Adobe Reader/Acrobat heap buffer overflow vulnerability (CNVD-2015-04657)

Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. A heap buffer overflow vulnerability exists in Adobe Reader/Acrobat that allows an attacker to execute arbitrary code via unspecified vectors...

Django Denial of Service Vulnerability (CNVD-2015-04482)

Django is a set of Django Software Foundation based on the Python language open source Web application framework. The framework includes object-oriented mapper , view system , template system and so on. A denial of service vulnerability exists in Django. An attacker can exploit this vulnerability...

SQL Injection Vulnerability in Zhixiang OA Office System/mainpage/msg.aspx?user=parameters

Zhixiang OA office system is an enterprise office system. A SQL injection vulnerability exists in the OpenWindows/OpenleibiezlMc.aspx?id= parameter of the Zhixiang OA Office System, which can be exploited by an attacker to obtain sensitive information from the database...

Apple iOS text file handling memory corruption vulnerability (CNVD-2015-04292)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Apple iOS's handling of ICC files, which allows attackers to construct malicious PDF files and trick users into parsing them, which can execute arbitrary code...

GetSimple CMS suffers from multiple cross-site scripting vulnerabilities (CNVD-2015-04182)

GetSimple CMS is an XML-based content management system CMS from Cagintranet Networks, USA. The system includes a theme selector and editor, component editor, image and file managers, and more. A cross-site scripting vulnerability exists in Cagintranet Networks GetSimple CMS versions prior to...

Apple OS X Intel Graphics Card Driver Buffer Overflow Vulnerability (CNVD-2015-04275)

Apple Mac OS X is a commercial operating system. Apple Mac OS X handles a buffer overflow issue with the Intel graphics driver, allowing attackers to exploit the vulnerability to crash applications or execute arbitrary code...

Apple OS X Intel Graphics Card Driver Buffer Overflow Vulnerability (CNVD-2015-04270)

Apple Mac OS X is a commercial operating system. Apple Mac OS X handles a buffer overflow issue with the Intel graphics driver, allowing attackers to exploit the vulnerability to crash applications or execute arbitrary code...

Apple QuickTime Memory Corruption Vulnerability (CNVD-2015-04265)

Apple QuickTime is a popular multimedia player. A vulnerability in Apple QuickTime's handling of special movie files allows remote attackers to construct malicious files that can be tricked into being parsed by an application, which can execute arbitrary code in the application context...

IBM Tivoli Storage Manager FastBack Arbitrary Command Execution Vulnerability (CNVD-2015-04165)

IBM Tivoli Storage Manager FastBack is a suite of software that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. An arbitrary command execution vulnerability in IBM Tivoli Storage Manager FastBack version 6.1 prior to 6.1.12 allows...

Google Chrome Security Bypass Vulnerability (CNVD-2015-04100)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the content/browser/webui/contentwebuicontrollerfactory.cc file in Google Chrome 43.0.2357.81 and earlier versions, which stems from the program's failure to properly validate a URL...

Magnifica Webscripts Anima Gallery Directory Traversal Vulnerability

Magnifica Webscripts is a PHP image management system. Magnifica Webscripts Anima Gallery suffers from a directory traversal vulnerability due to the func.php function in the program failing to adequately filter the 'theme' and 'lang' cookie parameter, which allows remote attackers to obtain the...

Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2015-03797)

Adobe Flash Player is a Flash file handling program. A memory misreference vulnerability exists in Adobe Flash Player, which allows remote attackers to construct malicious SWF content and trick users into parsing it to execute arbitrary code...

Adobe Flash Player ASLR Protection Bypass Vulnerability

Adobe Flash Player is a Flash file handling program. A security vulnerability exists in Adobe Flash Player that allows remote attackers to perform unauthorized operations by exploiting a vulnerability that bypasses the memory address randomization restriction in Flash heap memory. 64 of windows 7...

Adobe Flash Player Same-Origin Policy Bypass Information Disclosure Vulnerability (CNVD-2015-03774)

Adobe Flash Player is a Flash file handling program. Adobe Flash Player suffers from a same-origin policy bypass vulnerability, which allows remote attackers to exploit the vulnerability to construct malicious SWF content that can be parsed by the user and can be used to obtain sensitive...

XZERES 442SR OS Cross-Site Request Forgery Vulnerability (CNVD-2015-03663)

The XZERES 442SR OS is a 442SR model turbine generator. The XZERES 442SR OS suffers from a cross-site request forgery vulnerability that allows a remote attacker to construct a malicious URI, trick a user into resolving it, and can perform malicious actions in the context of the target user...

Aruba Networks CPPM Cross-Site Scripting Vulnerability (CNVD-2015-03509)

Aruba Networks ClearPass Policy Manager is an advanced policy management platform for role- and device-based network access control. A security vulnerability exists in Aruba Networks ClearPass Policy Manager CPPM, which can be exploited by remote administrators to inject arbitrary web script or...

Apport Local Elevation of Privilege Vulnerability (CNVD-2015-03433)

Apport is a toolkit for collecting and providing feedback on error messages. A local boost vulnerability exists in Apport, which allows a local attacker to gain root privileges...

python-dbusmock local code execution vulnerability

python-dbusmock is a Python library for creating simulated objects on the D-Bus. A security vulnerability exists in python-dbusmock that allows a local attacker to exploit the vulnerability to execute arbitrary code...

Amazon App Store Cross-Site Scripting Vulnerability

The Amazon App Store is a set of application stores from Amazon.com, Inc. in the United States. A cross-site scripting vulnerability exists in Amazon App Store. An attacker can exploit the vulnerability to execute arbitrary script code in the browser of a trusted user in the context of the affect...

Linux Kernel Local Elevation of Privilege Vulnerability (CNVD-2015-03232)

The Linux Kernel is the kernel of the Linux operating system. Linux kernel has a local elevation of privilege vulnerability in its implementation. A local attacker can exploit this vulnerability to gain elevated privileges...