Buffer overflow

Buffer overflow in RDISERVER in Honeywell Uniformance Process History Database PHD R310, R320, and R321 allows remote attackers to cause a denial of service service outage via unspecified vectors...

CVE-2016-2280

This CVE describes a stack-based buffer overflow in Honeywell Uniformance PHD’s Network.dll used by RDISERVER, RAPIServer, apiserver, and UDBServer. According to ICS-CERT Update A, vulnerable versions include Uniformance PHD releases prior to R310.1.1.2, R320.1.0.2, and R321.1.1. Exploitation cou...

CVE-2016-2280

Buffer overflow in RDISERVER in Honeywell Uniformance Process History Database PHD R310, R320, and R321 allows remote attackers to cause a denial of service service outage via unspecified vectors...

CVE-2015-8149

The CVE-2015-8149 entry concerns Symantec Encryption Management Server (SEMS) LDAP service. Affects SEMS 3.3.2 prior to MP12; the LDAP service can be exploited remotely by sending crafted LDAP requests to trigger heap memory corruption and a service outage (DoS). The issue is described as a remot...

CVE-2015-8149

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to cause a denial of service heap memory corruption and service outage via crafted requests...

nginx denial of service vulnerability (CNVD-2016-00961)

nginx is an HTTP and reverse proxy server that can also be used as a mail proxy server. A security vulnerability exists in nginx that allows remote attackers to submit special requests for denial of service attacks...

The vulnerability of the Oracle Database database management system allows a hacker to cause a partial service outage.

The vulnerability of the XDB component—the XML Database component of the Oracle Database management system—is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a partial service failure through network packets...

CVE-2015-8027

Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service uncaughtException and service outage via a pipelined HTTP request...

CVE-2015-8027

Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service uncaughtException and service outage via a pipelined HTTP request...

CVE-2015-6285

Format string vulnerability in Cisco Email Security Appliance ESA 7.6.0 and 8.0.0 allows remote attackers to cause a denial of service memory overwrite or service outage via format string specifiers in an HTTP request, aka Bug ID CSCug21497...

CVE-2015-6285

CVE-2015-6285 describes a format-string vulnerability in Cisco Email Security Appliance (ESA) 7.6.0 and 8.0.0 that can be exploited remotely by sending crafted HTTP requests to trigger a DoS (memory overwrite or service outage). The issue stems from improper handling/validation of format specifie...

Denial of service

Active Directory in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service service outage by creating multiple machine accounts, aka "Active Directory Denial of Service Vulnerability."...

Code injection

Cisco Videoscape Policy Resource Manager PRM 3.5.4 allows remote attackers to cause a denial of service CPU and memory consumption, and TCP service outage via 1 a SYN flood or 2 another type of TCP traffic flood, aka Bug IDs CSCuu35104 and CSCuu35128...

CVE-2015-4280

Cisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service HTTP service outage via a crafted HTTP request, aka Bug ID CSCum38844...

CVE-2015-0744

Cisco DTA Control System DTACS 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service CPU and memory consumption, and TCP service outage via 1 a SYN flood or 2 another type of TCP traffic flood, aka Bug IDs CSCus50642, CSCus50662, CSCus50625, CSCus50657, and...

Code injection

IBM Curam Social Program Management SPM 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.6 requires failed-login handling for web-service accounts to have the same lockout policy as for standard user accounts, which makes it easier for remote attackers to caus...

CVE-2015-0672

The DHCPv4 server in Cisco IOS XR 5.2.2 on ASR 9000 devices allows remote attackers to cause a denial of service service outage via a flood of crafted DHCP packets, aka Bug ID CSCup67822...

Microsoft Says 'Technical Error' Led to Legitimate No-IP Customers Losing Service

In the course of its actions to take down a major malware operation, Microsoft seized more than 20 domains from No-IP.com, a hosting provider in Nevada. Microsoft now admits that the company made a technical mistake as part of that takedown, an errors that resulted in legitimate No-IP.com custome...

SpyNet 6.5 Chat Server Multiple Connection Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2701/info Spynet Chat Server is a freely available client-server chat package by Spytech Software. Spynet Chat offers IRC style chat to users of the software package. A problem in the package could allow remote users to...

Microsoft Seized No-IP Domains, Millions of Dynamic DNS Service Users Suffer Outage

In an effort to crackdown on cyber crimes, Microsoft has taken a legal action against a malware network what it thought is responsible for more than 7.4 million infections of Windows PCs across the globe. Millions of legitimate servers that rely on Dynamic Domain Name Service DDNS from No-IP.com,...