CVE-2015-6377: Undefined Security Weakness

Cisco Virtual Topology System VTS 2.00 and 2.01 allows remote attackers to cause a denial of service CPU and memory consumption, and TCP port outage via a flood of crafted TCP packets, aka Bug ID CSCux13379...

PT-2015-7210

Name of the Vulnerable Software and Affected Versions Cisco Virtual Topology System VTS versions 2.00 through 2.01 Description The issue allows remote attackers to cause a denial of service, resulting in CPU and memory consumption, and TCP port outage, via a flood of crafted TCP packets...

libssh2 security and bug fix update

1.4.3-10 - check length of data extracted from the SSHMSGKEXINIT packet CVE-2015-1782 1.4.3-9 - curl consumes too much memory during scp download 1080459 - prevent a not-connected agent from closing STDIN 1147717...

Moderate: Red Hat Security Advisory: python security, bug fix, and enhancement update

Updated python packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

Low: Red Hat Security Advisory: libssh2 security and bug fix update

Updated libssh2 packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2015-7419

IBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 allows remote attackers to cause a denial of service memory consumption via crafted requests...

Code injection

IBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 allows remote attackers to cause a denial of service memory consumption via crafted requests...

CVE-2015-7419

IBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 allows remote attackers to cause a denial of service memory consumption via crafted requests...

CVE-2015-7419

The CVE-2015-7419 issue affects IBM WebSphere Portal versions 8.0.0.1 before CF19 and 8.5.0 before CF09, where crafted requests can cause memory consumption leading to a denial of service. The vulnerability originates in WebSphere Portal’s handling of certain requests, enabling remote attackers t...

PT-2015-7552

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 8.0.0.1 before CF19 IBM WebSphere Portal versions 8.5.0 before CF09 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, via crafted requests. Recommendation...

CVE-2015-7419: Undefined Security Weakness

IBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 allows remote attackers to cause a denial of service memory consumption via crafted requests...

Design/Logic Flaw

The proxy-cache implementation in Cisco AsyncOS 8.0.x before 8.0.7-151, 8.1.x and 8.5.x before 8.5.2-004, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance WSA devices allows remote attackers to cause a denial of service memory consumption via multiple prox...

CVE-2015-6292

The proxy-cache implementation in Cisco AsyncOS 8.0.x before 8.0.7-151, 8.1.x and 8.5.x before 8.5.2-004, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance WSA devices allows remote attackers to cause a denial of service memory consumption via multiple prox...

CVE-2015-6293

Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance WSA devices allows remote attackers to cause a denial of service memory consumption via multiple file-range requests, aka Bug ID CSCur391...

Code injection

Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance WSA devices allows remote attackers to cause a denial of service memory consumption via multiple file-range requests, aka Bug ID CSCur391...

CVE-2015-6291

Cisco AsyncOS before 8.5.7-043, 9.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-046 on Email Security Appliance ESA devices mishandles malformed fields during body-contains, attachment-contains, every-attachment-contains, attachment-binary-contains, dictionary-match, and...

CVE-2015-6293

Cisco Web Security Appliance (WSA) AsyncOS is affected by CVE-2015-6293 due to a flaw in the file-range request handling. The issue allows unauthenticated remote attackers to cause memory exhaustion and denial of service by opening multiple connections that request file ranges. Affected versions ...

CVE-2015-6321

Cisco AsyncOS contains a denial-of-service vulnerability (CVE-2015-6321) in the network stack triggered by a flood of TCP packets, leading to memory exhaustion and disruption of new TCP connections. Affected products include Cisco Email Security Appliance (ESA) on various 8.5.x–9.6.x branches, Ci...

PT-2015-7156

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA versions 8.0.x through 8.0.6 Cisco Web Security Appliance WSA versions 8.1.x Cisco Web Security Appliance WSA versions 8.5.x through 8.5.1 Cisco Web Security Appliance WSA versions 8.6.x Cisco Web Security...

PT-2015-7155

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA versions prior to 8.5.7-043 Cisco Email Security Appliance ESA versions 9.x prior to 9.1.1-023 Cisco Email Security Appliance ESA versions 9.5.x and 9.6.x prior to 9.6.0-046 Description The issue arises from...