3524 matches found
CVE-2013-0285
The nori gem 2.0.x before 2.0.2, 1.1.x before 1.1.4, and 1.0.x before 1.0.3 for Ruby does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption involving...
Type confusion
The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for 1 YAML type...
Type confusion
The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for YAML type...
CVE-2013-1802
CVE-2013-1802 concerns the extlib gem for Ruby (0.9.15 and earlier). The vulnerability arises from improper restriction of casts of string values, allowing object-injection and potentially arbitrary code execution or denial of service via YAML type conversion or Symbol type conversion, similar to...
CVE-2013-1801
Technical details for CVE-2013-1801 are not publicly available in the provided documents. No vendor/product/version specifics or remediation are disclosed here. Monitor for updates from official sources to obtain concrete details and fixes.
CVE-2013-1800
The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for 1 YAML type...
CVE-2013-1802
The extlib gem 0.9.15 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for 1 YAML typ...
FreeBSD : libxml2 -- cpu consumption Dos (843a4641-9816-11e2-9c51-080027019be0)
Kurt Seifried reports : libxml2 is affected by the expansion of internal entities which can be used to consume resources and external entities which can cause a denial of service against other services, be used to port scan, etc... %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Easy FTP Server 1.7.0.2 Denial Of Service
Region ; Directives created by AutoIt3WrapperGUI AutoIt3WrapperOutfile=smdcpu.exe AutoIt3WrapperUseUpx=n AutoIt3WrapperChange2CUI=y EndRegion ; Directives created by AutoIt3WrapperGUI include "WinHttp.au3" include cs easyftpsvr-1.7.0.2 CPU consumption exploit. The vulnerability is due...
CVE-2013-0316
Removed by vendor...
CentOS Update for libxml2 CESA-2013:0581 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RedHat Update for libxml2 RHSA-2013:0581-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for libxml2 CESA-2013:0581 centos5
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS 5 / 6 : libxml2 (CESA-2013:0581)
Updated libxml2 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
libxml2 security update
CentOS Errata and Security Advisory CESA-2013:0581 Updated libxml2 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS...
RHEL 5 / 6 : libxml2 (RHSA-2013:0581)
Updated libxml2 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
Moderate: Red Hat Security Advisory: libxml2 security update
Updated libxml2 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
CVE-2013-1133
Cisco Unified Communications Manager CUCM 8.6 before 8.62asu2, 8.6 BE3k before 8.64 BE3k, and 9.x before 9.01 allows remote attackers to cause a denial of service CPU consumption and GUI and voice outages via malformed packets to unused UDP ports, aka Bug ID CSCtx43337...
Code injection
Cisco Unified Communications Manager CUCM 8.6 before 8.62asu2, 8.6 BE3k before 8.64 BE3k, and 9.x before 9.01 allows remote attackers to cause a denial of service CPU consumption and GUI and voice outages via malformed packets to unused UDP ports, aka Bug ID CSCtx43337...
CVE-2013-1133
Cisco Unified Communications Manager CUCM 8.6 before 8.62asu2, 8.6 BE3k before 8.64 BE3k, and 9.x before 9.01 allows remote attackers to cause a denial of service CPU consumption and GUI and voice outages via malformed packets to unused UDP ports, aka Bug ID CSCtx43337...