The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption through a...

Nuclear Power Plant Disrupted by Cyber Attack

The head of an international nuclear energy consortium said this week that a cyber attack caused a “disruption” at a nuclear power plant at some point during the last several years. Yukiya Amano, the head of the International Atomic Energy Agency IAEA didn’t go into detail about the attack, but...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3098-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3098-1 advisory. Vladimr Bene discovered an unbounded recursion in the VLAN and TEB Generic Receive Offload GRO processing implementations in the Linux kernel, A remote...

USN-3096-1 ntp vulnerabilities

Aanchal Malhotra discovered that NTP incorrectly handled authenticated broadcast mode. A remote attacker could use this issue to perform a replay attack. CVE-2015-7973 Matt Street discovered that NTP incorrectly verified peer associations of symmetric keys. A remote attacker could use this issue ...

TYPO3 CMS Denial of Service Vulnerability

TYPO3 is a free and open source content management system maintained by the Swiss TYPO3 Association. A denial-of-service vulnerability exists in TYPO3, which allows attackers to exploit the vulnerability to cause a denial of service...

kernel: challenge ACK counter information disclosure.

It was found that the RFC 5961 challenge ACK rate limiting as implemented in the Linux kernel's networking subsystem allowed an off-path attacker to leak certain information about a given connection by creating congestion on the global challenge ACK rate limit counter and then measuring the chang...

OpenStack Nova Denial of Service Vulnerability (CNVD-2016-08221)

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration and Rackspace, Inc. in the U.S. OpenStack Nova is one of the cloud computing construct controllers written in Python. It is part of the IaaS system. A denial of service vulnerability...

CVE-2016-4860

Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconfigure the device or cause a denial of service via a 1 stop application program, 2 change value, or 3 modify application command...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-07670)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from the American company Adobe. A security vulnerability exists in Adobe Flash Player, which can be exploited by attackers to execute arbitrary code or cause a denial of service memory corruption...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2016-07613)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel is one of the kernels. An elevation of privilege vulnerability exists in the Microsoft Windows kernel. When the kernel API executes privileges, an attacker can exploit the vulnerabili...

libarchive Denial of Service Vulnerability

libarchive is a multi-format archive and compression library. A denial of service vulnerability exists in libarchive. A remote attacker can exploit this vulnerability to exhaust memory and cause a denial of service...

phpIPAM <= 1.2.1 Multiple Vulnerabilities

phpIPAM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpipam:phpipam"; ifdescription...

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, which are PDF viewer programs, as well as Adobe Acrobat and Adobe Acrobat Document Cloud, which are PDF editing programs, allow a perpetrator to cause service interruptions or execute arbitrary codes.

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, as well as Adobe Acrobat and Adobe Acrobat Document Cloud, which are PDF viewer programs, are due to buffer overflow attacks. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code or cause a service...

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, which are PDF viewer programs, as well as Adobe Acrobat and Adobe Acrobat Document Cloud, which are PDF editing programs, allow a perpetrator to cause service interruptions or execute arbitrary codes.

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, as well as Adobe Acrobat and Adobe Acrobat Document Cloud PDF editing programs, are due to buffer overflow attacks. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code or trigger a service failure...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, allow attackers to cause service interruptions or execute arbitrary codes.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, are due to buffer overflow vulnerabilities. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code or...

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, which are PDF viewer programs, as well as Adobe Acrobat and Adobe Acrobat Document Cloud, which are PDF editing programs, allow a perpetrator to cause service interruptions or execute arbitrary codes.

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, as well as Adobe Acrobat and Adobe Acrobat Document Cloud PDF editing programs, are due to buffer overflow attacks. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code or trigger a service failure...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the ByteArray::Get method in the Google Chrome browser component is due to buffer overflow in the dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions or other effects using a specially crafted SFNT font...

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, which are PDF viewer programs, as well as Adobe Acrobat and Adobe Acrobat Document Cloud, which are PDF editing programs, allow a perpetrator to cause service interruptions or execute arbitrary codes.

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, as well as Adobe Acrobat and Adobe Acrobat Document Cloud PDF editing programs, are due to buffer overflow attacks. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code or trigger a service failure...

Red Hat RESTEasy Denial of Service Vulnerability

RESTEasy is one of the JBoss open source project , is a RESTful Web Services framework. A denial of service vulnerability exists in Red Hat RESTEasy. An attacker could exploit this vulnerability to cause a denial of service...

Remote Denial of Service Vulnerability in Multiple F5 BIG-IP Products (CNVD-2016-07035)

F5 BIG-IP is an all-in-one network device from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A remote denial of service vulnerability exists in multiple F5 BIG-IP products, which can be exploited by an attacker to cause a...