Docker Local Denial of Service Vulnerability (CNVD-2016-07092)

Docker is an open source application container engine from Docker Inc. in the United States, which supports the creation of a container lightweight virtual machine and deployment and running applications on Linux systems, as well as automated installation, deployment and upgrading of applications...

Juniper Junos Denial of Service Vulnerability (CNVD-2016-06867)

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. Juniper Junos has a denial of service vulnerability that could be exploited by an attacker to cause a denial of...

lshell security bypass vulnerability (CNVD-2016-06705)

lshell is a set of shell commands written in Python for controlling the user's runtime environment. A security bypass vulnerability exists in lshell. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Foxit Reader and PhantomPDF Remote Code Execution Vulnerability (CNVD-2016-06998)

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. A security vulnerability exists in Foxit Reader and PhantomPDF 8.0.0.624 and earlier versions, which can be triggered by a heap memory...

IBM Connections Cross-Site Scripting Vulnerability (CNVD-2016-06536)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site scripting...

Multiple F5 Products Privilege Acquisition Vulnerabilities (CNVD-2016-06538)

F5 BIG-IP LTM, etc. are products of F5 USA.LTM is a local traffic manager; APM is a set of solutions that provide secure and unified access to business-critical applications and networks. A privilege-acquisition vulnerability exists in multiple F5 products that stems from the failure of the BIG-I...

Facebook HHVM has multiple vulnerabilities (CNVD-2016-06546)

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of loading dynamic pages in PHP. An integer overflow vulnerability and a denial of service vulnerability exist in Facebook HHVM. An attacker can exploit these vulnerabilities to...

Facebook HHVM has multiple vulnerabilities (CNVD-2016-06545)

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of loading dynamic pages in PHP. An integer overflow vulnerability and a denial of service vulnerability exist in Facebook HHVM. An attacker could exploit these vulnerabilities ...

Eclipse Development Framework File Inclusion Vulnerability

Eclipse is an extensible Java-based development platform that supports the development of JAVA, PHP, C++ and other languages. The Eclipse development framework has a file inclusion vulnerability that allows attackers to exploit the vulnerability to obtain sensitive information or launch further...

Puppet Enterprise and mcollective-puppet-agent remote code execution vulnerabilities

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the U.S. It can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is an enterprise version. A remote code execution vulnerability...

Hancom Office 2014 VP Local Arbitrary Code Execution Vulnerability (CNVD-2016-06356)

Hancom Office 2014 VP is a cloud storage service solution developed by Hancom Korea. Hancom Office 2014 VP suffers from a local arbitrary code execution vulnerability that could be exploited by a local attacker to execute arbitrary code in the context of the application or conduct a denial of...

SAP SAPCAR Local Lift Vulnerability (CNVD-2016-06364)

SAP SAPCAR is a set of compression and decompression tools for use in SAP Kernel. A security vulnerability exists in SAP SAPCAR that allows a local attacker to exploit the vulnerability to elevate privileges...

Android on Nexus devices elevation of privilege vulnerability (CNVD-2016-06291)

Android on Nexus is Google's line of high-end phones powered by stock Android. Android before 2016-08-05 on Nexus 5 and 7 devices suffers from an elevation of privilege vulnerability that allows attackers to gain privileges through a crafted application...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2016-06257)

Internet Explorer is a web browser from Microsoft. Microsoft Internet Explorer 11 does not properly handle memory objects and suffers from a memory corruption vulnerability, which could allow a remote attacker to execute arbitrary code or cause a denial of service via a constructed Web site...

Microsoft Internet Explorer/Edge Information Disclosure Vulnerability (CNVD-2016-06276)

Internet Explorer is a web browser from Microsoft. An information disclosure vulnerability exists in Microsoft Internet Explorer versions 9, 10, 11, and Edge due to the program not properly handling memory objects. A remote attacker is allowed to exploit this vulnerability to obtain system...

Android on Nexus Qualcomm Component Privilege Acquisition Vulnerability (CNVD-2016-06201)

Android on Nexus 6 is an open source Linux-based operating system for the Nexus 6 smartphone developed by Google and the Open Handset Alliance OHA.Qualcomm is one of the Qualcomm components used in the Qualcomm devices. Qualcomm is a Qualcomm component used in one of the Qualcomm devices. A...

Qualcomm Innovation Center Android contributions for MSM denial of service vulnerability (CNVD-2016-06182)

Qualcomm Innovation Center QuIC Android contributions for MSM is a product for the MSM program to support users in building Qualcomm silicon products based on the Android platform and including other enhancements.The MSM QDSP6 audio driver for also known as sound driver the Linux kernel is an aud...

Mozilla Firefox memory misreference vulnerability (CNVD-2016-06149)

Mozilla Firefox is an open source web browser; A memory misreference vulnerability in the 'js::PreliminaryObjectArray::sweep' function in Mozilla Firefox allows remote attackers to build a malicious WEB page that can be exploited to trick a user into parsing it to crash the application or execute...

Linux kernel information disclosure vulnerability (CNVD-2016-06158)

Linux kernel is an open source operating system. Linux kernel has a security vulnerability that allows local attackers to exploit the vulnerability to gain access to sensitive information...

Google Chrome DevTools Access Restriction Vulnerability (CNVD-2016-06145)

Google Chrome is a web browsing tool developed by Google. Google Chrome has a security vulnerability. Due to incorrectly handling the hostname of a script path, it allows remote attackers to bypass intended access restrictions via URLs. Different from cve-2016-5144...