6997 matches found
CVE-2014-2730
The XML parser in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013, and Office for Mac 2011, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory consumption and persistent application hang via a crafted XML document...
CVE-2014-2730: Undefined Security Weakness
The XML parser in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013, and Office for Mac 2011, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory consumption and persistent application hang via a crafted XML document...
Design/Logic Flaw
The doFilter function in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote attackers to cause a denial of service memory consumption and out-of-memory error via a large number of malformed atmosphere push requests...
[USN-2132-1] ImageMagick vulnerabilities
========================================================================== Ubuntu Security Notice USN-2132-1 March 06, 2014 imagemagick vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives:...
CVE-2014-0086
The doFilter function in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote attackers to cause a denial of service memory consumption and out-of-memory error via a large number of malformed atmosphere push requests...
CVE-2014-0086
CVE-2014-0086 affects JBoss RichFaces: doFilter in webapp/PushHandlerFilter.java on RichFaces 4.3.4, 4.3.5 and 5.x is vulnerable to remote DoS via a flood of malformed Atmosphere push requests. Root cause: inadequate input filtering in PushHandlerFilter.java leads to memory consumption and out-of...
Code injection
Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via the count parameter to /uuids...
CVE-2014-2668
Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via the count parameter to /uuids...
CVE-2014-0086: Improper Input Validation
The doFilter function in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote attackers to cause a denial of service memory consumption and out-of-memory error via a large number of malformed atmosphere push requests...
PT-2014-3472
Name of the Vulnerable Software and Affected Versions JBoss RichFaces versions 4.3.4 through 4.3.5 JBoss RichFaces version 5.x Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and out-of-memory errors. This is achieved by sending a large...
CVE-2014-2109
The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service memory consumption or device reload via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494...
Design/Logic Flaw
The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service memory consumption or device reload via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494...
Code injection
The SSL VPN aka WebVPN feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service memory consumption via crafted HTTP requests, aka Bug ID CSCuf51357...
CVE-2014-2109
The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service memory consumption or device reload via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494...
CVE-2014-2113: Improper Input Validation
Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service I/O memory consumption and device reload via a malformed IPv6 packet, aka Bug ID CSCui59540...
PT-2014-1310
Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.4 Description A vulnerability in the SSL VPN feature of Cisco IOS allows remote attackers to cause a denial of service condition by consuming memory via crafted HTTP requests. The issue is due to a failure to...
PT-2015-3542
Name of the Vulnerable Software and Affected Versions Python versions 3.4 and earlier Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, via a crafted HTTP request. This is due to a problem in the gzip decode function within the xmlrpc...
CVE-2013-7340
VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service memory consumption via a crafted playlist file...
