IBM Connections Information Disclosure Vulnerability (CNVD-2016-11314)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. An information...

Google Android Kernel Component Information Disclosure Vulnerability

Google Chrome is a web browser developed by Google, and Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the Google Android Kernel component. An attacker can exploit the...

IBM TRIRIGA Application Platform Privilege Vulnerability

IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. A privilege extraction vulnerability exists in IBM TRIRIGA Application Platform, which can be exploited by an attacker to gain privileges...

Allen-Bradley MicroLogix 1400 Multiple Vulnerabilities

Binary data scadaABmicrologix1400.nbin...

Adobe Acrobat And Reader Memory Corruption (APSB16-09: CVE-2016-1009)

A remote code execution vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to out-of-bounds error while accessing to unintended memory in a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially...

NTP Security Bypass Vulnerability (CNVD-2016-00818)

NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security bypass vulnerability exists in NTP. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Juniper Networks ScreenOS Denial of Service Vulnerability

Juniper Networks ScreenOS is a Juniper Networks operating system that runs in the NetScreen family of firewalls. A denial of service vulnerability exists in Juniper Networks ScreenOS. An attacker could exploit this vulnerability to cause an application to crash, denying service to legitimate user...

IBM WebSphere Portal Denial of Service Vulnerability

IBM WebSphere Portal consists of middleware, applications called portlets and development tools for building and managing secure business-to-business B2B, business-to-customer B2C and business-to-employee B2E portals. A denial of service vulnerability exists in IBM WebSphere Portal. An attacker i...

Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2562-1)

Sun Baoliang discovered a use after free flaw in the Linux kernel's SCTP Stream Control Transmission Protocol subsystem during INIT collisions. A remote attacker could exploit this flaw to cause a denial of service system crash or potentially escalate their privileges on the system. CVE-2015-1421...

Microsoft Office Invalid Pointer Remote Code Execution (MS14-069) - Ver2 (CVE-2014-6335)

A remote code execution vulnerability exists in Microsoft Word. The vulnerability is caused when Microsoft Word does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted Word fil...

CVE-2015-0295

The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service divide-by-zero and crash via a crafted BMP file...

CVE-2014-3613

cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1...

PHPKIT 1.6.x 'b-day.php' Addon SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38891/info PHPKIT 'b-day.php' addon is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Zoom Media Gallery 2.1.2 Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13094/info zOOm Media Gallery is reportedly affected by a remote SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

HTML::BBCode 1.03/1.04 HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16680/info HTML::BBCode is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

CVE-2012-1600

Multiple cross-site scripting XSS vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 type of a function...

WordPress Plugin RokMicroNews - 'thumb.php' Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/62513/info The RokMicroNews plugin for WordPress is prone to multiple security vulnerabilities, including: 1. An information-disclosure vulnerability 2. A cross-site scripting vulnerability 3. An arbitrary file-upload vulnerability 4. A denial-of-service...

Microsoft DirectShow Remote Code Execution (MS13-056; CVE-2013-3174)

A remote code execution vulnerability has been reported in the Microsoft DirectShow. The vulnerability is due to faulty GIF image files parsing. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted GIF file. A successfull exploitation of this vulnerability...

Sophos Anti-Virus RAR VMSF_RGB Filter Parsing Integer Underflow

An integer underflow vulnerability has been reported in Sophos Anti-Virus. The vulnerability is due to insufficient parameters validation while parsing RAR files. A remote attacker could exploit this vulnerability by causing the affected software to process a specially crafted RAR file. Successfu...

CVE-2012-5533

The httprequestsplitvalue function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service infinite loop via a request with a header containing an empty token, as demonstrated using the "Connection: TE,,Keep-Alive" header...