IBM Rational DOORS Next Generation Cross-Site Scripting Vulnerability

IBM Rational DOORS Next Generation is a requirements management solution from IBM USA. The solution is primarily used to define, manage, and report on requirements throughout the project lifecycle. A cross-site scripting attack vulnerability exists in IBM Rational DOORS Next Generation due to a...

kernel: netfilter: missing bounds check in ipt_entry structure

A security flaw was found in the Linux kernel in the marksourcechains function in "net/ipv4/netfilter/iptables.c". It is possible for a user-supplied "iptentry" structure to have a large "nextoffset" field. This field is not bounds checked prior to writing to a counter value at the supplied offse...

Cross-site scripting vulnerability in multiple IBM products (CNVD-2016-07415)

IBM Rational Collaborative Lifecycle Management CLM and others are products of IBM Corporation in the U.S. IBM Rational CLM, Rational Team Concert RTC and Rational Engineering Lifecycle Manager are collaborative lifecycle management solutions. Manager are collaborative lifecycle management...

USN-3065-1 libgcrypt11, libgcrypt20 vulnerability

Felix Dörre and Vladimir Klebanov discovered that Libgcrypt incorrectly handled mixing functions in the random number generator. An attacker able to obtain 4640 bits from the RNG can trivially predict the next 160 bits of output...

PT-2016-6838

Name of the Vulnerable Software and Affected Versions Flex versions prior to 2.6.1 Description A heap-based buffer overflow issue exists in the yy get next buffer function, potentially allowing attackers to cause a denial of service or possibly execute arbitrary code via certain vectors involving...

On This Day 25-years Ago, The World's First Website Went Online

On this day 25 years ago, August 6, 1991, the world's first website went live to the public from a lab in the Swiss Alps. So Happy 25th Birthday, WWW! It's the Silver Jubilee of the world's first website. The site was created by Sir Tim Berners-Lee, the father of the World Wide Web WWW, and was...

Adobe Flex Buffer Overflow Vulnerability

Adobe Flex is the United States of America Odobie Adobe company's set of free, open source framework for building and maintaining Web applications. A buffer overflow vulnerability exists in the yygetnextbuffer function in Adobe Flex. A remote attacker could exploit this vulnerability to cause a...

libtiff: out-of-bounds read/write with malformed TIFF image in tiff2pdf

LibTIFF 4.0.3 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tifnext.c to verify that the BitsPerSample value is 2, and the t2psamplelabsignedtounsigned function in tiff2pdf...

libtiff: out-of-bounds read/write with malformed TIFF image in tiff2pdf

LibTIFF 4.0.3 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tifnext.c to verify that the BitsPerSample value is 2, and the t2psamplelabsignedtounsigned function in tiff2pdf...

SQL Injection Vulnerability in Call System of Shanghai Yunyi Communication Technology Co.

Cloud Next CRM System is an IP Calling System The product suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain database data...

Multiple IBM Rational Products Privilege Acquisition Vulnerabilities

IBM Rational Collaborative Lifecycle Management CLM and others are products of IBM Corporation in the U.S. IBM Rational CLM, Rational Team Concert RTC and Rational Engineering Lifecycle Manager are collaborative lifecycle management solutions. Manager are collaborative lifecycle management...

Multiple IBM Rational Products Cross-Site Scripting Vulnerabilities

IBM Rational Collaborative Lifecycle Management CLM and others are products of IBM Corporation in the U.S. IBM Rational CLM, Rational Team Concert RTC and Rational Engineering Lifecycle Manager are collaborative lifecycle management solutions. Manager are collaborative lifecycle management...

Sophos Cyberoam Cross-Site Scripting Vulnerability in Multiple Products

Sophos Cyberoam UTM and NGFW appliances are unified threat management and next-generation firewall products. Cross-site scripting vulnerabilities exist in multiple Sophos Cyberoam products, which can be exploited by remote attackers to inject arbitrary web script or HTML...

Next Business Tycoon - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Next Business Tycoon published at the 'play' market has multiple vulnerabilities...

Next Launcher 3D Shell Lite - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Next Launcher 3D Shell Lite published at the 'play' market has multiple vulnerabilities...

Next bus Barcelona - Customized SSL, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Next bus Barcelona published at the 'play' market has multiple vulnerabilities...

Next Lock Screen - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Next Lock Screen published at the 'play' market has multiple vulnerabilities...

Time Battle Next 3D Theme LWP - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Time Battle Next 3D Theme LWP published at the 'play' market has multiple vulnerabilities...

Next Time Tunnel 3D LWP - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Next Time Tunnel 3D LWP published at the 'play' market has multiple vulnerabilities...

Next Launcher Theme 3D Magic - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Next Launcher Theme 3D Magic published at the 'play' market has multiple vulnerabilities...