3961 matches found
Oracle VM VirtualBox Component Local Arbitrary Code Execution Vulnerability (CNVD-2016-09791)
Oracle Virtualization VirtualBox Oracle Oracle a virtualization product suite. Oracle VM VirtualBox is one of the virtual machine components. A local arbitrary code execution vulnerability exists in the Core subcomponent of the Oracle VM VirtualBox component of Oracle Virtualization, versions pri...
Auto-Matrix Aspect-Nexus and Aspect-Matrix Building Automation Front-End Solutions File Containment Vulnerability
Auto-Matrix Aspect-Nexus and Aspect-Matrix Building Automation Front-End Solutions are Auto-Matrix USA's building automation front-end solutions for infrastructure, which are primarily deployed stateside in commercial facilities, critical manufacturing and energy and wastewater systems I&C. A...
BSA-2016-168
Security Advisory ID : BSA-2016-168 Component : NetIron Revision : 2.0: Final A memory corruption in the IPsec code path of BrocadeNetIronOS on Brocade MLXs 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00 and 6.0.00a images could allow attackers to cause a denial of service line card rese...
PHP Heap Overflow Vulnerability
PHP is a popular general-purpose scripting language that is particularly well suited for web development. A memory overflow vulnerability exists in the phpmysqlndrowpreadtextprotocolaux field in PHP version 7.0.10, which can be exploited by an attacker to cause a memory overflow...
PHP 'AppendIterator::append' Local Denial of Service Vulnerability
PHP is an open source general-purpose computer scripting language. A local denial of service vulnerability exists in PHP 7.0 'AppendIterator::append'. It allows attackers to exploit the vulnerability to launch a denial of service attack...
CVE-2016-3008
Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-2956...
Trend Micro Control Manager Information Disclosure Vulnerability
Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. An information disclosure vulnerability exists in version 6.0 of Trend Micro Control Manager TMCM, which can be exploited by an attacker to gain access to sensitive...
IBM Connections Cross-Site Scripting Vulnerability (CNVD-2016-06535)
IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site scripting...
IBM Connections Cross-Site Scripting Vulnerability (CNVD-2016-06533)
IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site scripting...
IBM Connections Cross-Site Scripting Vulnerability (CNVD-2016-06537)
IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site scripting...
Cisco Smart Call Home Transport Gateway Cross-Site Scripting Vulnerability
Cisco Smart Call Home Transport Gateway is the United States Cisco Cisco company for intelligent messaging equipment in a message transport gateway products. A cross-site scripting vulnerability exists in the web framework of Cisco Smart Call Home Transport Gateway version 4.14.0 running on the...
IBM BigFix Platform Operating System Command Injection Vulnerability
IBM BigFix formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from the American company IBM. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other function...
UBUNTU-CVE-2016-3837
service/jni/comandroidserverwifiWifiNative.cpp in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application that provides a MAC address with too few characters, aka internal bug 28164077...
libtiff: out-of-bounds write in the tiff2rgba tool
Multiple integer overflows in the 1 cvtbystrip and 2 cvtbytile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service crash or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write...
CVE-2016-5448
Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity and availability via vectors related to SNMP...
TYPO3 Formhandler Extension Cross-Site Scripting Vulnerability
TYPO3 is a Swiss TYPO3 Association maintains a free and open source content management system framework CMS/CMF. formhandler is one of the Web development form Form module extension plug-in . A cross-site scripting vulnerability exists in versions 2.3.1 and 2.0.2 of the TYPO3 Formhandler extensio...
CVE-2016-5080
Integer overflow in the rtxMemHeapAlloc function in asn1rta.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow, on a system running an application compiled by ASN1C, via crafted...
Citrix Receiver for iOS Design Vulnerability
Citrix Receiver for iOS is a suite of iOS-based client software for accessing XenDesktop and XenApp from Citrix Systems. A design vulnerability exists in Citrix Receiver for iOS versions prior to 7.0. An attacker could exploit the vulnerability to prevent TLS certificates from being properly...
7zip denial of service vulnerability
7zip is a set of 7-Zip data compression program software. The program can compress and decompress files in 7z format. A security vulnerability exists in the 'CInArchive::ReadFileItem' method in the Archive/Udf/UdfIn.cpp file in 7zip version 9.20 and 15.05 beta. A remote attacker can exploit this...