Race condition

Race condition in the cut-through proxy feature in Cisco Firewall Services Module FWSM Software 3.x before 3.228 and 4.x before 4.115 allows remote attackers to cause a denial of service device reload via certain matching traffic, aka Bug ID CSCuj16824...

CVE-2014-0710

Race condition in the cut-through proxy feature in Cisco Firewall Services Module FWSM Software 3.x before 3.228 and 4.x before 4.115 allows remote attackers to cause a denial of service device reload via certain matching traffic, aka Bug ID CSCuj16824...

CVE-2014-0710: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the cut-through proxy feature in Cisco Firewall Services Module FWSM Software 3.x before 3.228 and 4.x before 4.115 allows remote attackers to cause a denial of service device reload via certain matching traffic, aka Bug ID CSCuj16824...

Cisco Firewall Services模块Cut-Through Proxy远程拒绝服务漏洞

Bugtraq ID:65662 CVE ID:CVE-2014-0710 Cisco Firewall Services Module是一款多个cisco产品上使用的防火墙服务模块。 Cisco Catalyst 6500 Series Switches和Cisco 7600 Series Routers上的Cisco FWSM软件所包含的cut-through代理功能在释放内存时存在竞争条件错误，允许远程攻击者发送特殊的能触发cut-through代理验证条件的通信，可使受影响设备重载，造成拒绝服务攻击。 0 Cisco Firewall Services Module Cisco...

Cisco Firewall Services Module Cut-Through Proxy Denial of Service Vulnerability

Cisco Firewall Services Module FWSM Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a reload of an affected system. The vulnerability is due to a race condition when releasing the memory allocated by the cut-through proxy function. An attacker could...

CVE-2014-0270: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0273, CVE-2014-0274, and CVE-2014-0288...

CVE-2014-0281: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0287...

CVE-2014-0268: Undefined Security Weakness

Microsoft Internet Explorer 8 through 11 does not properly restrict file installation and registry-key creation, which allows remote attackers to bypass the Mandatory Integrity Control protection mechanism via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."...

CVE-2014-0293: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site, aka "Internet Explorer Cross-domain Information Disclosure Vulnerability."...

Design/Logic Flaw

The hashbuffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service memory corruption or have unspecified other impact via vectors tha...

SuSE 11.3 Security Update : Xen (SAT Patch Number 8588)

The Xen hypervisor and tool-suite have been updated to fix security issues and bugs : - XSA-73: A lock order reversal between page allocation and grant table locks could lead to host crashes or even host code execution. CVE-2013-4494 - XSA-74: A lock order reversal between pagealloclock and...

CVE-2013-6906: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a mail component in Cybozu Garoon before 3.7.0, when Internet Explorer 6 through 8 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6912: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a calendar component in Cybozu Garoon before 3.7.2, when Internet Explorer 6 through 9 is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6885: Undefined Security Weakness

The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of service system hang via a crafted application, aka the errata 793 issue...

DEBIAN-CVE-2013-6375

Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean...

CVE-2013-3909: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 6 through 8 allows remote attackers to read content from a different 1 domain or 2 zone via crafted characters in Cascading Style Sheets CSS token sequences, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2013-3910: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2013-3908: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 6 through 10 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information from any visited document via a crafted web page that is not properly handled during a print-preview action, aka "Internet Explorer Information Disclosu...

CVE-2013-6013

Buffer overflow in the flow daemon flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a...

CVE-2013-6013: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the flow daemon flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a...