Malware Information Sharing Platform Cross-Site Scripting Vulnerability

The Malware Information Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and analyzing cybersecurity events and malware. A cross-site scripting vulnerability exists in the template-creation function of the add.ctp,...

Red Hat JBoss BPMS Information Disclosure Vulnerability

Red Hat JBoss BPMS is a business process management platform from Red Hat that combines all the features of JBoss BRMS. The platform provides additional support for modeling, automation, simulation, and business process monitoring. A remote information disclosure vulnerability exists in Red Hat...

Apple iOS WebKit Memory Corruption Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. A memory corruption vulnerability exists in Apple iOS versions WebKit prior to 9.3.5, which can be exploited by an attacker to execute arbitrary code or cause a...

Apple iOS kernel suffers from information disclosure vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. An information disclosure vulnerability exists in the kernel of Apple iOS versions prior to 9.3.5, which can be exploited by an attacker to gain access to...

Drupal hosting module access rights bypass vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community. hosting is one of the core modules of the Aegir hosting system. An access privilege bypass vulnerability exists in Drupal hosting module versions 7.x-3.x prior to 7.x-3.7. An attacker...

DEBIAN-CVE-2016-6214

gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...

Cisco IOS XR Software Remote Denial of Service Vulnerability

Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. A remote denial of service vulnerability exists in the Cisco IOS XR Software Releases 5.1.x, 5.2.x, and 5.3.x versions. ...

CA eHealth Arbitrary Command Execution Vulnerability

CA eHealth is CA's suite of software for intelligently managing complex IT environments through the IT infrastructure. The software supports monitoring, collecting and analyzing network information from network performance, virtual systems and Cisco Unified Computing Systems to provide real-time...

TYPO3 Formhandler Extension Cross-Site Scripting Vulnerability

TYPO3 is a Swiss TYPO3 Association maintains a free and open source content management system framework CMS/CMF. formhandler is one of the Web development form Form module extension plug-in . A cross-site scripting vulnerability exists in versions 2.3.1 and 2.0.2 of the TYPO3 Formhandler extensio...

NetApp Snap Creator Framework Clickjacking Vulnerability

NetApp Snap Creator Framework is the United States NetApp company's set of integrated NetApp functionality plug-ins and popular third-party applications framework. A clickjacking vulnerability exists in NetApp Snap Creator Framework version 4.3P1, which can be exploited by an attacker to compromi...

Apple iOS and OS X kernel denial of service vulnerability

Apple iOS and OS X are both products of the American Apple company. The former is an operating system developed for mobile devices and the latter is a specialized operating system developed for Mac computers. kernel is one of the kernel components. A security vulnerability exists in the kernel of...

Apple iOS WebKit Information Disclosure Vulnerability (CNVD-2016-01842)

Apple iOS is the operating system used by Apple for a number of smart devices. WebKit is a set of open-source web browser engines developed by KDE, Apple, Google and other companies, and is currently used by browsers such as Apple Safari and Google Chrome. Versions of iOS prior to 9.3 have a...

Apple iOS Profiles Spoofing Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. A security vulnerability exists in the implementation of Profiles before iOS 9.3 where certificates are not properly validated, and attackers can spoof this with...

Apple iOS WebKit Information Disclosure Vulnerability (CNVD-2016-01843)

Apple iOS is the operating system used by Apple for a number of smart devices. WebKit is a set of open-source web browser engines developed by KDE, Apple, Google and other companies, and is currently used by browsers such as Apple Safari and Google Chrome. Versions of iOS prior to 9.3 and Safari...

Apple iOS AppleUSBNetworking Memory Corruption Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. A security vulnerability exists in the implementation of AppleUSBNetworking in versions prior to iOS 9.3, due to a failure to authenticate data from USB devices...

Apple iOS IOHIDFamily Memory Corruption Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. A memory corruption security vulnerability exists in the IOHIDFamily implementation in versions prior to iOS 9.3, which allows attackers to exploit the...

DEBIAN-CVE-2016-1977

The Machine::Code::decoder::analysis::setref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service stack memory corruption via a crafted Graphite smart font...

Cisco ACE 4710 Application Control Engine Command Injection Vulnerability

Cisco ACE 4710 Application Control Engine is the United States Cisco Cisco a set of ACE application switch series and used to increase the security and stability of data center applications load balancing and application delivery solutions. A command injection vulnerability exists in the Cisco AC...

CVE-2016-1149

Cross-site scripting XSS vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, and CVE-2016-1150...

CVE-2016-0405

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4 allows local users to affect confidentiality via vectors related to Cluster Manageability and Serviceability...