CVE-2013-3411: Undefined Security Weakness

The IDSM-2 drivers in Cisco Intrusion Prevention System IPS Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service device hang via malformed IPv4 TCP packets, aka Bug ID CSCuh27460...

Apache Subversion < 1.6.23 / 1.7.x < 1.7.10 Multiple Remote DoS

The installed version of Apache Subversion Server is prior to 1.6.23 or 1.7.x prior to 1.7.10. It is, therefore, affected by multiple remote denial of service vulnerabilities : - A flaw exists when handling specially crafted filenames that could result in corruption of the FSFS repository. A...

CVE-2013-4113

ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via a crafted document that is processed by the xmlparseintostruct function...

Oracle Linux 5 : Important: / mysql (ELSA-2007-0875)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0875 advisory. 4.1.20-2.RHEL4.1.0.1 - Fix CVE-2007-3780: remote DOS via bad password length byte Resolves: 257621 - Workaround for new gcc bug on ia64: it locks up while...

CVE-2013-4684

flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 before 12.1R7, and 12.1X44 before 12.1X44-D15 on SRX devices, when PIM and NAT are enabled, allows remote attackers to cause a denial of service daemon crash via crafted PIM packets, aka PR 842253...

CVE-2013-3299: Improper Input Validation

RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service resource consumption or application crash via an HTML document containing JavaScript code that constructs a long string...

Avira AntiVir Engine PDF Handling Remote DoS

Binary data 6899.prm...

CVE-2013-3385: Undefined Security Weakness

The management GUI in the web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-602; Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019; and Content Security Management Appliance...

CVE-2013-2110

Heap-based buffer overflow in the phpquotprintencode function in ext/standard/quotprint.c in PHP before 5.3.26 and 5.4.x before 5.4.16 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted argument to the quotedprintableenco...

CVE-2013-2960: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1 before...

CVE-2013-0484: Undefined Security Weakness

The server process in IBM Cognos TM1 10.1.x before 10.1.1 FP1 allows remote attackers to cause a denial of service daemon crash via an undocumented API call that triggers the transmission of unexpected data...

PT-2013-5271

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x prior to 1.10.1 Description The issue is related to a memory leak in the dissect dcom ActivationProperties function in the DCOM ISystemActivator dissector. This allows remote attackers to cause a denial of service by...

ISC BIND 9.6-ESV-R9 / 9.8.5 / 9.9.3 Remote DoS

Binary data 6865.prm...

PT-2013-3977

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 27.0.1453.110 Description A use-after-free issue exists, potentially allowing remote attackers to cause a denial of service or have other unspecified impacts. This is related to the handling of input...

LogMeIn Hamachi <= 2.1.0.362 Remote DOS

LogMeIn Hamachi security flaws and steps with a simple python script to provoke an Hamachi Remote D.O.S. This is private exploit. You can buy it at https://0day.today...

PT-2013-3982

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 27.0.1453.110 Description A use-after-free issue in the SVG implementation allows remote attackers to cause a denial of service or possibly have other unspecified impacts via unknown vectors. Recommendations For...

CVE-2013-3556

The fragmentaddseqcommon function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark before r48943 has an incorrect pointer dereference during a comparison, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-3556: Improper Input Validation

The fragmentaddseqcommon function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark before r48943 has an incorrect pointer dereference during a comparison, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-4520: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause a denial of service via a crafted web page...

CVE-2013-2843

Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of speech data...