CVE-2015-3279: Undefined Security Weakness

Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow...

PT-2015-1638

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 10.51.99995.9 Description The issue is related to resource management errors in the system. It may allow a remote attacker to cause a denial of service by sending multiple requests. Recommendations...

CVE-2015-4240: Undefined Security Weakness

Cisco IP Communicator 8.64 allows remote attackers to cause a denial of service service outage via an unspecified URL in a GET request, aka Bug ID CSCuu37656...

CVE-2015-3204: Improper Input Validation

libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service daemon restart via an IKEv1 packet with 1 unassigned bits set in the IPSEC DOI value or 2 the next payload value set to ISAKMPNEXTSAK...

CVE-2015-1962: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service daemon crash via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948,...

CVE-2015-1954: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service daemon crash via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948,...

PT-2015-5007

Name of the Vulnerable Software and Affected Versions PACTware version 4.1 SP3 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by using a crafted file that triggers an internal error. Recommendations For PACTware...

CVE-2015-4191: Undefined Security Weakness

Cisco IOS XR 5.2.1 allows remote attackers to cause a denial of service ipv6io service reload via a malformed IPv6 packet, aka Bug ID CSCuq95565...

CVE-2015-0769: Undefined Security Weakness

Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service NPU ASIC scan and line-card reload via crafted IPv6 extension headers, aka Bug ID CSCtx03546...

CVE-2015-1788

OpenSSL CVE-2015-1788 affects BN_GF2m_mod_inv in bn_gf2m.c and occurs when ECParameters specify a curve over a malformed binary polynomial field. This can allow a remote attacker to cause a denial-of-service (infinite loop) on a server or client that uses Elliptic Curve algorithms. The issue is f...

CVE-2015-4024: Undefined Security Weakness

Algorithmic complexity vulnerability in the multipartbufferheaders function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service CPU consumption via crafted form data that triggers an improper order-of-growth...

CVE-2015-0743: Undefined Security Weakness

Cisco Headend System Release allows remote attackers to cause a denial of service DHCP and TFTP outage via a flood of crafted UDP traffic, aka Bug ID CSCus04097...

CVE-2015-0756: Improper Input Validation

Cisco Wireless LAN Controller WLC devices with software 7.41.1 allow remote attackers to cause a denial of service wireless-networking outage via crafted TCP traffic on the local network, aka Bug ID CSCug67104...

CVE-2015-1157: Undefined Security Weakness

CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service reboot and messaging disruption via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in 1 an SMS message or 2 a...

CVE-2014-8926: Undefined Security Weakness

Common Inventory Technology CIT before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5 allows remote attackers to cause a denial of service CPU consumption or application crash via a...

CVE-2015-1899: Undefined Security Weakness

IBM WebSphere Portal 8.5 through CF05 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors...

CVE-2015-0189

The CVE-2015-0189 entry affects IBM WebSphere MQ: cluster repository manager in MQ versions 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allows remote authenticated admins to cause a denial of service via triggering multiple transmit-queue records, causing memory overwrite and daemon outage. Documen...

PT-2015-1195

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 43.0.2357.65 Description The issue is caused by a use-after-free vulnerability in the SVG implementation in Blink. This vulnerability can be exploited by remote attackers using a specially crafted document,...

MGASA-2015-0231 Updated php packages fix security vulnerabilities

Updated php packages fix security vulnerabilities: Memory Corruption in pharparsetarfile when entry filename starts with null CVE-2015-4021. Integer overflow in ftpgenlist resulting in heap overflow, potentially exploitable by a hostile FTP server CVE-2015-4022. PHP Multipart/form-data parsing...

php -- multiple vulnerabilities

PHP development team reports: Fixed bug 69364 PHP Multipart/form-data remote DoS Vulnerability. CVE-2015-4024 Fixed bug 69418 CVE-2006-7243 fix regressions in 5.4+. CVE-2015-4025 Fixed bug 69545 Integer overflow in ftpgenlist resulting in heap overflow. CVE-2015-4022 Fixed bug 68598 pcntlexec...