4388 matches found
CVE-2011-1796
Use-after-free vulnerability in the FrameView::calculateScrollbarModesForLayout function in page/FrameView.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via crafted...
PT-2017-3928
Name of the Vulnerable Software and Affected Versions libical version 1.0 Thunderbird affected versions not specified Description The issue allows remote attackers to cause a denial of service. It is related to a use-after-free error, which can be triggered by a crafted ics file. The vulnerabilit...
PT-2014-2116
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 11.0.696.65 Description The issue is related to an integer overflow in the FilterEffect::copyImageBytes function in the SVG filter implementation. This can be exploited by remote attackers using crafted...
CVE-2014-9380
The dissectorcvs function in dissectors/eccvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service out-of-bounds read via a packet containing only a CVSLOGIN signature...
PT-2014-7209
Name of the Vulnerable Software and Affected Versions Ettercap versions prior to 0.8.1 Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted password length. This is triggered by writing a 0 character to an arbitrary memory...
CVE-2014-8016: Undefined Security Weakness
The Cisco IronPort Email Security Appliance ESA allows remote attackers to cause a denial of service CPU consumption via long Subject headers in e-mail messages, aka Bug ID CSCzv93864...
PT-2014-8427
Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description The issue is related to a double free vulnerability in the jas iccattrval destroy function. This vulnerability allows remote attackers to cause a denial of service crash or possibly execute...
CVE-2014-8117
softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service CPU consumption or crash via unspecified vectors...
PT-2014-8329
Name of the Vulnerable Software and Affected Versions HP OpenVMS TCP/IP versions 5.7 before ECO5 Description The issue is related to multiple unspecified vulnerabilities in the POP implementation. These vulnerabilities allow remote attackers to cause a denial of service via unspecified vectors...
CVE-2014-8117: Undefined Security Weakness
softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service CPU consumption or crash via unspecified vectors...
CVE-2014-6259: Undefined Security Weakness
Zenoss Core through 5 Beta 3 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, aka ZEN-15414, a similar issue to...
SuSE 11.3 Security Update : shim (SAT Patch Number 9997)
shim has been updated to fix three security issues : - OOB read access when parsing DHCPv6 packets remote DoS. CVE-2014-3675 - Heap overflow when parsing IPv6 addresses provided by tftp:// DHCPv6 boot option RCE. CVE-2014-3676 - Memory corruption when processing user provided MOK lists...
CVE-2014-8124
OpenStack Dashboard Horizon before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page...
CVE-2014-9374
Double free vulnerability in the WebSocket Server reshttpwebsocket module in Asterisk Open Source 11.x before 11.14.2, 12.x before 12.7.2, and 13.x before 13.0.2 and Certified Asterisk 11.6 before 11.6-cert9 allows remote attackers to cause a denial of service crash by sending a zero length frame...
PT-2014-8878
Name of the Vulnerable Software and Affected Versions Trihedral Engineering VTScada versions 6.5 through 9.x before 9.1.20 Trihedral Engineering VTScada versions 10.x before 10.2.22 Trihedral Engineering VTScada versions 11.x before 11.1.07 Description The issue is related to an integer overflow...
PT-2014-9147
Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description A security issue may be exploited for a remote Denial of Service DoS attack by unauthorized users. Recommendations At the moment, there is no information about a newer version that contai...
CVE-2014-8503
Stack-based buffer overflow in the ihexscan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly have other unspecified impact via a crafted ihex file...
PT-2015-4340
Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via a crafted SFNT table due to integer overflow and out-of-bounds read. Recommendations For versions...
CVE-2014-7255: Uncontrolled Resource Consumption
Internet Initiative Japan Inc. SEIL Series routers SEIL/X1 2.50 through 4.62, SEIL/X2 2.50 through 4.62, SEIL/B1 2.50 through 4.62, and SEIL/x86 Fuji 1.70 through 3.22 allow remote attackers to cause a denial of service CPU and traffic consumption via a large number of NTP requests within a short...
PT-2014-8832
Name of the Vulnerable Software and Affected Versions GNU Cpio version 2.11 Description A heap-based buffer overflow issue exists in the process copy in function, allowing remote attackers to cause a denial of service. This can be achieved by including a large block value in a cpio archive...