7796 matches found
CVE-2006-4272
Jelsoft vBulletin 3.5.4 is affected: remote attackers can register multiple arbitrary users via the register.php endpoint, causing resource consumption/DoS. The issue is disputed by the vendor, who notes CAPTCHA can block registrations. Public details specify the vulnerability is triggered by a f...
CVE-2004-2662
The CVE-2004-2662 entry concerns Soft3304 04WebServer prior to 1.41. The vulnerability is a denial of service: sending certain data related to OpenSSL can cause a thread to terminate while resources remain allocated, potentially leading to resource exhaustion. Publicly available details are limit...
CVE-2005-4650
Joomla! 1.03 does not restrict the number of "Search" Mambots, which allows remote attackers to cause a denial of service resource consumption via a large number of Search Mambots...
GLSA-200512-02 : Webmin, Usermin: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200512-02 Webmin, Usermin: Format string vulnerability Jack Louis discovered that the Webmin and Usermin 'miniserv.pl' web server component is vulnerable to a Perl format string vulnerability. Login with the supplied username is...
cgi.rb
The 'cgi.rb' CGI is installed. Some versions is vulnerable to remote denial of service. By sending a specially crafted HTTP POST request, a malicious user can force the remote host to consume a large amount of CPU ressources. Warning : OpenVAS solely relied on the presence of this CGI, it did not...
CVE-2005-3145
httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service resource consumption by connecting to sblim-sfcb but not sending any data...
CVE-2005-3145
httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service resource consumption by connecting to sblim-sfcb but not sending any data...
Linux kernel fget() DoS
sockfdput call is missed in routingioctl, leading to resource consumption and system crash...
CVE-2005-2815
The CVE-2005-2815 entry describes a vulnerability in FlatNuke 2.5.6 where print.php can disclose path information on error or be abused to trigger a denial‑of‑service by supplying an MS‑DOS device name (AUX/CON/PRN/COM1/LPT1) in the news parameter. Affected product: FlatNuke 2.5.6; vulnerability ...
Flatnuke 2.5.6 (possibly prior versions) Underlying system information disclosure / Administrative & users credentials disclosure
Flatnuke 2.5.6 Underlying system information disclosure / Administrative & users credentials disclosure / cross site scripting / path disclosure / resource consumption poc tested on Windows software: site: http://flatnuke.sourceforge.net/flatnuke/ 1 cross site scripting:...
flatnuke256.txt
Flatnuke 2.5.6 Underlying system information disclosure / Administrative & users credentials disclosure / cross site scripting / path disclosure / resource consumption poc tested on Windows software: site: http://flatnuke.sourceforge.net/flatnuke/ 1 cross site scripting:...
[SECURITY] [DSA 780-1] New kpdf packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 780-1 [email protected] http://www.debian.org/security/ Martin Schulze August 22nd, 2005 http://www.debian.org/security/faq -...
CVE-1999-1579
The Cenroll ActiveX control xenroll.dll for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service resource consumption by creating a large number of arbitrary files on the target machine...
[SA14943] Kerio MailServer Unspecified WebMail Email Viewing Denial of Service
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Kerio MailServer Unspecified WebMail Email Viewing...
Microsoft Windows kernel vulnerable to denial-of-service condition via animated cursor (.ani) rate number
Overview A vulnerability exists in the way the Microsoft Windows kernel processes animated cursor .ani files with a rate number set to zero. Exploitation of this vulnerability may allow a remote attacker to cause a denial-of-service condition. Description A vulnerability exists in the way the...
CVE-2004-2662
Soft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service resource consumption or crash via certain data related to OpenSSL, which causes a thread to terminate but continue to hold resources...
CVE-2004-0744
The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service memory and resource consumption via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet...
GLSA-200411-21 : Samba: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200411-21 Samba: Multiple vulnerabilities Samba fails to do proper bounds checking when handling TRANSACT2QFILEPATHINFO replies. Additionally an input validation flaw exists in msfnmatch.c when matching filenames that contain...
602 Lan Suit DoS
Multiple resources consuption DoS conditions...
Resources consumption in 602 Lan Suite 2004.0.04.0909
Luigi Auriemma Application: 602 Lan Suite http://www.software602.com/products/ls/ Versions: = 2004.0.04.0909 Platforms: Windows Bugs: A resources consumption through webmail B sockets consuption through telnet proxy loop Exploitation: remote Date: 06 November 2004 Author: Luigi Auriemma e-mail:...