78 matches found
CVE-2019-9084
In Hoteldruid before 2.3.1, a division by zero was discovered in $numtabelle in tabtariffe.php aka the numtariffa1 parameter due to the mishandling of non-numeric values, as demonstrated by the /tabtariffe.php?anno=YEAR&numtariffa1=1a URI. It could allow an administrator to conduct remote denial ...
CVE-2019-5665
NVIDIA Windows GPU Display driver contains a vulnerability in the 3D vision component in which the stereo service software, when opening a file, does not check for hard links. This behavior may lead to code execution, denial of service or escalation of privileges...
Denial Of Service (DoS)
github.com/btcsuite/btcd is vulnerable to denial of service DoS. It is possible because the parseSig signature parsing function does not check the minimal message of size while checking the length of remaining message...
Denial Of Service (DoS)
libxml2.so is vulnerable to denial of service DoS. The vulnerability exists due to the use-after-free errors occurring through the htmlParseChunk and xmldecldone functions...
Denial Of Service (DoS)
ovs is vulnerable to denial of service DoS attacks. The library has a default case in the ofpprintrolestatusmessage function in lib/ofp-print.c that calls the abort function. This can allow a malicious user to cause the application to abort by passing an unknown role status message...
CVE-2015-7850
ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service infinite loop or crash by pointing the key file at the log file...
EMC ESRS VE Information Disclosure Vulnerability
EMC ESRS VE is a set of EMC customer service and end-user EMC products and solutions to provide two-way remote connection between the remote service software. A security vulnerability exists in EMC ESRS VE version 3.18 and earlier. An attacker could exploit the vulnerability to compromise an...
SUSE-SU-2017:1742-1 Security update for xen
This update for xen fixes several issues. These security issues were fixed: - Page transfer might have allowed PV guest to elevate privilege XSA-217, bsc1042882 - Races in the grant table unmap code allowed for informations leaks and potentially privilege escalation XSA-218, bsc1042893 -...
Panda Driving Letter Android App Has Arbitrary Points Redemption Vulnerability
Panda Driving Letter is a traffic control and travel service software developed by Chengdu Digi Information Technology Co. Panda Driving Letter Android App has an arbitrary points exchange vulnerability. Due to a design flaw in the Panda Driving Letter Android app payment interface, an attacker c...
CVE-2016-6623
An issue was discovered in phpMyAdmin. An authorized user can cause a denial-of-service DoS attack on a server by passing large values to a loop. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...
CVE-2015-8930
bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service infinite loop via an ISO with a directory that is a member of itself...
Yahoo! Messenger v11 - Bypass & Persistent Vulnerability
Document Title: =============== Yahoo! Messenger v11 - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1279 Video: https://www.youtube.com/watch?v=kDdg6O5vGCY Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1136 Release Dat...
Yahoo! Messenger v11 - Bypass & Persistent Vulnerability
Document Title: =============== Yahoo! Messenger v11 - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1279 Video: https://www.youtube.com/watch?v=kDdg6O5vGCY Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1136 Release Dat...
Nokia Phoenix 2008.4.7 Service Software ActiveX Controls Multiple Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/33726/info Nokia Phoenix Service Software ActiveX controls are prone to multiple buffer-overflow vulnerabilities because they fail to properly bounds-check user-supplied data before copying it into insufficiently sized...
Viber's Apple App Store account hacked; Description changed by hackers
Last week, we exclusively reported that the popular messenger Viber was hacked by the Syrian Electronic Army, and Support page was defaced with the message, "The Israeli-based - Viber is spying and tracking you." Today we found that Viber's Apple App Store description has been defaced as well. Th...
ISC bind DoS
Crash on zero length RADTA processing...
CVE-2011-1753
expaterl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of neste...
ddrLPD 1.0 - Remote Denial of Service
source: https://www.securityfocus.com/bid/39904/info ddrLPD is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. ddrLPD 1.0 is vulnerable; other versions may also be affected...
Dualis 20.4 Denial Of Service
Exploit Title: Dualis 20.4 .bin Local Daniel Of Service Date: 03/04/2010 Author: Pr0T3cT10n Software Link: http://dualis.1emu.net/files/dualis-20.4.zip Version: 20.4 Tested on: Windows XP HEBREW SP3 CVE : no Code : Site: http://www.nullbyte.org.il Dualis 20.4 is vulnerable to local denial of...