Multiple cross-site request forgery (CSRF) vulnerabilities in Pligg before 1.0.3 allow remote attackers to hijack the authentication of administrators for requests that create user accounts or have unspecified other impact.


Multiple cross-site request forgery (CSRF) vulnerabilities in Photokorn Gallery 1.81 allow remote attackers to hijack the authentication of administrators.


Multiple cross-site request forgery (CSRF) vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of users for unspecified requests via unknown vectors.


A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch Version 2.0.00 and prior versions. The web application does not sufficiently verify that requests were provided by the user who submitted the request.


Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email campaigns or (2) delete contacts.


Multiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier and Plone before 5.x.


Multiple cross-site request forgery (CSRF) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request to dashboard/users/create/.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Codestyling Localization plugin 1.99.30 and earlier for Wordpress.


Multiple cross-site request forgery (CSRF) vulnerabilities in EMC RSA Archer GRC 5.5 SP1 before P3 allow remote attackers to hijack the authentication of arbitrary users.


Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow remote attackers to hijack the authentication of arbitrary users aka Bug ID CSCus95884.


Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and earlier allow remote attackers to hijack the authentication of arbitrary users aka Bug ID CSCut04596.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Feature Set module for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable or (2) disable a module via unspecified vectors.


Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451 Syncrify before 3.7 Build 856 and SynTail before 1.5 Build 567


Multiple cross-site request forgery (CSRF) vulnerabilities in the Corner module for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable or (2) disable corners via unspecified vectors.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Node basket module for Drupal allow remote attackers to hijack the authentication of arbitrary users for requests that (1) add or (2) remove nodes from a basket via unspecified vectors.


Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to hijack the authentication of users for requests that cause an unspecified impact via unknown parameters.


Multiple cross-site request forgery (CSRF) vulnerabilities in the Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified services in IBM Rational Team Concert (RTC) 4.x before 4.0.0.1 allow remote attackers to hijack the authentication of arbitrary users for requests that modify work items.


Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of administrators for requests that create administrative accounts.


Multiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache Roller before 5.0.1 allow remote attackers to hijack the authentication of admins or editors by leveraging the HTTP POST functionality.


Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bloxx Web Filtering before 5.0.14 allow remote attackers to hijack the authentication of administrators for requests that perform administrative actions.


Multiple cross-site request forgery (CSRF) vulnerabilities in the SimpleMeta module 6.x-1.x before 6.x-2.0 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) delete or (2) add a meta tag entry.


A cross-site request forgery (CSRF) vulnerability in the Activity module 6.x-1.x for Drupal.


Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Forum (2) Event and (3) Classifieds plugins in SocialEngine before 4.2.4.


Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.5 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.


A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator.


A cross-site request forgery vulnerability exists in Jenkins Email Extension Template Plugin 1.0 and earlier in ExtEmailTemplateManagement.java that allows creating or removing templates.


A cross-site request forgery vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in ConfigFilesManagement.java FolderConfigFileAction.java that allows creating and editing configuration file definitions.


A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.


Missing cross-site request forgery protection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to cause state-changing actions with specially crafted URLs.


A cross-site request forgery (CSRF) vulnerability in the APM webtop 11.2.1 or greater may allow attacker to force an APM webtop session to log out and require re-authentication.


A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete Address Reservation List settings.


A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/ resulting in account creation.


A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera.


A cross-site request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras which may allow an unauthorized user to be added to the system.


A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload. (It is possible to bypass CSRF protection by simply not including a nonce parameter.)


A Cross-Site Request Forgery (CSRF) vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site.


A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after an authenticated admin visits a third-party site or clicks on a URL.


A Cross-Site Request Forgery (CSRF) vulnerability in edit_user.php in OSWAPP Warehouse Inventory System (aka OSWA-INV) through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site.


A Cross-Site Request Forgery (CSRF) in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges.


A Cross-Site Request Forgery (CSRF) in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL.


A cross-site request forgery (CSRF) in Maccms 8.0 causes administrators to add and modify articles without their knowledge via clicking on a crafted URL.


A

cross-site

request

forgery

(CSRF)

in

MipCMS

allows

attackers

to

arbitrarily

escalate

user

privileges

to

administrator

via

index.php?s=/user/ApiAdminUser/itemEdit.


A cross-site request forgery (CSRF) in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application.


A

cross-site

request

forgery

(CSRF)

in

MipCMS

allows

attackers

to

arbitrarily

add

users

via

index.php?s=/user/ApiAdminUser/itemAdd.


A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add administrator users.


A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily reset account passwords.


A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily delete admin accounts.


A cross-site request forgery (CSRF) in /admin/maintenance/ of Domainmod 4.13 allows attackers to arbitrarily delete logs.


A cross-site request forgery (CSRF) in Rockoa v1.9.8 allows an authenticated attacker to arbitrarily add an administrator account.


A

Cross-Site

Request

Forgery

(CSRF)

in

Maccms

via

admin.php/admin/admin/del/ids/<id>.html

allows

authenticated

attackers

to

delete

all

users.


A

Cross-Site

Request

Forgery

(CSRF)

in

/admin/index.php?lfj=member&action=editmember

of

Qibosoft

allows

attackers

to

arbitrarily

add

administrator

accounts.


A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.


A cross-site request forgery (CSRF) in OPMS v1.3 and below allows attackers to arbitrarily add a user account via /user/add.


A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.


A Cross-Site Request Forgery (CSRF) in /member/post.php?job=postnew&step=post of Qibosoft v7 allows attackers to force victim users into arbitrarily publishing new articles via a crafted URL.


A Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify delete or make a new entry of the student faculty teacher subject scores location and article data.


A cross-site request forgery (CSRF) vulnerability in mod/user/act_user.php in Garfield Petshop through 2020-10-01 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.


Multiple Cross-Site Request Forgery (CSRF) vulnerabilities were present in Tufin SecureTrack affecting all versions prior to R20-2 GA.


A cross-site request forgery (CSRF) vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision.


A cross-site request forgery (CSRF) vulnerability in Jenkins Maven Cascade Release Plugin 1.3.2 and earlier allows attackers to start cascade builds and layout builds and reconfigure the plugin.


A cross-site request forgery vulnerability in Jenkins Mac Plugin 1.1.0 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials.


A cross-site request forgery (CSRF) vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to shelve unshelve or delete a project.


A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to connect to an attacker-specified database server using attacker-specified credentials.


A cross-site request forgery (CSRF) vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve unreserve unlock and reset resources.


A cross-site request forgery (CSRF) vulnerability in Jenkins MongoDB Plugin 1.3 and earlier allows attackers to gain access to some metadata of any arbitrary files on the Jenkins controller.


A cross-site request forgery vulnerability in Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier allows attackers to add or remove agent labels.


A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to execute arbitrary SQL scripts.


A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers to connect to an attacker-specified URL within the AWS region using attacker-specified credentials IDs obtained through another method.


A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances.


A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the OS user account running Jenkins.


A cross-site request forgery vulnerability in Jenkins Fortify on Demand Plugin 5.0.1 and earlier allows attackers to connect to the globally configured Fortify on Demand endpoint using attacker-specified credentials IDs.


A cross-site request forgery vulnerability in Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified username and password.


A cross-site request forgery (CSRF) vulnerability in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.


A cross-site request forgery (CSRF) vulnerability in Jenkins Shared Objects Plugin 0.44 and earlier allows attackers to configure shared objects.


A cross-site request forgery vulnerability in Jenkins CVS Plugin 2.15 and earlier allows attackers to create and manipulate tags and to connect to an attacker-specified URL.


A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce.


A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient.


A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.


A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by the system where LSB is installed.


A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions Light all versions Pro all versions and Pro Unlimited all versions. There is no CSRF Token generated per page or per function.


Multiple cross-site request forgery (CSRF) vulnerabilities on Crestron Electronics DM-TXRX-100-STR devices with firmware through 1.3039.00040 allow remote attackers to hijack the authentication of arbitrary users.


Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication of arbitrary users.


Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remote attackers to hijack the authentication of administrators.


Multiple cross-site request forgery (CSRF) vulnerabilities in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.


Multiple cross-site request forgery (CSRF) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to hijack the authentication of arbitrary users.


Multiple cross-site request forgery (CSRF) vulnerabilities in PHParanoid before 0.4 allow remote attackers to hijack the authentication of arbitrary users for requests that use (1) admin.php or (2) private messages.


Multiple cross-site request forgery (CSRF) vulnerabilities in TangoCMS before 2.2.0 allow remote attackers to hijack the authentication of administrators.


Multiple cross-site request forgery (CSRF) vulnerabilities in Streber before 0.08093 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Multiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1 a module for Drupal allow remote attackers to hijack the authentication of administrators.


Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.10 and 6.x before 6.4 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) delete user access rules.


Multiple cross-site request forgery (CSRF) vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to (1) add arbitrary accounts via the join_form page and (2) change the privileges of arbitrary groups via the prefs_groups_overview page.


Multiple cross-site request forgery (CSRF) vulnerabilities in Nuke ET 3.2 and 3.4 allow remote attackers to perform actions as administrators as demonstrated by inserting an XSS sequence into a document.


Multiple cross-site request forgery (CSRF) vulnerabilities on the ZyXEL P-660HW series router allow remote attackers to (1) change DNS servers and (2) add keywords to the \bannedlist\ via unspecified vectors.


Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users.


Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2 and 1.3.x before 1.3.5 allow remote attackers to hijack the authentication of administrators.


Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) edit administrator accounts.


Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of (1) an activity or (2) a course.


Multiple cross-site request forgery (CSRF) vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data.


Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers to hijack the authentication of user for requests that delete a user via user_delete.php and other unspecified programs.


A cross-site request forgery vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier in the M2ReleaseAction#doSubmit method allowed attackers to perform releases with attacker-specified options.


A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method allowed attackers to change the per-job default graph configuration for all users.


Windows CSC Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1652 CVE-2021-1653 CVE-2021-1654 CVE-2021-1655 CVE-2021-1659 CVE-2021-1688.

service elevated privilege vulnerability


Windows CSC Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1652 CVE-2021-1654 CVE-2021-1655 CVE-2021-1659 CVE-2021-1688 CVE-2021-1693.


Windows CSC Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1653 CVE-2021-1654 CVE-2021-1655 CVE-2021-1659 CVE-2021-1688 CVE-2021-1693.


Windows CSC Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1652 CVE-2021-1653 CVE-2021-1655 CVE-2021-1659 CVE-2021-1688 CVE-2021-1693.


Windows CSC Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1652 CVE-2021-1653 CVE-2021-1654 CVE-2021-1655 CVE-2021-1659 CVE-2021-1693.


Windows CSC Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1652 CVE-2021-1653 CVE-2021-1654 CVE-2021-1655 CVE-2021-1688 CVE-2021-1693.


Windows CSC Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1652 CVE-2021-1653 CVE-2021-1654 CVE-2021-1659 CVE-2021-1688 CVE-2021-1693.


A vulnerability in the FindMe feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected system. An attacker could exploit this vulnerability by persuading a user of the interface to follow a maliciously crafted link. A successful exploit could allow the attacker to perform arbitrary actions on an affected system with the privileges of the user. The arbitrary actions include adding an attacker-controlled device and redirecting calls intended for a specific user. For more information about CSRF attacks and potential mitigations see Understanding Cross-Site Request Forgery Threat Vectors. This vulnerability is fixed in software version X12.5.1 and later.


A vulnerability was discovered in all quay-2 versions before quay-3.0.0 in the Quay web GUI where POST requests include a specific parameter which is used as a CSRF token. The token is not refreshed for every request or when a user logged out and in again. An attacker could use a leaked token to gain access to the system using the user's account.


On Netis DL4323 devices CSRF exists via form2logaction.cgi to delete all logs.


Certain

NETGEAR

devices

are

affected

by

CSRF.

This

affects

before

before

before

before

before

before

before

before

before

before

before

and

before


The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability. The logout function of the admin panel is not protected by any CSRF tokens. An attacker can logout the user using this vulnerability.


An issue was discovered in Mattermost Server before 5.18.0 5.17.2 5.16.4 5.15.4 and 5.9.7. CSRF can sometimes occur via a crafted web site for account takeover attacks.


Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user.


An issue was discovered in Mattermost Server before 5.12.0 5.11.1 5.10.2 5.9.2 and 4.10.10. The login page allows CSRF.


ZyXEL

devices

allow

login/login-page.cgi

CSRF.


An issue was discovered in DOYO (aka doyocms) 2.3(20140425 update). There is a CSRF vulnerability that can add a super administrator account via admin.php?c=a_adminuser&a=add&run=1.


A

CSRF

vulnerability

was

found

in

Verydows

that

can

add

an

admin

account

via

index.php?m=backend&c=admin&a=add&step=submit.


A CSRF issue was discovered on Intelbras IWR 3000N 1.8.7 devices leading to complete control of the router as demonstrated by v1/system/user.


A CSRF issue was discovered on Intelbras IWR 3000N 1.5.0 devices leading to complete control of the router as demonstrated by v1/system/user.


A CSRF issue was discovered in webparam?user&action=set&param=add in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 to create an admin account.


A CSRF issue was discovered in Zammad before 1.0.4 1.1.x before 1.1.3 and 1.2.x before 1.2.1. To exploit the vulnerability an attacker can send cross-domain requests directly to the REST API for users with a valid session cookie.


A

CSRF

issue

was

discovered

in

in

hsweb

because

the

state

parameter

in

the

request

is

not

compared

with

the

state

parameter

in

the

session

after

user

authentication

is

successful.


A

CSRF

issue

was

discovered

in

SEMCMS

via

the

URI.


A CSRF issue was discovered in admin/Index/addmanageuser.html in Catfish CMS 4.8.30.


A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33.


A CSRF issue was discovered in Jirafeau before 3.4.1. The \delete file\ feature on the admin panel is not protected against automated requests and could be abused.


A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyService Billing 1.0. A User can be added with the Admin role.


A CSRF issue was discovered in EasyService Billing 1.0 which was triggered via a quotation-new3-new2.php?add=true&id= URI as demonstrated by adding a new quotation.


A CSRF issue was found in var/www/html/files.php in DanWin hosting through 2018-02-11 that allows arbitrary remote users to add/delete/modify any files in any hosting account.


A CSRF vulnerability exists in the Block Clients component of Web File Manager in Rumpus FTP 8.2.9.1 that could allow an attacker to whitelist or block any IP address via RAPR/BlockedClients.html.


A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1. This allows an attacker to Create/Delete Folders after exploiting it at RAPR/FolderSetsSet.html.


A CSRF vulnerability exists in the Event Notices Settings of Web File Manager in Rumpus FTP 8.2.9.1. An attacker can create/update event notices via RAPR/EventNoticesSet.html.


A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it an attacker can Create and Delete accounts via RAPR/TriggerServerFunction.html.


A CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP 8.2.9.1 that allows an attacker to add or delete the file types that are used on the server via RAPR/TriggerServerFunction.html.


A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Server Web settings at RAPR/WebSettingsGeneralSet.html.


A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1. By exploiting it an attacker can manipulate the SMTP setting and other network settings via RAPR/NetworkSettingsSet.html.


A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Server FTP settings at RAPR/FTPSettingsSet.html.


A CSRF vulnerability exists in the Upload Center Forms Component of Web File Manager in Rumpus FTP 8.2.9.1. This could allow an attacker to delete create and update the upload forms via RAPR/TriggerServerFunction.html.


A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.


A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users.


A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains.


A CSRF vulnerability in Pagekit 1.0.17 allows an attacker to upload an arbitrary file by removing the CSRF token from a request.


A CSRF vulnerability in Settings form in the Custom Simple Rss plugin 2.0.6 for WordPress allows attackers to change the plugin settings.


A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found.


A CSRF vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could allow an attacker to add change or remove administrative settings. Affected versions of Avaya Aura Orchestration Designer include all versions up to 7.2.1.


A CSRF vulnerability in the admin panel in Gogs through 0.11.53 allows remote attackers to execute admin operations via a crafted issue / link.


A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves as an instructor and performing other malicious actions (such as blocking legitimate instructors).


A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php.


A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.


Online Ticket Booking has CSRF via admin/movieedit.php.


In WordPress before 4.7.5 a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is not required for updating credentials.


NVIDIA SHIELD TV all versions prior to 8.2.2 contains a vulnerability in the NVHost function which may lead to abnormal reboot due to a null pointer reference causing data loss.


In all Android releases from CAF using the Linux kernel a data pointer is potentially used after it has been freed when SLIMbus is turned off by Bluetooth.


On versions 15.0.0-15.0.1.1 14.1.0-14.1.2 14.0.0-14.0.1 13.1.0-13.1.3.1 12.1.0-12.1.5 and 11.5.2-11.6.5.1 the BIG-IP APM system logs the client-session-id when a per-session policy is attached to the virtual server with debug logging enabled.


The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password which also appear as the default login text for the management interface which allows remote attackers to gain access.


In all android releases(Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel there is a security concern with default privileged access to ADB and debug-fs.


A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated remote attacker to connect to the affected system with the privileges of the root user. The vulnerability is due to the presence of a default SSH key pair that is present in all devices. An attacker could exploit this vulnerability by opening an SSH connection via IPv6 to a targeted device using the extracted key materials. An exploit could allow the attacker to access the system with the privileges of the root user. This vulnerability is only exploitable over IPv6; IPv4 is not vulnerable.


Apache Wicket before 1.5.13 6.x before 6.19.0 and 7.x before 7.0.0-M5 make it easier for attackers to defeat a cryptographic protection mechanism and predict encrypted URLs by leveraging use of CryptoMapper as the default encryption provider.


In Malwarebytes Free 4.1.0.56 a symbolic link may be used delete an arbitrary file on the system by exploiting the local quarantine system.


On BIG-IP 14.1.0-14.1.2 14.0.0-14.0.1 and 13.1.0-13.1.1 undisclosed HTTP requests may consume excessive amounts of systems resources which may lead to a denial of service.


IBM AIX 5.3 6.1 and 7.1 and VIOS 2.1.x and 2.2.x allows remote attackers to cause a denial of service (system crash) via an ICMP Echo Reply packet that contains 1 in the Identifier field a different vulnerability than CVE-2012-0194.


Node.js before 4.8.5 6.x before 6.11.5 and 8.x before 8.8.0 allows remote attackers to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.


The IBM i 7.1 7.2 7.3 and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user to send a specially crafted request and cause a denial of service. IBM X-Force ID: 214537.


In PHP before 5.6.31 7.x before 7.0.17 and 7.1.x before 7.1.3 remote attackers could cause a CPU consumption denial of service attack by injecting long form variables related to main/php_variables.c.


BEA WebLogic Server 9.0 9.1 and 9.2 Gold when running on Solaris 9 allows remote attackers to cause a denial of service (server inaccessibility) via manipulated socket connections.


In FFmpeg 3.2 and 4.1 a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format because ff_htmlmarkup_to_ass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.


In Rubyzip before 1.3.0 a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of service (disk consumption).


Net::DNS before 0.60 a Perl module allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers which triggers an infinite loop.


In ImageMagick 7.0.7-1 Q16 a memory leak vulnerability was found in the function ReadMPCImage in coders/mpc.c which allows attackers to cause a denial of service via a crafted file.


In ImageMagick 7.0.7-1 Q16 a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c which allows attackers to cause a denial of service (memory consumption in ReadMPCImage in coders/mpc.c) via a crafted file.


In ImageMagick 7.0.7-4 Q16 a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c which allows attackers to cause a denial of service (memory consumption in ResizeMagickMemory in MagickCore/memory.c) via a crafted file.


In ImageMagick 7.0.7-1 Q16 a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c which allows attackers to cause a denial of service via a crafted file.


In ImageMagick 7.0.7-16 Q16 a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c which allows attackers to cause a denial of service via a crafted MNG image file that is processed by ReadOneMNGImage.


In ImageMagick 7.0.7-16 Q16 a vulnerability was found in the function ReadOnePNGImage in coders/png.c which allows attackers to cause a denial of service (ReadOneMNGImage large loop) via a crafted mng image file.


In ImageMagick 7.0.7-16 Q16 a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c which allows attackers to cause a denial of service via a crafted PNG image file.


In ImageMagick 7.0.6-10 Q16 a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c which allow remote attackers to cause a denial of service via a crafted file.


In ImageMagick 7.0.7-1 Q16 a memory exhaustion vulnerability was found in the function ReadTIFFImage in coders/tiff.c which allow remote attackers to cause a denial of service via a crafted file.


In ImageMagick 7.0.7-1 Q16 a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c which allow remote attackers to cause a denial of service via a crafted file.


In WAVM through 2018-07-26 a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because a certain new_allocator allocate call fails.


In WAVM through 2018-07-26 a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because Errors::unreachable() is reached.


In BlueZ before 5.55 a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution during service discovery due to a redundant disconnect MGMT event.


NVIDIA GeForce Experience all versions prior to 3.21 contains a vulnerability in GameStream (rxdiag.dll) where an arbitrary file deletion due to improper handling of log files may lead to denial of service.


Tec4Data SmartCooler all versions prior to firmware 180806 the device responds to a remote unauthenticated reboot command that may be used to perform a denial of service attack.


In ImageMagick 7.0.5-7 Q16 an assertion failure was found in the function LockSemaphoreInfo which allows attackers to cause a denial of service via a crafted file.


In ImageMagick 7.0.5-7 Q16 an assertion failure was found in the function SetPixelChannelAttributes which allows attackers to cause a denial of service via a crafted file.


In ImageMagick 7.0.5-8 Q16 an assertion failure was found in the function ResetImageProfileIterator which allows attackers to cause a denial of service via a crafted file.


tcpdump Ethereal and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself which causes tcpdump to enter an infinite loop while decompressing the packet.


Webconfig IMAP and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service via a long URL terminated by a \\\r\\n\ string.


MySQL MaxDB 7.5.0.0 and other versions before 7.5.0.21 allows remote attackers to cause a denial of service (crash) via an HTTP request with invalid headers.


ZoneAlarm Pro 6.5.737.000 6.1.744.001 and possibly earlier versions and other products allows local users to cause a denial of service (system crash) by sending malformed data to the vsdatant device driver which causes an invalid memory access.


Cacti 0.8.6i and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_height or (2) graph_width parameter different vectors than CVE-2007-3112.


jabber 1.4.2 1.4.2a and possibly earlier versions does not properly handle SSL connections which allows remote attackers to cause a denial of service (crash).


Xen 3.4 through 4.2 and possibly earlier versions allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an \inappropriate deadline.\


Desktop Rover 3.0 and possibly earlier versions allows remote attackers to cause a denial of service (application crash) via a crafted packet to TCP port 61427 which causes an invalid memory access.


httprint v202 and possibly other versions before v301 allows remote attackers to cause a denial of service (crash) via a long Server field in an HTTP response.


Apache Tomcat 4.0.3 and possibly other versions before 4.1.3 beta allows remote attackers to cause a denial of service (resource exhaustion) via a large number of requests to the server with null characters which causes the working threads to hang.


Rational ClearCase 4.1 2002.05 and possibly other versions allows remote attackers to cause a denial of service (crash) via certain packets to port 371 e.g. via nmap.


Linux kernel 2.6.18 and possibly other versions when running on AMD64 architectures allows local users to cause a denial of service (crash) via certain ptrace calls.


GitLab EE 12.3 through 12.5 12.4.3 and 12.3.6 allows Denial of Service. Certain characters were making it impossible to create edit or view issues and commits.


On BIG-IP 11.5.1-11.5.8 11.6.1-11.6.3 and 12.0.x an undisclosed sequence of packets received by an SSL virtual server and processed by an associated Client SSL or Server SSL profile may cause a denial of service.


IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a denial of service attack that could allow a remote user to send specially crafted requests that would consume all available CPU and memory resources. IBM X-Force ID: 158973.


fedup 0.9.0 in Fedora 19 20 and 21 uses a temporary directory with a static name for its download cache which allows local users to cause a denial of service (prevention of system updates).


Alstom e-terracontrol 3.5 3.6 and 3.7 allows remote attackers to cause a denial of service (infinite loop) via crafted DNP3 packets.


Xen 4.0.2 through 4.0.4 4.1.x and 4.2.x allows local PV guest users to cause a denial of service (hypervisor crash) via certain bit combinations to the XSETBV instruction.


CounterPath X-Lite 3.0 34025 and possibly eyeBeam allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Content-Type header.


FTP Explorer 1.0.1 Build 047 and other versions before 1.0.1.52 allows remote servers to cause a denial of service (CPU consumption) via a long response to a PWD command.


AVM Fritz!Box 7050 and possibly other product models allows remote attackers to cause a denial of service (VoIP application crash) via a zero-length UDP packet to the SIP port (port 5060).


Mozilla Firefox 3.0.19 3.5.x and 3.6.x allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs.


Cisco IOS 12.1 through 12.4 and 15.0M before 15.0(1)M1 allows remote attackers to cause a denial of service (interface queue wedge) via malformed H.323 packets aka Bug ID CSCta19962.


Mozilla Firefox 3.0.6 through 3.0.13 and 3.5.x allows remote attackers to cause a denial of service (CPU consumption) via JavaScript code with a long string value for the hash property (aka location.hash) a related issue to CVE-2008-5715.


Mozilla Firefox before 3.0.12 and 3.5.x before 3.5.2 allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply.


GDM 2.4.4.x before 2.4.4.4 and 2.4.1.x before 2.4.1.7 does not restrict the size of input which allows attackers to cause a denial of service (memory consumption).


Netscape Messaging Server 3.54 3.55 and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands.


The (1) Webmail (2) admin and (3) SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous connections to the service.


Attack Mitigator IPS 5500 3.11.008 and possibly other versions when configured in a one-armed routing configuration allows remote attackers to cause a denial of service (CPU consumption) via a large number of HTTP requests.


Darwin Streaming Server 5.0.1 and possibly earlier versions allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with a location that contains a null byte.


Cisco IOS 12.0S 12.2 and 12.3 with Open Shortest Path First (OSPF) enabled allows remote attackers to cause a denial of service (device reload) via a malformed OSPF packet.


MySQL 4.x before 4.0.21 and 3.x before 3.23.49 allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs.


Microsoft .NET Framework 4.6 4.6.1 4.6.2 and 4.7 allow an attacker to send specially crafted requests to a .NET web application resulting in denial of service aka .NET Denial of Service Vulnerability.


Microsoft .NET Framework 4.5 4.5.1 4.5.2 and 4.6 allows remote attackers to cause a denial of service to an ASP.NET web site via crafted requests aka \MVC Denial of Service Vulnerability.\


Microsoft Windows 2000 XP and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a PNG image with crafted (1) Width and (2) Height values in the IHDR block.


Symantec LiveUpdate 1.4 through 1.6 and possibly later versions allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site.


Lotus Domino 5.0.5 and 5.0.8 and possibly other versions allows remote attackers to cause a denial of service (block access to databases that have not been previously accessed) via a URL that includes the . (dot) directory.


Linux kernel 2.2.1 through 2.2.19 and 2.4.1 through 2.4.10 allows local users to cause a denial of service via a series of deeply nested symlinks which causes the kernel to spend extra time when trying to access the link.


On BIG-IP 15.1.0-15.1.0.1 15.0.0-15.0.1.2 and 14.1.0-14.1.2.3 undisclosed HTTP/2 requests can lead to a denial of service when sent to a virtual server configured with the Fallback Host setting and a server-side HTTP/2 profile.


On BIG-IP 15.0.0-15.1.0.1 14.1.0-14.1.2.3 13.1.0-13.1.3.3 12.1.0-12.1.5.1 and 11.6.1-11.6.5.1 malformed input to the DATAGRAM::tcp iRules command within a FLOW_INIT event may lead to a denial of service.


Huawei USG9520 USG9560 and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote authenticated users to cause a denial of service (device restart) via an unspecified command parameter.


Huawei USG9520 USG9560 and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote attackers to cause a denial of service (device restart) via an unspecified URL.


Cisco IOS XR 4.2.3 4.3.0 4.3.4 and 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (CRC and symbol errors and interface flap) via crafted bit patterns in packets aka Bug ID CSCuv78548.


NetBSD 2.0 before 2.0.4 2.1 before 2.1.1 and 3 when the kernel is compiled with \options DIAGNOSTIC \ allows local users to cause a denial of service (kernel assertion panic) via a negative linger time in the SO_LINGER socket option.


cachefsd in Solaris 2.6 7 and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request.


Mailtool for OpenWindows 3.6 3.6.1 and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentation violation and crash) via a malformed mail attachment.


PHP 4.4.x before 4.4.9 and 5.x through 5.2.6 when used as a FastCGI module allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension as demonstrated using foo..php.


Simple DNS Plus 4.1 5.0 and possibly other versions before 5.1.101 allows remote attackers to cause a denial of service via multiple DNS reply packets.


Cisco IOS XR 3.8.3 3.8.4 and 3.9.1 allows remote attackers to cause a denial of service (NetIO process restart or device reload) via a crafted IPv4 packet aka Bug ID CSCth44147.


unzoo.c as used in multiple products including AMaViS 2.4.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.


Zend Framework as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to read arbitrary files cause a denial of service or possibly have other impact via an XML External Entity (XXE) attack.


getID3() before 1.9.8 as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to read arbitrary files cause a denial of service or possibly have other impact via an XML External Entity (XXE) attack.


SabreDAV before 1.7.11 as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to read arbitrary files cause a denial of service or possibly have other impact via an XML External Entity (XXE) attack.


JavaScriptCore.dll as used in Apple Safari 4.0.5 on Windows XP SP3 allows remote attackers to cause a denial of service (application crash) via an HTML document composed of many successive occurrences of the <object> substring.


libmikmod 3.1.11 through 3.2.0 as used by MikMod and possibly other products allows user-assisted attackers to cause a denial of service (application crash) by loading an XM file.


asycpict.dll as used in Microsoft products such as Front Page 97 and 98 allows remote attackers to cause a denial of service (hang) via a JPEG image with maximum height and width values.


FreeType before 2.4.9 as used in Mozilla Firefox Mobile before 10.0.4 and other products allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font.


Cumin before 0.1.5444 as used in Red Hat Enterprise Messaging Realtime and Grid (MRG) 2.0 allows remote authenticated users to cause a denial of service (memory consumption) via a large size in an image request.


mod_cluster as used in Red Hat JBoss Web Server 2.1 allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate element.


Quake 3 engine as used in multiple games allows remote attackers to cause a denial of service (client disconnect) via a long message which is not properly truncated and causes the engine to process the remaining data as if it were network data.


Unreal engine 3 as used in Unreal Tournament 3 1.3 Frontlines: Fuel of War 1.1.1 and other products allows remote attackers to cause a denial of service (server exit) via a packet with a large length value that triggers a memory allocation failure.


markdown2 >=1.0.1.18 fixed in 2.4.0 is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string it can make markdown2 processing difficult or delayed for an extended period of time.


Huawei Quidway S9700 S5700 S5300 S9300 and S7700 switches with software before V200R003SPH012 allow remote attackers to cause a denial of service (switch restart) via crafted traffic.


In FFmpeg 2.4 and 3.3.3 the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list which allows remote attackers to cause a denial of service (infinite loop).


In ImageMagick 7.0.5-6 Q16 the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In ImageMagick 7.0.5-6 Q16 the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.


In Qt through 5.14.1 the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).


In Zillya! Antivirus 3.0.2230.0 the driver file (zef.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402424.


In K7 Antivirus 15.1.0306 the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x95002578.


In Zillya! Antivirus 3.0.2230.0 the driver file (zef.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40242C.


In K7 Antivirus 15.1.0306 the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002168.


In K7 Antivirus 15.1.0306 the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x95002610.


In Zillya! Antivirus 3.0.2230.0 the driver file (zef.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402414.


In K7 Antivirus 15.1.0306 the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x950025b0.


In Artifex MuPDF 1.12.0 the pdf_read_new_xref function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation violation and application crash) via a crafted pdf file.


In eScan Antivirus 14.0.1400.2029 the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300210C.


In eScan Antivirus 14.0.1400.2029 the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020F8.


In eScan Antivirus 14.0.1400.2029 the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020E0 or 0x830020E4.


In Artifex MuPDF 1.13.0 the pdf_get_xref_entry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation fault in fz_write_data in fitz/output.c) via a crafted pdf file.


In Artifex MuPDF 1.13.0 the fz_append_byte function in fitz/buffer.c allows remote attackers to cause a denial of service (segmentation fault) via a crafted pdf file. This is caused by a pdf/pdf-device.c pdf_dev_alpha array-index underflow.


In Jiangmin Antivirus 16.0.13.129 the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220440.


In OpenJPEG 2.3.1 there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.


In ncurses 6.0 there is an attempted 0xffffffffffffffff access in the append_acs function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data.


In LibTIFF 4.0.8 there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. A crafted input will lead to a remote denial of service attack.


In LibTIFF 4.0.8 there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a remote denial of service attack.


In LibTIFF 4.0.8 there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack.


In GraphicsMagick 1.3.28 there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.


In ImageMagick 7.0.7-28 there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file.


In MuPDF 1.13.0 there is an infinite loop in the fz_skip_space function of the pdf/pdf-xref.c file. A remote adversary could leverage this vulnerability to cause a denial of service via a crafted pdf file.


In PoDoFo 0.9.5 there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.


In GraphicsMagick 1.3.27 there is an infinite loop and application hang in the ReadBMPImage function (coders/bmp.c). Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value.


In PoDoFo 0.9.5 there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file.


In OpenJPEG 2.3.0 there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.


In ZZIPlib 0.13.67 there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.


In ZZIPlib 0.13.67 there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.


In ZZIPlib 0.13.68 there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.


In LibTIFF there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack.


In ImageMagick 7.0.8-36 Q16 there is a memory leak in the function SVGKeyValuePairs of coders/svg.c which allows an attacker to cause a denial of service via a crafted image file.


In ImageMagick 7.0.8-13 Q16 there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.


In Libav through 12.2 there is an invalid memcpy in the av_packet_ref function of libavcodec/avpacket.c. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) via a crafted avi file.


Mitsubishi E-Designer Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary code execution compromised data integrity denial of service and system crash.


Mitsubishi E-Designer Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack. This can result in arbitrary code execution compromised data integrity denial of service and system crash.


SAP Host Agent version 7.21 allows an attacker to cause a slowdown in processing of username/password-based authentication requests of the SAP Host Agent leading to Denial of Service.


Dell Networking OS10 versions 10.4.3.x 10.5.0.x 10.5.1.x & 10.5.2.x contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability leading to a denial of service.


OpenBSD 4.4 4.5 and 4.6 when running on an i386 kernel does not properly handle XMM exceptions which allows local users to cause a denial of service (kernel panic) via unspecified vectors.


Apache 2 before 2.0.47 when running on an IPv6 host allows attackers to cause a denial of service (CPU consumption by infinite loop) when the FTP proxy server fails to create an IPv6 socket.


PowerDNS before 2.9.18 when running with an LDAP backend does not properly escape LDAP queries which allows remote attackers to cause a denial of service (failure to answer ldap questions) and possibly conduct an LDAP injection attack.


OpenVPN before 2.0.1 when running in \dev tap\ Ethernet bridging mode allows remote authenticated clients to cause a denial of service (memory exhaustion) via a flood of packets with a large number of spoofed MAC addresses.


Opera before 8.51 when running on Windows with Input Method Editor (IME) installed allows remote attackers to cause a denial of service (persistent application crash) by bookmarking a site with a long title.


Snort before 2.8.5.1 when the -v option is enabled allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.


Nmap through 7.70 when the -sV option is used allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted TCP-based service.


Pacemaker before 1.1.15 when using pacemaker remote might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.


journald in systemd when the origin of native messages is set to file allows local users to cause a denial of service (logging service blocking) via a crafted file descriptor.


Cisco IOS 12.2 through 12.4 when certain PMTUD SNAT or window-size configurations are used allows remote attackers to cause a denial of service (infinite loop and device reload or hang) via a TCP segment with crafted options aka Bug ID CSCsz75186.


Cisco IOS 12.0 through 12.4 when IP-based tunnels and the Cisco Express Forwarding feature are enabled allows remote attackers to cause a denial of service (device reload) via malformed packets aka Bug ID CSCsx70889.


Cisco IOS 12.0 through 12.2 when IP routing is disabled accepts false ICMP redirect messages which allows remote attackers to cause a denial of service (network routing modification).


Cisco voice products when running the IBM Director Agent on IBM servers before OS 2000.2.6 allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247 as demonstrated using port scanning.


Atlassian Eucalyptus before 4.4.1 when in EDGE mode allows remote authenticated users with certain privileges to cause a denial of service (E2 service outage) via unspecified vectors.


JBMC DirectAdmin before 1.52 when the email_ftp_password_change setting is nonzero allows remote attackers to obtain access or cause a denial of service (segfault) via an unspecified request.


Everest PeakHMI before 8.7.0.2 when the video server is used allows remote attackers to cause a denial of service (incorrect pointer dereference and daemon crash) via a crafted packet.


Cisco IP Phone 7861 when firmware from Cisco Unified Communications Manager 10.3(1) is used allows remote attackers to cause a denial of service via crafted packets aka Bug ID CSCus81800.


Cisco IOS 12.2 12.4 15.0 15.2 and 15.3 when a VRF interface is configured allows remote attackers to cause a denial of service (interface queue wedge) via crafted ICMPv4 packets aka Bug ID CSCsi02145.


MediaWiki 1.24.x before 1.24.2 when using PBKDF2 for password hashing allows remote attackers to cause a denial of service (CPU consumption) via a long password.


Linux kernel before 2.6.15.5 when running on Intel processors allows local users to cause a denial of service (\endless recursive fault\) via unknown attack vectors related to a \bad elf entry address.\


Dnsmasq before 2.63test1 when used with certain libvirt configurations replies to requests from prohibited interfaces which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.


HAproxy 1.6.x before 1.6.6 when a deny comes from a reqdeny rule allows remote attackers to cause a denial of service (uninitialized memory access and crash) or possibly have unspecified other impact via unknown vectors.


OpenVPN 2.x before 2.0.4 when running in TCP mode allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status which leads to a null dereference in an exception handler.


Kaspersky Anti-Hacker 1.0 when configured to automatically block attacks allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.


Norton Personal Firewall 2002 4.0 when configured to automatically block attacks allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.


Cisco IOS 11.1 through 12.2 when HSRP support is not enabled allows remote attackers to cause a denial of service (CPU consumption) via randomly sized UDP packets to the Hot Standby Routing Protocol (HSRP) port 1985.


Cisco IOS 12.0 through 12.2 when supporting SSH allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144).


ZoneAlarm Pro 3.0 and 3.1 when configured to block all traffic allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of SYN packets (SYN flood). NOTE: the vendor was not able to reproduce the issue.


WinFTP FTP Server 2.3.0 when passive (aka PASV) mode is used allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid \NLST -1\ command.


Prosody 0.8.x before 0.8.1 when MySQL is used assigns an incorrect data type to the value column in certain tables which might allow remote attackers to cause a denial of service (data truncation) by sending a large amount of data.


Cisco IOS 12.2(58)SE when a login banner is configured allows remote attackers to cause a denial of service (device reload) by establishing two SSH2 sessions aka Bug ID CSCto62631.


Sophos Anti-Virus 5.0.1 with \Scan inside archive files\ enabled allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.


Typsoft FTP Server 1.11 with \Sub Directory Include\ enabled allows remote attackers to cause a denial of service (crash) by sending multiple RETR commands. NOTE: it was later reported that 1.10 is also affected.


Google Talk before 1.0.0.76 with email notification enabled allows remote attackers to cause a denial of service (connection reset) via email with a blank sender.


Cisco IOS 12.1 12.2 12.3 and 12.4 with IPv4 UDP services and the IPv6 protocol enabled allows remote attackers to cause a denial of service (device crash and possible blocked interface) via a crafted IPv6 packet to the device.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV) related to the ReadImage function in input-bmp.c:370:25.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV) related to the pnm_load_ascii function in input-pnm.c:306:14.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV) related to the pnm_load_ascii function in input-pnm.c:303:12.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read) related to the GET_COLOR function in color.c:16:11.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV) related to the ReadImage function in input-bmp.c:390:12.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV) related to the ReadImage function in input-bmp.c:425:14.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid free) related to the free_bitmap function in bitmap.c:24:5.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV) related to the GET_COLOR function in color.c:16:11.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV) related to the pnm_load_raw function in input-pnm.c:336:11.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV) related to the ReadImage function in input-bmp.c:440:14.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV) related to the ReadImage function in input-bmp.c:353:25.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV) related to the pnm_load_rawpbm function in input-pnm.c:391:15.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV) related to the ReadImage function in input-bmp.c.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV) related to the GET_COLOR function in color.c:21:23.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and application crash) related to the GET_COLOR function in color.c:16:11.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV) related to the ReadImage function in input-bmp.c:421:11.


libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV) related to the input_pnm_reader function in input-pnm.c:243:3.


An ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI before 2013 allows remote attackers to cause a denial of service by triggering the display of local example files.


An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the swURL attribute.


An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) by invoking the RealPlayer.OpenURLInPlayerBrowser method with a long second argument.


Cisco Adaptive Security Appliance (ASA) Software does not properly handle errors during the processing of DNS responses which allows remote attackers to cause a denial of service (device reload) via a malformed response aka Bug ID CSCuj28861.


Cisco Adaptive Security Appliance (ASA) Software when DHCPv6 replay is configured allows remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 packet aka Bug ID CSCun45520.


Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to cause a denial of service (device reload) via crafted attributes in a RADIUS packet aka Bug ID CSCun69561.


Cisco Adaptive Security Appliance (ASA) Software 9.3(2.243) and 100.13(0.21) allows remote attackers to cause a denial of service (device reload) by sending crafted OSPFv2 packets on the local network aka Bug ID CSCus84220.


Cisco Adaptive Security Appliance (ASA) Software 9.3(2) allows remote attackers to cause a denial of service (system reload) by sending crafted OSPFv2 packets on the local network aka Bug ID CSCut52679.


Cisco Adaptive Security Appliance (ASA) Software when a DHCPv6 relay is configured allows remote attackers to cause a denial of service (device reload) via crafted DHCP packets on the local network aka Bug ID CSCur45455.


Cisco Adaptive Security Appliance (ASA) software 8.7.1 and 8.7.1.1 for the Cisco ASA 1000V Cloud Firewall allows remote attackers to cause a denial of service (device reload) via a malformed H.225 H.323 IPv4 packet aka Bug IDs CSCuc42812 and CSCuc88741.


Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.1.x before 7.1(2)70 7.2.x before 7.2(4) and 8.0.x before 8.0(3)10 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface.


Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(3)2 and 8.0.x before 8.0(2)17 allows remote attackers to cause a denial of service (device reload) via a port scan against TCP port 443 on the device.


Cisco Adaptive Security Appliances (ASA) devices with software 9.0 before 9.0(1.2) allow remote attackers to cause a denial of service (device reload) via a crafted field in a DNS message aka Bug ID CSCuc80080.


Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allow remote attackers to cause a denial of service via a flood of packets aka Bug ID CSCtg06316.


Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier allow remote attackers to cause a denial of service (block exhaustion) via EIGRP traffic that triggers an EIGRP multicast storm aka Bug ID CSCtf20269.


Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (IKE process hang) via malformed NAT-T packets aka Bug ID CSCsr74439.


Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (traceback) via malformed TCP packets aka Bug ID CSCsm84110.


Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allow remote attackers to cause a denial of service (ASDM syslog outage) via a long URL aka Bug IDs CSCsm11264 and CSCtb92911.


The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to cause a denial of service (web outage) via an HTTP POST request to cgi-bin/firmwarecfg.


The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP request without a Content-Length parameter.


In Advanced SystemCare Ultimate 11.0.1.58 the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc.


In Advanced SystemCare Ultimate 11.0.1.58 the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060c4.


In Advanced SystemCare Ultimate 11.0.1.58 the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc.


In Advanced SystemCare Ultimate 11.0.1.58 the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402004.


In Advanced SystemCare Ultimate 11.0.1.58 the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402004.


In Advanced SystemCare Ultimate 11.0.1.58 the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060c4.


In Advanced SystemCare Ultimate 11.0.1.58 the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc.


In Advanced SystemCare Ultimate 11.0.1.58 the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000.


In Advanced SystemCare Ultimate 11.0.1.58 the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060c4.


In Advanced SystemCare Ultimate 11.0.1.58 the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000.


In Advanced SystemCare Ultimate 11.0.1.58 the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000.


In Advanced SystemCare Ultimate 11.0.1.58 the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0.


In Advanced SystemCare Ultimate 11.0.1.58 the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402004.


In Advanced SystemCare Ultimate 11.0.1.58 the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0.


In Advanced SystemCare Ultimate 11.0.1.58 the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0.


The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receiving server which could cause a denial-of-service condition due to lack of heap memory resources.


This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled sending a corrupt HTTP request can lead to denial of service or arbitrary code execution.


This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted invalid emails.


IBM AIX 7.1 7.2 7.3 and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 213073.


IBM AIX 7.1 7.2 7.3 and VIOS 3.1 could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands. IBM X-Force ID: 211825.


IBM AIX 7.1 7.2 7.3 and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 212951.


IBM AIX 7.1 7.2 7.3 and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 213072.


IBM AIX 7.1 7.2 7.3 and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 212950.


IBM AIX 7.1 7.2 7.3 and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 213076.


IBM AIX 7.1 7.2 7.3 and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the smbcd daemon to cause a denial of service. IBM X-Force ID: 212962.


IBM AIX 7.1 7.2 7.3 and VIOS 3.1 could allow a non-privileged trusted host user to exploit a vulnerability in the nimsh daemon to cause a denial of service in the nimsh daemon on another trusted host. IBM X-Force ID: 220396


IBM AIX 7.1 7.2 7.3 and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM X-Force ID: 220394.


IBM AIX 7.1 7.2 and VIOS 3.1 could allow a local user that is in the with elevated group privileges to cause a denial of service due to a vulnerability in the lpd daemon. IBM X-Force ID: 200255.


IBM AIX 7.1 7.2 and VIOS 3.1 could allow a local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 201106.


IBM AIX 7.1 7.2 and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 206086.


libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors related to read failures and other bugs.


Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a crafted source (aka -S) file. NOTE: there might be a limited number of scenarios in which this has security relevance.


libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.


jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.


IrfanView

allows

attackers

to

cause

a

denial

of

service

or

possibly

other

unspecified

impacts

via

a

crafted

file

related

to

a

\Data

from

Faulting

Address

controls

Branch

Selection

starting

at

FORMATS!GetPlugInInfo+0x00000000000047f6\.


GJSON <1.6.5 allows attackers to cause a denial of service (remote) via crafted JSON.


JerryScript 2.2.0 allows attackers to cause a denial of service (assertion failure) because a property key query for a Proxy object returns unintended data.


JerryScript 2.2.0 allows attackers to cause a denial of service (stack consumption) via a proxy operation.


Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet.


Pinkie 2.15 allows remote attackers to cause a denial of service (daemon crash) via a TFTP read (RRQ) request aka opcode 1.


Serva 4.4.0 allows remote attackers to cause a denial of service (daemon crash) via a TFTP read (RRQ) request aka opcode 1 a related issue to CVE-2013-0145.


Valine 1.4.14 allows remote attackers to cause a denial of service (application outage) by supplying a ua (aka User-Agent) value that only specifies the product and version.


Ceilidh allows remote attackers to cause a denial of service via a large number of POST requests.


PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt.


BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets.


BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers.


WengoPhone 2.1 allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Content-Type header.


Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursively includes itself.


BitsCast 0.13.0 allows remote attackers to cause a denial of service (application crash) via an RSS 2.0 feed item with certain invalid strings in a pubDate element as demonstrated by repeated \../A\ or \A/../\ patterns.


PicoZip allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.


WinAce allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.


LiteWEB 2.7 allows remote attackers to cause a denial of service (hang) via a large number of requests for nonexistent pages.


Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.


IrfanView 3.99 allows remote attackers to cause a denial of service (application crash) via a malformed WMF file.


ZynOS 3.40 allows remote attackers to cause a denial of service (link restart) by sending a request for the name \\M via the SMB Mail Slot Protocol.


Konqueror 3.5.5 allows remote attackers to cause a denial of service (crash) by using JavaScript to read a child iframe having an ftp:// URI.


ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).


ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file.


ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file.


ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file.


ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted viff file.


ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file.


ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted xwd image.


ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted wpg file.


ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted pnm file.


ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file.


ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted dpc image.


VDSM allows remote attackers to cause a denial of service (connection blocking) by keeping an SSL connection open.


Opera 9.52 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs.


MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed within other start tags as demonstrated by a <bo<bo<bo<bo<body>dy>dy>dy>dy> sequence a different vulnerability than CVE-2010-4524.


GUPnP 0.12.7 allows remote attackers to cause a denial of service (crash) via an empty (1) subscription or (2) control message.


Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location.


Opera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML document containing a long series of start-tags with no corresponding end-tags. NOTE: it was later reported that 9.52 is also affected.


FFmpeg 0.5 allows remote attackers to cause a denial of service (hang) via a crafted file that triggers an infinite loop.


dhttpd allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests as demonstrated by Slowloris.


PalmOS allows remote attackers to cause a denial of service (CPU consumption) via a flood of ICMP echo request (ping) packets.


Blubster 2.5 allows remote attackers to cause a denial of service (crash) via a flood of connections to UDP port 701.


TinyWeb 1.9 allows remote attackers to cause a denial of service (CPU consumption) via a \.%00.\ in an HTTP GET request to the cgi-bin directory.


Winamp 3.0 allows remote attackers to cause a denial of service (crash) via a .b4s file with a playlist name that contains some non-English characters e.g. Cyrillic characters.


Unichat allows remote attackers to cause a denial of service (crash) by adding extra chat characters (avatars) and logging in to a chat room as demonstrated using duplicate ACTOR entries in u2res000.rit.


Netscape 7.0 allows remote attackers to cause a denial of service (crash) via a web page with an invalid regular expression argument to the JavaScript reformatDate function.


xchat 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an invalid ID number which causes a null dereference.


nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.


Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra / in the http:// tag.


IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters.


NukeNabber allows remote attackers to cause a denial of service by connecting to the NukeNabber port (1080) without sending any data which causes the CPU usage to rise to 100% from the report.exe program that is executed upon the connection.


UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.


Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.


ChatterBox 2.0 allows remote attackers to cause a denial of service (server crash) via a malformed request to the server as demonstrated using \aaaaaa\.


MiniShare 1.3.2 allows remote attackers to cause a denial of service (crash) via a malformed HTTP GET or HEAD request without the proper number of trailing CRLF sequences.


myServer 0.7.1 allows remote attackers to cause a denial of service (crash) via a long HTTP POST request in a View=Logon operation to index.html.


BaSoMail 1.24 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections to TCP port (1) 25 (SMTP) or (2) 110 (POP3).


efFingerD 0.2.12 allows remote attackers to cause a denial of service (daemon crash) via a packet with a single byte which triggers a \Wrong protocol or connection state\ error.


RSniff 1.0 allows remote attackers to cause a denial of service (connection exhaustion) via a large number of connections with a command other than AUTHENTICATE or without any data which prevents the socket from being closed properly.


Opera 7.54 allows remote attackers to cause a denial of service (application crash from memory exhaustion) as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.


BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connections from the same IP address.


Mozilla allows remote attackers to cause a denial of service (application crash from invalid memory access) via an \unusual combination of visual elements \ including several large MARQUEE tags with large height parameters as demonstrated by mangleme.


Opera allows remote attackers to cause a denial of service (invalid memory reference and application crash) via a web page or HTML email that contains a TBODY tag with a large COL SPAN value as demonstrated by mangleme.


MyWebServer 1.0.3 allows remote attackers to cause a denial of service (application crash) via a large number of connections within a short time.


Xedus 1.0 allows remote attackers to cause a denial of service (refuse connections) by connecting multiple times from the same IP address.


Links allows remote attackers to cause a denial of service (memory consumption) via a web page or HTML email that contains a table with a td element and a large rowspan value as demonstrated by mangleme.


zgv 5.5.3 allows remote attackers to cause a denial of service (application crash via segmentation fault) via crafted multiple-image (animated) GIF images.


Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients.


GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in ReadPICTImage in coders/pict.c.


KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file.


RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp4 file.


LibTIFF allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted tiff file.


unzoo allows remote attackers to cause a denial of service (infinite loop and resource consumption) via unspecified vectors to the (1) ExtrArch or (2) ListArch function related to pointer handling.


Opera 9 allows remote attackers to cause a denial of service (crash) via a crafted web page that triggers an out-of-bounds memory access related to an iframe and JavaScript that accesses certain style sheets properties.


Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL containing a long hostname which triggers an out-of-bounds operation.


Dnsmasq 2.29 allows remote attackers to cause a denial of service (application crash) via a DHCP client broadcast reply request.


Hostapd 0.3.7-2 allows remote attackers to cause a denial of service (segmentation fault) via an unspecified value in the key_data_length field of an EAPoL frame.


acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with \{\ (brace) characters to the USER command.


MUTE 0.4 allows remote attackers to cause a denial of service (messages not forwarded) and obtain sensitive information about a target by filling a client's mWebCache cache with malicious \zombie\ nodes.


Kadu 0.4.3 allows remote attackers to cause a denial of service (application crash) via a large number of image send requests.


UnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of service by causing a linked server to send malformed TKL Q:Line commands as demonstrated by \TKL - q\\x08Q *\\x08PoC.\


Opera allows remote attackers to cause a denial of service (application crash) via a web page that contains a large number of nested marquee tags a related issue to CVE-2006-2723.


Mozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images.


Opera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images.


IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.


Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (IKE) UDP port 500 with packets that contain a large number of dot characters.


glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters.


SnackAmp 3.1.3 allows remote attackers to cause a denial of service (application crash) via a long string in an aiff file.


LibreCAD 2.1.3 allows remote attackers to cause a denial of service (0x89C04589 write access violation and application crash) or possibly have unspecified other impact via a crafted file.


JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to the jp2 format.


PHPCMS 9 allows remote attackers to cause a denial of service (resource consumption) via large font_size height and width parameters in an api.php?op=checkcode request.


XnView 2.45 allows remote attackers to cause a denial of service (Read Access Violation at the Instruction Pointer and application crash) or possibly have unspecified other impact via a crafted ICO file.


XnView

allows

remote

attackers

to

cause

a

denial

of

service

(User

Mode

Write

AV

starting

at

Qt5Core!QVariant::~QVariant+0x0000000000000014

and

application

crash)

or

possibly

have

unspecified

other

impact

via

a

crafted

RLE

file.


XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at MSVCR120!memcpy+0x0000000000000074 and application crash) or possibly have unspecified other impact via a crafted RLE file.


libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.


LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image related to libtiff/tif_read.c:351:22.


LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image related to libtiff/tif_ojpeg.c:816:8.


libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.


OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks.


Evolution 2.0.3 allows remote attackers to cause a denial of service (application crash or hang) via crafted messages possibly involving charsets in attachment filenames.


bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a \decompression bomb\).


OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnections/chksettings.asp.


ShowOff! 1.5.4 allows remote attackers to cause a denial of service (server crash) via a malformed request to port 8083.


Opera 8.50 allows remote attackers to cause a denial of service (crash) via a Java applet with a large string argument to the removeMember JNI method for the com.opera.JSObject class.


Mozilla allows remote attackers to cause a denial of service (CPU consumption) via a Javascript BODY onload event that calls the window function.


Opera 8.01 allows remote attackers to cause a denial of service (CPU consumption) via a crafted JPEG image as demonstrated using random.jpg.


oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null (\\0) characters.


RealPlayer 8 allows remote attackers to cause a denial of service (CPU utilization) via malformed .mp3 files.


psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a PASS command with a long password argument and quickly killing the connection which is not properly terminated by psyBNC.


XTux allows remote attackers to cause a denial of service (CPU consumption) via random inputs in the initial connection.


Resin 2.1.1 allows remote attackers to cause a denial of service (memory consumption and hang) via a URL with long variables for non-existent resources.


ACDSee 4.0 allows remote attackers to cause a denial of service (crash) via an .ais file with a long file description field which is not properly handled when the file properties of the file are viewed.


VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a LIST command that starts with a \/\\/\ (forward slash backward slash forward slash). NOTE: this might be the same issue as CVE-2008-2031.


SilverSHielD 1.0.2.34 allows remote attackers to cause a denial of service (application crash) via a crafted argument to the opendir SFTP command.


fhttpd 0.4.2 allows remote attackers to cause a denial of service (crash) via an Authorization HTTP header with an invalid character after the Basic value.


dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network related to the DHCP NAK response from the daemon.


SubSonic allows remote attackers to bypass pagesize limits and cause a denial of service (CPU consumption) via a pageindex (aka data page number) of -1.


Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename that contains certain characters as demonstrated using an MSN message that triggers the crash in the msn_slplink_process_msg function.


Opera 11.11 allows remote attackers to cause a denial of service (application crash) by setting the FACE attribute of a FONT element within an IFRAME element after changing the SRC attribute of this IFRAME element to an about:blank value.


ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1) editnetwork (2) editchan (3) addchan or (4) delchan page in modules/webadmin.cpp.


Xerver 4.32 allows remote authenticated users to cause a denial of service (daemon crash) via a non-numeric web port assignment in the management interface. NOTE: this can be leveraged by non-authenticated attackers using CVE-2009-4657.


acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the (1) REST or (2) PBSZ command.


FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager to invoke the gbak utility with an invalid parameter.