PT-2016-1789 · Mariadb +7 · Mariadb +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.47 and earlier Oracle MySQL versions 5.6.28 and earlier Oracle MySQL versions 5.7.10 and earlier MariaDB versions prior to 5.5.48 MariaDB versions 10.0.x prior to 10.0.24 MariaDB versions 10.1.x prior to 10.1.12...

SUSE-SU-2016:0324-1 Recommended update for LibreOffice

This update brings LibreOffice to version 5.0.4, a major version update. It brings lots of new features, bug fixes and also security fixes. Features as seen on http://www.libreoffice.org/discover/new-features/ LibreOffice 5.0 ships an impressive number of new features for its spreadsheet module,...

Wireshark MP2T File Parser Denial of Service Vulnerability (CNVD-2016-00050)

Wireshark is the most popular network protocol parser. A denial-of-service vulnerability exists in the MP2T file parser in version 2.0.x prior to Wireshark 2.0.1, which allows remote attackers to cause a denial of service stack buffer overflow and application crash via a specially crafted file...

Wireshark S7COMM Parser Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. The s7commdecodeudcpuszlsubfunc function in epan/dissectors/packet-s7commszlids.c in the S7COMM parser version 2.0.x prior to Wireshark 2.0.1 fails to validate the list count in the SZL response, allowing remote attackers to divide by zero...

Idera Up.time agent for Windows formatting string vulnerability

Idera Up.time client for Windows is a Windows-based infrastructure performance monitoring software client from Idera Corporation. A formatting string vulnerability exists in Idera Up.time client for Windows versions 6.0 and 7.2. A remote attacker can exploit this vulnerability by sending a...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2015-08391)

Cisco Unified Communications Manager is the call processing component of the IP Telephony solution from Cisco. A cross-site scripting vulnerability exists in Cisco Unified Communications Manager 8.0 through 8.6. It allows remote attackers to bypass XSS protection mechanisms via crafted parameters...

Android libstagefright Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of libstagefright in Android versions prior to 5.1.1 LMY48Z and 6.0 2015-12-01, which can be exploited by remote attackers to obtain sensitive information and bypass...

Android Audio Component Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of the Audio component of Android versions prior to 5.1.1 LMY48Z and 6.0 2015-12-01, which can be exploited by remote attackers to obtain sensitive information...

Android mediaserver memory corruption vulnerability (CNVD-2015-08005)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in mediaserver in Android version 6.0, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service memory corruption via a constructed media file...

Epiphany Healthcare Cardio Server SQL and LDAP Injection Vulnerabilities

Epiphany Healthcare Cardio Server is a scalable ECG management system from Epiphany Healthcare, UK. A security vulnerability exists in Epiphany Healthcare Cardio Server versions prior to 4.0. A local attacker can exploit this vulnerability by inserting an LDAP query into the URL of a login page t...

X2Engine X2CRM Cross-Site Scripting Vulnerability

X2Engine X2CRM is the United States X2Engine company's set of open source customer relationship management program CRM. A cross-site scripting vulnerability exists in X2Engine X2CRM versions prior to 5.0.9. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...

PCMan FTP Server Information Disclosure Vulnerability

PCMan FTP Server is FTP server software. A directory traversal vulnerability exists in PCMan FTP Server version 2.0.7, which can be exploited by a remote attacker to read arbitrary files via the RETR command inside the "... /" within the RETR command, this vulnerability can be exploited to read...

GE Healthcare Centricity PACS Workstation Trust Management Vulnerability (CNVD-2015-05140)

GE Healthcare Centricity PACS Workstation is a General Electric GE image archiving and transfer system PACS workstation for the healthcare industry. A security vulnerability exists in GE Healthcare Centricity PACS Workstation versions 4.0 through 4.0.1, which originates from the use of 'ddpadmin'...

BSA-2015-006

Summary Security Advisory ID : BSA-2015-006 Component : OpenSSL Revision : 8.0 N/A...

Cisco Wireless LAN Controller devices with software arbitrary OS command execution vulnerability

Cisco Wireless LAN Controller WLC is a wireless LAN controller product from Cisco USA. The product provides security policy, intrusion detection and other functions in the wireless LAN. A security vulnerability exists in Cisco WLC devices using version 7.0 240.0 software. A local attacker can...

PT-2016-7112 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.0 Description: The issue is related to the mismanagement of locks during certain migrations in the performance subsystem of the Linux kernel. This allows local users to gain privileges via a crafted applicatio...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the samba-3.0.10 package for the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the net-snmp-devel-5.0.9 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Vulnerability in Oracle Health Sciences Applications Health Sciences Argus Safety Component

Oracle Health Sciences Applications is a suite of clinical development solutions for the healthcare industry from Oracle. A security vulnerability exists in the BIP Installer subcomponent of the Oracle Health Sciences Argus Safety component of Oracle Health Sciences Applications version 8.0. A...

HP Operations Orchestration Security Bypass Vulnerability

HP Operations Orchestration is a suite of IT process automation solutions from Hewlett-Packard HP. The solution automates the management of IT tasks, operations and processes, as well as enhances audit compliance by generating documentation and reporting capabilities. A security vulnerability...