CVE-2016-1256: Undefined Security Weakness

Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R7, 14.1 before 14.1R5, 14.1X53 before 14.1X53-D18 or 14.1X53-D30, 14.1X55 before...

CVE-2015-7759: Improper Input Validation

BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote attackers to cause a denial of service Traffic Management Microkernel TMM restart via crafted ICMP...

CVE-2015-8226: Improper Input Validation

The Joint Photographic Experts Group Processing Unit JPU driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 and GEM-703L smartphones with software before V100R001C233B111 allows remote attackers to cause a denial of service crash via a crafted application wi...

samba security update

4.2.3-11 - resolves: 1290710 - CVE-2015-3223 Remote DoS in Samba AD LDAP server - CVE-2015-5299 Missing access control check in shadow copy code - CVE-2015-5252 Insufficient symlink verification in smbd - CVE-2015-5296 Samba client requesting encryption vulnerable to downgrade attack...

CVE-2015-4941: Undefined Security Weakness

IBM WebSphere MQ Light 1.x before 1.0.2 mishandles abbreviated TLS handshakes, which allows remote attackers to cause a denial of service MQXR service crash via unspecified vectors...

CVE-2015-4943: Undefined Security Weakness

IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service MQXR service crash via a series of connect and disconnect actions, a different vulnerability than CVE-2015-4942...

PT-2015-3279

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.0 and later Description The issue is related to a double free vulnerability in the coders/tga.c file, which can be exploited by remote attackers to cause a denial of service, resulting in an application crash. This can...

PT-2015-7689

Name of the Vulnerable Software and Affected Versions ntpd versions 4.2.8p5 and earlier, 4.3.x prior to 4.3.90 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference, via a ntpdc reslist command. Recommendations For versions 4.2.8p5 and...

openSUSE Security Update : quassel (openSUSE-2015-938)

Quassel was updated to fix a remote DoS security issue. The following vulnerability was fixed : - CVE-2015-8547: Remote DoS in Quassel core %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2015-8664

Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different...

PT-2016-1246

Name of the Vulnerable Software and Affected Versions nghttp2 versions prior to 1.6.0 Description The issue is related to idle stream handling in nghttp2, which allows attackers to have an unspecified impact via unknown vectors. This is also known as a heap-use-after-free bug, which can lead to...

Remote DoS in Samba (AD) LDAP server.

Description All versions of Samba from 4.0.0 to 4.1.21 inclusive are vulnerable to an anonymous memory exhaustion attack in the samba daemon LDAP server. A malicious client can send packets that cause the LDAP server provided by the AD DC in the samba daemon process to consume unlimited memory an...

This year“white hat”are dug up? Breakdown 2 0 1 5 in those affected world of vulnerabilities-vulnerability warning-the black bar safety net

About the past 2 0 1 5 years network security on thin ice year: the countless fatal vulnerability is discovered, be repaired or be caring people use...fortunately, in the global white hat hacker's efforts, many fatal vulnerabilities are to catch the bad guys discover before it has been...

PT-2015-2892

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is caused by a buffer overflow in the media server of the Android operating system. Exploitation of this issue may allow a remote attacker to cause a denial of service, resulting in...

CVE-2015-8084: Improper Input Validation

Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when "DHCP Snooping" is enabled and either "option82 insert" or "option82 rebuild" is enabled on an interface, allow remote attackers to cause a denial of service reboot via crafted DHC...

CVE-2015-8395

PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and...

libtorrent -- remote DoS

X-cela reports: Calls into buildbenocde that use %zu could crash on 64 bit machines due to the size change of sizet. Someone can force READENCIA to fail allowing an internalerror to be thrown and bring down the client...

CVE-2015-8364

Integer overflow in the ffiviinitplanes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service out-of-bounds heap-memory access or possibly have unspecified other impact via crafted image dimensions in...

CVE-2015-6377: Undefined Security Weakness

Cisco Virtual Topology System VTS 2.00 and 2.01 allows remote attackers to cause a denial of service CPU and memory consumption, and TCP port outage via a flood of crafted TCP packets, aka Bug ID CSCux13379...

CVE-2015-8126: Buffer Copy without Checking Size of Input

Multiple buffer overflows in the 1 pngsetPLTE and 2 pnggetPLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service application crash or possibly have...