PT-2014-8470

Name of the Vulnerable Software and Affected Versions TYPO3 Calendar Base cal extension versions prior to 1.5.9 TYPO3 Calendar Base cal extension version 1.6.x prior to 1.6.1 Description The issue allows remote attackers to cause a denial of service, specifically resource consumption, through...

Rockwell Automation/Allen-Bradley MicroLogix 1400 Series A <= 7 and Series B <= 15.000 DNP3 Remote DoS

Binary data 7147.pasl...

Race condition

Race condition in the IP logging feature in Cisco Intrusion Prevention System IPS Software 7.17E4 and earlier allows remote attackers to cause a denial of service device reload via crafted IP traffic that matches a problematic rule, aka Bug ID CSCud82085...

CVE-2014-3661

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service thread consumption via vectors related to a CLI handshake...

CVE-2014-8240: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service crash and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051...

CVE-2014-1578: Improper Restriction of Operations within the Bounds of a Memory Buffer

The gettile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly execute arbitrary code via WebM frames with invalid tile sizes that are...

PT-2014-4721

Name of the Vulnerable Software and Affected Versions Oracle Virtualization versions 5.0 through 5.1 Description The issue affects the availability of the system, allowing remote attackers to exploit it via vectors related to SGD Proxy Server ttaauxserv and SGD SSL Daemon ttassl. Recommendations...

PT-2014-4720

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server ttaauxserv, a different vulnerability than CVE-2014-2474, CVE-2014-2476, and CVE-2014-6459...

Juniper Junos 'em' Interface Fragmentation Remote DoS (JSA10655)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability. A remote attacker can exploit this issue by sending a set of specially crafted fragmented packets to cause the 'em' driver to become permanently blocked when trying to...

Juniper Junos SRX Series ALG 'flowd' Remote DoS (JSA10650)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a denial of service vulnerability related to ALG Application Layer Gateway. A remote attacker can exploit this issue by sending a specially crafted SIP packet to an SRX series device, resultin...

Juniper Junos RSVP 'rpd' Remote DoS (JSA10652)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to improper handling of RSVP PATH messages. A remote attacker can exploit this issue, by sending a specially crafted RSVP packet, to crash the 'rpd' process. Note th...

Juniper Junos BGP UPDATE 'rpd' Remote DoS (JSA10653)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to improper handling of BGP UPDATE messages using 4-byte AS numbers. A remote attacker can exploit this issue, by sending a specially crafted BGP UPDATE packet, to...

PT-2014-5131

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 38.0.2125.101 Opera versions prior to 25.0.1614.50 Description A use-after-free issue in Blink allows remote attackers to cause a denial of service or possibly have other unspecified impacts via crafted JavaScri...

PT-2014-7836

Name of the Vulnerable Software and Affected Versions Exuberant Ctags version 5.8 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and consumption of CPU and disk resources, via a crafted JavaScript file. Recommendations For Exuberant Ctags...

PT-2014-4227

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 33.0 Firefox ESR versions 31.x prior to 31.2 Thunderbird versions 31.x prior to 31.2 Description The issue is related to multiple unspecified vulnerabilities in the browser engine, allowing remote attackers to...

CVE-2014-6051: Undefined Security Weakness

Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service crash and possibly execute arbitrary code via an advertisement for a large screen size, which triggers a heap-based buffer overflow...

CVE-2014-4728: Undefined Security Weakness

The web server in the TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 with firmware before 140916 allows remote attackers to cause a denial of service crash via a long header in a GET request...

CVE-2012-5621: Improper Input Validation

lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service crash via an OPAL connection with a party name that contains invalid UTF-8 strings...

CVE-2014-3535

include/linux/netdevice.h in the Linux kernel before 2.6.36 incorrectly uses macros for netdevprintk and its related logging implementation, which allows remote attackers to cause a denial of service NULL pointer dereference and system crash by sending invalid packets to a VxLAN interface...

CVE-2014-3354: Improper Input Validation

Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow remote attackers to cause a denial of service device reload via malformed RSVP...