CVE-2016-9156

A vulnerability in Siemens SICAM PAS all versions before V8.09 could allow a remote attacker to upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP...

PT-2016-2996 · Siemens · Siemens Sicam Pas

Name of the Vulnerable Software and Affected Versions: Siemens SICAM PAS versions prior to V8.09 Description: The issue is related to inadequate access control, allowing a remote attacker to upload, download, or delete files in certain parts of the file system. This can be achieved by sending...

CVE-2016-3002

IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows physically proximate attackers to obtain sensitive information by reading cached data on a client device...

ImageMagick heap buffer overflow vulnerability (CNVD-2016-11688)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A heap buffer overflow vulnerability exists in ImageMagick version 7.0.3.6, which stems from the program failing to...

CVE-2016-0317

Lifecycle Query Engine LQE in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2016-6713

A remote denial of service vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID:...

CVE-2016-6701

A remote code execution vulnerability in libskia in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the contex...

UBUNTU-CVE-2016-6716

An elevation of privilege vulnerability in the AOSP Launcher in Android 7.0 before 2016-11-01 could allow a local malicious application to create shortcuts that have elevated privileges without the user's consent. This issue is rated as Moderate because it is a local bypass of user interaction...

Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2016-10246)

Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A cross-site scripting vulnerability exists in Subrion CMS version 4.0.5, which stems from the failure of...

Oracle VM VirtualBox Component Local Arbitrary Code Execution Vulnerability (CNVD-2016-09791)

Oracle Virtualization VirtualBox Oracle Oracle a virtualization product suite. Oracle VM VirtualBox is one of the virtual machine components. A local arbitrary code execution vulnerability exists in the Core subcomponent of the Oracle VM VirtualBox component of Oracle Virtualization, versions pri...

Auto-Matrix Aspect-Nexus and Aspect-Matrix Building Automation Front-End Solutions File Containment Vulnerability

Auto-Matrix Aspect-Nexus and Aspect-Matrix Building Automation Front-End Solutions are Auto-Matrix USA's building automation front-end solutions for infrastructure, which are primarily deployed stateside in commercial facilities, critical manufacturing and energy and wastewater systems I&C. A...

BSA-2016-168

Security Advisory ID : BSA-2016-168 Component : NetIron Revision : 2.0: Final A memory corruption in the IPsec code path of BrocadeNetIronOS on Brocade MLXs 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00 and 6.0.00a images could allow attackers to cause a denial of service line card rese...

PHP Heap Overflow Vulnerability

PHP is a popular general-purpose scripting language that is particularly well suited for web development. A memory overflow vulnerability exists in the phpmysqlndrowpreadtextprotocolaux field in PHP version 7.0.10, which can be exploited by an attacker to cause a memory overflow...

PHP 'AppendIterator::append' Local Denial of Service Vulnerability

PHP is an open source general-purpose computer scripting language. A local denial of service vulnerability exists in PHP 7.0 'AppendIterator::append'. It allows attackers to exploit the vulnerability to launch a denial of service attack...

CVE-2016-3008

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-2956...

Trend Micro Control Manager Information Disclosure Vulnerability

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. An information disclosure vulnerability exists in version 6.0 of Trend Micro Control Manager TMCM, which can be exploited by an attacker to gain access to sensitive...

IBM Connections Cross-Site Scripting Vulnerability (CNVD-2016-06533)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site scripting...

IBM Connections Cross-Site Scripting Vulnerability (CNVD-2016-06537)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site scripting...

IBM Connections Cross-Site Scripting Vulnerability (CNVD-2016-06535)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site scripting...

Cisco Smart Call Home Transport Gateway Cross-Site Scripting Vulnerability

Cisco Smart Call Home Transport Gateway is the United States Cisco Cisco company for intelligent messaging equipment in a message transport gateway products. A cross-site scripting vulnerability exists in the web framework of Cisco Smart Call Home Transport Gateway version 4.14.0 running on the...