CVE-2016-7004

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

Web interface denial of service

Palo Alto Networks web management server is vulnerable to a denial-of-service attack. Ref PAN-64917/105311 CVE-2014-9708 This pre-authenticated denial-of-service attack could disrupt the web management interface. This issue affects PAN-OS 5.0.19 and earlier; PAN-OS 5.1.12 and earlier; PAN-OS 6.0....

The vulnerability of the Mac OS X operating system allows a perpetrator to trigger a service failure or obtain confidential information.

The vulnerability of the Audio component in the Mac OS X operating system is related to errors in calculating the size of audio data. Exploiting this vulnerability can allow a malicious actor to obtain confidential information or cause a service failure memory overflow by using a specially create...

Icecream Apps Insecure File Permissions / Privilege Escalation

Exploit Title: Multiple Icecream Apps Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: icecreamapps.com Software Versions Affected: Icecream Ebook Reader 4.21 | Icecream Screen Recorder 4.21...

CVE-2016-1280

CVE-2016-1280 affects Juniper Junos OS: remote attackers can bypass certificate validation by presenting a self-signed cert whose issuer name matches a valid Junos CA, impacting certificates used for IKE/IPsec. Affected Junos versions span many 12.x–16.1 releases (e.g., before specific revisions ...

Palo Alto Networks PAN-OS Privilege Acquisition Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A privilege acquisition vulnerability exists in Palo Alto Networks PAN-OS. A local attacker can exploit this vulnerability to gain privileges by filtering rootreboot calls incorrect...

Juniper Networks Junos OS mbuf Leak Vulnerability

Junos OS is prone to a mbuf leak vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...

The vulnerability of the OS X operating system, which allows a malicious attacker to execute arbitrary code.

The vulnerability of the IOSurface component allows a remote attacker to execute arbitrary code with elevated privileges using a malicious application that exploits type mismatch errors...

ExpressionEngine: Arbitrary file upload when setting an avatar

Hello, When an administrator attempts to set an avatar from an external link, the parser just takes the source of whatever link they point it to and creates a file with the same extension and content in the uploads folder. Steps to reproduce: 1- Visit...

DEBIAN-CVE-2016-4440

arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MSR access on the host OS, and consequently cause a denial of service host OS crash or possibly execute arbitrary code on the host OS, via x2APIC mode...

The vulnerability of the NX-OS network operating system allows attackers to increase their privileges.

The vulnerability of the NX-OS network operating system is related to the use of a empty root password. Exploiting this vulnerability could allow an attacker, operating locally, to gain increased privileges...

Unauthenticated Stack Exhaustion in GlobalProtect/SSL VPN Web Interface

When a PAN-OS device is configured as a GlobalProtect web portal, a specially crafted request to the portal could result in a crash of the service. Ref. 89750 CVE-2016-3656 This issue can be exploited remotely by an attacker with network access to the GlobalProtect portal in order to cause a...

The vulnerability of the NX-OS network operating system allows a hacker to induce a maintenance failure.

The vulnerability of the NX-OS network operating system is related to resource management errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions by establishing connections with Java applications...

The vulnerability of the NX-OS network operating system allows a hacker to execute arbitrary operating system commands.

The vulnerability of the NX-OS network operating system is related to deficiencies in access control for files. Exploiting this vulnerability allows a malicious actor, operating locally, to execute arbitrary commands on the operating system by sending specific parameters...

The vulnerability of the NX-OS network operating system allows a hacker to induce a maintenance failure.

The vulnerability of the NX-OS network operating system is related to resource management errors. Exploiting this vulnerability could allow a malicious actor, operating locally, to cause service interruptions due to errors in the session termination process...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libpng-1.2.49 package on the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

XZERES 442SR OS Cross-Site Request Forgery Vulnerability

The XZERES 442SR OS on 442SR is a set of operating systems from XZERES USA running in 442SR wind turbines. A cross-site request forgery vulnerability exists in the XZERES 442SR OS that allows a remote attacker to construct a malicious URI, trick a user into parsing it, and can perform malicious...

CVE-2013-2835

Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2834...

CVE-2013-1797

Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service host OS memory corruption or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address GPA in 1 movable or 2...

CVE-2012-0218

Xen 3.4, 4.0, and 4.1, when the guest OS has not registered a handler for a syscall or sysenter instruction, does not properly clear a flag for exception injection when injecting a General Protection Fault, which allows local PV guest OS users to cause a denial of service guest crash by later...