Total
2541 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2011-4218 | 1 Investintech | 1 Slimpdf Reader | 2017-08-29 | 9.3 HIGH | N/A |
Investintech.com SlimPDF Reader does not prevent faulting-instruction data from affecting write operations, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. | |||||
CVE-2011-3296 | 1 Cisco | 3 Catalyst 6500, Catalyst 7600, Firewall Services Module Software | 2017-08-29 | 7.8 HIGH | N/A |
Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when IPv6 is used, allows remote attackers to cause a denial of service (memory corruption and module crash or hang) via vectors that trigger syslog message 302015, aka Bug ID CSCti83875. | |||||
CVE-2011-4219 | 1 Investintech | 1 Slimpdf Reader | 2017-08-29 | 9.3 HIGH | N/A |
Investintech.com SlimPDF Reader does not prevent faulting-address data from affecting branch selection, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. | |||||
CVE-2011-4078 | 2 Php, Roundcube | 2 Php, Webmail | 2017-08-29 | 5.0 MEDIUM | N/A |
include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service (resource consumption and inbox outage), via a Subject header containing only a URL, a related issue to CVE-2011-3379. | |||||
CVE-2011-4869 | 1 Unbound | 1 Unbound | 2017-08-29 | 7.8 HIGH | N/A |
validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528. | |||||
CVE-2011-3996 | 1 Controlsystemworks | 1 Csworks | 2017-08-29 | 5.0 MEDIUM | N/A |
The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service (service crash) via crafted TCP packets. | |||||
CVE-2012-0383 | 1 Cisco | 1 Ios | 2017-08-29 | 7.8 HIGH | N/A |
Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (memory consumption, and device hang or reload) via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326. | |||||
CVE-2011-4874 | 1 Microsys | 1 Promotic | 2017-08-29 | 7.9 HIGH | N/A |
Use-after-free vulnerability in MICROSYS PROMOTIC before 8.1.7 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (data corruption and application crash) via a crafted project (aka .pra) file. | |||||
CVE-2011-3263 | 1 Zabbix | 1 Zabbix | 2017-08-29 | 5.0 MEDIUM | N/A |
zabbix_agentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to cause a denial of service (CPU consumption) by executing the vfs.file.cksum command for a special device, as demonstrated by the /dev/urandom device. | |||||
CVE-2011-3262 | 1 Citrix | 1 Xen | 2017-08-29 | 2.1 LOW | N/A |
tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a denial of service (management software infinite loop and management domain resource consumption) via unspecified vectors related to "Lack of error checking in the decompression loop." | |||||
CVE-2011-3354 | 1 Quassel-irc | 1 Quassel | 2017-08-29 | 5.0 MEDIUM | N/A |
The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service (crash) via a crafted Client-To-Client Protocol (CTCP) request, as demonstrated in the wild in September 2011. | |||||
CVE-2011-3982 | 1 Ibm | 1 Aix | 2017-08-29 | 2.1 LOW | N/A |
The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA resource limitations, which allows local users to cause a denial of service (system hang) via vectors that generate a large amount of DMA I/O, related to a deadlock in timer processing across CPUs. | |||||
CVE-2011-3259 | 1 Apple | 2 Apple Tv, Iphone Os | 2017-08-29 | 5.0 MEDIUM | N/A |
The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP connections, which allows remote attackers to cause a denial of service (resource consumption) by making many connection attempts. | |||||
CVE-2011-3987 | 1 Daemon-tools | 1 Daemon Tools | 2017-08-29 | 4.9 MEDIUM | N/A |
dtsoftbus01.sys in DAEMON Tools Lite before 4.41.3, Pro Standard before 4.41.0315, and Pro Advanced before 4.41.0315 allows local users to cause a denial of service (system crash) via an invalid DeviceIoControl request to \\.\dtsoftbusctl. | |||||
CVE-2011-4109 | 1 Openssl | 1 Openssl | 2017-08-29 | 9.3 HIGH | N/A |
Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check. | |||||
CVE-2011-2893 | 1 Ibm | 1 Lotus Symphony | 2017-08-29 | 4.3 MEDIUM | N/A |
The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to cause a denial of service (application crash) via a large .xls spreadsheet with an invalid Value reference. | |||||
CVE-2011-2144 | 1 Ibm | 1 Datacap Taskmaster Capture | 2017-08-29 | 5.0 MEDIUM | N/A |
The eDocument Conversion Actions implementation in IBM Datacap Taskmaster Capture 8.0.1 FP1 and earlier allows remote attackers to cause a denial of service (batch abort) via a long subject line in an e-mail message that is represented in a .eml file. | |||||
CVE-2011-2888 | 1 Ibm | 1 Lotus Symphony | 2017-08-29 | 4.3 MEDIUM | N/A |
IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application hang) via complex graphics in a presentation. | |||||
CVE-2011-2173 | 1 Ibm | 1 Websphere Portal | 2017-08-29 | 4.0 MEDIUM | N/A |
The implementation of OutputMediator objects in IBM WebSphere Portal 6.0.1.7, and 7.0.0.1 before CF002, allows remote authenticated users to cause a denial of service (memory consumption) via requests. | |||||
CVE-2011-2885 | 1 Ibm | 1 Lotus Symphony | 2017-08-29 | 4.3 MEDIUM | N/A |
IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via the sample .doc document that incorporates a user-defined toolbar. |