Total
2541 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2012-4842 | 1 Ibm | 1 Lotus Domino | 2017-08-29 | 5.8 MEDIUM | N/A |
Open redirect vulnerability in the web server in IBM Lotus Domino 8.5.x through 8.5.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. | |||||
CVE-2012-4539 | 1 Xen | 1 Xen | 2017-08-29 | 2.1 LOW | N/A |
Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hypercall infinite loop DoS vulnerability." | |||||
CVE-2012-4535 | 1 Xen | 1 Xen | 2017-08-29 | 1.9 LOW | N/A |
Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline." | |||||
CVE-2012-1663 | 1 Gnu | 1 Gnutls | 2017-08-29 | 7.5 HIGH | N/A |
Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted certificate list. | |||||
CVE-2012-3300 | 1 Ibm | 1 Websphere Commerce | 2017-08-29 | 2.6 LOW | N/A |
IBM WebSphere Commerce 7.0 before 7.0.0.6, when persistent sessions and personalization IDs are enabled, allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors. | |||||
CVE-2012-3060 | 1 Cisco | 1 Unity Connection | 2017-08-29 | 7.8 HIGH | N/A |
Cisco Unity Connection (UC) 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of service (CPU consumption) via malformed UDP packets, aka Bug ID CSCtz76269. | |||||
CVE-2012-2145 | 1 Apache | 1 Qpid | 2017-08-29 | 5.0 MEDIUM | N/A |
Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections. | |||||
CVE-2012-2927 | 2 Atlassian, Tm Software | 4 Jira, Tempo, Tempo6.3.0 and 1 more | 2017-08-29 | 4.0 MEDIUM | N/A |
The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors. | |||||
CVE-2012-2385 | 1 Keith Winstein | 1 Mosh | 2017-08-29 | 4.0 MEDIUM | N/A |
The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value. | |||||
CVE-2012-1502 | 1 Pypam | 1 Pypam | 2017-08-29 | 7.5 HIGH | N/A |
Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a NULL byte in a password string. | |||||
CVE-2012-1811 | 1 C3-ilex | 1 Eoscada | 2017-08-29 | 7.8 HIGH | N/A |
EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006. | |||||
CVE-2012-1813 | 1 C3-ilex | 1 Eoscada | 2017-08-29 | 7.8 HIGH | N/A |
eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000. | |||||
CVE-2012-3079 | 1 Cisco | 1 Ios | 2017-08-29 | 7.8 HIGH | N/A |
Cisco IOS 12.2 allows remote attackers to cause a denial of service (CPU consumption) by establishing many IPv6 neighbors, aka Bug ID CSCtn78957. | |||||
CVE-2012-1616 | 2 Argyllcms, Color | 2 Argyllcms, Icclib | 2017-08-29 | 9.3 HIGH | N/A |
Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file. | |||||
CVE-2012-2147 | 1 Munin-monitoring | 1 Munin | 2017-08-29 | 5.0 MEDIUM | N/A |
munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters. | |||||
CVE-2012-2199 | 2 Ibm, Oracle | 2 Websphere Mq, Solaris | 2017-08-29 | 5.0 MEDIUM | N/A |
The server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1 before 7.0.1.9, 7.1, and 7.5 on Solaris allows remote attackers to cause a denial of service (invalid address alignment exception and daemon crash) via vectors involving a multiplexed channel. | |||||
CVE-2012-2438 | 1 Awcm-cms | 1 Ar Web Content Manager | 2017-08-29 | 5.0 MEDIUM | N/A |
ar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be submitted through HTTP requests, which allows remote attackers to cause a denial of service (disk consumption) via the coment parameter to (1) show_video.php or (2) topic.php. | |||||
CVE-2011-3579 | 1 Icewarp | 1 Mail Server | 2017-08-29 | 6.4 MEDIUM | N/A |
server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference. | |||||
CVE-2011-3432 | 1 Apple | 1 Iphone Os | 2017-08-29 | 5.0 MEDIUM | N/A |
The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service (device hang) via a long tel: URL that triggers a large size for the acceptance dialog. | |||||
CVE-2011-3267 | 1 Php | 1 Php | 2017-08-29 | 5.0 MEDIUM | N/A |
PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors. |