CVE-2016-5768

Double free vulnerability in the phpmbregexeregreplaceexec function in phpmbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash by leveraging a callback...

FlashFXP v5.3.0 (Win) - Memory Corruption Vulnerability

Document Title: =============== FlashFXP v5.3.0 Win - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1853 Release Notes: https://www.flashfxp.com/history-latest FlashFXP v5.4.0.3935 Release Date: ============= 2016-06-13...

FlashFXP v5.3.0 (Win) - Memory Corruption Vulnerability

Document Title: =============== FlashFXP v5.3.0 Win - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1853 Release Notes: https://www.flashfxp.com/history-latest FlashFXP v5.4.0.3935 Release Date: ============= 2016-06-12...

The vulnerability of the PHP interpreter, which allows a hacker to trigger a service failure

The vulnerability of the function in the Zend/zendexceptions.c interpreter of PHP exists due to the lack of checks for certain Exception objects. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure such as reassigning a null pointer or...

UBUNTU-CVE-2016-3094

PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught exception...

The vulnerability of the PHP interpreter allows attackers to execute arbitrary code.

The vulnerability of the exception::getTraceAsString function in the PHP interpreter is related to errors in data type mixing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2016-3094

PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught exception...

CVE-2015-8876

Zend/zendexceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exception objects, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash or trigger unintended method execution via crafted...

CVE-2015-8876

Zend/zendexceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exception objects, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash or trigger unintended method execution via crafted...

Error: "Error Id: XDDS:F05685F3" Connection To Existing License Server Fails After License Server Upgrade to 11.11.1 v2

Connection to existing production license server XenDesktop 7.5 fails after License Server upgrade to 11.11.1. New XenDesktop 7.5 environment. Upgraded existing license server to 11.11.1 build 13017 Current XenApp 6.5 environment continued to function New DDC is fails to connect to the license...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20160512)

Security Fixes : - A flaw was found in the way the Linux kernel's ASN.1 DER decoder processed certain certificate files with tags of indefinite length. A local, unprivileged user could use a specially crafted X.509 certificate DER file to crash the system or, potentially, escalate their privilege...

Debian DLA-467-1 : xerces-c security update

XMLReader class can raise an exception if an invalid character is encountered, and the exception crosses stack frames in an unsafe way that causes a higher level exception handler to access an already-freed object. NOTE: Tenable Network Security has extracted the preceding description block...

DLA-467-1 xerces-c - security update

Bulletin has no description...

Xerces DTDScanner Memory Misreference Vulnerability

Xerces is the United States Apache Apache Software Foundation of an open source XML document parsing project , but also an open source XML syntax parser , it is currently available in a variety of languages , including JAVA, C++, PERL, COM and so on. A memory misreference vulnerability exists in...

The vulnerability of Xen hypervisors allows a perpetrator to gain access to the protected information contained in the registry.

The vulnerability of the xrstor function arch/x86/xstate.c in the Xen hypervisor is related to deficiencies in access control. Exploiting this vulnerability could allow a local attacker to gain access to the protected information in the register’s contents by utilizing the exception mask bit...

The vulnerability of Xen hypervisors allows a perpetrator to gain access to protected information about the contents of the registry.

The vulnerability of the fpufxrstor function arch/x86/i387.c in the Xen hypervisor is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating locally, to gain access to protected information about the contents of registers by using the exception ma...

Samsumg android phone denial of service vulnerability (CNVD-2016-02879)

Samsumg android phone is a series of cell phone products based on Android platform. The Samsumg android system service fails to properly handle exceptions, allowing local attackers to conduct denial of service attacks by sending malicious service commands...

imlib2: multiple issues

CVE-2011-5326 denial of service Kevin Ryde discovered that attempting to draw a 2x1 radi ellipse results in a floating point exception. - CVE-2016-3993 information leakage Yuriy M. Kaminskiy discovered that drawing using coordinates from an untrusted source could lead to an out-of-bound memory...

CVE-2015-8845

The tmreclaimthread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode exists before proceeding with a tmreclaim call, which allows local users to cause a denial of service TM Bad Thing exception and panic via a...

CVE-2015-8845

CVE-2015-8845 affects the Linux kernel on powerpc platforms prior to 4.4.1. The vulnerability arises because the tm_reclaim_thread function in arch/powerpc/kernel/process.c may proceed with a TM reclaim call without verifying that TM suspend mode exists, enabling local users to trigger a denial o...