Denial of Service Vulnerability in Kunlun Tongstate MCGS Touch Panel TPC1062Ti System

MCGS is a set of Windows-based configuration software system developed by Beijing Kunlun Automation Software Technology Co., Ltd. which is used to quickly construct and generate the monitoring system of the upper computer, and it mainly accomplishes the acquisition and monitoring of on-site data ...

Metasploit HTTP(S) handler DoS

This module exploits the Metasploit HTTPS handler by sending a specially crafted HTTP request that gets added as a resource handler. Resources which come from the external connections are evaluated as RegEx in the handler server. Specially crafted input can trigger Gentle, Soft and Hard DoS. Test...

CVE-2019-5994

Buffer overflow in PTP Picture Transfer Protocol of EOS series digital cameras EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware...

Duplicate Advisory: Regular Expression Denial of Service in braces

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-cwfw-4gq5-mrqx. This link is maintained to preserve external references. Original Description Versions of braces prior to 2.3.1 are vulnerable to Regular Expression Denial of Service ReDoS. Untrusted input may...

CVE-2019-0222

In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive...

Regular Expression Denial of Service

Overview Versions of highcharts prior to 6.1.0 are vulnerable to Regular Expression Denial of Service ReDoS. Untrusted input may cause catastrophic backtracking while matching regular expressions. This can cause the application to be unresponsive leading to Denial of Service. Recommendation Upgra...

CVE-2019-5419

There is a possible denial of service vulnerability in Action View Rails 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive...

CVE-2019-5419

There is a possible denial of service vulnerability in Action View Rails 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive...

CVE-2018-6977

VMware ESXi 6.7, 6.5, 6.0, Workstation 15.x and 14.x and Fusion 11.x and 10.x contain a denial-of-service vulnerability due to an infinite loop in a 3D-rendering shader. Successfully exploiting this issue may allow an attacker with normal user privileges in the guest to make the VM unresponsive,...

The vulnerability of the Core component of the VirtualBox virtualization software allows a hacker to trigger a service failure.

The vulnerability of the Core component of the VirtualBox virtualization software is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected data, cause the device to become unresponsive, or lead to service failure...

Microsoft Windows FTP Server Denial of Service Vulnerability

Microsoft Windows 7, etc. are a series of operating systems from Microsoft, U.S.A. Windows FTP Server is one of the FTP File Transfer Protocol servers. A denial of service vulnerability exists in Microsoft Windows FTP Server, which arises from the program's failure to properly handle File Transfe...

Security Bulletin: IBM Tivoli Monitoring CPU utilization (CVE-2014-0963)

Summary IBM Tivoli Monitoring is affected by a problem related to the SSL implementation which, under very specific conditions, can cause CPU utilization to rapidly increase. Vulnerability Details CVE ID: CVE-2014-0963 DESCRIPTION: IBM Tivoli Monitoring is affected by a problem with the handling ...

Security Bulletin: IBM Security Access Manager for Web High CPU utilization (CVE-2014-0963)

Summary The Reverse Proxy component in all versions of IBM Security Access Manager for Web is affected by a problem in which, under very specific conditions, CPU utilization can rapidly increase and not decrease. This issue is related to the SSL implementation in IBM Security Access Manager ISAM...

Security Bulletin: IBM® DB2® is impacted by multiple TLS/SSL security vulnerabilities (CVE-2013-6747, CVE-2014-0963)

Summary IBM DB2 for Linux, Unix and Windows is affected by multiple problems related to the SSL implementation, which, under very specific conditions, can cause DB2 server to become unresponsive, hang or crash. By default, DB2 does not use TLS/SSL for client-server communication and therefore,...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20180522) (Spectre)

Security Fixes : - An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged...

Security Advisory - DoS Vulnerability in Some Huawei MBB Products

Some Huawei MBB Mobile Broadband products have a Denial of Service DoS vulnerability. When an attacker accessing device sends special http request to device, the webserver process will try to apply too much memory which can cause the device to become unable to respond. An attacker can launch a Do...

CVE-2017-10897

Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...

Code injection

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive...

CVE-2017-14339

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive...

CVE-2017-14339

YADIFA DNS server (versions before 2.2.6) is affected by CVE-2017-14339 due to a DNS packet parser that does not detect infinite pointer loops, enabling an attacker to cause an infinite loop with high CPU usage and a non-responsive server. The issue is resolved in 2.2.6; affected systems should u...