F5 Networks BIG-IP : Denial of service vulnerability in GnuPG (SOL6535)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL6535. The text description of this plugin is C F5 Networks...

MGASA-2014-0396 Updated squid packages fix security vulnerabilities

Updated squid packages fix security vulnerabilities: Due to incorrect buffer management Squid can be caused by an attacker to write outside its allocated SNMP buffer CVE-2014-6270. Due to incorrect bounds checking Squid pinger binary is vulnerable to denial of service or information leak attack...

Joomla Re-Issues Security Update After Patches Glitch

Users of the Joomla content management system have been on a patching roller coaster the past 24 hours with one set of patches for critical vulnerabilities being pulled last night before being re-issued today. The Joomla update, bringing the CMS up to version 3.3.6, is a security update addressin...

haproxy security update

1.5.2-3 - Fix remote client denial of service vulnerability 1138191...

PayPal Inc BB #59 - Persistent Mail Encoding Vulnerability

Document Title: =============== PayPal Inc BB 59 - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=844 PayPal Security UID: CabdfGa Release Date: ============= 2014-09-23 Vulnerability Laboratory ID VL-ID:...

September 2014 Microsoft Patch Tuesday security bulletins

The Operation SnowMan espionage campaign, which targeted military intelligence earlier this year via an Internet Explorer zero day, exposed a weak spot in Microsoft’s vulnerability management efforts. What was unique about the SnowMan operation is that it included a check as to whether the...

Debian Security Advisory DSA 3017-1 (php-cas - security update)

Marvin S. Addison discovered that Jasig phpCAS, a PHP library for the CAS authentication protocol, did not encode tickets before adding them to an URL, creating a possibility for cross site scripting. OpenVAS Vulnerability Test $Id: deb3017.nasl 6692 2017-07-12 09:57:43Z teissa $ Auto-generated...

PT-2014-5590 · Raritan Japan · Raritan Dominion Kx2-101

Name of the Vulnerable Software and Affected Versions: Raritan Japan Dominion KX2-101 switches versions prior to 2 Description: The issue allows remote attackers to cause a denial of service, resulting in a device hang, via a crafted packet. Recommendations: For versions prior to 2, update to...

MGASA-2014-0307 Updated file packages fix security vulnerability

file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service CPU consumption via a crafted file that triggers backtracking during processing of an awk rule, due to an incomplete fix for CVE-2013-7345...

MGASA-2014-0300 Updated asterisk packages fix security vulnerabilities

Updated asterisk packages fix security vulnerabilities: Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6 before 11.6-cert3 allows remote authenticated Manager users to execute arbitrary shell commands via a MixMonitor action CVE-2014-4046. Asterisk Open...

Juniper Networks Junos OS SIP ALG Denial of Service Vulnerability

DoS on SRX devices when SIP ALG is enabled SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...

Debian Security Advisory DSA 2978-1 (libxml2 - security update)

Daniel P. Berrange discovered a denial of service vulnerability in libxml2 entity substitution. OpenVAS Vulnerability Test $Id: deb2978.nasl 6724 2017-07-14 09:57:17Z teissa $ Auto-generated from advisory DSA 2978-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright:...

CVE-2014-3480

The cdfcountchain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service application crash via a crafted CDF file...

Yahoo! Messenger 4.0/5.0 - Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8523/info It has been reported that multiple PC2Phone products are prone to a remote denial of service condition. The problem is said to occur when processing excessive data passed to the programs via a UDP packet and cou...

Microsoft Windows 2000 Named Pipes Predictability Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1535/info The Service Control Manager SCM is an administrative tool in Windows 2000 which handles the creation and modification of system services such as Server, Workstation, Alerter, and ClipBook. A server-side named pi...

QQPlayer 2.3.696.400p1 (.wav) Denial of Service Vulnerability

No description provided by source. !/usr/bin/python Exploit Title: QQPlayer 2.3.696.400p1.wav Denial of Service Vulnerability Date: 07-09-2010 Author: Hadji Samir , s-Dzathotmaildotfr Software Link: www.qq.com Version: QQPlayer 2.3.696.400p1 Tested on: Windows XP sp2 CVE : Notes: Working with...

Mini FTP Server 1.1 Buffer Corruption Remote Denial of Service

No description provided by source. !/usr/bin/python Mini FTP Server 1.1 Buffer Corruption Remote Denial Of Service Exploit Vendor: webmaster442 Product web page: http://miniftpserver.codeplex.com Affected version: 1.1.1.0 Summary: Minimal FTP server for windows. Uses only managed code. Works with...

.NET Runtime Optimization Service Privilege Escalation Exploit 0day

No description provided by source. / Exploit Title: .NET Runtime Optimization Service Privilege Escalation Date: 03-07-2011 Author: XenoMuta [email protected] Version: v2.0.50727 Tested on: Windows XP sp3, 2003 R2, 7 CVE : n/a | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / /...

CiscoKits 1.0 TFTP Server DoS (write command)

No description provided by source. !/usr/bin/python Title : CiscoKits CCNA TFTP Server Denial Of Service Vulnerability Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.certificationkits.com/cisco-ccna-tftp-server/ Advisory : http://secpod.org/blog/?p=271...

Adobe Flash Player 9/10 - SWF Version Null Pointer Dereference Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31537/info Adobe Flash Player Plugin is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue will allow attackers to crash the browser that uses the plugin, denying service to legitimate...