Memory Corruption Vulnerability in Multiple Symantec Products

Symantec Advanced Threat Protection: Network ATP and others are security products from Symantec, a suite of software that mines and removes advanced threats from endpoints, networks, and email gateways; Symantec Endpoint Protection SEP, a suite of antivirus software; and Symantec Endpoint...

Memory Corruption Vulnerability in Multiple Symantec Products (CNVD-2016-08079)

Symantec Advanced Threat Protection: Network is a suite of software for digging out and removing advanced threats that exist on endpoints, networks, and email gateways; Symantec Endpoint Protection SEP is a suite of antivirus software. A memory corruption vulnerability exists in a number of...

phpMyAdmin security bypass vulnerability (CNVD-2016-07928)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...

QEMU Denial of Service Vulnerability (CNVD-2016-07820)

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in QEMU. An attacker can exploit this vulnerability to crash the QEMU process, resulting in a denial of service...

File Upload Vulnerability in UFIDA Financials

UFIDA Financials is a financial management software. A file upload vulnerability exists in UFIDA Financial System. Vulnerability payload: http://target/TaskManager/EBankTaskServlet?m=1&taskjson=cnvdtest&taskname=... /... /R9iPortal/upload/cnvd.jsp%00&optionType=create Submitting the above request...

phpMyAdmin Denial of Service Vulnerability (CNVD-2016-07931)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A denial of service vulnerability exists in...

QEMU Denial of Service Vulnerability (CNVD-2016-07818)

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in QEMU. An attacker can exploit this vulnerability to cause an infinite loop in the application, resulting in a denial of...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2016-07749)

Microsoft Windows is a series of operating systems released by the American company Microsoft. Microsoft Windows suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to brute-force break a user's NTLM password hash...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-07687)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-07677)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to execute...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-07676)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to execute...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-07674)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from the American company Adobe. A security vulnerability exists in Adobe Flash Player, which can be exploited by attackers to execute arbitrary code or cause a denial of service memory corruption...

Adobe Flash Player Integer Overflow Vulnerability (CNVD-2016-07663)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from the American company Adobe. An integer overflow vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code...

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CNVD-2016-07589)

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10...

Android Mediaserver Denial of Service Vulnerability (CNVD-2016-07434)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Android Mediaserver, which allows remote attackers to build malicious applications that can be exploited to trick users into parsing, which can crash...

OpenSSL Denial of Service Vulnerability (CNVD-2016-07344)

OpenSSL is an open source capable of implementing the Secure Sockets Layer SSL v2/v3 and Secure Transport Layer TLS v1 protocols developed by the OpenSSL team as a general-purpose cryptographic library that supports a wide range of cryptographic algorithms including symmetric ciphers, hash...

OpenSSL Denial of Service Vulnerability (CNVD-2016-07352)

OpenSSL is an open source capable of implementing the Secure Sockets Layer SSL v2/v3 and Secure Transport Layer TLS v1 protocols developed by the OpenSSL team as a general-purpose cryptographic library that supports a wide range of cryptographic algorithms including symmetric ciphers, hash...

Google Chrome PDFium heap buffer overflow vulnerability (CNVD-2016-07207)

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A heap buffer overflow vulnerability exists in PDFium in versions of Google Chrome prior to 53.0.2785.89. An attacker could exploit this vulnerability to execut...

PHP 5.0.0 'snmpwalkoid()' Local Denial of Service Vulnerability

PHP is a new language for writing CGI programs. A local denial of service vulnerability exists in PHP 5.0.0 'snmpwalkoid', which can be exploited by attackers to launch denial of service attacks...

phpMyAdmin Denial of Service Vulnerability (CNVD-2016-07122)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A denial of service vulnerability exists in phpMyAdm...