Remote DoS Exploit on Confluence

Nir Goldshlager have discovered a vulnerability on atlassian-gadgets when parsing XMLs. Basically anyone can craft a URL containing a parameter with some XML that will make the instance run out of memory when trying to parse it. Details on the attack can be found on...

Remote DoS Exploit on Confluence

Nir Goldshlager have discovered a vulnerability on atlassian-gadgets when parsing XMLs. Basically anyone can craft a URL containing a parameter with some XML that will make the instance run out of memory when trying to parse it. Details on the attack can be found on...

Remote DoS Exploit on Confluence

Nir Goldshlager have discovered a vulnerability on atlassian-gadgets when parsing XMLs. Basically anyone can craft a URL containing a parameter with some XML that will make the instance run out of memory when trying to parse it. Details on the attack can be found on...

Citrix NetScaler nsconfigd Remote DoS (CTX139017)

The remote Citrix NetScaler version is affected by a remote denial of service vulnerability in the 'nsconfigd' daemon. An unauthenticated remote attacker could exploit this issue by sending a specially crafted message to the daemon, resulting in a reboot of the appliance. C Tenable Network...

Remote DoS Exploit on JIRA

An attacker is able to perform the billion laughs attack on a default JIRA installation including OnDemand installations. This attack can be executed without authentication and leads to the complete use of resources on the victim machine causing the server to crash or hang. It is possible due to...

PT-2014-4907

Name of the Vulnerable Software and Affected Versions Microsoft Malware Protection Engine versions prior to 1.1.10701.0 Description The issue allows remote attackers to cause a denial of service, resulting in a system hang, by using a crafted file. This is related to the mpengine.dll component...

PT-2014-5692

Name of the Vulnerable Software and Affected Versions OpenAFS version 1.6.8 Description The issue allows remote attackers to cause a denial of service, resulting in uninitialized memory access and crash. This is related to TMAY requests, although the specific vectors are not specified...

CVE-2014-2004: Improper Restriction of Operations within the Bounds of a Memory Buffer

The PPP Access Concentrator PPPAC on SEIL SEIL/x86 routers 1.00 through 3.10, SEIL/X1 routers 1.00 through 4.50, SEIL/X2 routers 1.00 through 4.50, SEIL/B1 routers 1.00 through 4.50, SEIL/Turbo routers 1.80 through 2.17, and SEIL/neu 2FE Plus routers 1.80 through 2.17 allows remote attackers to...

CVE-2014-0075

Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service resource consumption via a malformed chunk size in chunke...

CVE-2014-2342: Uncontrolled Resource Consumption

Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service excessive data processing via a crafted DNP3 packet...

PT-2014-5481

Name of the Vulnerable Software and Affected Versions Mumble versions 1.2.x through 1.2.5 Description The issue allows remote attackers to cause a denial of service, resulting in hang and resource consumption, by forcing the loading of an external file via a crafted string treated as rich-text by...

PT-2014-3967

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 6.1.0 through 6.1.0.6 CF27 IBM WebSphere Portal versions 6.1.5 through 6.1.5.3 CF27 IBM WebSphere Portal versions 7.0 through 7.0.0.2 CF28 IBM WebSphere Portal versions 8.0 before 8.0.0.1 CF12 Description The issu...

PT-2014-5472

Name of the Vulnerable Software and Affected Versions Intel Indeo Video 4.5 version 4.51.16.3 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by using a crafted .avi file. Recommendations For Intel Indeo Video 4.5 version 4.51.16.3, avoid using th...

CVE-2013-7384: Undefined Security Weakness

UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via unspecified vectors, related to SSL. NOTE: this issue was SPLIT from CVE-2013-6413 per ADT2 due to different vulnerability types...

CVE-2014-3742: Undefined Security Weakness

The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service file descriptor consumption and process crash via unspecified vectors...

CVE-2014-0964: Undefined Security Weakness

IBM WebSphere Application Server WAS 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 allows remote attackers to cause a denial of service via crafted TLS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool...

CVE-2014-1740

Multiple use-after-free vulnerabilities in net/websockets/websocketjob.cc in the WebSockets implementation in Google Chrome before 34.0.1847.137 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to WebSocketJob deletion...

PT-2014-1085

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 34.0.1847.137 Description The issue is related to multiple integer overflows in the replace-data functionality in the CharacterData interface implementation in core/dom/CharacterData.cpp in Blink. This allows...

CVE-2014-3243

SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted SOAP request containing a large number of nested entity references...

CVE-2014-3243: Improper Restriction of Operations within the Bounds of a Memory Buffer

SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted SOAP request containing a large number of nested entity references...