多款F5产品拒绝服务漏洞（CNVD-2015-07477）

No description provided by source...

IBM Security QRadar Incident Forensics中间人攻击漏洞（CNVD-2015-07484）

No description provided by source...

Adobe Flash Player & Compiler Memory Misreference Vulnerability (CNVD-2015-07616)

Adobe Flash Player, Adobe AIR SDK, and Adobe AIR SDK & Compiler are products of Adobe, Incorporated.Adobe Flash Player is a multimedia player; Adobe AIR SDK and Adobe AIR SDK & Compiler are standard development kits for Adobe AIR a cross-OS runtime environment. Adobe Flash Player is a multimedia...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2015-07591)

Microsoft Windows is a series of operating systems designed for personal computer and server users from the American company Microsoft. Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-07548)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A memory corruption vulnerability exists in Microsoft Internet Explorer 7 through 11. This allows remote attackers to execute arbitrary code or cause a denial of service via...

IBM InfoSphere BigInsights uses Apache Ambari information disclosure vulnerability (CNVD-2015-07487)

IBM InfoSphere BigInsights is a suite of software platforms for storing and analyzing "Big Data" from IBM, USA. The platform provides solutions for managing and analyzing massive amounts of structured and unstructured data.Apache Ambari is a set of tools for configuring, managing, and monitoring...

MediaWiki Oauth extension security bypass vulnerability (CNVD-2015-07397)

MediaWiki is a suite of free and freely available web-based wiki engines that can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in the MediaWiki Oauth extension, which allows remote attackers to exploit the vulnerability to bypass...

Xen Denial of Service Vulnerability (CNVD-2015-07433)

Xen is an open source virtual machine monitor product. Xen has a security vulnerability that allows an attacker with HVM virtual machine access to crash the system and perform denial of service attacks...

Foxit Reader and Foxit PhantomPDF memory corruption vulnerability (CNVD-2015-07174)

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a business version of the application. A security vulnerability exists in Foxit Reader and Foxit PhantomPDF, which allows attackers to exploit this vulnerability to construct malicious files that can be tricked into parsing by the user,...

NTP Denial of Service Vulnerability (CNVD-2015-07022)

NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP versions prior to 4.2.8p4 and 4.3.x prior to 4.3.77. Due to the program failing to properly use authentication and restriction mechanisms to...

Joomla SQL Injection Vulnerability (CNVD-2015-06803)

Joomla is a content management system, developed with PHP + MySQL database, running on Linux, Windows, MacOSX, Solaris and many other platforms. Joomla has been disclosed to have a SQL injection vulnerability, the comprehensive use of the vulnerability, attackers can obtain the website database...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2015-06893)

Juniper Networks Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. A security vulnerability in Juniper Networks Junos OS can be exploited by a remote attacker to cause a denial of service buffer resource depletion with a series of packets sent to...

Oracle Sun Solaris has an unspecified vulnerability (CNVD-2015-06813)

Oracle Sun Solaris is a set of Unix-like operating systems from Oracle. An unspecified vulnerability exists in Oracle Sun Solaris 11.2. The vulnerability allows local users to compromise confidentiality, integrity and availability via unspecified vectors with related utilities/zones...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-06818)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. An unspecified vulnerability exists in Oracle MySQL Server versions 5.5.44 and earlier, 5.6.25 and earlier...

Adobe Flash Player/AIR Memory Misreference Vulnerability (CNVD-2015-06875)

FlashPlayer is a high-performance, lightweight and very expressive client-side runtime player. Adobe AIR is a technology developed for the integration of web and desktop applications. A memory misreference vulnerability exists in the implementation of Adobe Flash Player/AIR. A remote attacker can...

Google Chrome Blink Same-Origin Policy Bypass Vulnerability (CNVD-2015-06769)

Google Chrome is an open source WEB browser. The 'ContainerNode::parserInsertBefore' function in the core/dom/ContainerNode.cpp file in Blink used by Google Chrome has a security vulnerability that can be exploited by a remote attacker to bypass the same-origin policy, as a program still performs...

Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06716)

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified security bypass vulnerability exists in Adobe Reader/Acrobat. The vulnerability allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could bypass Javascript API...

Adobe Acrobat/Reader Memory Corruption Code Execution Vulnerability (CNVD-2015-06742)

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified memory corruption vulnerability exists in Adobe Reader/Acrobat. The vulnerability allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could crash the application or...

Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2015-06685)

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified memory misreference vulnerability exists in Adobe Reader/Acrobat. This allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could crash the application or execute...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2015-06681)

Adobe Flash Player is a Flash file handling program. A memory misreference vulnerability exists in Adobe Flash Player. This allows remote attackers to construct malicious SWF content and trick users into parsing it, which could execute arbitrary code...