Adobe Flash Playe Memory Misreference Vulnerability (CNVD-2016-000167)

FlashPlayer is a multimedia program player. Adobe AIR is a technology developed for the integration of web and desktop applications, allowing control of cloud-based programs on the web without having to go through a browser. On Windows and OS X platforms, Adobe Flash Player versions prior to...

PT-2015-7835 · Libarchive +5 · Libarchive +5

Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.2.0 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by providing a crafted 7z file. This is related to the 7z folder struct in the archive read support format...

EMC RSA SecurID Web Agent Local Authentication Bypass Vulnerability

EMC RSA SecurID Web Agent is a cross-platform, Web-based solution from EMC that intercepts remote user access or user group local requests and directs them to the RSA Authentication Management Server for authentication. A local authentication bypass vulnerability exists in EMC RSA SecurID Web Age...

Android libstagefright information disclosure vulnerability (CNVD-2015-08054)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of libstagefright in Android versions prior to 5.1.1 LMY48Z and 6.0 2015-12-01, which can be exploited by remote attackers to obtain sensitive information and bypass...

chromium-browser: Integer overflow in Sfntly

Integer overflow in the FontData::Bound function in data/fontdata.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT...

PCRE Denial of Service Vulnerability (CNVD-2015-07876)

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A security vulnerability exists in PCRE versions prior to 8.38, which stems from the program's failure to properly handle '/?J??' d'?'...

Mozilla: CORS preflight is bypassed when non-standard Content-Type headers are received (MFSA 2015-127)

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm for the POST method in situations involving an unspecified Content-Type header manipulation, which allows remote attackers to bypass the Same Origin Policy by leveraging the lack...

Android Information Disclosure Vulnerability (CNVD-2015-07351)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. An information disclosure vulnerability exists in Android versions prior to 5.1.1 LMY48X and 6.0 prior to 2015. Allows remote attackers to obtain sensitive information vi...

Apple Safari/iTunes memory corruption vulnerability (CNVD-2015-07154)

Safari is the browser in Mac OS X, the latest operating system for Apple computers. iTunes is a digital media playback application. A security vulnerability exists in WebKit in Apple Safari versions prior to 9.0.1 and iTunes versions prior to 12.3.1. The vulnerability allows remote attackers to...

SAP Netwaver XML External Entity Injection Vulnerability

SAP Netwaver is a professional standards-based integrated application platform from SAP. The platform provides components such as portals, application servers and business intelligence solutions. An XML external entity injection vulnerability exists in SAP Netwaver versions prior to 7.01. An...

Android Denial of Service Vulnerability (CNVD-2015-06596)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial of service vulnerability exists in Android versions prior to 5.1.1, LMY48T, which allows remote attackers to execute arbitrary code or cause a denial of service...

Android SMS Message Arbitrary Deletion Vulnerability

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. An SMS message arbitrary deletion vulnerability exists in Android versions prior to 5.1.1, LMY48T, which allows attackers to delete sred SMS messages via a crafted...

Android Denial of Service Vulnerability (CNVD-2015-06581)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial of service vulnerability exists in Android versions prior to 5.1.1, LMY48T, which allows remote attackers to execute arbitrary code or cause a denial of service...

Android integer overflow vulnerability (CNVD-2015-06484)

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. An integer overflow vulnerability exists in Android versions prior to 5.1.1, LMY48M, which allows an attacker to execute arbitrary code and read arbitrary keys. By using an...

Android Arbitrary Code Execution Vulnerability (CNVD-2015-06534)

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. An arbitrary code execution vulnerability exists in Android versions prior to 5.1.1, LMY48M, which allows an attacker to execute arbitrary code via an application that send...

Everest Software PeakHMI Pointer Dereference Vulnerability

PeakHMI is a human-machine interface product used within industrial control systems. A security vulnerability exists in PeakHMI versions prior to 8.7.0.2 when handling carefully constructed packets. An attacker exploiting this vulnerability could cause the program to indirectly reference pointers...

PT-2015-6396

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 12.0.0 Enterprise Manager versions 3.0.0 through 3.1.1 Description A directory traversal issue exists in the configuration utility, allowing remote authenticated users to access arbitrary files in the web root...

Fortinet FortiClient Unauthorized Operation Vulnerability

Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. An unauthorized operation vulnerability exists in Fortinet FortiClient versions prior to 5.2.4, which allows a local user write to write to arbitrary memory...

Moxa SoftCMS Buffer Overflow Vulnerability (CNVD-2015-05787)

Moxa SoftCMS is the centralized management software for managing large surveillance systems. Moxa SoftCMS 1.3 and prior versions have a punch zone overflow vulnerability. A remote attacker can exploit these vulnerabilities to execute arbitrary code...

AZL-6376 CVE-2015-2987 affecting package ed for versions less than 1.14.2-9

Type74 ED before 4.0 misuses 128-bit ECB encryption for small files, which makes it easier for attackers to obtain plaintext data via differential cryptanalysis of a file with an original length smaller than 128 bits...