Adobe Flash Player Memory Error Reference Memory Corruption Vulnerability (CNVD-2015-06310)

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. A memory misreference vulnerability exists in Adobe Flash Player that could allow an...

WordPress Security Bypass Vulnerability (CNVD-2015-06151)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. A security bypass vulnerability exists in WordPress versions prior to 4.3.1, which can be exploited by attackers to bypass security restrictions and perform unauthorized operations...

Apple iOS WebKit Memory Corruption Vulnerability (CNVD-2015-06123)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS WebKit engine, which allows remote attackers to construct a malicious web page and trick users into parsing it, which could crash the application ...

Apple iOS kernel memory corruption vulnerability (CNVD-2015-06076)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS kernel, which allows malicious attackers to exploit the vulnerability to execute arbitrary code...

Apple iOS Webkit Memory Corruption Vulnerability (CNVD-2015-06180)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Webkit used by Apple iOS, which allows attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute...

Apple iOS Webkit Memory Corruption Vulnerability (CNVD-2015-06145)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Webkit used by Apple iOS, which allows attackers to construct malicious web pages that can be tricked into being parsed by users, which can crash the applicatio...

Securifi Almond Cross-Site Request Forgery Vulnerability (CNVD-2015-06095)

Securifi Almond is a wireless router product from Securifi. Securifi Almond suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the target user...

OpenLDAP Denial of Service Vulnerability (CNVD-2015-06013)

OpenLDAP is a free and open source implementation of the Lightweight Directory Access Protocol LDAP from the OpenLDAP Foundation in the United States, which is included in Linux distributions. A security vulnerability in the 'bergetnext' function in the libraries/liblber/io.c file in OpenLDAP...

Microsoft .NET Framework Elevation of Privilege Vulnerability (CNVD-2015-05953)

Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure NET Framework is a comprehensive and consistent programming model...

Adobe Shockwave Player Memory Corruption Vulnerability (CNVD-2015-05991)

Adobe Shockwave Player is software that plays web content created using Macromedia and Adobe Director. A security vulnerability exists in Adobe Shockwave Player versions prior to 12.2.0.162, which can be exploited by an attacker to execute arbitrary code or cause a denial of service memory...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-05911)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists when Microsoft IE versions 7 through 11 fail to properly access objects in memory. The vulnerability...

Microsoft Windows Kernel Mode Driver Elevation of Privilege Vulnerability (CNVD-2015-05921)

Microsoft Windows Kernel Mode Driver is a monitor driver. An elevation of privilege vulnerability exists in Microsoft Windows Kernel Mode Driver, which can be exploited by an attacker to elevate privileges and execute arbitrary code...

MediaWiki SemanticForms Extended Cross-Site Scripting Vulnerability (CNVD-2015-05872 (CNVD-C-2015-47230))

MediaWiki is the United States Wikimedia Wikimedia Foundation and MediaWiki volunteers to develop and maintain a set of free and free Web-based Wiki engine , it can be used to deploy internal knowledge management and content management system . SemanticForms is one of the extensions used to creat...

Basware Banking Trust Management Vulnerability (CNVD-2015-05812)

Basware Banking Maksuliikenne is a suite of software from the Finnish company Basware that establishes connections with banks to manage their own finances. A security vulnerability exists in Basware Banking version 8.90.07 and earlier, which stems from the use of hard-coded passwords for accounts...

HP Version Control Repository Manager Information Disclosure Vulnerability (CNVD-2015-05736)

HP Version Control Repository Manager is a set of version control repository management products from Hewlett-Packard HP. An information disclosure vulnerability exists in HP Version Control Repository Manager versions prior to 7.5.0. It allows an authenticated remote user to obtain sensitive...

HP KeyView Arbitrary Code Execution Vulnerability (CNVD-2015-05720)

HP KeyView is file filtering and conversion software that extracts file content and metadata. A security vulnerability exists in the implementation of HP KeyView versions prior to 10.23.0.1 and prior to 10.24.0.1. A remote attacker can exploit this vulnerability to execute arbitrary code...

Electric Sheep Fencing pfsense cross-site scripting vulnerability (CNVD-2015-05673)

Electric Sheep Fencing pfsense is a free and open source FreeBSD-based firewall and router software from Electric Sheep Fencing. A cross-site scripting vulnerability exists in Electric Sheep Fencing pfsense, which can be exploited by remote attackers to inject arbitrary Web script or HTML...

EMC Documentum Content Server Remote Lift Vulnerability (CNVD-2015-05446)

EMC Documentum Content Server is a content management service system from EMC. The system is mainly used to manage Documentum content repository, can create, modify and track documents and other operations. A remote elevation vulnerability exists in EMC Documentum Content Server. A remote attacke...

Mozilla Firefox suffers from an unspecified memory corruption vulnerability (CNVD-2015-05434)

Mozilla Firefox is an open source WEB browser. An unspecified memory corruption vulnerability exists in Mozilla Firefox, which allows remote attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute arbitrary code...

Apple iOS Code Signature Bypass Vulnerability (CNVD-2015-05539)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS that allows a local attacker to execute unsigned code by exploiting a code signing flaw...