kernel security and bug fix update

3.10.0-327.18.2.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327.18.2 - lib keys: Fix ASN.1 indefinite length object parsing David Howells 1308814 1308815 CVE-2016-0758 3.10.0-327.18.1 - scsi bnx2fc: Fix FCP RSP residual parsing Maurizio Lombardi 1322279 1306342 - mm madvise: fix...

CVE-2016-0181

Microsoft Windows 10 Gold and 1511 allows local users to bypass the Virtual Secure Mode Hypervisor Code Integrity HVCI protection mechanism and perform RWX markings of kernel-mode pages via a crafted application, aka "Hypervisor Code Integrity Security Feature Bypass."...

Adobe Acrobat Pro DC Information Disclosure Vulnerability

Adobe Acrobat Reader DC is the United States of America Odooby Adobe company's set of tools for viewing, printing and annotating PDF. An information disclosure vulnerability exists in Adobe Acrobat Pro DC, which could be exploited by an attacker to access a malicious web page or open a malicious...

Hypervisor Code Integrity Security Feature Bypass

A security feature bypass vulnerability exists when Windows incorrectly allows certain kernel-mode pages to be marked as Read, Write, Execute RWX even with Hypervisor Code Integrity HVCI enabled. To exploit this vulnerability, an attacker could run a specially crafted application to bypass code...

Microsoft Internet Explorer AcquireLineBoxBuilderForLayout Null Array Base Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

[SECURITY] Fedora 24 Update: php-5.6.21-1.fc24

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Google Chrome memory misreference vulnerability (CNVD-2016-02815)

Google Chrome is a popular web browser. A memory misreference vulnerability exists in Google Chrome Extensions, which allows remote attackers to exploit the vulnerability to construct malicious WEB pages that can be tricked into being parsed by the user, crashing the application or executing...

Google Chrome V8 Information Disclosure Vulnerability (CNVD-2016-02824)

Google Chrome is a popular web browser. Google Chrome V8 suffers from an information disclosure vulnerability that allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by users and can be used to obtain sensitive information...

Google Chrome Blink Memory Misreference Vulnerability (CNVD-2016-02814)

Google Chrome is a popular web browser. A memory misreference vulnerability exists in the V8 bundle of Google Chrome Blink, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into being parsed by the user, crashing the application or...

Google Chrome suffers from an unspecified vulnerability (CNVD-2016-02823)

Google Chrome is a popular web browser. An unspecified security vulnerability exists in Google Chrome, which allows remote attackers to exploit the vulnerability to build malicious web pages and trick users into parsing them, which could cause the application to crash or execute arbitrary code...

Google Chrome Address Bar Forgery Vulnerability (CNVD-2016-02825)

Google Chrome is a popular web browser. Google Chrome V8 suffers from an address bar forgery vulnerability that allows remote attackers to exploit the vulnerability to build malicious WEB pages, trick users into parsing them, and spoof the address bar...

Google Chrome Blink Out-of-Bounds Write Vulnerability

Google Chrome is a popular web browser. Google Chrome blink suffers from an out-of-bounds write vulnerability that allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into being parsed by the user to crash the application or execute arbitrary code...

Google Chrome memory corruption vulnerability (CNVD-2016-02816)

Google Chrome is a popular web browser. A memory corruption vulnerability exists in the Google Chrome cross-process framework, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into being parsed by the user to crash the application or...

Mozilla Firefox Cross-Site Scripting Vulnerability (CNVD-2016-02671)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. The chrome.tabs.update API in Mozilla Firefox's Web Extension allows the program to navigate to javascript: URLs when the user does not have additional privileges, allowing remote attackers to...

The vulnerability of the SAP NetWeaver software integration platform allows attackers to obtain confidential information, enhance their privileges, or carry out other malicious actions.

The vulnerability of the XML Data Archiving Service component of the SAP NetWeaver software integration platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to obtain confidential information, enhance their privileges, or cause other adverse...

CVE-2016-1593

Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. dot dot in a filename within a multipart/form-data POST request to a LiveTime.woa URL...

CVE-2016-2300

Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors...

CVE-2016-2300

Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors...

Authentication flaw

Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors...

CVE-2016-2300

CVE-2016-2300 affects Ecava IntegraXor prior to Version 5.0, build 4522. The vulnerability is an authentication bypass that allows remote attackers to access unspecified web pages via unknown vectors. The vulnerability is remote-exploitable and is among multiple issues identified for IntegraXor