CVE-2016-6724

A denial of service vulnerability in the Input Manager Service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to cause the device to continually reboot. This issue is rated as Moderat...

CVE-2016-6703

CVE-2016-6703 describes a remote code execution vulnerability in the Android runtime library (ART). Affected Android releases include 4.x before 4.4.4; 5.0.x before 5.0.2; 5.1.x before 5.1.1; and 6.x before 2016-11-01. An attacker could supply a specially crafted payload to execute arbitrary code...

CVE-2016-6702

A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility ...

CVE-2016-5992

CVE-2016-5992 affects IBM Sterling Connect:Direct for Microsoft Windows 4.5.00, 4.5.01, 4.6.0 (before 4.6.0.6 iFix008) and 4.7.0 (before 4.7.0.4). Local users could cause a denial of service via unspecified vectors. IBM’s security bulletin confirms the vulnerability and recommends applying the la...

CVE-2016-9382

Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service guest OS crash by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode...

pcre2: Heap-buffer-overflow in parsed_skip

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6151126613229568 Target: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzzer binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

phpMyAdmin 4.0.x < 4.0.10.17 / 4.4.x < 4.4.15.8 / 4.6.x < 4.6.4 Multiple Vulnerabilities (PMASA-2016-29 - PMASA-2016-56) (deprecated)

According to its self-reported version number, the phpMyAdmin application hosted on the remote web server is 4.0.x prior to 4.0.10.17, 4.4.x prior to 4.4.15.8, or 4.6.x prior to 4.6.4. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists d...

[SECURITY] Fedora 23 Update: kdepimlibs-4.14.10-15.fc23

Personal Information Management PIM libraries for KDE 4...

Oracle Linux 7 : resteasy-base (ELSA-2016-2604)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2604 advisory. 3.0.6-4 - Resolves: rhbz1378619 - disable SerializerProvider by default 3.0.6-3 - Resolves: rhbz1357624 - fail to build with java 8 3.0.6-2 - Resolves:...

Grimbb 1.3 Hash Disclosure Vulnerability

Exploit for php platform in category web applications Grimbb V1.3 User and Password Hash Disclosure ============================================== Discovered by NA, NAattutanota.com ======================================= Description ============ A PHP 4 Open Source Flat File Based Bulletin Board...

Faraznet CMS 4.x Cross Site Scripting

Cross-Site Scripting in Faraznet Cms Version 4.x Faraznet Cms Cross-Site Scripting Vulnerability Iranian Exploit DataBase And Security Team - iedb.ir Title : Faraznet Cms Cross-Site Scripting Vulnerability Vulnerability : Cross-Site Scripting xss Vulnerability on : ssearch.php Version : 4.x Dork ...

Grimbb 1.3 Hash Disclosure

Grimbb V1.3 User and Password Hash Disclosure ============================================== Discovered by NA, NAattutanota.com ======================================= Description ============ A PHP 4 Open Source Flat File Based Bulletin Board System - GrimBB uses text files to store the data for...

[SECURITY] Fedora 24 Update: kdepimlibs-4.14.10-15.fc24

Personal Information Management PIM libraries for KDE 4...

CVE-2016-9118

CVE-2016-9118: In OpenJPEG 2.1.2, a Heap Buffer Overflow (WRITE of size 4) occurs in pnmtoimage() in convert.c:1719. Public documents confirm this as a vulnerability in OpenJPEG 2.1.2 and reference multiple advisories; patches/upgrades are noted in Debian openjpeg2 DSA-4013 and openSUSE update op...

Click 4 Rescue - External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Click 4 Rescue published at the 'play' market has multiple vulnerabilities...

Debian DSA-3697-1 : kdepimlibs - security update

Roland Tapken discovered that insufficient input sanitising in KMail's plain text viewer allowed the injection of HTML code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3697. The text...

DSA-3697-1 kdepimlibs - security update

Bulletin has no description...

Debian Security Advisory DSA 3697-1 (kdepimlibs - security update)

Roland Tapken discovered that insufficient input sanitising in KMail OpenVAS Vulnerability Test $Id: deb3697.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3697-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2016 Greenbone...

Ubuntu 16.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerability (USN-3106-4)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3106-4 advisory. It was discovered that a race condition existed in the memory manager of the Linux kernel when handling copy-on-write breakage of private read-only memory mapping...

Microsoft Windows - NtLoadKeyEx Read Only Hive Arbitrary File Write Privilege Escalation (MS16-124)

Microsoft Windows - NtLoadKeyEx Read Only Hive Arbitrary File Write Privilege Escalation MS16-124 / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=871 Windows: NtLoadKeyEx Read Only Hive Arbitrary File Write EoP Platform: Windows 10 10586 not tested 8.1 Update 2 or Windows 7...