Microsoft Internet Explorer elevation of privilege vulnerability (CNVD-2015-06655)

Internet Explorer is a web browser from Microsoft. Internet Explorer 10/11 has a security vulnerability in its implementation. A remote attacker can exploit this vulnerability to elevate privileges through a constructed website...

Adobe Acrobat/Reader Memory Corruption Code Execution Vulnerability (CNVD-2015-06740)

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified memory corruption vulnerability exists in Adobe Reader/Acrobat. This allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could crash the application or execute...

Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06722)

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified security bypass vulnerability exists in Adobe Reader/Acrobat. The vulnerability allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could bypass Javascript API...

Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06729)

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified security bypass vulnerability exists in Adobe Reader/Acrobat. The vulnerability allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could bypass Javascript API...

Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06730)

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified security bypass vulnerability exists in Adobe Reader/Acrobat. The vulnerability allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could bypass Javascript API...

Adobe Acrobat/Reader heap buffer overflow vulnerability (CNVD-2015-06737)

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified heap buffer overflow vulnerability exists in Adobe Reader/Acrobat. This allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could crash the application or execute...

Adobe Flash Player Buffer Overflow Vulnerability (CNVD-2015-06675)

Adobe Flash Player is a Flash file handling program. A buffer overflow vulnerability exists in Adobe Flash Player. This allows remote attackers to construct malicious SWF content and trick users into parsing it, which could execute arbitrary code...

Adobe Flash Player Same-Origin Policy Bypass Information Disclosure Vulnerability (CNVD-2015-06679)

Adobe Flash Player is a Flash file handling program. Adobe Flash Player suffers from an unspecified same-origin policy bypass vulnerability. This allows remote attackers to construct malicious SWF content and trick users into parsing it, which could lead to sensitive information...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-06656)

Internet Explorer is a web browser from Microsoft. Internet Explorer 10 has a security vulnerability in its implementation. A remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service memory corruption via a constructed website...

Android libstagefright number error vulnerability (CNVD-2015-06610)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. libstagefright is one of the libraries that supports hardcoding. An integer overflow vulnerability exists in the SampleTable.cpp file in libstagefright in Android 4.4.4 and earlier...

Siemens Scalance W-700 系列设备SSL证书欺骗漏洞

Siemens Scalance W-700系列内置SSL证书欺骗漏洞 CNVD-ID CNVD-2013-11278 CVE-ID: CVE-2013-4651 在关于担保的管理 web 界面和命令行管理界面中的身份验证旁路硬编码的 SSL 证书的西门子 Scalance W7xx IEEE 802.11a/b/g 产品系列。Siemens Scalance W-700 Series是西门子开发的工业无线交换机设备。 Siemens Scalance W-700系列设备设备内置的SSL证书，不能通过管理接口来更换该证书，允许攻击者通过中间人攻击获取敏感信息。 如下固件版本...

QEMU Denial of Service Vulnerability (CNVD-2015-06502)

QEMU is a suite of analog processor software developed by French programmer Fabrice Bellard. A security vulnerability exists in the QEMU emulator, supported using the e1000 NIC emulation, which can be exploited by an attacker to cause a denial of service infinite loop...

Android Denial of Service Vulnerability (CNVD-2015-06589)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial of service vulnerability exists in Android versions prior to 5.1.1 LMY48T, which could allow a remote attacker to execute arbitrary code or cause a denial of...

Android Arbitrary Code Execution Vulnerability (CNVD-2015-06514 )

Android is an operating system based on the Linux open kernel. An arbitrary code execution vulnerability in Android to 5.1.1 LMY48M allows remote attackers to execute arbitrary code via metadata in specially crafted MP3 or MP4 files...

Android integer overflow vulnerability (CNVD-2015-06604)

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. An integer overflow vulnerability exists in Android versions prior to 5.1.1, LMY48I. Allowing an attacker to execute arbitrary code via a crafted application using HDCP...

OpenStack Nova Denial of Service Vulnerability (CNVD-2015-06392)

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration and Rackspace, Inc. in the U.S. OpenStack Nova is one of the cloud computing construct controllers written in Python. It is part of the IaaS system. A denial of service vulnerability...

Resource Data Management Cross-Site Request Forgery Vulnerability

Resource Data Management is a Web-based SCADA monitoring system. A cross-site request forgery vulnerability exists in the implementation of Resource Data Management. An attacker could exploit this vulnerability to perform unauthorized operations...

Adobe Flash Player suffers from an unspecified memory corruption vulnerability (CNVD-2015-06317)

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. A memory corruption vulnerability exists in Adobe Flash Player that could allow an...

Adobe Flash Player suffers from an unspecified memory corruption vulnerability (CNVD-2015-06318)

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. A memory corruption vulnerability exists in Adobe Flash Player that could allow an...

PHP 'php_zip.c' Directory Traversal Vulnerability

PHP is an open source general-purpose computer scripting language. A directory traversal vulnerability in PHP 'phpzip.c' allows remote attackers to exploit the vulnerability by submitting the special directory traversal character '...' to create or overwrite arbitrary files...