Moxa DACenter Denial of Service Vulnerability

Moxa DACenter is an OPC interface from Moxa that interacts with the Moxa Active OPC server for real-time data collection. A denial of service vulnerability exists in Moxa DACenter 1.4 and prior versions. A local attacker could exploit this vulnerability to gain elevated privileges or cause a deni...

CVE-2016-7879

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the NetConnection class when handling an attached script object. Successful exploitation could lead to arbitrary code execution...

IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11864)

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. An information disclosure vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions, which stems from the program failing to enable the HSTS protection mechanism. A remote attacker can...

IBM BigFix Remote Control Cross-Site Scripting Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A cross-site scripting vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...

IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11860)

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. An information disclosure vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. A remote attacker can exploit this vulnerability by sending a specially crafted POST request to obtai...

Python Pillow Information Disclosure Vulnerability

Pillow is a compiled version of PIL Python Image Processing Library with some bug fixes developed by American software developer Alex Clark. A security vulnerability exists in versions of Pillow prior to 3.3.2. An attacker can exploit this vulnerability to obtain sensitive information...

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer...

Adobe Flash Player Type Obfuscation Remote Code Execution Vulnerability (CNVD-2016-10908)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A type-obfuscated remote code execution vulnerability exists in Adobe Flash Player versions 23.0.0.205 and earlier...

Artifex Software MuJS Information Disclosure Vulnerability

Artifex Software MuJS is a lightweight JavaScript interpreter from Artifex Software, USA, which is used to embed into other software to provide script execution capabilities. An information disclosure vulnerability exists in previous versions of Artifex Software MuJS...

Vulnerability in Advantech WebAccess ActiveX

Advantech WebAccess formerly known as BroadWin WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation devices.ActiveX is one of...

Cloudera Manager Information Disclosure Vulnerability

Cloudera Manager is a set of Hadoop data management software from Cloudera, USA. The software supports the creation of clusters, authentication, data backup and recovery and so on. An information disclosure vulnerability exists in Cloudera Manager 5.5 and earlier versions. An attacker can exploit...

Kabona AB WDC Open Redirect Vulnerability (CNVD-2016-09845)

Kabona AB WDC is a web-based SCADA system from the Swedish company Kabona AB. An open redirection vulnerability exists in Kabona AB WDC versions prior to 3.4.0. An attacker can exploit this vulnerability to redirect users to a malicious page...

X.Org libXi Denial of Service Vulnerability

X.Org libXi is an X input extension library operated by the X.Org Foundation. A security vulnerability exists in X.Org libXi 1.7.6 and earlier versions, which can be exploited by an attacker to cause a denial of service out-of-bounds memory access or infinite loop...

BaserCMS Cross-Site Request Forgery Vulnerability

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions. When the Mail plugin is enabled and a user accesses a malicious URL, an attacker can exploit the vulnerability to perform unauthorized operations...

Apple iOS/Safari/iTunes WebKit Man-in-the-Middle Attack Vulnerability

Apple iOS, Safari, and iTunes are all products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iTunes is a set of media player applications. WebKit is an open...

PT-2016-3454 · Apache +2 · Apache Zookeeper +2

Name of the Vulnerable Software and Affected Versions: Apache Zookeeper versions 3.4.9 and earlier, 3.5.x before 3.5.3 Description: The issue is related to a buffer overflow in the C cli shell of Apache Zookeeper when using the "cmd:" batch mode syntax. This can allow attackers to have an impact ...

Infoblox Network Automation Cross-Site Scripting Vulnerability

Infoblox Network Automation is a suite of automated network configuration and change management software from Infoblox USA. The software has the ability to automate the review and analysis of network changes using built-in expert topics. A cross-site scripting vulnerability exists in Infoblox...

mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR...

mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows local users to affect availability via vectors related to Server: Replication...

Zen Cart Information Disclosure Vulnerability

Zen Cart is Zen Cart team developed an open source shopping cart system . An information disclosure vulnerability exists in Zen Cart 1.5.4 and prior versions. An attacker can exploit this vulnerability to obtain sensitive information...