Google Nexus Qualcomm Camera Driver elevation of privilege vulnerability (CNVD-2016-11136)

Google Nexus is a series of smart devices based on the Android operating system, including cell phones and tablets. The smart devices are manufactured by Google with technology provided and authorized by partner hardware manufacturers, and Qualcomm Camera Driver is one of the high-throughput came...

Microsoft Edge Spoofing Vulnerability (CNVD-2016-10948)

Microsoft Edge is a Web browser developed by the American company Microsoft Microsoft. Microsoft Edge has a spoofing vulnerability due to the program failing to properly analyze HTTP responses. An attacker exploits the vulnerability to trick users into visiting a constructed website...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-10973)

Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. Microsoft Office suffers from a memory corruption vulnerability due to the program failing to properly handle objects in memory. An attacker can exploit the vulnerability by means o...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-10974)

Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. Microsoft Office suffers from a memory corruption vulnerability due to the program failing to properly handle objects in memory. An attacker can exploit the vulnerability by means o...

Linux kernel denial of service vulnerability (CNVD-2016-11071)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. Linux kernel has a denial of service vulnerability that can be exploited by attackers to cause a denial of service and deny service to legitimate users...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-10940)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A memory corruption vulnerability exists in Microsoft Office, which stems from the program's failure to...

Google Pixel C NVIDIA GPU Driver elevation of privilege vulnerability (CNVD-2016-11129)

The Google Pixel C is a tablet computer from Google, U.S.A. The NVIDIA GPU driver is an NVIDIA graphics processor driver component used in the... An elevation of privilege vulnerability exists in the Google Pixel C NVIDIA GPU Driver. An attacker can exploit the vulnerability to execute arbitrary...

Exponent CMS SQL Injection Vulnerability (CNVD-2016-10804)

Exponent is a web content management system. Multiple SQL injection vulnerabilities exist in the framework/modules/core/controllers/expRatingController.php/update method in Exponent CMS version 2.4.0, which can be exploited by an authenticated remote user to execute arbitrary SQL commands via the...

cURL Security Bypass Vulnerability (CNVD-2016-10792)

cURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A security bypass vulnerability exists in cURL that could be exploited by attackers to perform unauthorized operations...

Moodle Arbitrary File Upload Vulnerability (CNVD-2016-10744)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. An arbitrary file upload vulnerability exists in the dual extension support in the ima...

Artifex Software MuJS Buffer Overflow Vulnerability (CNVD-2016-10581)

Artifex Software MuJS is a lightweight JavaScript interpreter from Artifex Software, USA. Artifex Software MuJS 5000749f5afe3b956fc916e407309de840997f4a A buffer overflow vulnerability exists in the Spreplaceregexp function in previous versions, which can be exploited by an attacker to execute co...

WebKit Information Disclosure Vulnerability (CNVD-2016-10587)

WebKit is KDE, Apple Apple, Google Google and other companies to develop a set of open source Web browser engine , currently used by Apple Safari and Google Chrome and other browsers . WebKit has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive...

School Registration and Fee System Authentication Bypass Vulnerability

School Registration and Fee System is a free school registration system software designed based on PHP and MYSQL. An authentication bypass vulnerability exists in the School Registration and Fee System's login.php page, which can be exploited by an attacker to gain system administrator privileges...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2016-10535)

NVIDIA NVIDIA Corporation, NASDAQ: NVDA, official Chinese name NVIDIA is a fabless IC semiconductor company that designs smart-core chipsets.The NVIDIA GPU Display Driver is a driver developed by the company for its GPUs. A local elevation of privilege vulnerability exists in NVIDIA GPU Display...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-10436)

OpenJPEG library is written in C language open source JPEG 2000 codec . OpenJPEG 2.1.2 has a null pointer access vulnerability in the convert.c:1943jp2 imagetopnm function, where image-compscompno.data is not assigned a value after initialization, which can lead to a denial of service...

Apache Tomcat Security Manager Security Restriction Bypass Vulnerability (CNVD-2016-10421)

Apache Tomcat is a popular open source JSP application server program. Apache Tomcat 7.0.0-7.0.70 suffers from a security restriction bypass vulnerability in its implementation. An attacker can exploit this vulnerability to bypass certain security restrictions and perform unauthorized operations...

Cisco AsyncOS Security Bypass Vulnerability (CNVD-2016-10396)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A security bypass vulnerability exists in Cisco AsyncOS that could be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

Cisco AsyncOS Denial of Service Vulnerability (CNVD-2016-10393)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A remote denial of service vulnerability exists in Cisco AsyncOS, which can be exploited by an unauthenticated, remote attacker to cause a denial of service on an affected...

Puppet Enterprise Open Redirect Vulnerability (CNVD-2016-10427)

Puppet is a set of configuration management tools based on client/server architecture , it can be used to manage configuration files , users , cron tasks , packages , system services and so on. An open redirection vulnerability exists in Puppet Enterprise, which allows an attacker to construct a...

JasPer Denial of Service Vulnerability (CNVD-2016-10310)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial-of-service vulnerability exists in the Jasper function jpcdectiledecode, which allows attackers to crash an application and deny service to legitimate users by constructi...