UBUNTU-CVE-2015-8892

platform/msmshared/bootverifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to bypass intended access restrictions via a digest with trailing data, aka Android internal bug 28822807 and Qualcomm internal bug CR902998...

Android Qualcomm Component Mobilization Vulnerability

Android on Nexus 5X and 6P is an open source Linux-based operating system for the Nexus 5X and 6P smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm is one of the companies that use Qualcomm's device-specific Qualcomm components. device-specific Qualcomm component. A powe...

SUSE-SU-2016:1568-1 Security update for ntp

ntp was updated to version 4.2.8p8 to fix 17 security issues. These security issues were fixed: - CVE-2016-4956: Broadcast interleave bsc982068. - CVE-2016-2518: Crafted addpeer with hmode 7 causes array wraparound with MATCHASSOC bsc977457. - CVE-2016-2519: ctlgetitem return value not always...

NTP.org ntpd Denial of Service Vulnerability

ntpd Network Time Protocol daemon is an operating system daemon. A denial of service vulnerability exists in versions of NTP.org ntpd prior to 4.2.8p8, which can be exploited by remote attackers to cause a denial of service by sending specially crafted packets...

AjaxExplorer 1.10.3.2 CSRF / XSS / Command Execution

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AJAXEXPLORER-REMOTE-CMD-EXECUTION.txt + ISR: apparitionsec Vendor: ========== sourceforge.net smsid download linx: sourceforge.net/projects/ajax-explorer/files/ Product:...

Botan heap buffer overflow vulnerability (CNVD-2016-03251)

Botan is a C++ library of cryptographic algorithms that supports AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. A heap buffer overflow vulnerability exists in the 'P-521' function in Botan version 1.11.x prior to 1.11.27. A remote attacker can exploit this vulnerability to cause a denial of servic...

CVE-2016-2196

Heap-based buffer overflow in the P-521 reduction function in Botan 1.11.x before 1.11.27 allows remote attackers to cause a denial of service memory overwrite and crash or execute arbitrary code via unspecified vectors...

PT-2016-4857 · Ntp +8 · Ntp +10

Name of the Vulnerable Software and Affected Versions: ntp versions 4.2.8p4 NTPSec version a5fb34b9cc89b92a8fef2f459004865c93bb7f92 Description: An issue exists in the message authentication functionality of libntp, allowing an attacker to send crafted messages in an attempt to recover the messag...

Schneider AS AS-P系列-v1.7及之前版本-权限绕过漏洞

No description provided by source...

New MIT Scanner Finds Web App Flaws in a Minute

A new web application security scanner, developed by a former MIT student now Berkeley postdoctoral researcher, could be a real find for developers wishing to lock down bugs that live outside the OWASP top 10. The static-analysis tool is called Space and will be unveiled at the upcoming...

Schneider AS AS-P系列-v1.7及之前版本管理账户-弱口令漏洞

No description provided by source...

P&C CARD - Dynamic Code Loading, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application P&C CARD published at the 'play' market has multiple vulnerabilities...

Nettle has an unspecified vulnerability (CNVD-2016-01310)

Nettle is a library of basic cryptographic functions. A security vulnerability exists in the x8664/ecc-384-modp.asm file in versions prior to Nettle 3.2, which stems from a failure of the program to properly handle rounding transfers when implementing P-384 NIST elliptic curves. An attacker can...

CVE-2015-8805

The ecc256modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than...

CVE-2015-8804

x8664/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors...

DEBIAN-CVE-2015-8804

x8664/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors...

CVE-2015-8804

x8664/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors...

CVE-2015-8803

The ecc256modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than...

Design/Logic Flaw

The ecc256modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than...

Design/Logic Flaw

x8664/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors...