Lucene search
K

1103 matches found

NVD
NVD
added 2013/04/01 4:55 p.m.16 views

CVE-2013-2686

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which...

5CVSS6.2AI score0.02448EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2013/04/01 4:55 p.m.27 views

CVE-2013-2686

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which...

5CVSS5.9AI score0.02448EPSS
Exploits0References3
Prion
Prion
added 2013/04/01 4:55 p.m.23 views

Design/Logic Flaw

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which...

5CVSS6.6AI score0.29742EPSS
Exploits0References3Affected Software3
CVE
CVE
added 2013/03/29 6:0 p.m.69 views

CVE-2013-2686

CVE-2013-2686 affects Asterisk Open Source HTTP server: main/http.c does not properly restrict Content-Length, enabling stack-consumption DoS via crafted HTTP POST. Affected: Asterisk 1.8.x before 1.8.20.2; 10.x before 10.12.2; 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; As...

5CVSS6.3AI score0.02448EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2013/03/29 6:0 p.m.23 views

CVE-2013-2686

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which...

6.2AI score0.02448EPSS
Exploits0References3
OSV
OSV
added 2013/01/04 11:52 a.m.6 views

CVE-2012-5976

Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones allow remote attackers to cause a denial o...

6.7AI score
Exploits0References2
Prion
Prion
added 2013/01/04 11:52 a.m.18 views

Stack overflow

Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones allow remote attackers to cause a denial o...

5CVSS7.3AI score0.29742EPSS
Exploits0References2Affected Software2
Check Point Advisories
Check Point Advisories
added 2012/12/23 12:0 a.m.2 views

Wireshark CLDAP Dissector Denial of Service (CVE-2011-1140)

Multiple stack consumption vulnerabilities have been reported in Wireshark...

6.7AI score0.30766EPSS
Exploits3
NVD
NVD
added 2012/10/04 11:11 a.m.6 views

CVE-2012-3819

Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and other products, allows remote attackers to cause a denial of service daemon crash via a long request...

5CVSS6.6AI score0.07592EPSS
Exploits5References2
Prion
Prion
added 2012/10/04 11:11 a.m.11 views

Design/Logic Flaw

Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and other products, allows remote attackers to cause a denial of service daemon crash via a long request...

5CVSS7.1AI score0.07592EPSS
Exploits5References2
CVE
CVE
added 2012/10/04 10:0 a.m.54 views

CVE-2012-3819

The CVE-2012-3819 entry describes a Stack Overflow/Resource exhaustion vulnerability in DartWebserver.dll version 1.9 and earlier, used by Dart PowerTCP WebServer for ActiveX and related products. The root cause is improper handling of very large HTTP requests: during request parsing, the server ...

5CVSS6.8AI score0.07592EPSS
Exploits5References2Affected Software1
OpenVAS
OpenVAS
added 2012/06/27 12:0 a.m.27 views

Wireshark Denial of Service Vulnerability-01 (Mar 2011) - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

7.5CVSS6AI score0.00746EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2012/06/27 12:0 a.m.16 views

Wireshark Denial of Service Vulnerability-01 March 11 (Mac OS X)

The host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkdosvuln01mar11macosx.nasl 5977 2017-04-19 09:02:22Z teissa $ Wireshark Denial of Service Vulnerability-01 March 11 Mac OS X Authors: Madhuri D Copyright: Copyright c 20...

5CVSS6AI score0.00746EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2012/05/04 12:0 a.m.24 views

Wireshark BER Dissector Stack Consumption Vulnerability - Mac OS X

Wireshark is prone to stack consumption vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...

5CVSS6.2AI score0.01476EPSS
Exploits1References3
Prion
Prion
added 2012/04/17 4:26 a.m.14 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of administrators for requests that cause a denial of service stack consumption and daemon crash via a malformed URL...

6.8CVSS7.5AI score0.0022EPSS
Exploits0References4Affected Software2
Cvelist
Cvelist
added 2012/04/17 1:0 a.m.23 views

CVE-2012-1985

Cross-site request forgery CSRF vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of administrators for requests that cause a denial of service stack consumption and daemon crash via a malformed URL...

6.9AI score0.0022EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2012/02/13 12:0 a.m.15 views

FreeBSD Ports: apr0

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

4.3CVSS8.8AI score0.48782EPSS
Exploits5References2
OpenVAS
OpenVAS
added 2012/02/13 12:0 a.m.25 views

FreeBSD Ports: libxml

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

4.3CVSS6.8AI score0.01289EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2011/11/11 12:0 a.m.245 views

FreeBSD : libxml -- Stack consumption vulnerability (5a7d4110-0b7a-11e1-846b-00235409fd3e)

Stack consumption vulnerability allows context-dependent attackers to cause a denial of service application crash via a large depth of element declarations in a DTD. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

4.3CVSS6.2AI score0.01289EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2011/08/03 12:0 a.m.19 views

FreeBSD Ports: apr1

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

4.3CVSS8.8AI score0.48782EPSS
Exploits5References2
Rows per page
Query Builder