CVE-2019-12101

coapdecodeoption in coap.c in LibNyoci 0.07.00rc1 mishandles certain packets with "Uri-Path: null" and consequently allows remote attackers to cause a denial of service segmentation fault...

EulerOS Virtualization 3.0.1.0 : libsndfile (EulerOS-SA-2019-1441)

According to the versions of the libsndfile package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out of bounds read in the function d2ulawarray in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or informatio...

CVE-2019-11463

A memory leak in archivereadformatzipcleanup in archivereadsupportformatzip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVELZMAH typo. NOTE: this only affects users who downloaded the development code from GitHub. Users of th...

PT-2019-12276 · Owasp +1 · Owasp Modsecurity Core Rule Set +1

Name of the Vulnerable Software and Affected Versions: OWASP ModSecurity Core Rule Set CRS versions through 3.1.0 Description: An issue was discovered that allows remote attackers to cause a denial of service ReDOS by entering a specially crafted string with set error handler at the beginning and...

PT-2019-1965 · Oracle +9 · Mysql Server +8

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.25 and prior MySQL Server versions 8.0.15 and prior Description: The issue is related to inadequate access control in the InnoDB component of MySQL Server, allowing a remote attacker to cause a denial of service...

SUSE SLES11 Security Update : libsndfile (SUSE-SU-2019:14008-1)

This update for libsndfile fixes the following issues : Security issues fixed : CVE-2017-17456: Prevent segmentation fault in the function d2alawarray that may have lead to a remote DoS bsc1071777. CVE-2017-17457: Prevent segmentation fault in the function d2ulawarray that may have lead to a remo...

Design/Logic Flaw

A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver the default Ubuntu Nvidia display driver handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger...

CVE-2018-3979

A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver the default Ubuntu Nvidia display driver handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger...

robinbhandari FTP Remote Denial Of Service Exploit

Title: CVE-2019-9668 robinbhandari FTP remote DoS vulnerability Vulnerable: - https://github.com/rovinbhandari/FTP Description: robinbhandari is a open source tiny ftp server/client in github.com. it has a remote DoS vulnerability in a 'put' command. Timeline: 2019-03-11 CVE-2019-9668 robinbhanda...

ScreenStream 3.0.15 - Denial of Service

ScreenStream 3.0.15 - Denial of Service !/usr/bin/python coding: utf-8 Author: Marcelo Vázquez aka s4vitar ScreenStream 3.0.15 Remote Denial of Service DoS Exploit Title: ScreenStream 3.0.15 Remote Denial of Service DoS Date: 2019-02-21 Exploit Author: Marcelo Vázquez aka s4vitar Vendor Homepage:...

ApowerManager 3.1.7 - Phone Manager Remote Denial of Service Exploit

!/usr/bin/python coding: utf-8 Author: Marcelo Vázquez aka s4vitar ApowerManager Remote Denial of Service DoS / Application Crash Exploit Title: ApowerManager - Phone Manager Remote Denial of Service DoS / Application Crash Date: 2019-02-14 Exploit Author: Marcelo Vázquez aka s4vitar Vendor...

UBUNTU-CVE-2019-2529

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols...

Apache Httpd < 2.4.38 : mod_ssl 2.4.37 remote DoS when used with OpenSSL 1.1.1

A bug exists in the way modssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause modssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or...

[SECURITY] [DLA 1584-1] ruby-i18n security update

Package : ruby-i18n Version : 0.6.9-2+deb8u1 CVE ID : CVE-2014-10077 Debian Bug : 913093 It was discovered that there was a remote denial-of-service vulnerability in ruby-i18n, a I18n and localization solution for Ruby. An application crash could be engineering a situation where :somekey is prese...

CVE-2018-19389

FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service Break instruction exception and application crash via BMP data because of a ConvertToPDFx86!ConnectedPDF::ConnectedPDFSDK::FCPSendEmailNotification issue...

CVE-2018-19342

CVE-2018-19342 affects Foxit Reader 9.3.0.10826 with the u3d plugin version 9.3.0.10809 (plugins\U3DBrowser.fpi). The root cause is a Read Access Violation starting at U3DBrowser+0x347a, resulting in an out-of-bounds read that can cause a denial of service or enable an attacker to obtain sensitiv...

CVE-2018-9347

In function SMFParseMetaEvent of file eassmf.c there is incorrect input validation causing an infinite loop. This could lead to a remote temporary DoS with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1...

CVE-2018-9347

The CVE-2018-9347 entry affects Android devices and is caused by incorrect input validation in SMF_ParseMetaEvent within eas_smf.c, which can trigger an infinite loop and enable a remote temporary DoS. Affected products/versions listed include Android 7.x (7.0, 7.1.1, 7.1.2), Android 8.x (8.0, 8....

CVE-2018-9347

In function SMFParseMetaEvent of file eassmf.c there is incorrect input validation causing an infinite loop. This could lead to a remote temporary DoS with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1...

CVE-2018-9362

CVE-2018-9362 affects Android where InboundSmsHandler.java's processMessagePart has improper input validation, enabling remote denial of service with no privileges and no user interaction. Affected products include Android 6.x through 8.1. The connected documents confirm a DoS impact but do not p...