PHP extractTo directory traversal vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A directory traversal vulnerability exists in the ZipArchive::extractTo function in PHP versions 5.5 and 5.6, which can be exploited by remote...

PT-2016-5026 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.5 on s390 platforms Description: The fork implementation in the Linux kernel mishandles the case of four page-table levels, allowing local users to cause a denial of service system crash or possibly have...

IBM Tivoli Storage Manager FastBack Buffer Overflow Vulnerability (CNVD-2016-02022)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack versions 6.1.0.0 through...

mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802...

PT-2016-5236 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.5 Description: The issue allows local users to cause a denial of service by creating many pipes with non-default sizes, resulting in memory consumption due to the lack of limitation on the amount of unread dat...

phpMyAdmin man-in-the-middle attack vulnerability (CNVD-2016-01427)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security vulnerability exists in phpMyAdmin versio...

CVE-2016-0213

Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service daemon crash via unspecified vectors, a different vulnerability than CVE-2016-0212 and CVE-2016-0216...

CVE-2016-0243

Cross-site scripting XSS vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a differe...

Apache CloudStack Trust Management Vulnerability

Apache CloudStack is a suite of open source cloud computing software from the Apache Apache Software Foundation in the United States. The software can be used to deploy, manage, and configure public and private clouds IaaS. A security vulnerability exists in Apache CloudStack 4.5.1 and earlier...

Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2016-01062)

Cisco Unified Communications Manager is the call processing component of the IP Telephony solution from Cisco. An information disclosure vulnerability exists in Cisco Unified Communications Manager 11.5 0.98000.480 that could allow an authenticated, remote user to obtain sensitive database table...

PT-2016-1789 · Mariadb +7 · Mariadb +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.47 and earlier Oracle MySQL versions 5.6.28 and earlier Oracle MySQL versions 5.7.10 and earlier MariaDB versions prior to 5.5.48 MariaDB versions 10.0.x prior to 10.0.24 MariaDB versions 10.1.x prior to 10.1.12...

CVE-2016-0950

Adobe Connect before 9.5.2 allows remote attackers to spoof the user interface via unspecified vectors...

CVE-2016-0948

Cross-site request forgery CSRF vulnerability in Adobe Connect before 9.5.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Directory traversal vulnerability in guard-livereload

The vulnerability allows remote attackers to read arbitrary files on the server by exploiting improper path validation in the livereload server functionality. This vulnerability is related to the handling of file paths in the livereload server component, which could allow an attacker to traverse...

Mozilla Firefox OS lockscreen feature bypass vulnerability

Mozilla Firefox is an open source web browser that uses the Gecko engine. A security vulnerability exists in the lockscreen feature of Mozilla Firefox OS prior to version 2.5, which can be exploited by attackers in close physical proximity to gain access by brute-force password guessing, as the...

Mozilla Firefox OS lockscreen Competitive Conditions Vulnerability

Mozilla Firefox is an open source web browser that uses the Gecko engine. A competitive condition vulnerability exists in the lockscreen feature of Mozilla Firefox OS prior to version 2.5, which can be exploited by an attacker in close physical proximity to bypass targeted cryptographic measures...

Cisco Emergency Responder Web Framework Arbitrary File Upload Vulnerability

Cisco Emergency Responder's real-time location-address tracking database and enhanced routing capabilities can transfer emergency calls directly to the appropriate Public Safety Answering Point PASP based on the caller's location. Cisco Emergency Responder 10.5 3.10000.9 fails to validate...

Cyrus IMAP index_urlfetch Information Disclosure Vulnerability

Cyrus IMAP Server is an e-mail server developed at Carnegie Mellon University. A security vulnerability exists in the function indexurlfetch in Cyrus IMAP versions 2.3.x-2.3.19, 2.4.x-2.4.18, 2.5.x-2.5.4 index.c. A remote attacker can exploit this vulnerability to obtain sensitive information by...

Multiple integer overflow vulnerabilities in hostapd/wpa_supplicant

hostapd is the user-space daemon for access points and authentication servers. wpasupplicant is the executable program for the WPA supplicant component the part that runs on the client side, which is responsible for coordinating communication between the WPA key and the WPA authentication side, a...

FreeType has multiple denial of service vulnerabilities

FreeType is the FreeType team developed a C-based , high-quality and portable open source font engine library , it can be used to rasterize the characters and mapped to bitmap and provide other font-related business support . Multiple denial of service vulnerabilities exist in versions of FreeTyp...