OpenSSL has an unspecified vulnerability (CNVD-2016-02810)

OpenSSL is an open source capable of implementing the Secure Sockets Layer SSL v2/v3 and Secure Transport Layer TLS v1 protocols developed by the OpenSSL team as a general-purpose cryptographic library that supports a wide range of cryptographic algorithms including symmetric ciphers, hash...

Libksba integer overflow vulnerability (CNVD-2016-02854)

Libksba is a library that simplifies work tasks for X.509 certificates, CMS data and related objects in the GnuPG project developed by the GNU Project. An integer overflow vulnerability exists in the BER decoder src/ber-decoder.c file in Libksba. A remote attacker could exploit this vulnerability...

Linux kernel denial of service vulnerability (CNVD-2016-02790)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the file drivers/usb/serial/cypressm8.c in Linux kernel versions prior to 4.5.1. An attacker could use this vulnerability to cause ...

Mozilla Firefox memory corruption vulnerability (CNVD-2016-02690)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A memory corruption vulnerability exists in the browser engine of Mozilla Firefox versions prior to 46. A remote attacker could exploit this vulnerability to cause a denial of service or execut...

xWPE Local Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in xwpe v1.5.30a-2.1 and earlier versions due to a failure to strictly limit user input. An attacker is able to exploit this vulnerability to arbitrarily execute code in the context of the application, potentially resulting in a denial of service...

PHP PHAR Extension Denial of Service Vulnerability (CNVD-2016-02701)

PHP is an open source general-purpose computer scripting language. A security vulnerability exists in the PHP PHAR extension that stems from the program's failure to properly handle filenames in archives, allowing remote attackers to exploit the vulnerability by submitting a special request to...

RoundCube Webmail Cross-Site Scripting Vulnerability (CNVD-2016-02712)

RoundCube Webmail is a browser-based IMAP client mail client. A cross-site scripting vulnerability exists in RoundCube Webmail, which can be exploited by an attacker to inject arbitrary web script or HTML...

OIC Exponent CMS Cross-Site Scripting Vulnerability (CNVD-2016-02700)

OIC Exponent CMS is a free, open source, modular PHP-based content management system CMS from the OIC Group of companies in the United States. A cross-site scripting vulnerability exists in OIC Exponent CMS version 2.3.5, which can be exploited by an attacker to inject arbitrary Web script or HTM...

Linux kernel buffer overflow vulnerability (CNVD-2016-02633)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the rwverifyarea function of the Linux kernel, which can be exploited by a remote attacker to compromise confidentiality, integrity,...

ZOHO ManageEngine EventLog Analyzer elevation of privilege vulnerability (CNVD-2016-02408)

ZOHO ManageEngine EventLog Analyzer is a set of system, event log analysis software. A security vulnerability exists in ZOHO ManageEngine EventLog Analyzer that could be exploited by an attacker to elevate privileges and perform unauthorized operations...

HP Data Protector Remote Code Execution Vulnerability (CNVD-2016-02367)

HP Data Protector is a suite of unified data protection solutions from Hewlett-Packard HP in the United States. The solution protects data across all physical and virtual environments by utilizing an intelligent data management approach that provides three-party application source, standby server...

HP Data Protector Remote Code Execution Vulnerability (CNVD-2016-02368)

HP Data Protector is a suite of unified data protection solutions from Hewlett-Packard HP in the United States. The solution protects data across all physical and virtual environments by utilizing an intelligent data management approach that provides three-party application source, standby server...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-02445)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in versions of Google Chrome prior to 50.0.2661.75. A remote attacker can exploit the vulnerability to execute arbitrary code...

Linux kernel denial of service vulnerability (CNVD-2016-02312)

Linux kernel is an open source operating system. The Linux kernel fails to properly recover registers in the signal handler, allowing a local attacker to trigger the TM Bad Thing exception with the 'tmreclaim' function...

imlib2 integer overflow vulnerability (CNVD-2016-02331)

imlib2 is a general-purpose graphics loading and rendering library. imlib2 fails to properly allocate memory for image data, allowing a local attacker to exploit this vulnerability in an integer overflow attack that could crash an application...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-02238)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A memory corruption vulnerability exists in Microsoft Office, which arises from the program failing to...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-02241)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A memory corruption vulnerability exists in Microsoft Office, which arises from the program failing to...

Microsoft Browser Memory Corruption Vulnerability (CNVD-2016-02234)

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-02239)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A memory corruption vulnerability exists in Microsoft Office, which arises from the program failing to...

Linux kernel denial of service vulnerability (CNVD-2016-02196)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel that can be exploited by an attacker to cause a denial of service system crash...