A denial of service vulnerability exists in ISC BIND. The vulnerability is due to a design weakness in the way BIND follows DNS delegations.

There exists an Off-By-One flaw in Nagios Core. The problem is caused by improper boundary check when validating the parameters passed to the application. Due to improper input handling an unauthenticated attacker can send a specially crafted HTTP request and cause a denial of service condition. All versions of the Nagios Enterprises Core 3.x before Dec 20, 2013 are vulnerable to this attack.

A cross-site scripting vulnerability has been discovered in Microsoft SharePoint.

A memory corruption vulnerability has been reported in Microsoft Visio Viewer. The vulnerability is due to the way the application performs validation on attributes when handling certain Visio files.

Threat Encyclopedia

1130343

DNS ISC BIND Recursive Resolver Resource Consumption Denial of Service -1 (CVE-2014-8500)

High

2022/05/12

1231049

WEB Nagios core CGI Process_cgivars Off-By-One -5 (CVE-2013-7108)

Medium

2022/05/12

1059116

WEB Microsoft SharePoint Foundation inplnview.aspx Cross-Site Scripting -1 (CVE-2012-0017)

High

2022/05/12

1056066

FILE Microsoft Visio Viewer VSD File Memory Corruption (CVE-2012-0018)

High

2022/05/12