CVE-2016-0319

The XML parser in Lifecycle Query Engine LQE in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote authenticated administrators to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity...

Critical kernel security update: vulnerability fixes CVE-2016-7910, CVE-2016-7911 (and other), new kernel 2.6.32-042stab120.11

This update provides a new Virtuozzo 6.0 kernel 2.6.32-042stab120.11 based on the Red Hat Enterprise Linux 6.8 kernel 2.6.32-642.6.1.el6. The new kernel provides security and stability fixes. Vulnerability id: CVE-2016-1583 Stack overflow via ecryptfs and /proc/$pid/environ. It was found that...

CVE-2016-7160

The CVE CVE-2016-7160 affects Samsung Mobile M(6.0) devices, where external access to SystemUI activities is not properly restricted. The underlying issue causes a SystemUI crash and can lead to a device restart. Public details describe the vulnerable component as part of the SystemUI access cont...

BSA-2016-011

Summary Security Advisory ID : BSA-2016-011 Component : OpenSSL Revision : 6.0 N/A...

HPSBHF3550 rev. 2 - HP ThinPro Keyboard Layout Control Panel and Virtual Keyboard Application Vulnerability

Potential Security Impact Local unauthorized access and unintentional elevation of privilege on a HP thin client device. VULNERABILITY SUMMARY A potential security vulnerability has been identified with the keyboard layout control panel and virtual keyboard application on HP ThinPro operating...

About the security content of iCloud for Windows 6.0

About the security content of iCloud for Windows 6.0 This document describes the security content of iCloud for Windows 6.0. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

FLV To MP3 Converter 3.0.5 - Reverse Engineering Issue

Document Title: =============== FLV To MP3 Converter 3.0.5 - Reverse Engineering Issue References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1938 Release Date: ============= 2016-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Google Android Remote Elevation of Privilege Vulnerability (CNVD-2016-07420)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA. telephony is one of the components that provides telephony functionality. An elevation of privilege vulnerability exists in Telephony in Android. A remote attacker could exploit the...

Palo Alto Networks PAN-OS 6.0.x < 6.0.14 Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is 6.0.x prior to 6.0.14. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists that allows an authenticated, remote attacker to gain elevated privileges. - An unspecified flaw exists in the policy...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2016-06214)

Adobe Experience Manager is an enterprise content management solution that helps you streamline the management and delivery of your content and assets. A cross-site scripting vulnerability exists in Adobe Experience Manager 5.6.1, 6.0, 6.1, which can be exploited by remote attackers to inject...

CVE-2016-4169

Adobe Experience Manager 6.0–6.2 contains an information-disclosure vulnerability (CVE-2016-4169) that allows unprivileged users to access sensitive audit log event information via unspecified vectors. The issue affects AEM 6.0, 6.1, and 6.2 and is documented in multiple sources including the thr...

Crlf injection

CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2016-5331

CVE-2016-5331 describes a CRLF/HTTP header injection vulnerability in VMware vCenter Server 6.0 (before U2) and ESXi 6.0. The underlying issue is CRLF injection that allows remote attackers to manipulate HTTP headers and perform HTTP response splitting via unspecified vectors. Impact is stated as...

iis6. 0 parsing vulnerability-vulnerability warning-the black bar safety net

In Windows 2 0 0 3 under IIS 6.0 has two vulnerabilities. The following is my online looking for information: IIS parsing vulnerability 1: on the website established under the folder name for the . asp,. asa folder, its directory within any extension of the file is IIS as asp files to parse and...

While trying Server 6.0 mail system has an arbitrary File Download vulnerability

No description provided by source...

Apache Tomcat 6.0.x < 6.0.45 / 7.0.x < 7.0.68 / 8.0.x < 8.0.30 Directory Traversal

Binary data 9316.pasl...

Tenable Nessus 6.0.x < 6.6 Multiple Vulnerabilities

According to its self-reported version, the Tenable Nessus application running on the remote host is 6.x prior to 6.6. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input. An authenticated,...

CVE-2016-1621

libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, related to libwebm/mkvparser.cpp and other files, aka internal bug...

Apache Tomcat 6.0.x < 6.0.45 Multiple Vulnerabilities

According to its self-reported version number, the Apache Tomcat service running on the remote host is 6.0.x prior to 6.0.45. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the getResource, getResourceAsStream, and getResourcePaths...

CVE-2016-0812

The CVE-2016-0812 entry concerns the Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and Android 6.0 before 2016-02-01. The vulnerability arises from the interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java, where setup completion is not ...