CVE-2013-5470: Improper Input Validation

Cisco Secure Access Control System ACS does not properly handle requests to read from the TACACS+ socket, which allows remote attackers to cause a denial of service process crash via malformed TCP packets, aka Bug ID CSCuh12488...

Amazon Linux AMI : httpd (ALAS-2012-46)

It was discovered that the fix for CVE-2011-3368 did not completely address the problem. An attacker could bypass the fix and make a reverse proxy connect to an arbitrary server not directly accessible to the attacker by sending an HTTP version 0.9 request, or by using a specially crafted URI...

Code injection

The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service process crash via a crafted version-2 RIP packet, aka Bug ID CSCue46731...

CVE-2013-3470: Improper Input Validation

The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service process crash via a crafted version-2 RIP packet, aka Bug ID CSCue46731...

CVE-2013-3445

The firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports, which allows remote attackers to cause a denial of service CPU consumption or process crash via a flood of malformed IP packets, aka Bug ID CSCug94572...

Design/Logic Flaw

The firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports, which allows remote attackers to cause a denial of service CPU consumption or process crash via a flood of malformed IP packets, aka Bug ID CSCug94572...

CVE-2013-3445

The firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports, which allows remote attackers to cause a denial of service CPU consumption or process crash via a flood of malformed IP packets, aka Bug ID CSCug94572...

CVE-2013-3445: Undefined Security Weakness

The firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports, which allows remote attackers to cause a denial of service CPU consumption or process crash via a flood of malformed IP packets, aka Bug ID CSCug94572...

CVE-2013-2765

The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service NULL pointer dereference, process crash, and disk consumption via a POST request with a large body and a crafted Content-Type header...

CVE-2013-2765

The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service NULL pointer dereference, process crash, and disk consumption via a POST request with a large body and a crafted Content-Type header...

CVE-2013-3418

Cisco Unified Communications Domain Manager does not properly allocate memory for GET and POST requests, which allows remote authenticated users to cause a denial of service memory consumption and process crash via crafted requests to the management interface, aka Bug ID CSCud22922...

CVE-2013-3418: Undefined Security Weakness

Cisco Unified Communications Domain Manager does not properly allocate memory for GET and POST requests, which allows remote authenticated users to cause a denial of service memory consumption and process crash via crafted requests to the management interface, aka Bug ID CSCud22922...

CVE-2013-3393

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...

Design/Logic Flaw

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...

CVE-2013-3393

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...

Schweitzer Engineering Laboratories Improper Input Validation

Overview Adam Crain of Automatak and independent researcher Chris Sistrunk have identified improper DNP3 input validation in Schweitzer Engineering Laboratories’ real-time automation controllers RTAC. Schweitzer Engineering Laboratories SEL has produced updated firmware that mitigates this...

CVE-2013-1229

TMSSNMPService.exe in TelePresence Manager in Cisco TelePresence Management Suite TMS on 64-bit platforms allows remote attackers to cause a denial of service process crash via SNMP traps, aka Bug ID CSCue00028...

CVE-2013-0085: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service W3WP process crash and site outage via a crafted URL, aka "Buffer Overflow Vulnerability."...

CentOS Update for nss-pam-ldapd CESA-2013:0590 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-5129

Heap-based buffer overflow in the WebGL subsystem in Google Chrome OS before 23.0.1271.94 allows remote attackers to cause a denial of service GPU process crash or possibly have unspecified other impact via unknown vectors...