PT-2013-1807

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.3.25 Description The issue allows remote attackers to potentially cause a denial of service or bypass flow-control restrictions. This could lead to memory consumption or an excessive cell reception rate via a RELAY...

PT-2012-1004

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 PLCs versions 2.x through 3.x Description The issue allows remote attackers to cause a denial of service, resulting in a defect-mode transition and control outage, via crafted packets sent to the UDP port 161, also know...

CVE-2012-5991

CVE-2012-5991 affects Cisco Wireless LAN Controller 7.2.110.0. The issue arises from insufficient validation of user-supplied input to the WLC web interface (web_auth_custom.html), enabling remote authenticated users to cause a denial of service (device reload) via a crafted buttonClicked value i...

CVE-2012-5970: Undefined Security Weakness

The Huawei E585 device allows remote attackers to cause a denial of service NULL pointer dereference and device outage via crafted HTTP requests, as demonstrated by unspecified vulnerability-scanning software...

CVE-2012-5143

Integer overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PPAPI image buffers...

TVMOBiLi Media Server Multiple Remote DoS Vulnerabilities

Advisory ID: HTB23120 Product: TVMOBiLi media server Vendor: TVMOBiLi Vulnerable Versions: 2.1.0.3557 and probably prior version Tested Version: 2.1.0.3557 in Windows XP SP3 32 bits Vendor Notification: October 15, 2012 Vendor Patch: November 21, 2012 Public Disclosure: December 5, 2012...

TVMOBiLi Media Server Multiple Remote DoS Vulnerabilities

Advisory ID: HTB23120 Product: TVMOBiLi media server Vendor: TVMOBiLi Vulnerable Versions: 2.1.0.3557 and probably prior version Tested Version: 2.1.0.3557 in Windows XP SP3 32 bits Vendor Notification: October 15, 2012 Vendor Patch: November 21, 2012 Public Disclosure: December 5, 2012...

TVMOBiLi 2.1.0.3557 - Denial of Service

Advisory ID: HTB23120 Product: TVMOBiLi media server Vendor: TVMOBiLi Vulnerable Versions: 2.1.0.3557 and probably prior version Tested Version: 2.1.0.3557 in Windows XP SP3 32 bits Vendor Notification: October 15, 2012 Vendor Patch: November 21, 2012 Public Disclosure: December 5, 2012...

CVE-2012-4690: Undefined Security Weakness

Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller platform; and PLC-5 controller platform, when Static status is not enabled, allow remote attackers to cause a denial of service via messages that trigger modification of status bits...

CVE-2012-6057: Undefined Security Weakness

The dissecteigrpmetriccomm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x before 1.8.4 uses the wrong data type for a certain offset value, which allows remote attackers to cause a denial of service integer overflow and infinite loop via a malformed packet...

PT-2012-5822

Name of the Vulnerable Software and Affected Versions KYOCERA AH-K3001V KYOCERA AH-K3002V KYOCERA WX300K KYOCERA WX310K KYOCERA WX320K KYOCERA WX320KR Description The issue allows remote attackers to cause a denial of service, resulting in a persistent reboot of the device. This can be achieved b...

PT-2012-5801

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 23.0.1271.95 Description A use-after-free issue exists, potentially allowing remote attackers to cause a denial of service or have other unspecified impacts. This issue is related to vectors involving the Media...

CVE-2012-5135

Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to printing...

PT-2012-6233

Name of the Vulnerable Software and Affected Versions GPSMapEdit version 1.1.73.2 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by providing a long string in a lst file. Recommendations For GPSMapEdit version 1.1.73.2, consider avoiding the use ...

PT-2012-6235

Name of the Vulnerable Software and Affected Versions M-Player version 0.4 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by using a crafted MP3 file. Recommendations For version 0.4, at the moment, there is no information about a newer version...

CVE-2012-0698: Improper Restriction of Operations within the Bounds of a Memory Buffer

tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service daemon crash via a crafted typeoffset value in a TCP packet to port 30003...

Rubinius MurmurHash3 Implementation Hash Collision Remote DoS

Rubinius contains a flaw related to the MurmurHash3 implementation that may allow a remote denial of service. The issue is triggered when hash values are computed without having the ability to cause hash collisions restricted. When sending specially crafted input to an application maintaining a...

FreeBSD : lighttpd -- remote DoS in header parsing (1cd3ca42-33e6-11e2-a255-5404a67eef98)

Lighttpd security advisory reports : Certain Connection header values will trigger an endless loop, for example : 'Connection: TE,,Keep-Alive' On receiving such value, lighttpd will enter an endless loop, detecting an empty token but not incrementing the current string position, and keep reading...

CVE-2012-5843: Undefined Security Weakness

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

CVE-2012-4423: Undefined Security Weakness

The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and segmentation fault via an RPC call with 1 an event as the RPC number or 2 an RPC number whose value is in a "gap" in the RPC dispatch table...