ALPINE-CVE-2016-9296

A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null pointer check for the variable folders.PackPositions in function CInArchive::ReadAndDecodePackedStreams in CPP/7zip/Archive/7z/7zIn.cpp, as used in the 7z.so library and in 7z applications, will cause ...

CVE-2016-7097

The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions...

PT-2016-6907 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center versions 5.2.0 through 6.0.1 Description: The issue allows remote authenticated users to execute arbitrary commands via crafted web-application parameters. Recommendations: For versions 5.2.0 through 6.0.1,...

Red Hat Enterprise Linux Local Security Bypass Vulnerability

Red Hat Enterprise Linux RHEL is a set of Linux operating systems maintained and distributed by Red Hat for business users. A local security bypass vulnerability exists in RHEL version 7.2, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations...

CVE-2016-5947

IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

PT-2016-4072

Name of the Vulnerable Software and Affected Versions TLS protocol versions 1.2 and earlier Description The issue allows man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate. This is due to the TLS protocol...

Red Hat OpenShift Enterprise Denial of Service Vulnerability (CNVD-2016-07357)

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, U.S. OpenShift Enterprise is an open source version of the private cloud. A denial of service vulnerability exists in Minimatch in Red Hat OpenShift Enterprise versions 3.1 and 3.2. An attacker could exploit...

Android Stock Browser Remote Denial of Service Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Stock Browser is a browser component. A remote denial of service vulnerability exists in Android Stock Browser versions 2.1 and 2.2, which can be exploited by an attacker...

Multiple Vulnerabilities in ZOHO WebNMS Framework

ZOHO WebNMS Framework is the United States ZhuoHao ZOHO company's set of framework for building network management applications. A directory traversal vulnerability, an information disclosure vulnerability, and a user impersonation vulnerability exist in versions 5.2 and 5.2 SP1 of the ZOHO WebNM...

Libarchive Buffer Overflow Vulnerability

libarchive is a multi-format archive and compression library. A buffer overflow vulnerability exists in libarchive version 3.2.0. An attacker could exploit this vulnerability to cause a denial of service or execute arbitrary code...

CA eHealth Denial of Service Vulnerability

CA eHealth is CA's suite of software for intelligently managing complex IT environments through the IT infrastructure. The software supports monitoring, collecting and analyzing network information from network performance, virtual systems and Cisco Unified Computing Systems to provide real-time...

CA eHealth Arbitrary Command Execution Vulnerability

CA eHealth is CA's suite of software for intelligently managing complex IT environments through the IT infrastructure. The software supports monitoring, collecting and analyzing network information from network performance, virtual systems and Cisco Unified Computing Systems to provide real-time...

CVE-2016-5448

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity and availability via vectors related to SNMP...

Multiple Vulnerabilities in Baidu Browser

Baidu Browser is a suite of browser software developed by Baidu, a Chinese company. Information disclosure vulnerabilities and arbitrary code execution vulnerabilities exist in Baidu Browser for Android version 6.2.18.0 and Baidu Browser for Windows version 7.6.100.2089, which can be exploited by...

CVE-2016-1189

Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended restrictions on reading, creating, or modifying a portlet via unspecified vectors...

IBM Security QRadar Incident Forensics Unauthorized Access Vulnerability

IBM Security QRadar Incident Forensics is a suite of security forensic investigation software from IBM. The software supports in-depth forensic investigations of suspected malicious network security incidents, and repair network security vulnerabilities. An unauthorized access vulnerability exist...

Red Hat Enterprise Linux shell command injection vulnerability

Red Hat Enterprise Linux RHEL is a Linux operating system maintained and distributed by Red Hat for business users. setroubleshoot is one of the troubleshooting tools. A shell command injection vulnerability exists in the setroubleshoot/auditdata.py file in RHEL version 7.2. An attacker can explo...

SUSE-SU-2016:1568-1 Security update for ntp

ntp was updated to version 4.2.8p8 to fix 17 security issues. These security issues were fixed: - CVE-2016-4956: Broadcast interleave bsc982068. - CVE-2016-2518: Crafted addpeer with hmode 7 causes array wraparound with MATCHASSOC bsc977457. - CVE-2016-2519: ctlgetitem return value not always...

Multiple Vulnerabilities in HPE Project and Portfolio Management Center

HPE Project and Portfolio Management Center PPM is a suite of solutions from Hewlett Packard Enterprise HPE that provides project executives with the visibility and strategic operational needs to make decisions based on real-time visibility into the project lifecycle of the project portfolio. An...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2016-03716)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting vulnerability exists in...