Cisco IOS XR Software Remote Denial of Service Vulnerability

Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. A remote denial of service vulnerability exists in the Cisco IOS XR Software Releases 5.1.x, 5.2.x, and 5.3.x versions. ...

UBUNTU-CVE-2016-3837

service/jni/comandroidserverwifiWifiNative.cpp in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application that provides a MAC address with too few characters, aka internal bug 28164077...

LastPass has multiple vulnerabilities

LastPass LastPass Password Manager is a free cross-platform online password management tool from LastPass, Inc. in the United States. The tool can be integrated with browsers and provides them with password management, autofill forms and other features, support for random password generation,...

CVE-2016-5448

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity and availability via vectors related to SNMP...

IBM i Access on Windows Information Disclosure Vulnerability

IBM i Access on Windows is a client solution for the Windows-based platform from IBM in the United States. The solution provides TCP/IP connections capable of accessing and using Windows desktop resources. A security vulnerability exists in IBM i Access on Windows version 7.1. A local attacker...

Cisco Video Communication Server and Expressway Identity Bypass Vulnerability

Cisco Expressway and Cisco TelePresence Video Communication Server VCS are telepresence video communication servers from Cisco that integrate with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communication...

Symantec Endpoint Protection Manager and Client Information Disclosure Vulnerability

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec Corporation. The software provides security across physical and virtual systems.SEP Manager and Client are the management and client software. An information disclosure vulnerability exists in the management console o...

Red Hat Satellite SQL Injection Vulnerability

Red Hat Satellite is a suite of system management platforms from Red Hat, Inc. that can be used to extend Linux infrastructures and provide system management functions such as administration, configuration, and monitoring. A security vulnerability exists in the 'sortby' and 'sortorder' parameters...

EMC RSA Authentication Manager Cross-Site Scripting Vulnerability

RSA Authentication Manager: is the platform behind RSA SecurID, utilized to centrally manage the RSA SecurID environment, including authentication methods, users, applications, and agents, across multiple physical sites. A cross-site scripting vulnerability exists in RSA Authentication Manager...

CVE-2016-0901

Cross-site scripting XSS vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0900...

CVE-2016-0900

Cross-site scripting XSS vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0901...

CVE-2016-0847

The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to spoof the originating telephone number of a call via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26864502...

Micro Focus Service Desk Arbitrary File Read Vulnerability

Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...

IBM Tivoli Storage Manager FastBack Buffer Overflow Vulnerability (CNVD-2016-02019)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack versions 6.1.0.0 through...

IBM Tivoli Storage Manager FastBack Buffer Overflow Vulnerability (CNVD-2016-02022)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack versions 6.1.0.0 through...

Apple OS X Server Information Disclosure Vulnerability

Apple OS X is an operating system from Apple. A security vulnerability in Wiki Server in versions of Apple OS X Server prior to 5.1 allows remote attackers to obtain sensitive information from Wiki pages...

Apple iOS WebKit Information Disclosure Vulnerability (CNVD-2016-01843)

Apple iOS is the operating system used by Apple for a number of smart devices. WebKit is a set of open-source web browser engines developed by KDE, Apple, Google and other companies, and is currently used by browsers such as Apple Safari and Google Chrome. Versions of iOS prior to 9.3 and Safari...

Apple Safari Interface Forgery Vulnerability

Apple Safari is a web browser developed by Apple, Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in Apple Safari versions prior to 9.1. An attacker can exploit the vulnerability to spoof the user interface with the help of a...

CVE-2016-0243

Cross-site scripting XSS vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a differe...

Tollgrade SmartGrid LightHouse Sensor Management System Software Information Disclosure Vulnerability

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software is a Web-based smart grid lighthouse sensor management system from Tollgrade, Inc. A security vulnerability exists in Tollgrade SmartGrid LightHouse SMS Software versions prior to 5.1 and 4.1.0 Build 16. A remote attacker could...