libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, aka the "billion laughs attack."
Max CVSS
9.3
EPSS Score
0.37%
Published
2003-12-31
Updated
2024-02-02
Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters (OPS/RAC) allows local users to cause a denial of service (cluster node panic or abort) by launching a daemon listening on a TCP port that would otherwise be used by the Distributed Lock Manager (DLM), possibly involving this daemon responding in a manner that spoofs a cluster reconfiguration.
Max CVSS
4.0
EPSS Score
0.06%
Published
2003-12-31
Updated
2018-10-30
Buffer overflow in httpd.c of fnord 1.6 allows remote attackers to create a denial of service (crash) and possibly execute arbitrary code via a long CGI request passed to the do_cgi function.
Max CVSS
5.0
EPSS Score
7.11%
Published
2003-12-31
Updated
2018-10-19
Unrestricted critical resource lock in Terminal Services for Windows 2000 before SP4 and Windows XP allows remote authenticated users to cause a denial of service (reboot) by obtaining a read lock on msgina.dll, which prevents msgina.dll from being loaded.
Max CVSS
6.8
EPSS Score
1.07%
Published
2003-12-31
Updated
2017-08-08
BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.
Max CVSS
4.3
EPSS Score
0.16%
Published
2003-12-31
Updated
2008-09-05
Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a long syslog message.
Max CVSS
7.8
EPSS Score
1.38%
Published
2003-12-31
Updated
2017-07-29
Origo ASR-8100 ADSL Router 3.21 has an administration service running on port 254 that does not require a password, which allows remote attackers to cause a denial of service by restoring the factory defaults.
Max CVSS
7.8
EPSS Score
0.78%
Published
2003-12-31
Updated
2017-07-29
eMule 0.29c allows remote attackers to cause a denial of service (crash) via a long password, possibly due to a buffer overflow.
Max CVSS
7.8
EPSS Score
0.96%
Published
2003-12-31
Updated
2017-07-29
Buffer overflow in mIRC 6.1 and 6.11 allows remote attackers to cause a denial of service (crash) via a long DCC SEND request.
Max CVSS
5.0
EPSS Score
4.02%
Published
2003-12-31
Updated
2008-09-05
TinyWeb 1.9 allows remote attackers to cause a denial of service (CPU consumption) via a ".%00." in an HTTP GET request to the cgi-bin directory.
Max CVSS
7.8
EPSS Score
0.72%
Published
2003-12-31
Updated
2017-07-29
Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows remote attackers to cause a denial of service (crash) via a long filename.
Max CVSS
4.3
EPSS Score
0.86%
Published
2003-12-31
Updated
2008-09-05
Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) by creating a web page or HTML e-mail with a textarea in a div element whose scrollbar-base-color is modified by a CSS style, which is then moved.
Max CVSS
4.3
EPSS Score
11.09%
Published
2003-12-31
Updated
2021-07-23
Buffer overflow in the system log viewer of Linksys BEFSX41 1.44.3 allows remote attackers to cause a denial of service via an HTTP request with a long Log_Page_Num variable.
Max CVSS
6.3
EPSS Score
0.86%
Published
2003-12-31
Updated
2017-07-29
Unspecified vulnerability in the non-SSL web agent in various HP Management Agent products allows local users or remote attackers to gain privileges or cause a denial of service via unknown attack vectors.
Max CVSS
10.0
EPSS Score
0.40%
Published
2003-12-31
Updated
2017-07-29
Unspecified vulnerability in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (CPU consumption) via a crafted TCP packet.
Max CVSS
5.0
EPSS Score
0.80%
Published
2003-12-31
Updated
2017-07-29
Memory leak in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (memory exhaustion) via crafted TCP packets.
Max CVSS
5.0
EPSS Score
0.87%
Published
2003-12-31
Updated
2017-07-29
SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service (device reset) via a long HTTP POST to the internal interface, possibly due to a buffer overflow.
Max CVSS
7.8
EPSS Score
1.21%
Published
2003-12-31
Updated
2017-07-29
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) by creating a DHTML link that uses the AnchorClick "A" object with a blank href attribute.
Max CVSS
4.3
EPSS Score
1.40%
Published
2003-12-31
Updated
2017-07-29
Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with a "xFFxFE" byte sequence and a large number of CRLF sequences, as demonstrated using freeze.htm.
Max CVSS
4.3
EPSS Score
0.49%
Published
2003-12-31
Updated
2017-07-29
MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a PowerPoint attachment that either (1) is corrupt or (2) contains "embedded objects."
Max CVSS
7.8
EPSS Score
1.14%
Published
2003-12-31
Updated
2017-07-29
Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long banner.
Max CVSS
5.0
EPSS Score
0.77%
Published
2003-12-31
Updated
2017-07-29
MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service (crash) via a (1) DELE or (2) UIDL with a negative number.
Max CVSS
6.3
EPSS Score
4.12%
Published
2003-12-31
Updated
2017-07-29
Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a CREATE command with a long mailbox name.
Max CVSS
9.0
EPSS Score
1.67%
Published
2003-12-31
Updated
2017-07-29
Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service (disconnect and unavailable inbox) via a Short Message Service (SMS) message with a long image name.
Max CVSS
7.8
EPSS Score
0.91%
Published
2003-12-31
Updated
2017-07-29
mod_survey 3.0.0 through 3.0.15-pre6 does not check whether a survey exists before creating a subdirectory for it, which allows remote attackers to cause a denial of service (disk consumption and possible crash).
Max CVSS
5.0
EPSS Score
1.49%
Published
2003-12-31
Updated
2017-07-29
384 vulnerabilities found
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!