Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-03092)

Microsoft Internet Explorer is a WEB-based browser. An unspecified memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by a remote attacker to construct a malicious web page that could be parsed by the user, causing the application to crash or execute...

Microsoft Windows Kernel Mode Driver Information Disclosure Vulnerability (CNVD-2015-03070)

Microsoft Windows is a popular operating system. An unspecified security vulnerability in Microsoft Windows Win32k.sys allows local attackers to exploit the vulnerability to build special applications that run on the system to obtain kernel memory information...

PHP '__toString()' Function Type Obfuscation Information Disclosure Vulnerability

PHP is a widely used general-purpose scripting language that is particularly well suited for web development and can be embedded in HTML. PHP suffers from a type confusion vulnerability in the 'toString' function. An attacker can exploit this vulnerability to obtain vulnerability information...

Unspecified Memory Corruption Arbitrary Code Execution Vulnerability in Adobe Reader/Acrobat (CNVD-2015-03132)

Adobe Reader/Acrobat are popular applications for processing PDF files. A memory corruption vulnerability exists in Adobe Reader/Acrobat's handling of particular PDF files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing them,...

Microsoft Internet Explorer ASLR Bypass Vulnerability (CNVD-2015-03104)

Microsoft Internet Explorer is a WEB-based browser. An unspecified ASLR bypass vulnerability exists in Microsoft Internet Explorer, which allows remote attackers to exploit the vulnerability to construct a malicious WEB page that can be tricked into parsing, bypassing security restrictions, and...

Apple Safari WebKit Memory Corruption Vulnerability (CNVD-2015-02941)

WebKit is the open source web browser engine currently used by Safari, Chrome and other browsers. A memory corruption vulnerability exists in Apple Safari prior to 6.2.6, 7.x prior to 7.1.6, and 8.x prior to 8.0.6 using WebKit, which allows remote attackers to execute arbitrary code or cause a...

Oracle E-Business Suite suffers from a remote vulnerability (CNVD-2015-02472)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. A remote security vulnerability exists in Oracle E-Business Suite. It allows attackers to exploit this vulnerability to compromise the 'Configurator DMZ rules' subcomponent in the 'HTTP' protocol...

Oracle Database Server has a remote vulnerability (CNVD-2015-02520)

Oracle Database is a large database of commercial nature. A remote vulnerability exists in Oracle Database Server that allows an attacker to gain 'Valid account' privileges using the 'Oracle Net' protocol...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-02473)

Oracle MySQL Server is an open source relational database management system. A security vulnerability exists in the 'Server : Compiling' subpart of Oracle MySQL. An attacker is allowed to exploit this vulnerability to affect the availability of the system...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-02478)

Oracle MySQL Server is an open source relational database management system. A security vulnerability exists in Oracle MySQL Server:InnoDB. An attacker is allowed to exploit this vulnerability to affect the availability of the system...

Adobe Flash Player Arbitrary Code Execution Vulnerability (CNVD-2015-02488)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. An arbitrary code execution vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerabili...

Apple Mac OS X fontd arbitrary code execution vulnerability (CNVD-2015-02345)

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X fontd has an unspecified input validation vulnerability that allows local users to exploit the vulnerability to elevate privileges...

Apple Mac OS X fontd arbitrary code execution vulnerability (CNVD-2015-02344)

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X fontd has an unspecified input validation vulnerability that allows local users to exploit the vulnerability to elevate privileges...

Apple iOS Safari History Disclosure Vulnerability (CNVD-2015-02332)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A state management vulnerability exists in Apple iOS Safari's handling of user browser clearing, which could result in the history not being cleared correctly. A remote attacker can exploit the...

Apple iOS Webkit suffers from unspecified memory corruption vulnerability (CNVD-2015-02328)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An unspecified memory corruption vulnerability exists in Apple iOS Webkit, which allows attackers to exploit the vulnerability to construct a malicious web page that can be tricked into being parsed by a...

Apple iOS Safari History Disclosure Vulnerability (CNVD-2015-02331)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS Safari fails to properly clear recently closed tabs when clearing history, allowing attackers to exploit the vulnerability to obtain sensitive information...

Apple iOS Webkit suffers from unspecified memory corruption vulnerability (CNVD-2015-02327)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An unspecified memory corruption vulnerability exists in Apple iOS Webkit, which allows attackers to exploit the vulnerability to construct a malicious web page that can be tricked into being parsed by a...

Inductive Automation Ignition Information Disclosure Vulnerability (CNVD-2015-02154)

Ignition is an updated version of FactoryPMI, the HMI/SCADA product offered by Inductive Automation. Inductive Automation Ignition suffers from an information disclosure vulnerability that could be exploited by an attacker to gain access to sensitive information...

Inductive Automation Ignition Information Disclosure Vulnerability (CNVD-2015-02155)

Ignition is an updated version of FactoryPMI, the HMI/SCADA product offered by Inductive Automation. Ignition stores the OPC Server username and password in plaintext in the settings file, which can be utilized by an attacker to obtain sensitive information...

Hospira MedNet Hardcoded Password Vulnerability (CNVD-2015-02160)

MedNet manages drug libraries, firmware updates, and configurations for Hospira IV pumps for use in the healthcare and public health sectors. MedNet uses plain text stored passwords for the SQL database, which allows an attacker to compromise the MedNet SQL server and gain administrator access to...