CVE-2016-9966

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7120...

CVE-2016-9965

CVE-2016-9965 concerns a denial-of-service/privilege-escalation risk in Samsung Note devices. The connected CNVD-2016-13011 and related entries describe a vulnerability in the Telecom application’s receiver on Note devices running Android L/5.x, M/6.x, and N/7.0, arising from improper exception h...

CVE-2016-9967

CVE-2016-9967 affects the Telecom application receiver component on Samsung Note smartphones running Android L (5.0/5.1), M (6.0), and N (7.0). The issue is a lack of proper exception handling in those receivers, which can crash the system and potentially allow privilege escalation. The Samsung i...

CVE-2016-9965

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7119...

GitLab: SSRF via git Repo by URL Abuse

Hi team , First things first, awesome work with As a poc i simply port forwarded port 4444 on my router and started simple HTTP server and listened on 4444 to check for incoming connections, by doing the steps mentioned above i got a GET request from 40.84.0.225 , images for the same are attached...

Information disclosure

A vulnerability in the Active Directory integration component of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to perform a denial of service DoS attack. More Information: CSCuw15041. Known Affected Releases: 1.21.199...

CVE-2016-9198

Cisco Identity Services Engine (ISE) Active Directory integration is vulnerable to a DoS via improper handling of PAP authentication requests. The issue allows an unauthenticated, remote attacker to affect authentication requests for subsequent attempts within the same Active Directory domain. Af...

CVE-2016-9198

A vulnerability in the Active Directory integration component of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to perform a denial of service DoS attack. More Information: CSCuw15041. Known Affected Releases: 1.21.199...

TP-LINK TD-W8951ND Denial of Service Vulnerability

TP-LINK TD-W8951ND is a wireless router product. A denial of service vulnerability exists in TP-LINK TD-W8951ND. The vulnerability allows attackers to launch denial of service attacks...

CVE-2016-9863

An issue was discovered in phpMyAdmin. With a very large request to table partitioning function, it is possible to invoke a Denial of Service DoS attack. All 4.6.x versions prior to 4.6.5 are affected...

CVE-2016-6623

An issue was discovered in phpMyAdmin. An authorized user can cause a denial-of-service DoS attack on a server by passing large values to a loop. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

Design/Logic Flaw

An issue was discovered in phpMyAdmin. The transformation feature allows a user to trigger a denial-of-service DoS attack against the server. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

Design/Logic Flaw

An issue was discovered in phpMyAdmin. An unauthenticated user is able to execute a denial-of-service DoS attack by forcing persistent connections when phpMyAdmin is running with $cfg'AllowArbitraryServer'=true. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versio...

CVE-2016-9863

An issue was discovered in phpMyAdmin. With a very large request to table partitioning function, it is possible to invoke a Denial of Service DoS attack. All 4.6.x versions prior to 4.6.5 are affected...

CVE-2016-6630

An issue was discovered in phpMyAdmin. An authenticated user can trigger a denial-of-service DoS attack by entering a very long password at the change password dialog. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

CVE-2016-6630

CVE-2016-6630 describes a DoS in phpMyAdmin triggered by an authenticated user who enters a very long password in the Change password dialog. Affected are phpMyAdmin 4.6.x before 4.6.4, 4.4.x before 4.4.15.8, and 4.0.x before 4.0.10.17. Connected documents corroborate the vulnerability in multipl...

CVE-2016-6618

CVE-2016-6618 affects phpMyAdmin: the transformation feature can trigger a denial-of-service on the server. Affected are all 4.6.x versions before 4.6.4, all 4.4.x versions before 4.4.15.8, and all 4.0.x versions before 4.0.10.17. The vulnerability is due to the transformation functionality, lead...

CVE-2016-9863

An issue was discovered in phpMyAdmin. With a very large request to table partitioning function, it is possible to invoke a Denial of Service DoS attack. All 4.6.x versions prior to 4.6.5 are affected...

CVE-2016-9907

Quick Emulator Qemu built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredirhandledestroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host...

MGASA-2016-0397 Updated perl-Email-Address packages fix security vulnerability

Pali Rohár discovered a possible DoS attack in any software which uses the Email::Address Perl module for parsing string input to a list of email addresses. Note that this issue has only been partially mitigated in Email::Address itself...