8004 matches found
The vulnerability of the BIND Server software allows a malicious attacker to compromise the accessibility of protected information.
The vulnerability exists in libdns within ISC BIND due to incorrect processing of EDNS parameters. Exploiting this vulnerability allows malicious actors operating remotely to trigger a service failure a REQUIRE validation error and termination of the daemon using a specially crafted package...
Firefox browser vulnerabilities that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities in the Mozilla Firefox browser’s engine allow malicious actors to induce service failures memory errors and unexpected application termination or execute arbitrary code...
The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure
The zero-division state allows the guest user to trigger a service failure on the host emergency termination of operations...
The vulnerability of the Linter Bastion database management system allows a malicious individual to halt any arbitrary service on a remote computer.
The RPC call with number 0x08 "0x0040AB4E" allows a malicious individual to terminate any service on a remote computer where the linstmgr.exe program is running, even though they have no authority to do so. For example, this could involve terminating the Linter Bastion database management system,...
The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.
The Google Chrome browser contains a vulnerability related to memory reclamation use-after-free error in the function WebSharedWorkerStub::OnTerminateWorkerContext in the content/worker/websharedworkerstub.cc implementation of Web Workers. Exploiting this vulnerability allows malicious actors to...
CVE-2016-1440
The proxy process on Cisco Web Security Appliance WSA devices through 9.1.0-070 allows remote attackers to cause a denial of service CPU consumption by establishing an FTP session and then improperly terminating the control connection after a file transfer, aka Bug ID CSCuy43468...
Cisco Web Security Appliance Denial of Service Vulnerability (CNVD-2016-04428)
Cisco Web Security Appliance WSA is a set of Web security appliances from Cisco USA. The appliance provides SaaS-based access control, real-time network reporting and tracking, and the development of security policies. A security vulnerability exists in the Cisco WSA's native pass-through FTP...
ETX-R vulnerable to denial-of-service (DoS)
Overview ETX-R provided by I-O DATA DEVICE, INC. is a wired LAN router. ETX-R contains a denial-of-service DoS vulnerability. Junichi MURAKAMI of FFRI, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A...
CVE-2016-3094: Improper Input Validation
PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught exception...
The vulnerability of the PHP interpreter allows attackers to trigger a service failure or execute arbitrary code.
The vulnerability of the mget function in the Fileinfo component of the PHP interpreter exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure application termination or execute arbitrary code using a specially created...
Atheme Program Modification Vulnerability
Atheme is a portable, secure, open source and modular set of IRC services. A program modification vulnerability exists in Atheme. A remote attacker could exploit the vulnerability by registering or terminating a specific account or username to change program operations...
The vulnerability of the Squid proxy server allows a hacker to cause a service failure.
The vulnerability of the FwdState::connectedToPeer method FwdState.cc in the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause a service failure application termination by using an unencrypted HTTP message...
AIX 7.2 TL 0 : bind (IV81282) (deprecated)
ISC BIND is vulnerable to a denial of service, caused by improper bounds checking in apl42.c. By sending specially crafted Address Prefix List APL data, a remote authenticated attacker could exploit this vulnerability to trigger an INSIST assertion failure and cause the named process to terminate...
DNS BIND server vulnerability, allowing attackers to cause service failures
The vulnerability of the DNS BIND server component exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause a service failure—the appearance of an “Assertion Failure” error, and the termination of the daemon—by using a specially crafted...
DNS BIND server vulnerability, allowing attackers to cause service failures
The vulnerability of the BIND DNS server component exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures—such as the appearance of an “Assertion Failure” error and the termination of the daemon—by using a specially...
DNS BIND server vulnerability, allowing attackers to cause service failures
The vulnerability of the DNS BIND server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures—such as the appearance of an error message “Assertion failure” or the termination of the daemon—by using a specially creat...
The vulnerability of the ZyXEL PMG5318-B20A router allows a violator to circumvent existing access restrictions.
The vulnerability of the ZyXEL PMG5318-B20A router exists due to the absence of session termination after exiting the system. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions by using an automated workstation...
The vulnerability of the FuseISO disk mounting software allows a hacker to trigger a service failure or cause other adverse effects.
The vulnerability of the isofsrealreadzf function isofs.c in the FuseISO disk mounting software is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure application termination, or possibly have other effects due to the large size of the ZF...
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2016-431)
This update for java-170-openjdk fixes the following issues : java-170-openjdk was updated to 2.6.5 - OpenJDK 7u99 boo972468 - Security fixes - S8152335, CVE-2016-0636: Improve MethodHandle consistency - Import of OpenJDK 7 u99 build 0 - S6425769, PR2858: Allow specifying an address to bind JMX...
The vulnerability of the WebKit component in the Safari browser and the iOS operating system allows a hacker to trigger a service failure.
The vulnerability of the History component implementation in WebKit of the Safari browser and the iOS operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure application termination throug...