PT-2011-2933

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.127 Description A use-after-free issue exists, potentially allowing remote attackers to cause a denial of service or have other unspecified impacts. This issue is related to the handling of DOM URLs...

RHEL 4 / 5 / 6 : vsftpd (RHSA-2011:0337)

The remote Redhat Enterprise Linux 4 / 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:0337 advisory. - vsftpd: remote DoS via crafted glob pattern CVE-2011-0762 Note that Nessus has not tested for this issue but has instead relied only on the...

vsftpd security update

2.2.2-6.el60.1 - Resolves: 681891 - CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern...

CVE-2011-1317: Undefined Security Weakness

Memory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages JSP component in IBM WebSphere Application Server WAS 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service memory consumption by sending many JSP requests that trigger...

PT-2011-3046

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 7.0.0.15 Description A memory leak in the messaging engine allows remote attackers to cause a denial of service via network connections associated with a NULL return value from a synchronous J...

PT-2011-2579

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.32 on Red Hat Enterprise Linux RHEL 6 Description A use-after-free issue in the RPC server sockets functionality of the Linux kernel might allow remote attackers to cause a denial of service via malformed data in a...

CVE-2011-1314: Undefined Security Weakness

The Service Integration Bus SIB messaging engine in IBM WebSphere Application Server WAS before 7.0.0.15 allows remote attackers to cause a denial of service daemon hang by performing close operations via network connections to a queue manager...

PHP Exif Extension 'exif_read_data()' Function Remote DoS

No description provided by source. ===================================================================== PHP Exif 64bit Casting Vulnerability ===================================================================== Affected Software : PHP = 5.3.5 Exif extension for 64bit platforms Severity : Low...

Apache Httpd < 2.0.65 : apr_fnmatch flaw leads to mod_autoindex remote DoS

A flaw was found in the aprfnmatch function of the bundled APR library. Where modautoindex is enabled, and a directory indexed by modautoindex contained files with sufficiently long names, a remote attacker could send a carefully crafted request which would cause excessive CPU usage. This could b...

PT-2011-2889

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 9.0.597.107 Description A use-after-free issue allows remote attackers to cause a denial of service or possibly have other unspecified impacts via vectors related to blocked plug-ins. Recommendations For version...

CVE-2011-1113: Out-of-bounds Read

Google Chrome before 9.0.597.107 on 64-bit Linux platforms does not properly perform pickle deserialization, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-0391: Undefined Security Weakness

Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service thread consumption and device outage via a malformed request, related to an "ad hoc recording" issue, aka Bug ID CSCtf97205...

PT-2011-2829

Name of the Vulnerable Software and Affected Versions Google Chrome OS versions prior to 0.9.130.14 Beta Description A use-after-free issue in Google Chrome OS allows remote attackers to cause a denial of service by providing the name of a hidden WiFi network that does not respond to connection...

CVE-2011-0982

Use-after-free vulnerability in Google Chrome before 9.0.597.94 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG font faces...

CVE-2011-0283: Undefined Security Weakness

The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed request packet that does not trigger a response packet...

CVE-2011-0352: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the web-based management interface on the Cisco Linksys WRT54GC router with firmware before 1.06.1 allows remote attackers to cause a denial of service device crash via a long string in a POST request...

CVE-2011-0492

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service assertion failure and daemon exit via blobs that trigger a certain file size, as demonstrated by the cached-descriptors.new file...

CVE-2011-0492: Undefined Security Weakness

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service assertion failure and daemon exit via blobs that trigger a certain file size, as demonstrated by the cached-descriptors.new file...

PT-2011-2391

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.1.29 Tor versions 0.2.2.x prior to 0.2.2.21-alpha Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and daemon exit, via blobs that trigger a certain file...

CVE-2010-3833: Undefined Security Weakness

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service server crash via crafted arguments to extreme-value functions such as 1 LEAST and 2 GREATEST, related to KILLBADDATA and a "CREATE...