4285

The Local Packet Transport Services LPTS implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1, and 5.2.2 on ASR9k devices makes incorrect decisions about the opening of TCP and UDP ports during the processing of flow base entries, which allows remote attackers to cause a denial of service resource...

CVE-2015-4285: Undefined Security Weakness

The Local Packet Transport Services LPTS implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1, and 5.2.2 on ASR9k devices makes incorrect decisions about the opening of TCP and UDP ports during the processing of flow base entries, which allows remote attackers to cause a denial of service resource...

Debian DLA-263-1 : ruby1.9.1 security update

Two vulnerabilities were identified in the Ruby language interpreter, version 1.9.1. CVE-2012-5371 Jean-Philippe Aumasson identified that Ruby computed hash values without properly restricting the ability to trigger hash collisions predictably, allowing context-dependent attackers to cause a deni...

[SECURITY] [DLA 263-1] ruby1.9.1 security update

Package : ruby1.9.1 Version : 1.9.2.0-2+deb6u5 CVE ID : CVE-2012-5371 CVE-2013-0269 Debian Bug : 693024 700471 Two vulnerabilities were identified in the Ruby language interpreter, version 1.9.1. CVE-2012-5371 Jean-Philippe Aumasson identified that Ruby computed hash values without properly...

Null pointer dereference

unzoo allows remote attackers to cause a denial of service infinite loop and resource consumption via unspecified vectors to the 1 ExtrArch or 2 ListArch function, related to pointer handling...

CVE-2015-1846

The connected CNVD entry confirms a DoS in the unzoo package affecting the ExtrArch and ListArch functions, caused by pointer-handling issues that can be exploited remotely leading to infinite loops and resource consumption. No explicit product version, patch details, or exploit code are provided...

wireshark-qt: denial of service

CVE-2015-3808 denial of service There is an infinite loop condition in dissectlbmrpser in epan/dissectors/packet-lbmr.c. It's possible for an attacker to set the the variable 'optionlen' to 0, causing the loop to never terminate. This issue is leading to excessive CPU resources consumption by...

PT-2015-6330

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.4 Description The issue is related to the WebSocket dissector in Wireshark, where a recursive algorithm is used. This allows remote attackers to cause a denial of service by consuming CPU resources via a...

DLA-215-1 libjson-ruby - security update

Bulletin has no description...

Hardcoded credentials

The LIXIL Corporation My SATIS Genius Toilet application for Android has a hardcoded Bluetooth PIN, which allows physically proximate attackers to trigger physical resource consumption water or heat or user discomfort...

CVE-2013-4866

The LIXIL Corporation My SATIS Genius Toilet application for Android has a hardcoded Bluetooth PIN, which allows physically proximate attackers to trigger physical resource consumption water or heat or user discomfort...

CVE-2013-4866

CVE-2013-4866 affects the LIXIL My SATIS Genius Toilet Android app and its Bluetooth interface. The Android app contains a hard-coded Bluetooth PIN (noted in public advisories as 0000), enabling physically proximate attackers to use the app to control the toilet and trigger resource consumption (...

PT-2015-3548

Name of the Vulnerable Software and Affected Versions LIXIL Corporation My SATIS Genius Toilet application for Android affected versions not specified Description The issue concerns a hardcoded Bluetooth PIN in the application, allowing physically proximate attackers to cause physical resource...

CVE-2013-4866: Undefined Security Weakness

The LIXIL Corporation My SATIS Genius Toilet application for Android has a hardcoded Bluetooth PIN, which allows physically proximate attackers to trigger physical resource consumption water or heat or user discomfort...

Mandriva Linux Security Advisory : batik (MDVSA-2015:203)

Updated batik packages fix security vulnerability : Nicolas Gregoire and Kevin Schaller discovered that Batik would load XML external entities by default. If a user or automated system were tricked into opening a specially crafted SVG file, an attacker could possibly obtain access to arbitrary...

MGASA-2015-0138 Updated batik packages fix security vulnerabilities

Updated batik packages fix security vulnerability: Nicolas Gregoire and Kevin Schaller discovered that Batik would load XML external entities by default. If a user or automated system were tricked into opening a specially crafted SVG file, an attacker could possibly obtain access to arbitrary fil...

Updated batik packages fix security vulnerabilities

Updated batik packages fix security vulnerability: Nicolas Gregoire and Kevin Schaller discovered that Batik would load XML external entities by default. If a user or automated system were tricked into opening a specially crafted SVG file, an attacker could possibly obtain access to arbitrary fil...

DSA-3205-1 batik - security update

Bulletin has no description...

USN-2548-1: Batik vulnerability

Nicolas Gregoire and Kevin Schaller discovered that Batik would load XML external entities by default. If a user or automated system were tricked into opening a specially crafted SVG file, an attacker could possibly obtain access to arbitrary files or cause resource consumption...

CVE-2015-0671

The DNS implementation in Cisco Videoscape Distribution Suite for Internet Streaming VDS-IS 3.21 allows remote attackers to cause a denial of service CPU consumption and network-resource consumption via crafted packets, aka Bug ID CSCun15911...