Android Audio Component Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of the Audio component of Android versions prior to 5.1.1 LMY48Z and 6.0 2015-12-01, which can be exploited by remote attackers to obtain sensitive information...

Schneider Electric ProClima ActiveX Control Code Injection Vulnerability

Schneider Electric ProClima is a suite of thermal calculation software from Schneider Electric France. A code injection vulnerability exists in Schneider Electric ProClima 6.1 and prior versions. A remote attacker could exploit this vulnerability to cause a denial of service or execute arbitrary...

Apple iOS Memory Corruption Vulnerability (CNVD-2015-07163)

IOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in WebKit, a version of Apple iOS prior to 9.1. A remote attacker could execute arbitrary code or launch a denial-of-service attack memory corruption or application crash via a constructed website...

Apple iOS Arbitrary Code Execution Vulnerability

Apple iOS is an operating system for handheld devices developed by Apple Inc. An arbitrary code execution vulnerability exists in Apple iOS versions prior to 9.1, OS X versions prior to 10.11.1. It allows remote attackers to execute arbitrary code via an unknown network connection request...

Apple iOS/OS X OpenGL Memory Corruption Vulnerability

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in the OpenGL implementation in Apple iOS versions prior to 9.1 and Apple OS X version...

Apple iOS Information Disclosure Vulnerability

iOS is an operating system developed by Apple for mobile devices. Apple iOS versions prior to 9.1 mishandled Notification Center by changing the lock screen display settings, allowing local attackers to obtain sensitive information by searching for phone calls or message notifications after the...

Android Denial of Service Vulnerability (CNVD-2015-06591)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial of service vulnerability exists in Android versions prior to 5.1.1, LMY48T, which allows an attacker to cause a denial of service via unspecified vectors...

Android Denial of Service Vulnerability (CNVD-2015-06590)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial of service vulnerability exists in Android versions prior to 5.1.1 LMY48T, which could allow a remote attacker to execute arbitrary code or cause a denial of...

Android Denial of Service Vulnerability (CNVD-2015-06582)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial of service vulnerability exists in Android versions prior to 5.1.1 LMY48T, which could allow a remote attacker to execute arbitrary code or cause a denial of...

Android Denial of Service Vulnerability (CNVD-2015-06592)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial of service vulnerability exists in Android 5.x LMY48T before 5.1.1, which allows remote attackers to execute arbitrary code or cause a denial of service via a...

Xen Elevation of Privilege Vulnerability

Xen is a virtualization technology used in the Linux kernel that allows multiple operating systems to run simultaneously. An elevation of privilege vulnerability exists in Xen 4.1.x through 4.6.x that allows a local user to write a read-only disk image...

DEBIAN-CVE-2015-1283

Multiple integer overflows in the XMLGetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted XML data, a related...

PT-2015-6138 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.1.6 Description: The issue allows local users to gain privileges by triggering an NMI within a certain instruction window due to improper reliance on espfix64 during nested NMI processing in arch/x86/entry/ent...

ZOHO ManageEngine Password Manager Pro SQL Injection Vulnerability

ZOHO ManageEngine Password Manager Pro PMP is a set of password management software from ZOHO. The software can record general password information, website login passwords, software registration codes and Email account passwords. An SQL injection vulnerability exists in the AdvanceSearch.class...

IBM Tivoli Storage Manager FastBack stack buffer overflow vulnerability (CNVD-2015-04187)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A stack buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack version 6.1.12 prior t...

IBM Tivoli Storage Manager FastBack stack buffer overflow vulnerability (CNVD-2015-04176)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A stack buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack version 6.1.12 prior t...

IBM Tivoli Storage Manager FastBack Arbitrary File Read Vulnerability (CNVD-2015-04164)

IBM Tivoli Storage Manager FastBack is a suite of software that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. An arbitrary file read vulnerability in IBM Tivoli Storage Manager FastBack version 6.1 prior to 6.1.12 allows remote...

The vulnerability of the Gentoo Linux operating system allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vixie-cron package up to version 4.1-r9 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

The vulnerability of the Red Hat Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the minicom-1.83.1 operating system from Red Hat Linux can lead to breaches of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cyrus-sasl package up to version 2.1.23 in the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...