10778 matches found
CVE-2015-6857
CVE-2015-6857 affects HP LoadRunner’s Virtual Table Server (VTS). The vulnerability enables remote code execution in VTS via unauthenticated access, with HP/Nessus/ZDI references detailing concrete vectors: HP LoadRunner VTS running 11.52, 12.00, 12.01, 12.02, or 12.50 is exploitable through a re...
CVE-2015-6857
Unspecified vulnerability in Virtual Table Server VTS in HP LoadRunner 11.52, 12.00, 12.01, 12.02, and 12.50 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-3138...
Updated libebml packages fix security vulnerability
In EbmlMaster::Read in libebml before 1.3.3, when the parser encountered a deeply nested element with an infinite size then a following element of an upper level was not propagated correctly. Instead the element with the infinite size was added into the EBML element tree a second time resulting i...
CVE-2015-6867
The vertica-udx-zygote process in HP Vertica 7.1.1 UDx does not require authentication, which allows remote attackers to execute arbitrary commands via a crafted packet, aka ZDI-CAN-2914...
CVE-2015-6867
The vertica-udx-zygote process in HP Vertica 7.1.1 UDx does not require authentication, which allows remote attackers to execute arbitrary commands via a crafted packet, aka ZDI-CAN-2914...
CVE-2015-6867
The CVE-2015-6867 issue affects HP Vertica, specifically the vertica-udx-zygote process in Vertica 7.1.1 UDx. The root cause is that this process does not require authentication, allowing an unauthenticated, remote attacker to send a crafted packet that executes arbitrary commands under the dbadm...
Design/Logic Flaw
The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649...
CVE-2015-7374
The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649...
Design/Logic Flaw
Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element, aka ZDI-CAN-3176...
CVE-2015-4509
Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element, aka ZDI-CAN-3176...
CVE-2015-4509
Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element, aka ZDI-CAN-3176...
CVE-2015-5426
Unspecified vulnerability in HP LoadRunner Controller before 12.50 allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2756...
CVE-2015-5426
Unspecified vulnerability in HP LoadRunner Controller before 12.50 allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2756...
CVE-2015-5426
HP LoadRunner Controller (pre-12.50) is affected by a stack-based buffer overflow while parsing .lrs scenario files, allowing local code execution in the context of the current user. HP’s security bulletin HPSBMU03339 rev.1 states only impacted versions are affected and recommends upgrading to HP...
Chris Valasek Security of Things Forum Keynote
CAMBRIDGE, Mass. – Chris Valasek and Charlie Miller’s car hacking research put a crunching reality on Internet of Things security, moving it beyond almost clichéd discussions of smart refrigerators leaking inconsequential data, to hackers remotely manipulating car brakes. But Furby hacking matter...
CVE-2015-5424
Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2885...
CVE-2015-5423
Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2884...
CVE-2015-5422
Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2883...