913 matches found
CVE-2015-7718
mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to cause a denial of service process crash via unspecified vectors, aka internal bug 22278703, a different vulnerability than CVE-2015-6605...
CVE-2015-7718
CVE-2015-7718 affects Android’s mediaserver in versions 5.x up to 5.1.1 (LMY48T) and 6.0 prior to 2015-10-01. The vulnerability allows a denial of service (process crash) via unspecified vectors and is described as a different issue from CVE-2015-6605. The provided sources do not reveal the exact...
Design/Logic Flaw
packages/Keyguard/res/layout/keyguardpasswordview.xml in Lockscreen in Android 5.x before 5.1.1 LMY48M does not restrict the number of characters in the passwordEntry input field, which allows physically proximate attackers to bypass intended access restrictions via a long password that triggers ...
CVE-2015-3860
packages/Keyguard/res/layout/keyguardpasswordview.xml in Lockscreen in Android 5.x before 5.1.1 LMY48M does not restrict the number of characters in the passwordEntry input field, which allows physically proximate attackers to bypass intended access restrictions via a long password that triggers ...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in EMC RSA Archer GRC 5.x before 5.5.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-4541
EMC RSA Archer GRC 5.x suffers multiple stored XSS vulnerabilities in versions prior to 5.5.3. The issues allow remote authenticated users to inject arbitrary script/HTML in the user’s browser, via unspecified vectors, potentially impacting session security. RSA ESA-2015-142 confirms fixed in 5.5...
CVE-2015-4543
RSA Archer GRC Platform 5.x prior to 5.5.3 stores passwords in cleartext in the database under certain circumstances, enabling authenticated read access to expose credentials. Affected product: RSA Archer GRC (5.x). Root cause: plaintext password storage in unspecified conditions. Impact: potenti...
Hacker Finds a Simple Way to Bypass Android 5.x Lock Screen [Steps & Video]
A Security researcher and hacker, named John Gordon, has found an easy way to bypass the security of locked smartphones running Android 5.0 and 5.1 Build LMY48M. Many of us use various security locks on our devices like Pattern lock, PIN lock and Password lock in order to protect the privacy of o...
[SECURITY] Fedora 22 Update: php-guzzle-Guzzle-3.9.3-5.fc22
Guzzle takes the pain out of sending HTTP requests and the redundancy out of creating web service clients. Guzzle is a framework that includes the tools needed to create a robust web service client, including: Service descriptions for defining the inputs and outputs of an API, resource iterators...
Tenable SecurityCenter Multiple Apache Vulnerabilities (TNS-2015-11)
The Tenable SecurityCenter application installed on the remote host contains a bundled version of Apache HTTP Server prior to 2.4.16. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the chunked transfer coding implementation in httpfilters.c. due to a failure to...
CVE-2015-6524
The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-361...
CVE-2014-3612
The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind. NOTE: this identifier...
CVE-2014-3612
The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind. NOTE: this identifier...
CVE-2015-6524
The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-361...
[SECURITY] Fedora 21 Update: drupal6-cck-2.10-1.fc21
The Content Construction Kit allows you to add custom fields to custom content types using a web interface. In Drupal 5.x, custom content types can be created in Drupal core, and the Content Construction Kit allows you to add custom fields to any content type. In Drupal 7 and later, most of the...
CVE-2015-0130
Cross-site scripting XSS vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Quality Manager RQM 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Team Concert RTC 4.x before 4.0....
CVE-2015-4604
The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service application crash or possibly...
Design/Logic Flaw
TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute...
One class to rule them all
This vulnerability allows for arbitrary code execution in the context of many apps and services and results in elevation of privileges. There is a Proof-of-Concept exploit against the Google Nexus 5 device, that achieves code execution inside the highly privileged systemserver process, and then...
