UBUNTU-CVE-2015-8776

The strftime function in the GNU C Library aka glibc or libc6 before 2.23 allows context-dependent attackers to cause a denial of service application crash or possibly obtain sensitive information via an out-of-range time value...

KNOX 2.3 Clipboard Data Disclosure

Subject: CVE-2016-3996KNOX clipboard data disclosure KNOX 1.0 - KNOX 2.3 / Android Vulnerability Description ========================= The vulnerability allows disclosure of Clipboard data of Samsung KNOX 1.0 and 2.3 containers. On KNOX-enabled devices there exists a proprietary service called...

CVE-2016-2084

F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP AAM 11.4.x before 11.4.1 build 685-HF10, 11.5....

“Bleeding heart”vulnerability can lead to dense code disclosure-vulnerability warning-the black bar safety net

! 1 0 December, the security personnel also discovered the Heartbleed vulnerability in the trail, the use of the vulnerability an attacker can obtain the password of the user and convincing the user to visit a forged website. myhack58 Encyclopedia The Heartbleed Vulnerability, CVE-2 0 1 4-0 1 6 0...

Internet Explorer Information Disclosure Vulnerability

An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer. In a web-based attack scenario, an attacker could host a website used to attempt to exploit the...

HP Universal Configuration Management Database Foundation Redirection Vulnerability

The HP Universal Configuration Management Database UCMDB Foundation is a suite of database software from Hewlett-Packard HP that stores, controls, and manages software and infrastructure components and their interrelationships. A security vulnerability exists in HP UCMDB Foundation that stems fro...

Apple iBooks Author XML External Entity Reference Vulnerability

Apple iBooks Author is a set of apps available for free from the Mac App Store for creating multi-touch eBooks and any other kind of eBook for iPad, with the help of galleries, videos, interactive diagrams, 3D objects, mathematical expressions, and much more. An XML external entity reference...

Apple OS X Messages Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple Inc. for Mac computers.Messages is a component of the application used to send text, photos and videos. A security vulnerability exists in Messages in Apple OS X versions prior to 10.11.4. The vulnerability can be exploited by an...

jenkins: Information disclosure via sidepanel (SECURITY-192)

The sidepanel widgets in the CLI command overview and help pages in Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to the pages...

HackerOne: External programs revealing info

A bug in an authorization check was found by @1337coder on an endpoint that was showing the members of a team, as well as the team member groups that were set up. Example output: "id":1, "username":"dirk", "name":"dirk", "bio":"", "url":"https://hackerone.com/dirk" , "id":2, "name":"Admin",...

The vulnerability of the get_client_master_key function in the SSLv2 implementation of the OpenSSL library allows a hacker to disclose sensitive information.

The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure...

xen: hypervisor memory corruption due to x86 emulator flaw (xsa123)

It was found that the Xen hypervisor x86 CPU emulator implementation did not correctly handle certain instructions with segment overrides, potentially resulting in a memory corruption. A malicious guest user could use this flaw to read arbitrary data relating to other guests, cause a denial of...

CVE-2016-1989

HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-1988...

CVE-2016-2244

HP LaserJet printers and MFPs and OfficeJet Enterprise printers with firmware before 3.7.01 allow remote attackers to obtain sensitive information via unspecified vectors...

SQL Injection Vulnerability in Shandong Wave Government In-use System/view/chufajieguochaxun.aspx Page

Shandong Wave government in use administrative service system is a comprehensive administrative service system integrating information and consultation, approval and charge, management and coordination, complaint and supervision. A SQL injection vulnerability exists in the...

Cisco Policy Suite Confidential Information Disclosure Vulnerability

Cisco Policy Suite CPS is a set of next-generation policy management solutions from the U.S. company Cisco Cisco. The program provides user-based business rules, applications and network resources such as real-time management. A security vulnerability exists in the password-management...

PT-2016-1282 · Sap · Sap Netweaver As Java

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS JAVA version 7.4 Description: The issue is related to insufficient access control in the Universal Worklist Configuration component of SAP NetWeaver, allowing remote attackers to obtain sensitive user information via a crafte...

USN-2884-1 openjdk-7 vulnerabilities

Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrary code. CVE-2016-0483, CVE-2016-0494 A...

WordPress Calculated Fields Form Plugin SQL Injection

An SQL injection vulnerability exists in the WordPress Calculated Fields Form Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...

Unspecified Vulnerability in Oracle MICROS CWDirect Order Entry Component

Oracle Retail Applications is a suite of retail application store solutions. An unspecified vulnerability exists in the Oracle MICROS CWDirect Order Entry component, which could be exploited by a remote attacker to gain unauthorized access to data, resulting in the disclosure of information...