RichFaces: remote denial of service via memory exhaustion

It was found that certain malformed requests caused RichFaces to leak memory. A remote, unauthenticated attacker could use this flaw to send a large number of malformed requests to a RichFaces application that uses the Atmosphere framework, leading to a denial of service excessive memory...

Stack overflow

Stack-based buffer overflow on Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 debugging is enabled, allows remote attackers to execute arbitrary code via malformed SNMPv3 requests...

Dell PowerConnect 6248P series switch denial of service vulnerability

Overview Dell PowerConnect 6248P series switches contain a denial of service vulnerability when parsing malformed requests. Description Dell PowerConnect 6248P series switches contain a denial of service vulnerability when parsing malformed requests which could cause the switch to crash and becom...

httpd: mod_proxy_ajp remote temporary DoS

The modproxyajp module in the Apache HTTP Server before 2.2.21, when used with modproxybalancer in certain configurations, allows remote attackers to cause a denial of service temporary "error state" in the backend server via a malformed HTTP request...

DEBIAN-CVE-2011-3348

The modproxyajp module in the Apache HTTP Server before 2.2.21, when used with modproxybalancer in certain configurations, allows remote attackers to cause a denial of service temporary "error state" in the backend server via a malformed HTTP request...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. The QSslSocketBackendPrivate::transmit function in srcnetworksslqsslsocketopenssl.cpp in Qt 4.6.3 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed request...

CA XOsoft xosoapapi.asmx Multiple Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Computer Associates XOsoft Control Replication and High Availability Control Service. Authentication is not required to exploit this vulnerability. The specific flaws exist within the...

Design/Logic Flaw

Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including 1 "missing or mismatched protocol identifier," 2 missing or negative status value," 3 "missing version," or 4 "missing or invalid status number," related t...

CVE-2009-2622

Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including 1 "missing or mismatched protocol identifier," 2 missing or negative status value," 3 "missing version," or 4 "missing or invalid status number," related t...

Buffer overflow

Multiple buffer overflows in Motorola Timbuktu Pro before 8.6.5 for Windows allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via 1 a long user name and 2 certain malformed requests; and 3 allow remote Timbuktu servers to have an unknown impact vi...

Cisco 7940 SIP IPPhones DoS

A sequence of malformed SIP requests causes device to crash...

Design/Logic Flaw

Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other versions, allow remote attackers to cause a denial of service client or server crash via malformed requests to the daemon port, 1346/udp or 1347/udp...

Lotus Domino 7.0.x8.08.5 - LDAP Message Remote Denial of Service

Lotus Domino 7.0.x8.08.5 - LDAP Message Remote Denial of Service source: https://www.securityfocus.com/bid/17669/info Lotus Domino LDAP server is prone to a remote denial-of-service vulnerability when handling malformed requests. Lotus Domino 7.0 is vulnerable; earlier versions may also be...

Lotus Domino 7.0.x/8.0/8.5 - LDAP Message Remote Denial of Service

source: https://www.securityfocus.com/bid/17669/info Lotus Domino LDAP server is prone to a remote denial-of-service vulnerability when handling malformed requests. Lotus Domino 7.0 is vulnerable; earlier versions may also be affected. UPDATE January 14, 2010: This issue is reported to be caused ...

CVE-2004-2327

CVE-2004-2327 affects Vizer Web Server 1.9.1. A remote attacker can cause a denial of service (server crash) by sending multiple malformed requests, including requests without GET, GET requests without HTTP, or excessively long GET requests. The CVSS/metrics indicate a network-exposed vector with...

CVE-2004-2327

Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service crash via multiple malformed requests including 1 requests without GET, 2 GET requests without HTTP, 3 or long GET requests...

Spinworks Application Server 3.0 - Remote Denial of Service

Spinworks Application Server 3.0 - Remote Denial of Service source: https://www.securityfocus.com/bid/12794/info A remote denial of service vulnerability affects Spinworks Application Server. This issue is due to a failure of the application to properly handle malformed requests. An attacker may...

Spinworks Application Server 3.0 - Remote Denial of Service

source: https://www.securityfocus.com/bid/12794/info A remote denial of service vulnerability affects Spinworks Application Server. This issue is due to a failure of the application to properly handle malformed requests. An attacker may leverage this issue to trigger a denial of service condition...

CVE-2004-2327

Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service crash via multiple malformed requests including 1 requests without GET, 2 GET requests without HTTP, 3 or long GET requests...

MySQL MaxDB 7.5 - WAHTTP Server Remote Denial of Service

MySQL MaxDB 7.5 - WAHTTP Server Remote Denial of Service source: https://www.securityfocus.com/bid/11843/info A remote denial of service vulnerability has been reported to affect the MySQL MaxDB WAHTTP server. This issue is due to a failure of the server to handle malformed requests. An attacker...