10017 matches found
Ubuntu 14.04 LTS : libxml2 regression (USN-2214-2)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2214-2 advisory. USN-2214-1 fixed vulnerabilities in libxml2. The upstream fix introduced a regression when using xmllint with the --postvalid option. This update fixes the proble...
CVE-2014-0075
Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service resource consumption via a malformed chunk size in chunke...
Apache Tomcat 7.0.0 < 7.0.53 multiple vulnerabilities
The version of Tomcat installed on the remote host is prior to 7.0.53. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat7.0.53security-7 advisory. - Integer overflow in the parseChunkHeader function in...
PT-2014-5481
Name of the Vulnerable Software and Affected Versions Mumble versions 1.2.x through 1.2.5 Description The issue allows remote attackers to cause a denial of service, resulting in hang and resource consumption, by forcing the loading of an external file via a crafted string treated as rich-text by...
Apache Tomcat 8.0.0-RC1 < 8.0.5 multiple vulnerabilities
The version of Tomcat installed on the remote host is prior to 8.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat8.0.5security-8 advisory. - Integer overflow in the parseChunkHeader function in...
CVE-2013-1883
Mantis Bug Tracker aka MantisBT 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service resource consumption via a filter using a criteria, text search, and the "any condition" match type...
CVE-2013-1883
Mantis Bug Tracker aka MantisBT 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service resource consumption via a filter using a criteria, text search, and the "any condition" match type...
Design/Logic Flaw
Mantis Bug Tracker aka MantisBT 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service resource consumption via a filter using a criteria, text search, and the "any condition" match type...
CVE-2013-1883
Mantis Bug Tracker aka MantisBT 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service resource consumption via a filter using a criteria, text search, and the "any condition" match type...
CVE-2013-1883: Improper Input Validation
Mantis Bug Tracker aka MantisBT 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service resource consumption via a filter using a criteria, text search, and the "any condition" match type...
PT-2014-2513
Name of the Vulnerable Software and Affected Versions Mantis Bug Tracker versions 1.2.12 through 1.2.14 Description The issue allows remote attackers to cause a denial of service, resulting in resource consumption. This can be achieved by using a filter with specific criteria, including a text...
CVE-2014-0949
CVE-2014-0949 affects IBM WebSphere Portal 6.1.0 … 6.1.0.6 CF27, 6.1.5 … 6.1.5.3 CF27, 7.0 … 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12. It allows remote attackers to cause a denial of service (resource consumption and daemon crash) via a crafted web request. Connected Nessus/NVD entries corrobora...
CVE-2014-0949: Undefined Security Weakness
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to cause a denial of service resource consumption and daemon crash via a crafted web request...
Ubuntu 14.04 LTS : libxml2 vulnerability (USN-2214-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2214-1 advisory. Daniel Berrange discovered that libxml2 would incorrectly perform entity substitution even when requested not to. If a user or automated system were tricked into...
CVE-2014-3430
Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connections, which allows remote attackers to cause a denial of service resource consumption via an incomplete SSL/TLS handshake for an IMAP/POP3 connection...
PT-2014-4409
Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 2.0.0 through 3.7 SP2 Description The issue affects the Phone Messages feature, allowing remote authenticated users to cause a denial of service due to resource consumption via unspecified vectors. Recommendations For...
CVE-2014-1988: Undefined Security Weakness
The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial of service resource consumption via unspecified vectors...
RedHat Update for kernel RHSA-2014:0433-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Openfire contains an uncontrolled resource consumption vulnerability
Overview Openfire 3.9.1, and possibly earlier versions, contains an uncontrolled resource consumption CWE-400 vulnerability when using XMPP DEFLATE message compression. Description Openfire 3.9.1, and possibly earlier versions, contains an uncontrolled resource consumption CWE-400 vulnerability...