7602 matches found
Updated chromium-browser-stable packages fix security vulnerabilities
Multiple flaws were found in Chromium's processing of web content where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. CVE-2016-5181, CVE-2016-5182, CVE-2016-5183, CVE-2016-5184, CVE-2016-5185, CVE-2016-518...
CVE-2016-6721
An information disclosure vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without...
UBUNTU-CVE-2016-3906
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...
IBM Tealeaf Customer Experience Information Disclosure Vulnerability (CNVD-2016-11558)
IBM Tealeaf Customer Experience is a SaaS Software-as-a-Service based analytics solution for web and mobile applications from IBM, USA. The solution helps clients improve the overall user experience by analyzing and understanding data, and supports the adoption of advanced user interfaces for ric...
perl-XML-Twig XML External Entity Injection Vulnerability
An XML external entity injection vulnerability exists in perl-XML-Twig. A remote attacker could exploit this vulnerability to disclose sensitive information or cause a denial of service because the program fails to properly handle XML external entities...
OIC Exponent CMS SQL Injection Vulnerability (CNVD-2016-11170)
OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability...
Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-11163)
Google Chrome is a web browser developed by the American company Google Google. An arbitrary code execution vulnerability exists in Google Chrome. An attacker can exploit this vulnerability to execute arbitrary code in the browser context to disclose sensitive information or cause a denial of...
Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-11161)
Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chrome. The vulnerability can be exploited by an attacker to execute arbitrary code in the browser context, disclose sensitive information or cause a denial of service...
D-Link DSL-2730U/2750U/2750E ADSL Router - Remote File Disclosure
!/bin/sh D-Link ADSL ROUTER DSL-2730U IN1.02 Remote File Disclosure Modem Name: DSL-2730U/DSL-2750E Time and Date: 2012-05-23 09:51:16 HardwareVersion: U1 Firmware Version: IN1.02/SEA1.04/SEA1.07 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackeror...
OIC Exponent CMS SQL Injection Vulnerability
OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability...
CVE-2016-9136
Artifex Software, Inc. MuJS before a0ceaf5050faf419401fe1b83acfa950ec8a8a89 allows context-dependent attackers to obtain sensitive information by using the "crafted JavaScript" approach, related to a "Buffer Over-read" issue...
Yelp: ClickJacking
hi there i have found a clickjacking vulnerability in your site in the index home page: https://www.yelp.com/ Clickjacking, also known as a "UI redress attack", is when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when th...
Unspecified Vulnerability in Oracle E-Business Suite Oracle Shipping Execution Component
Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. Oracle Shipping Execution is one of the components of the management of transportation information. A remote security vulnerability exists in the...
SQL Injection Vulnerability in Siemens Automation License Manager
Siemens Automation License Manager ALM is a software that centrally manages license keys for various Siemens software products. A SQL injection vulnerability exists in Siemens Automation License Manager. A remote attacker can access port 4410/TCP to read and write ALM configuration information,...
CVE-2016-6688
The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30593080...
CVE-2016-6684
The kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Android One devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30148243...
CVE-2016-6677
The NVIDIA GPU driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30259955...
SetucoCMS vulnerable to session management
Overview SetucoCMS provided by SetucoCMS Project is a content management system CMS. SetucoCMS contains session management vulnerability. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...
camel-xstream: Java object de-serialization vulnerability leads to RCE
It was found that Apache Camel's camel-xstream component was vulnerable to Java object deserialization. This vulnerability permits deserialization of data which could lead to information disclosure, code execution, or other possible attacks...
