Android Mediaserver elevation of privilege vulnerability (CNVD-2016-04640)

Android is a Linux-based open source operating system, and Mediaserver is one of its multimedia service components. A security vulnerability in Mediaserver on Android allows remote attackers to exploit the vulnerability to build special files that can be parsed by the user, which can be used to...

Android Framework APIs elevation of privilege vulnerability (CNVD-2016-04682)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Framework APIs are one of the API components used to create the framework. A power lifting vulnerability exists in Android's Framework APIs. A local attacker can exploit this...

Android Mediaserver Remote Code Execution Vulnerability (CNVD-2016-04613)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A remote code execution vulnerability exists in Mediaserver in Android. A remote attacker could exploit this vulnerability with the...

Open-Xchange AppSuite Cross-Site Scripting Vulnerability (CNVD-2016-04414)

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in OX AppSuite 7.8.1 and earlier...

PHP memory misreference vulnerability (CNVD-2016-04370)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A memory misreference vulnerability exists in PHP's GC algorithm and unserialize function, which can be exploited by remote attackers to execute...

libical heap out-of-bounds read vulnerability (CNVD-2016-04384)

libical is a set of open source for the implementation of iCalendar Calendar Data Exchange Standard protocols and protocol data units . A security vulnerability exists in libical. An attacker could exploit this vulnerability to cause a heap out-of-bounds read...

Linux kernel buffer overflow vulnerability (CNVD-2016-04392)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the Linux kernel. An attacker can exploit the vulnerability by calling hiddev ioctl with the HIDIOCGUSAGES or HIDIOCSUSAGES commands ...

Pidgin MXIT Protocol Denial of Service Vulnerability (CNVD-2016-04337)

Pidgin is a cross-platform real-time communication client. A denial-of-service vulnerability exists in the MXIT protocol processing in Pidgin version 2.10.11, which can be exploited by an attacker to cause a denial of service read across boundaries by sending invalid data...

Multiple Generic Vulnerabilities in the Special Equipment Inspection Management System of Tronda Electronics Co.

Tronda Electronics Co., Ltd. is a business dealing in camera accessories. A file read and SQL injection vulnerability exists in the Special Equipment Inspection Management System of Tronda Electronics Ltd. Allows attackers to utilize common SQL injection tools to obtain sensitive database...

mDNSResponder Buffer Overflow Vulnerability (CNVD-2016-04181)

mDNSResponder is a product that provides unicast and multicast mDNS services for UNIX-like operating systems. A buffer overflow vulnerability exists in mDNSResponder version 379.27 and versions prior to 625.41.2 that stems from multiple functions GetValueForIPv4Addr, GetValueForMACAddr,...

Unspecified memory corruption vulnerability in Microsoft Internet Explorer and Microsoft Edge Adobe Flash Player (CNVD-2016-04121)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR.Microsoft Internet Explorer and Microsoft Edge are popular web browsers. An unspecified memory corruption vulnerability exists in Adobe Flash Player used ...

Unspecified Memory Error Reference Vulnerability in Microsoft Internet Explorer and Microsoft Edge Adobe Flash Player (CNVD-2016-04153)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR.Microsoft Internet Explorer and Microsoft Edge are popular web browsers. An unspecified memory misreference vulnerability exists in Adobe Flash Player use...

Apache Struts2 Remote Code Execution Vulnerability (CNVD-2016-04090)

Apache Struts is the United States Apache Apache Software Foundation is responsible for maintaining an open source project , is a set of open source MVC framework for creating enterprise Java Web applications , mainly provides two versions of the framework product , Struts 1 and Struts 2. Apache...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2016-04059)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A remote code execution vulnerability exists in Microsoft IE versions 9 through 11, which arises from the program failing to properl...

ImageMagick Denial of Service Vulnerability (CNVD-2016-03863)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in ImageMagick. An attacker can exploit this vulnerability to cause a denial ...

Android Qualcomm Sound Driver Elevation of Privilege Vulnerability (CNVD-2016-03855)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Sound Driver is a Qualcomm-developed sound driver used in it. An elevation of privilege vulnerability exists in the Qualcomm Sound Driver for Android. An attacker can...

Apache Struts2 Remote Code Execution Vulnerability (CNVD-2016-03754 )

Apache Struts is an open source framework for creating enterprise Java Web applications. A remote code execution vulnerability exists in Struts2, which can be exploited by an attacker to remotely execute code using a REST plugin to invoke a malicious expression with dynamic methods enabled...

IBM TRIRIGA Application Platform Cross-Site Request Forgery Vulnerability (CNVD-2016-03775)

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...

Google Chrome Blink Same-Origin Policy Bypass Vulnerability (CNVD-2016-03780)

Blink is the United States Google Google Inc. and Norway Opens Opera Software company jointly developed a set of browser layout engine rendering engine. An ink same-origin policy bypass vulnerability exists in Blink in versions of Google Chrome prior to 51.0.2704.63. A remote attacker can exploit...

Multiple vulnerabilities in HPE Matrix Operating Environment and Systems Insight Manager (CNVD-2016-03740)

HPE Matrix Operating Environment is a set of cloud management software designed for infrastructure services.HPE Systems Insight Manager is a set of management software for HP servers and storage devices, which provides multi-system management, fault management and event handling, and rights...