CVE-2016-0702

The MODEXPCTIMECOPYFROMPREBUF function in crypto/bn/bnexp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the...

UBUNTU-CVE-2016-0702

The MODEXPCTIMECOPYFROMPREBUF function in crypto/bn/bnexp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the...

Vulnerability in OpenSSL - Side channel attack on modular exponentiation

A side-channel attack was found which makes use of cache-bank conflicts on the Intel Sandy-Bridge microarchitecture which could lead to the recovery of RSA keys. The ability to exploit this issue is limited as it relies on an attacker who has control of code in a thread running on the same...

Commands Generated by XenMobile Wizard on Netscaler - SSL Bridge

This was created for customers that need to run the wizard more than once for multiple XenMobile environments...

osCmax 2.5.4 Code Execution / CSRF / Local File Inclusion

Advisory ID: HTB23285 Product: osCmax Vendor: http://oscmax.com/ Vulnerable Versions: 2.5.4 and probably prior Tested Version: 2.5.4 Advisory Publication: December 21, 2015 without technical details Vendor Notification: December 21, 2015 Public Disclosure: February 17, 2016 Vulnerability Type: PH...

webSPELL 4.2.4 Cross Site Request Forgery / SQL Injection

Advisory ID: HTB23291 Product: webSPELL Vendor: webSPELL.org Vulnerable Versions: 4.2.4 and probably prior Tested Version: 4.2.4 Advisory Publication: January 22, 2016 without technical details Vendor Notification: January 22, 2016 Vendor Patch: February 12, 2016 Public Disclosure: February 17,...

WeBid 1.1.2P2 SQL Injection

Advisory ID: HTB23292 Product: WeBid Vendor: WeBid Vulnerable Versions: 1.1.2P2 and probably prior Tested Version: 1.1.2P2 Advisory Publication: January 22, 2016 without technical details Vendor Notification: January 22, 2016 Vendor Patch: February 4, 2016 Public Disclosure: February 17, 2016...

osCommerce 2.3.4 Local File Inclusion / Cross Site Request Forgery

Advisory ID: HTB23284 Product: osCommerce Vendor: osCommerce Vulnerable Versions: 2.3.4 and probably prior Tested Version: 2.3.4 Advisory Publication: December 21, 2015 without technical details Vendor Notification: December 21, 2015 Public Disclosure: February 17, 2016 Vulnerability Type: PHP Fi...

CVE-2016-1333

Cisco IOS 15.53M and 15.61T0a on Cisco 1000 Connected Grid routers allows remote authenticated users to cause a denial of service device reload via an SNMP request for unspecified BRIDGE MIB OIDs, aka Bug ID CSCux89878...

Design/Logic Flaw

Cisco IOS 15.53M and 15.61T0a on Cisco 1000 Connected Grid routers allows remote authenticated users to cause a denial of service device reload via an SNMP request for unspecified BRIDGE MIB OIDs, aka Bug ID CSCux89878...

Cisco 1000 Series Connected Grid Routers SNMP BRIDGE MIB Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP BRIDGE Management Information Base MIB of the Cisco 1000 Series Connected Grid Routers could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a faulty implementation of...

Adobe Bridge CC Multiple Vulnerabilities (Feb 2016)

Adobe Bridge CC is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:bridgecc";...

Adobe Bridge CC Version Detection

Detects the installed version of Adobe bridge cc on Windows. The script logs in via smb, searches for adobe in the registry, gets the Adobe bridge cc installation path from registry and fetches version. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a...

Adobe Bridge CC < 6.2 Multiple Memory Corruption Vulnerabilities (APSB16-03)

The version of Adobe Bridge installed on the remote Windows host is prior to 6.2. It is, therefore, affected by multiple unspecified memory corruption issues due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these issues to execute arbitrary code. ...

Adobe Bridge for Mac Installed

Binary data macosxadobebridgeinstalled.nbin...

Adobe Bridge CC < 6.2 Multiple Memory Corruption Vulnerabilities (APSB16-03) (Mac OS X)

The version of Adobe Bridge installed on the remote Mac OS X host is prior to 6.2. It is, therefore, affected by multiple unspecified memory corruption issues due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these issues to execute arbitrary code....

Adobe Photoshop CC Denial of Service Vulnerability

Adobe Photoshop CC, or Creative Cloud, is a cloud-based era of graphics processing software developed by Adobe in the United States. A denial of service vulnerability exists in Adobe Photoshop CC 2014 versions prior to 15.2.4,Photoshop CC 2015 versions prior to 16.1.2,Bridge CC versions prior to...

Adobe Photoshop CC Denial of Service Vulnerability (CNVD-2016-01084)

Adobe Photoshop CC or Creative Cloud is a cloud-based era of graphics processing software developed by Adobe in the United States. A denial of service vulnerability exists in Adobe Photoshop CC 2014 prior to 15.2.4, Photoshop CC 2015 prior to 16.1.2, and Bridge CC prior to 6.2, which allows...

Adobe Photoshop CC Denial of Service Vulnerability (CNVD-2016-01085)

Adobe Photoshop CC, or Creative Cloud, is a cloud-based era of graphics processing software developed by Adobe in the United States. A denial of service vulnerability exists in Adobe Photoshop CC 2014 prior to 15.2.4, Photoshop CC 2015 prior to 16.1.2, and Bridge CC prior to 6.2, which allows...

CVE-2016-0953

Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-0951 and CVE-2016-0952...