Kabona AB WDC Open Redirect Vulnerability (CNVD-2016-09845)

Kabona AB WDC is a web-based SCADA system from the Swedish company Kabona AB. An open redirection vulnerability exists in Kabona AB WDC versions prior to 3.4.0. An attacker can exploit this vulnerability to redirect users to a malicious page...

X.Org libXi Denial of Service Vulnerability

X.Org libXi is an X input extension library operated by the X.Org Foundation. A security vulnerability exists in X.Org libXi 1.7.6 and earlier versions, which can be exploited by an attacker to cause a denial of service out-of-bounds memory access or infinite loop...

BaserCMS Cross-Site Request Forgery Vulnerability

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions. When the Mail plugin is enabled and a user accesses a malicious URL, an attacker can exploit the vulnerability to perform unauthorized operations...

Apple iOS/Safari/iTunes WebKit Man-in-the-Middle Attack Vulnerability

Apple iOS, Safari, and iTunes are all products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iTunes is a set of media player applications. WebKit is an open...

PT-2016-3454 · Apache +2 · Apache Zookeeper +2

Name of the Vulnerable Software and Affected Versions: Apache Zookeeper versions 3.4.9 and earlier, 3.5.x before 3.5.3 Description: The issue is related to a buffer overflow in the C cli shell of Apache Zookeeper when using the "cmd:" batch mode syntax. This can allow attackers to have an impact ...

Infoblox Network Automation Cross-Site Scripting Vulnerability

Infoblox Network Automation is a suite of automated network configuration and change management software from Infoblox USA. The software has the ability to automate the review and analysis of network changes using built-in expert topics. A cross-site scripting vulnerability exists in Infoblox...

mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR...

mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows local users to affect availability via vectors related to Server: Replication...

Zen Cart Information Disclosure Vulnerability

Zen Cart is Zen Cart team developed an open source shopping cart system . An information disclosure vulnerability exists in Zen Cart 1.5.4 and prior versions. An attacker can exploit this vulnerability to obtain sensitive information...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2016-05388)

Oracle MySQL Server is a lightweight relational database system. A security vulnerability exists in Oracle MySQL Server versions 5.6.30 and earlier, 5.7.12 and earlier, which can be exploited by an unauthenticated, local attacker to affect availability...

Untangle NGFW has multiple vulnerabilities

Untangle NGFW is a set of firewall platforms from the United States Untangle Corporation. Untangle NGFW 12.1.0 and earlier versions contain security bypass vulnerabilities and command injection vulnerabilities that can be exploited by attackers to conduct man-in-the-middle attacks, bypass securit...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2016-05392)

Oracle MySQL Server is a lightweight relational database system. A security vulnerability exists in Oracle MySQL Server 5.7.12 and earlier versions, which can be exploited by an unauthenticated, local attacker to affect availability...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2016-05391)

Oracle MySQL Server is a lightweight relational database system. A security vulnerability exists in Oracle MySQL Server versions 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier, which can be exploited by an authenticated, local attacker to affect availability...

GnuTLS Security Bypass Vulnerability

GnuTLS is a free secure communications library for implementing the SSL, TLS and DTLS protocols developed by Nikos Mavrogiannopoulos of Belgium and Simon Josefsson of Sweden, software developers. A security bypass vulnerability exists in GnuTLS version 3.3.23 and versions 3.4.12 and earlier. An...

PT-2019-15837 · Luajit +3 · Luajit +3

Name of the Vulnerable Software and Affected Versions: LuaJIT versions 2.0.5 and earlier Moonjit versions prior to 2.1.2 Description: The issue involves a type confusion problem in the debug.getinfo function, which can lead to arbitrary memory write or read operations due to mishandling of certai...

flash-plugin: multiple code execution issues fixed in APSB16-18

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083...

PT-2016-2255 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 21.0.0.242 and earlier Description: The issue is related to errors in the code of Flash Player and Flash Player for Linux, which can be exploited by a remote attacker to impact the integrity, availability, and...

PT-2016-2234 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 21.0.0.242 and earlier Description: The issue is related to errors in the code of Flash Player and Flash Player for Linux, which can be exploited by a remote attacker to impact the integrity, availability, and...

PT-2016-2228 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 21.0.0.242 and earlier Description: The issue is related to unspecified errors in the code of Flash Player and Flash Player for Linux, which can be exploited by a remote attacker to impact the integrity,...

PT-2016-2233 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 21.0.0.242 and earlier Description: The issue is related to errors in the code of Flash Player and Flash Player for Linux, which can be exploited by a remote attacker to impact the integrity, availability, and...