Total
2696 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2011-3296 | 1 Cisco | 3 Catalyst 6500, Catalyst 7600, Firewall Services Module Software | 2017-08-29 | 7.8 HIGH | N/A |
Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when IPv6 is used, allows remote attackers to cause a denial of service (memory corruption and module crash or hang) via vectors that trigger syslog message 302015, aka Bug ID CSCti83875. | |||||
CVE-2011-3267 | 1 Php | 1 Php | 2017-08-29 | 5.0 MEDIUM | N/A |
PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors. | |||||
CVE-2011-3263 | 1 Zabbix | 1 Zabbix | 2017-08-29 | 5.0 MEDIUM | N/A |
zabbix_agentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to cause a denial of service (CPU consumption) by executing the vfs.file.cksum command for a special device, as demonstrated by the /dev/urandom device. | |||||
CVE-2011-3262 | 1 Citrix | 1 Xen | 2017-08-29 | 2.1 LOW | N/A |
tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a denial of service (management software infinite loop and management domain resource consumption) via unspecified vectors related to "Lack of error checking in the decompression loop." | |||||
CVE-2011-3259 | 1 Apple | 2 Apple Tv, Iphone Os | 2017-08-29 | 5.0 MEDIUM | N/A |
The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP connections, which allows remote attackers to cause a denial of service (resource consumption) by making many connection attempts. | |||||
CVE-2011-2893 | 1 Ibm | 1 Lotus Symphony | 2017-08-29 | 4.3 MEDIUM | N/A |
The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to cause a denial of service (application crash) via a large .xls spreadsheet with an invalid Value reference. | |||||
CVE-2011-2888 | 1 Ibm | 1 Lotus Symphony | 2017-08-29 | 4.3 MEDIUM | N/A |
IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application hang) via complex graphics in a presentation. | |||||
CVE-2011-2887 | 2 Ibm, Linux | 2 Lotus Symphony, Linux Kernel | 2017-08-29 | 4.3 MEDIUM | N/A |
IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service (application crash) via a certain sample document. | |||||
CVE-2011-2886 | 1 Ibm | 1 Lotus Symphony | 2017-08-29 | 4.3 MEDIUM | N/A |
IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via a .docx document with empty bullet styles for parent bullets. | |||||
CVE-2011-2885 | 1 Ibm | 1 Lotus Symphony | 2017-08-29 | 4.3 MEDIUM | N/A |
IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via the sample .doc document that incorporates a user-defined toolbar. | |||||
CVE-2011-2682 | 1 Ibm | 1 Rational Doors Web Access | 2017-08-29 | 4.0 MEDIUM | N/A |
The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (license consumption) by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login. | |||||
CVE-2011-2640 | 1 Opera | 1 Opera Browser | 2017-08-29 | 5.0 MEDIUM | N/A |
Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via an HTML document that has an empty parameter value for an embedded Java applet. | |||||
CVE-2011-2205 | 1 Prosody | 1 Prosody | 2017-08-29 | 5.0 MEDIUM | N/A |
Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. | |||||
CVE-2011-2188 | 1 Matthewwild | 1 Luaexpat | 2017-08-29 | 5.0 MEDIUM | N/A |
LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. | |||||
CVE-2011-2173 | 1 Ibm | 1 Websphere Portal | 2017-08-29 | 4.0 MEDIUM | N/A |
The implementation of OutputMediator objects in IBM WebSphere Portal 6.0.1.7, and 7.0.0.1 before CF002, allows remote authenticated users to cause a denial of service (memory consumption) via requests. | |||||
CVE-2011-2144 | 1 Ibm | 1 Datacap Taskmaster Capture | 2017-08-29 | 5.0 MEDIUM | N/A |
The eDocument Conversion Actions implementation in IBM Datacap Taskmaster Capture 8.0.1 FP1 and earlier allows remote attackers to cause a denial of service (batch abort) via a long subject line in an e-mail message that is represented in a .eml file. | |||||
CVE-2011-2064 | 1 Cisco | 2 Content Services Gateway Second Generation, Ios | 2017-08-29 | 7.8 HIGH | N/A |
Cisco IOS 12.4MDA before 12.4(24)MDA5 on the Cisco Content Services Gateway - Second Generation (CSG2) allows remote attackers to cause a denial of service (device reload) via crafted ICMP packets, aka Bug ID CSCtl79577. | |||||
CVE-2011-3280 | 1 Cisco | 2 Ios, Ios Xe | 2017-08-28 | 7.8 HIGH | 7.5 HIGH |
Memory leak in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (memory consumption or device reload) by sending crafted SIP packets to UDP port 5060, aka Bug ID CSCtj04672. | |||||
CVE-2011-4650 | 1 Cisco | 1 Data Center Network Manager | 2017-08-25 | 5.0 MEDIUM | 7.5 HIGH |
Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.2(1). Known Fixed Releases: 6.0(0)SL1(0.14) 5.2(2.73)S0. Product identification: CSCtt15295. | |||||
CVE-2012-0880 | 1 Apache | 1 Xerces-c\+\+ | 2017-08-18 | 7.8 HIGH | 7.5 HIGH |
Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions. |