QEMU Denial of Service Vulnerability (CNVD-2016-00888)

QEMU is a suite of simulation processor software. The software is fast and cross-platform. QEMU has a security vulnerability that allows remote attackers to exploit to crash the QEMU process and perform a denial of service...

Linux kernel denial of service vulnerability (CNVD-2016-00854)

Linux kernel is an open source operating system. Linux kernel has a security vulnerability that allows attackers to conduct denial of service attacks...

OpenSSL Security Bypass Vulnerability (CNVD-2016-00990)

OpenSSL is an open source capable of implementing the Secure Sockets Layer and Secure Transport Layer TLS v1 protocols as a general purpose cryptographic library. A security bypass vulnerability exists in OpenSSL that could be exploited by a remote attacker to submit a special request, bypass...

Oracle MySQL Server: DML Component Denial of Service Vulnerability (CNVD-2016-00470)

Oracle MySQL Server is an open source relational database management system. A security vulnerability in the MySQL Server: DML component allows remote attackers to conduct denial of service attacks by submitting special requests...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Enterprise Manager Base Platform Agent Next Gen Component (CNVD-2016-00703)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified vulnerability in the Enterprise Manager Base Platform Agent Next Gen component of Oracle Enterprise Manager Grid Control allows local attackers to exploit the vulnerability to access data...

Apple iOS IOHIDFamily Handling Arbitrary Code Execution Vulnerability

Apple iOS is Apple's operating system for several smart devices. A memory corruption vulnerability exists in the Apple iOS IOHIDFamily API handling, allowing a local attacker to execute arbitrary code...

Oracle MySQL Server: DML Component Denial of Service Vulnerability (CNVD-2016-00469)

Oracle MySQL Server is an open source relational database management system. A security vulnerability in the MySQL Server: DML component allows remote attackers to conduct denial of service attacks by submitting special requests...

Apple iOS WebKit Memory Corruption Vulnerability (CNVD-2016-00536)

Apple iOS is Apple's operating system for several smart devices. A memory corruption vulnerability exists in Apple iOS Webkit, which allows an attacker to construct a malicious web page and trick a user into parsing it, which could crash the application or execute arbitrary code...

Huawei P8 Local Elevation of Privilege Vulnerability (CNVD-2016-00340)

The Huawei P8 is a smartphone from the Chinese company Huawei. Huawei P8 has a security vulnerability that can be exploited by local attackers to elevate privileges...

OpenStack Nova Information Disclosure Vulnerability (CNVD-2016-00382)

OpenStack is a cloud platform management project. openStack Nova is one of the cloud computing construct controllers written in Python and is part of the IaaS system. OpenStack Nova suffers from a security vulnerability that allows remote attackers to exploit the vulnerability to gain access to...

Microsoft Windows Arbitrary Code Execution Vulnerability (CNVD-2016-00253)

Microsoft Windows is a popular operating system. Microsoft Windows contains a security vulnerability in Win32k, which can be exploited by remote attackers to execute arbitrary code by submitting a special request...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2016-00251)

Microsoft Windows is a popular operating system. The sandbox implementation of Microsoft Windows incorrectly handles re-resolution points and suffers from a load point elevation of privilege vulnerability that allows a local attacker to exploit this vulnerability to elevate privileges...

Microsoft Internet Explorer Security Mechanism Bypass Vulnerability (CNVD-2016-00287)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A security vulnerability exists in Microsoft Internet Explorer that could be exploited by remote attackers to construct malicious Web pages that could be tricked into parsin...

QEMU 'net/vmxnet3.c' denial of service vulnerability (CNVD-2016-00106)

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in QEMU. An attacker can exploit this vulnerability to disclose host memory and crash the host, denying service to legitimate...

Samba拒绝服务漏洞（CNVD-2015-08517）

No description provided by source...

Linux kernel local boost vulnerability (CNVD-2015-08501)

Linux kernel is an open source operating system. Linux kernel has a security vulnerability that allows local attackers to exploit the vulnerability to gain root privileges...

Foreman跨站脚本漏洞（CNVD-2015-08438）

No description provided by source...

Xen Denial of Service Vulnerability (CNVD-2015-08403)

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. Xen has a security vulnerability that allows an attacker to exploit the vulnerability to crash the host with virtual machine administrator privileges to conduct a denial of servic...

IBM Tivoli Storage FlashCopy Manager and Tivoli Storage Manager local boost vulnerability (CNVD-2015-08435)

IBM Tivoli Storage FlashCopy Manager is a suite of software that provides a high level of data protection for critical applications and databases through integrated snapshot capabilities.Tivoli Storage Manager is a suite of software that automates data protection for e-mail servers. A security...

libxml2 Denial of Service Vulnerability (CNVD-2015-08400)

libxml2 is an XML parser and markup toolset. A denial of service vulnerability exists in versions of libxml2 prior to 2.9.3. An attacker is able to cause a denial of service via unspecified vectors regarding incorrect entity boundaries and start tags...