CVE-2016-6717

CVE-2016-6717 corresponds to an elevation-of-privilege in Android’s Mediaserver. A local malicious app could execute code in a privileged process due to memory/parameter handling in Mediaserver when processing media data. Affected Android versions span 4.x up to 7.0 (pre-2016-11-01 and pre-2016-1...

CVE-2016-5992

CVE-2016-5992 affects IBM Sterling Connect:Direct for Microsoft Windows 4.5.00, 4.5.01, 4.6.0 (before 4.6.0.6 iFix008) and 4.7.0 (before 4.7.0.4). Local users could cause a denial of service via unspecified vectors. IBM’s security bulletin confirms the vulnerability and recommends applying the la...

CVE-2016-6703: Improper Access Control

A remote code execution vulnerability in an Android runtime library in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker using a specially crafted payload to execute arbitrary code in the context of an unprivileged process. This...

CVE-2016-9382

Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service guest OS crash by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode...

pcre2: Heap-buffer-overflow in parsed_skip

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6151126613229568 Target: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzzer binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

phpMyAdmin 4.0.x < 4.0.10.17 / 4.4.x < 4.4.15.8 / 4.6.x < 4.6.4 Multiple Vulnerabilities (PMASA-2016-29 - PMASA-2016-56) (deprecated)

According to its self-reported version number, the phpMyAdmin application hosted on the remote web server is 4.0.x prior to 4.0.10.17, 4.4.x prior to 4.4.15.8, or 4.6.x prior to 4.6.4. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists d...

PT-2016-5940

Name of the Vulnerable Software and Affected Versions HPE iLO 3 versions prior to 1.88 HPE iLO 4 versions prior to 2.44 Description A remote cross-site scripting issue was identified, which could be exploited to allow Cross-Site Scripting XSS. This issue can be remotely exploited. Recommendations...

[SECURITY] Fedora 23 Update: kdepimlibs-4.14.10-15.fc23

Personal Information Management PIM libraries for KDE 4...

Oracle Linux 7 : resteasy-base (ELSA-2016-2604)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2604 advisory. 3.0.6-4 - Resolves: rhbz1378619 - disable SerializerProvider by default 3.0.6-3 - Resolves: rhbz1357624 - fail to build with java 8 3.0.6-2 - Resolves:...

Faraznet CMS 4.x Cross Site Scripting

Cross-Site Scripting in Faraznet Cms Version 4.x Faraznet Cms Cross-Site Scripting Vulnerability Iranian Exploit DataBase And Security Team - iedb.ir Title : Faraznet Cms Cross-Site Scripting Vulnerability Vulnerability : Cross-Site Scripting xss Vulnerability on : ssearch.php Version : 4.x Dork ...

Grimbb 1.3 Hash Disclosure Vulnerability

Exploit for php platform in category web applications Grimbb V1.3 User and Password Hash Disclosure ============================================== Discovered by NA, NAattutanota.com ======================================= Description ============ A PHP 4 Open Source Flat File Based Bulletin Board...

Grimbb 1.3 Hash Disclosure

Grimbb V1.3 User and Password Hash Disclosure ============================================== Discovered by NA, NAattutanota.com ======================================= Description ============ A PHP 4 Open Source Flat File Based Bulletin Board System - GrimBB uses text files to store the data for...

[SECURITY] Fedora 24 Update: kdepimlibs-4.14.10-15.fc24

Personal Information Management PIM libraries for KDE 4...

CVE-2016-9118

CVE-2016-9118: In OpenJPEG 2.1.2, a Heap Buffer Overflow (WRITE of size 4) occurs in pnmtoimage() in convert.c:1719. Public documents confirm this as a vulnerability in OpenJPEG 2.1.2 and reference multiple advisories; patches/upgrades are noted in Debian openjpeg2 DSA-4013 and openSUSE update op...

CVE-2016-5764: Improper Restriction of Operations within the Bounds of a Memory Buffer

Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution. Fixed in: Rumba FTP 4.5 HF 14668. This can only occur if a client connects to a malicious server...

Click 4 Rescue - External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Click 4 Rescue published at the 'play' market has multiple vulnerabilities...

Debian DSA-3697-1 : kdepimlibs - security update

Roland Tapken discovered that insufficient input sanitising in KMail's plain text viewer allowed the injection of HTML code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3697. The text...

Debian Security Advisory DSA 3697-1 (kdepimlibs - security update)

Roland Tapken discovered that insufficient input sanitising in KMail OpenVAS Vulnerability Test $Id: deb3697.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3697-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2016 Greenbone...

DSA-3697-1 kdepimlibs - security update

Bulletin has no description...

Microsoft Windows - NtLoadKeyEx Read Only Hive Arbitrary File Write Privilege Escalation (MS16-124)

Microsoft Windows - NtLoadKeyEx Read Only Hive Arbitrary File Write Privilege Escalation MS16-124 / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=871 Windows: NtLoadKeyEx Read Only Hive Arbitrary File Write EoP Platform: Windows 10 10586 not tested 8.1 Update 2 or Windows 7...