Xen Denial of Service Vulnerability (CNVD-2016-03844)

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in X...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2016-03716)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting vulnerability exists in...

Cybozu Garoon Information Disclosure Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A security vulnerability exists ...

UBUNTU-CVE-2015-5715

The mweditPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access restrictions, and arrange for a private post to be published and sticky, via unspecified vectors...

Apache Cordova fails to restrict access permissions

Overview Apache Cordova contains a vulnerability where whitelist restrictions are not properly applied. Apache Cordova provided by the Apache Software Foundation is a framework for creating mobile applications for various platforms. iOS applications built using Apache Cordova contain a...

ntpd System Time Modification Vulnerability

ntpd is an operating system daemon that uses the Network Time Protocol to keep synchronized with the system time of a time server. A security vulnerability in ntpd exists when the program uses trustedkey and does not have the feature introduced in ntp-4.2.8p6 enabled, allowing a remote attacker t...

PT-2016-4857 · Ntp +8 · Ntp +10

Name of the Vulnerable Software and Affected Versions: ntp versions 4.2.8p4 NTPSec version a5fb34b9cc89b92a8fef2f459004865c93bb7f92 Description: An issue exists in the message authentication functionality of libntp, allowing an attacker to send crafted messages in an attempt to recover the messag...

Silicon Graphics LibTiff tiff2bw Tool Denial of Service Vulnerability

Silicon Graphics LibTiff is the United States Silicon Graphics, Inc. of a read and write TIFF Tagged Image File Format file library. A denial of service vulnerability exists in the tifread.c file in the Silicon Graphics LibTiff 4.0.6 and earlier versions of the tiff2bw tool. An attacker can explo...

Silicon Graphics LibTiff rgb2ycbcr Tool Denial of Service Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. A denial of service vulnerability exists in the 'cvtClump' function in the rgb2ycb...

CVE-2016-2342

The bgpnlriparsevpnv4 function in bgpmplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 configuration is used, relies on a Labeled-VPN SAFI routes-data length field during a data copy, which allows remote attackers to execute arbitrary code or cause a...

Cisco Nexus 9000 Application Centric Infrastructure Mode Denial of Service Vulnerability

The Cisco Nexus 9000 Application Centric Infrastructure ACI Mode is a Cisco 9000 Series switch for Application Centric Infrastructure ACI applications. A security vulnerability in Cisco Nexus 9000 Series ACI Mode Switches using software versions prior to 11.01c can be exploited by a remote attack...

Squid Denial of Service Vulnerability (CNVD-2016-01441)

Squid full name Squid Cache is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security vulnerability exists in the Edge Side Includes ESI parser in Squid versions 3.x prior...

Squid Denial of Service Vulnerability (CNVD-2016-01443)

Squid full name Squid Cache is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security vulnerability exists in the http.cc file in versions 4.x prior to Squid 4.0.7, which...

NHN PlayArt LINE Denial of Service Vulnerability

NHN PlayArt LINE is a suite of live chat software from the Japanese company NHN PlayArt. A denial of service vulnerability exists in NHN PlayArt LINE version 4.3.1 and prior versions, which allows a remote, authenticated user to cause a denial of service application crash by exploiting the...

The vulnerability of the Solaris operating system, which allows a hacker to trigger a service failure

The vulnerability of the NFSv4 subsystem of the Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause the operating system to become unresponsive, or in rare cases, to cause an emergency shutdown through NFS requests...

Oracle Solaris NFSv4 Component Denial of Service Vulnerability (CNVD-2016-00502)

Solaris is a unix-based operating system. A security vulnerability exists in the Solaris NFSv4 component, which allows remote attackers to exploit the vulnerability to submit a special request to initiate a denial-of-service attack...

CVE-2016-0440

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related to NFSv4...

Xen Denial of Service Vulnerability (CNVD-2016-00238)

Xen is a virtualization technology developed by the University of Cambridge that can be used in the Linux kernel, allowing multiple operating systems to run simultaneously. A denial of service vulnerability exists in Xen 4.6 that allows local attackers to cause a denial of service via a heavily...

UBUNTU-CVE-2015-8714

The dissectdcomOBJREF function in epan/dissectors/packet-dcom.c in the DCOM dissector in Wireshark 1.12.x before 1.12.9 does not initialize a certain IPv4 data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

ISC Kea kea-dhcp4 and kea-dhcp6 Server Denial of Service Vulnerabilities

ISC Kea is an open source DHCPv4 and DHCPv6 server developed by ISC Internet Systems Consortium. A security vulnerability exists in ISC Kea's kea-dhcp4 and kea-dhcp6 servers, versions 0.9.2 and 1.0.0-beta. A remote attacker can exploit the vulnerability by sending malformed packets to cause a...