PT-2015-7070

Name of the Vulnerable Software and Affected Versions tnftpd formerly lukemftpd versions prior to 10.11 Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and daemon outage, by sending a STAT command with a crafted pattern. This can be...

Gentoo Security Advisory GLSA 201409-08

Gentoo Linux Local Security Checks GLSA 201409-08 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-6463

CVE-2015-6463 concerns CodeWrights HART Comm DTM components used with Endress+Hauser FieldCare. The vulnerability arises from processing a longtag XML schema containing an external entity declaration and an entity reference (XXE), enabling a remote attacker to read arbitrary files, issue HTTP req...

F5 Networks BIG-IP : Expat vulnerabilities (K16949)

CVE-2012-0876 The XML parser xmlparse.c in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via an XML file with many identifiers with the same valu...

CVE-2015-1943

IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attackers to cause a denial of service CPU and memory consumption via a crafted request...

CVE-2015-6290

Cisco Web Security Appliance WSA 8.0.7 allows remote HTTP servers to cause a denial of service memory consumption from stale TCP connections via crafted responses, aka Bug ID CSCuw10426...

Code injection

Cisco Web Security Appliance WSA 8.0.7 allows remote HTTP servers to cause a denial of service memory consumption from stale TCP connections via crafted responses, aka Bug ID CSCuw10426...

CVE-2015-6290

Cisco Web Security Appliance (WSA) version 8.0.7 contains a vulnerability (CVE-2015-6290) where an unauthenticated remote attacker can cause a denial-of-service by sending crafted HTTP responses. The root cause is improper handling of malformed HTTP server responses, leading to memory/resource ex...

CVE-2015-6290: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco Web Security Appliance WSA 8.0.7 allows remote HTTP servers to cause a denial of service memory consumption from stale TCP connections via crafted responses, aka Bug ID CSCuw10426...

CVE-2015-1943: Undefined Security Weakness

IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attackers to cause a denial of service CPU and memory consumption via a crafted request...

Updated libxml2 packages fix security vulnerabilities

Updated libxml2 packages fix security vulnerability: The xmlreader in libxml2 allows remote attackers to cause a denial of service memory consumption via crafted XML data, related to an XML Entity Expansion XEE attack CVE-2015-1819. The libxml2 package has been patched to fix this issue, as well ...

Invision Power Services IPS Community Suite Resource Management Error Vulnerability

Invision Power Services IPS Community Suite a.k.a. Invision Power Board, IPB or Power Board is a PHP and MySQL based Web forum program from Invision Power Services, Inc. A security vulnerability exists in Invision Power Services IPS Community Suite 4.0.11 and earlier versions, which can be...

Amazon Linux: Security Advisory (ALAS-2014-388)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2013-180)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2014-439)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

Invision Power Services IPS Community Suite aka Invision Power Board, IPB, or Power Board before 4.0.12.1 allows remote attackers to cause a denial of service loop and memory consumption via a crafted URL...

CVE-2015-6812: Undefined Security Weakness

Invision Power Services IPS Community Suite aka Invision Power Board, IPB, or Power Board before 4.0.12.1 allows remote attackers to cause a denial of service loop and memory consumption via a crafted URL...

PT-2015-7368

Name of the Vulnerable Software and Affected Versions Invision Power Services IPS Community Suite versions prior to 4.0.12.1 Description The issue allows remote attackers to cause a denial of service, resulting in loop and memory consumption, via a crafted URL. Recommendations For versions prior ...

Amazon Linux AMI : subversion / mod_dav_svn (ALAS-2015-587)

The moddavsvn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service memory consumption via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes. CVE-2015-0202 An assertion failure flaw was found in the way the SVN server...

PT-2015-4377

Name of the Vulnerable Software and Affected Versions PolarSSL versions prior to 1.3.9 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by sending a large number of ClientHello messages. Recommendations For versions prior to 1.3.9, updat...