SugarCRM 'SugarRestSerialize.php' PHP Object Injection Vulnerability

SugarCRM is an open source Customer Relationship Management CRM system from SugarCRM USA. The system supports differentiated marketing, management and distribution of sales leads for different customer needs, and enables information sharing and tracking of sales representatives. A PHP object...

ZOHO ManageEngine Firewall Analyzer Cross-Site Scripting Vulnerability

ZOHO ManageEngine Firewall Analyzer is the United States ZhuoHao ZOHO company's set of Web-based firewall log analysis tools. A cross-site scripting vulnerability exists in ZOHO ManageEngine Firewall Analyzer version 8.5, which can be exploited by an attacker to inject arbitrary web script or HTM...

IBM WebSphere Portal Cross-Site Request Forgery Vulnerability (CNVD-2016-04105)

IBM WebSphere Portal is a product of IBM Corporation.IBM WebSphere Portal is a suite of enterprise portal software. The software creates a platform that connects the internal and external parts of an organization, allowing employees, customers, and suppliers to access internal data through the...

CVE-2016-2020

HPE Systems Insight Manager SIM before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030...

Google Go untrustworthy search path vulnerability

Google Go is a programming language optimized for programming applications on multiprocessor systems by Google. An untrusted search path vulnerability exists in Google Go versions prior to 1.5.4 and 1.6.1 prior to 1.6.x for Windows platforms. A local attacker can exploit this vulnerability to gai...

UBUNTU-CVE-2016-4553

clientside.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request...

PT-2016-6028 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.5.3 Description: The issue allows local users to cause a denial of service, specifically a kernel memory write operation, or possibly have other unspecified impacts. This is achieved via a crafted number of...

Linux kernel denial of service vulnerability (CNVD-2016-02789)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the 'acmprobe' function in the drivers/usb/class/cdc-acm.c file in Linux kernel versions prior to 4.5.1. The vulnerability can be...

mysql: unspecified vulnerability related to Server:Types (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types...

PT-2016-5052 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.5.2 Description: The issue allows physically proximate attackers to cause a denial of service, resulting in a system crash due to a NULL pointer dereference. This is achieved by using a crafted endpoints value...

PHP extractTo directory traversal vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A directory traversal vulnerability exists in the ZipArchive::extractTo function in PHP versions 5.5 and 5.6, which can be exploited by remote...

PT-2016-5026 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.5 on s390 platforms Description: The fork implementation in the Linux kernel mishandles the case of four page-table levels, allowing local users to cause a denial of service system crash or possibly have...

IBM Tivoli Storage Manager FastBack Buffer Overflow Vulnerability (CNVD-2016-02022)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack versions 6.1.0.0 through...

mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802...

PT-2016-5236 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.5 Description: The issue allows local users to cause a denial of service by creating many pipes with non-default sizes, resulting in memory consumption due to the lack of limitation on the amount of unread dat...

phpMyAdmin man-in-the-middle attack vulnerability (CNVD-2016-01427)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security vulnerability exists in phpMyAdmin versio...

CVE-2016-0213

Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service daemon crash via unspecified vectors, a different vulnerability than CVE-2016-0212 and CVE-2016-0216...

CVE-2016-0243

Cross-site scripting XSS vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a differe...

Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2016-01062)

Cisco Unified Communications Manager is the call processing component of the IP Telephony solution from Cisco. An information disclosure vulnerability exists in Cisco Unified Communications Manager 11.5 0.98000.480 that could allow an authenticated, remote user to obtain sensitive database table...

Apache CloudStack Trust Management Vulnerability

Apache CloudStack is a suite of open source cloud computing software from the Apache Apache Software Foundation in the United States. The software can be used to deploy, manage, and configure public and private clouds IaaS. A security vulnerability exists in Apache CloudStack 4.5.1 and earlier...