BaserCMS cross-site scripting vulnerability (CNVD-2016-08858)

baserCMS is an enterprise-level content management system CMS. A cross-site scripting vulnerability exists in baserCMS 3.0.10 and prior versions, which stems from the program failing to adequately filter user-submitted input. The vulnerability allows an attacker to steal cookie-based authenticati...

EMC ViPR SRM Cross-Site Request Forgery Vulnerability (CNVD-2016-07741)

EMC ViPR SRM is a suite of storage resource management software from EMC Corporation. The software enables intuitive understanding of storage relationships, analyzes configuration and capacity growth and optimizes resources to improve return on investment ROI in storage environments. A cross-site...

CVE-2016-4263

Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code via unspecified vectors...

Android Qualcomm DMA Component Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. An information disclosure vulnerability exists in the Qualcomm sound/soc/codecs/wcdcal-hwdep.c/wcdcalhwdepioctlshared function on Nexus 6P devices in versions of Android prior to 2016-09-05, which can be exploited by a remot...

jose-php information disclosure vulnerability (CNVD-2016-07257)

jose-php is suitable for PHP JSON object signature and encryption library . A security vulnerability exists in versions of jose-php prior to 2.2.1, due to the non-use of constant time for HMAC comparisons. Remote attackers can obtain sensitive information by timing attacks...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-07209)

Google Chrome is a web browser developed by the American company Google Google. An arbitrary code execution vulnerability exists in versions of Google Chrome prior to 53.0.2785.89. An attacker can exploit this vulnerability to execute arbitrary code in the context of the browser, bypass security...

PT-2016-3354

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.5 Description The issue is related to the kernel in Apple iOS, which lacks protection for sensitive data. This allows attackers to obtain sensitive information from memory via a crafted app. Recommendations For...

jenkins: HTTP response splitting vulnerability (SECURITY-238)

CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote attackers to affect confidentiality via vectors related to Server: Security: Encryption...

Android on Nexus Qualcomm Component Privilege Acquisition Vulnerability (CNVD-2016-06247)

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies used in the Qualcomm devices. Qualcomm is a Qualcomm device-specific component us...

Android on Nexus Qualcomm Component Privilege Acquisition Vulnerability (CNVD-2016-06234)

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies used in the Qualcomm devices. Qualcomm is a Qualcomm device-specific component us...

PT-2021-3569 · Runc +8 · Runc +8

Name of the Vulnerable Software and Affected Versions: runc versions prior to 1.0.0-rc95 Description: The issue allows a container filesystem breakout via directory traversal. To exploit this, an attacker must be able to create multiple containers with a fairly specific mount configuration. The...

Google Chrome Blink Same-Origin Policy Bypass Vulnerability (CNVD-2016-05520)

Blink is the United States Google Google Inc. and Norway Opens Opera Software company jointly developed a set of browser layout engine rendering engine. A same-origin policy bypass vulnerability exists in the 'ChromeClientImpl::createWindow' method in the WebKit/Source/web/ChromeClientImpl.cpp fi...

Unspecified Vulnerability in MySQL Server (CNVD-2016-05291)

Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. An unspecified vulnerability exists in Oracle MySQL versions prior to 5.5.48, 5.6.29, and 5.7.11, which could be exploited by...

Unspecified Vulnerability in Oracle Communications Applications PCz Oracle Enterprise Communications Broker group

Oracle Communications is Oracle's suite of applications for rapidly delivering and monetizing digital life communications. oracle Enterprise Communications Broker is one of the components used to manage the enterprise voice, video, and unified communications network. An unspecified vulnerability...

TYPO3 Media management extension directory traversal vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF. media management is one of the multimedia management extension plug-ins. A directory traversal vulnerability exists in TYPO3 Media management extension versions prior to 3.7.5 and 4.0.4, which allows an attacker to obtai...

Multiple Unauthorized Access Vulnerabilities in SugarCRM

SugarCRM is an open source Customer Relationship Management CRM system from SugarCRM USA. The system supports differentiated marketing, management and distribution of sales leads for different customer needs, and enables information sharing and tracking of sales representatives. Multiple...

CVE-2016-4223

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2016-4224 and CVE-2016-4225...

Advantech WebAccess Buffer Overflow Vulnerability

Advantech WebAccess formerly known as BroadWin WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A buffer...

Android Qualcomm Wi-Fi Driver Privilege Gain Vulnerability

Android on Nexus 7 is an open source Linux-based operating system for the Nexus 7 Tablet PC developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Wi-Fi driver is a Qualcomm-developed Wi-Fi driver component used in it. Qualcomm Wi-Fi driver is one of the components used in the...