OpenJDK: leak of user.dir location (JAXP, 8078427)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP...

UBUNTU-CVE-2015-4870

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser...

F5 Networks BIG-IP : SOAP parser vulnerability (SOL15879)

The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue in the soapxmlParseFile and...

Wireshark GSM RLC/MAC Parser Denial of Service Vulnerability

Wireshark is an open source protocol analysis program. A dead loop vulnerability exists in the Wireshark GSM RLC/MAC parser, which allows attackers to exploit the vulnerability by submitting special message parses to crash the application...

Debian DLA-266-1 : libxml2 security update

This upload to Debian squeeze-lts fixes three issues found in the libxml2 package. 1 CVE-2015-1819 / 782782 Florian Weimer from Red Hat reported an issue against libxml2, where a parser which uses libxml2 chokes on a crafted XML document, allocating gigabytes of data. This is a fine line issue...

Cisco Nexus OS Device Command Line Interface Local Elevation of Privilege Vulnerability

Nexus is Cisco's line of network switches designed for data centers. A security vulnerability in the CLI parser of the Cisco Nexus Operating System NX-OS allows an authenticated, local attacker to gain elevated privileges by exploiting this vulnerability...

Wireshark WCCP Parser Remote Denial of Service Vulnerability (CNVD-2015-03985)

Wireshark is an open source network protocol analysis tool. A security vulnerability in the Wireshark WCCP parser allows remote attackers to exploit the vulnerability to submit special request data and crash the application...

Cisco ASA VPN XML Parser Denial of Service Vulnerability

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security vulnerability exists in Cisco ASA Software's XML parser that stems from a failure to effectively strengthen the XML parser configuration. It could be exploited b...

Xerces-C++ XML Parsing Remote Denial of Service Vulnerability

Xerces is promoted by the Apache organization of an XML document parsing open source project . A vulnerability in the processing of XML data in internal/XMLReader.cpp in Apache Xerces-C allows remote attackers to conduct denial-of-service attacks...

Wireshark WCCP Parser Remote Denial of Service Vulnerability (CNVD-2015-00207)

Wireshark is an open source network protocol analysis tool. A remote denial of service vulnerability exists in the Wireshark WCCP parser, which can be exploited by an attacker to crash an affected application and deny service to legitimate users...

EUVD-2014-7961

The ELF parser readelf.c in file before 5.21 allows remote attackers to cause a denial of service CPU consumption or crash via a large number of 1 program or 2 section headers or 3 invalid capabilities...

CVE-2014-6603

The SSHParseBanner function in SSH parser app-layer-ssh.c in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service crash, or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write...

Oracle Linux 5 : tomcat (ELSA-2009-1164)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1164 advisory. - add patch for CVE-2007-5333 Resolves: rhbz427779 - add patch for CVE-2008-5515 Resolves: rhbz504758 - add patch for CVE-2009-0033 - add patch for...

RHEL 4 : JBoss EAP (RHSA-2009:1144)

Updated JBoss Enterprise Application Platform JBEAP 4.2 packages that fix various issues are now available for Red Hat Enterprise Linux 4 as JBEAP 4.2.0.CP07. This update has been rated as having important security impact by the Red Hat Security Response Team. JBoss Enterprise Application Platfor...

Mozilla Firefox 14.x <= 14 Multiple Vulnerabilities

Binary data 801230.prm...

Cross site scripting

An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly handle EMBED elements within description elements in RSS feeds, which allows remot...

wireshark: multiple file parser vulnerabilities (wnpa-sec-2012-01)

The dissectpacket function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash via a long packet in a capture file, as demonstrated by an airopeek file...

freetype: multiple buffer over-read in PS parser conversion functions (#35657)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap read operation and memory corruption or possibly execute arbitrary code via a crafted PostScript font object...

Liferay XSL - Command Execution (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'activesupport/json'...

Liferay XSL Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'activesupport/json'...