Google Chrome DevTools Access Restriction Vulnerability (CNVD-2016-06146)

Google Chrome is a web browsing tool developed by Google. Google Chrome has a security vulnerability. Due to incorrect handling of the hostname of a script path, it allows remote attackers to bypass intended access restrictions via URLs. Unlike CVE-2016-5143...

ImageMagick Buffer Overflow Vulnerability (CNVD-2016-06093)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. ImageMagick suffers from a buffer overflow vulnerability that allows an attacker to execute arbitrary code...

Android Wi-Fi Information Disclosure Vulnerability (CNVD-2016-06013)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, with Wi-Fi as one of the wireless connectivity components. An information disclosure vulnerability exists in Wi-Fi in Android. An attacker can exploit this vulnerability to access...

OpenSSL Denial of Service Vulnerability (CNVD-2016-05838)

OpenSSL is the OpenSSL team developed an open source capable of implementing the Secure Sockets Layer SSL v2/v3 and Secure Transport Layer TLS v1 protocols of a common cryptographic library. A denial of service vulnerability exists in OpenSSL, which can be exploited by an attacker to crash an...

Juniper Junos Denial of Service Vulnerability (CNVD-2016-05828)

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. A denial of service vulnerability exists in Juniper Junos. An attacker could exploit this vulnerability to caus...

GNU Libidn Remote Arbitrary Code Execution Vulnerability (CNVD-2016-05809)

GNU Libidn is a package that implements string preprocessing, Punycode, and IDNA specification definitions via the IETF International Domain Name IDN. A remote arbitrary code execution vulnerability exists in GNU Libidn, which could be exploited by an attacker to execute arbitrary code in an...

Multiple Apple Products WebKit Memory Corruption Vulnerability (CNVD-2016-05753)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; tvOS is an operating system for smart TVs. webKit is an open source web browser engine developed by the KDE community. A security...

Apple OS X Audio Denial of Service Vulnerability (CNVD-2016-05591)

Apple OS X is a specialized operating system developed by Apple for Mac computers.Audio is one of the audio components. A security vulnerability exists in Audio in Apple OS X versions prior to 10.11.6. A local attacker could exploit this vulnerability to cause a denial of service null pointer...

Xen elevation of privilege vulnerability (CNVD-2016-05535)

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. There is a security vulnerability in Xen that can be exploited by PV-mode VM administrators to penetrate to the host system...

Design Vulnerability in Oceanis Browser

Maxthon Browser is a versatile and personalized multi-tab browser. It reduces the browser's usage of system resources and improves the efficiency of web surfing. A design vulnerability exists in Maxthon Browser that allows attackers to exploit the vulnerability to bypass the homology policy...

Unspecified Vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (CNVD-2016-05453)

Oracle Primavera is a set of Oracle Oracle for project-intensive industries enterprise project portfolio management EPPM solution. The solution helps organizations assess project risks and rewards, determine the resources and skills needed to get the job done, and more. A security vulnerability i...

Unspecified Vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (CNVD-2016-05449)

Oracle Primavera is a set of Oracle Oracle for project-intensive industries enterprise project portfolio management EPPM solution. The solution helps organizations assess project risks and rewards, determine the resources and skills needed to get the job done, and more. A security vulnerability i...

Unspecified Vulnerability in Oracle Agile PLM (CNVD-2016-05332)

Oracle Agile Product Lifecycle Management PLM solutions enable organizations to manage product information, processes, and decisions across a global product network throughout the product lifecycle. A security vulnerability exists in Oracle Supply Chain Products Suite version 9.3.4, 9.3.5, Oracle...

Unspecified Vulnerability in Oracle Sun Systems Products Suite ILOM Component (CNVD-2016-05277)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.ILOM Integrated Lights Out Manager is one of the system management components that comes pre-installed on x86-based servers and SPARC-based servers. A security vulnerability exists in the ILOM component o...

Oracle Siebel CRM Siebel Core - Server Framework component has an unspecified vulnerability (CNVD-2016-05483)

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions, which includes sales management, marketing management, customer service systems, call centers and other modules.Siebel Core - Server Framework is one of the server framework component...

Unspecified Vulnerability in Oracle Fusion Middleware Outside In Technology (CNVD-2016-05429)

Oracle Fusion Middleware is a comprehensive middleware portfolio of SOA and middleware products. A security vulnerability exists in Oracle Fusion Middleware versions 8.5.0, 8.5.1, 8.5.2, Outside In Technology component, which can be exploited by remote attackers to compromise confidentiality...

Unspecified Vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (CNVD-2016-05448)

Oracle Primavera is a set of Oracle Oracle for project-intensive industries enterprise project portfolio management EPPM solution. The solution helps organizations assess project risks and rewards, determine the resources and skills needed to get the job done, and more. A security vulnerability i...

Oracle Siebel CRM Siebel Core - Server Framework component has an unspecified vulnerability (CNVD-2016-05484)

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions, which includes sales management, marketing management, customer service systems, call centers and other modules.Siebel Core - Server Framework is one of the server framework component...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2016-05398)

Oracle MySQL Server is a lightweight relational database system. A security vulnerability exists in Oracle MySQL Server 5.7.12 and earlier versions, which can be exploited by an authenticated attacker to compromise integrity, availability...

Multiple vulnerabilities in OpenBSD (CNVD-2016-05206)

OpenBSD is a cross-platform, BSD-based UNIX-like operating system developed by the Canadian OpenBSD project. OpenBSD contains memory corruption vulnerabilities and denial of service vulnerabilities that can be exploited by attackers to cause kernel errors and deny service to legitimate users...