Apple Transporter Information Disclosure Vulnerability

Apple Transporter is a product of the American company Apple apple. An information disclosure vulnerability exists in Apple Transporter versions prior to 1.9.2. An attacker can exploit this vulnerability to obtain sensitive information...

PT-2017-10398 · Unknown +2 · Game-Music-Emu +2

Name of the Vulnerable Software and Affected Versions: game-music-emu versions prior to 0.6.1 Description: The issue allows local users to cause a denial of service, resulting in a process crash due to a divide by zero error. Recommendations: For versions prior to 0.6.1, update to version 0.6.1 o...

PT-2016-7750 · W3M +2 · W3M +2

Name of the Vulnerable Software and Affected Versions: w3m versions prior to 0.5.3-31 Description: An issue in w3m allows remote attackers to cause a denial of service, resulting in memory corruption, segmentation fault, and crash, via a crafted HTML page. Recommendations: For versions prior to...

Google Chrome PDFium Local File Access Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A local file access vulnerability exists in PDFium in versions of Google Chrome prior to 55.0.2883.75. An attacker can exploit this vulnerability to access...

IBM BigFix Remote Control Denial of Service Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A denial of service vulnerability exists in the broker application in IBM BigFix Remote Control 9.1.2 and prior versions. A remote attacker can exploit this vulnerability to cause a denial of service by...

PT-2016-7537 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.8.10 Description: The issue is related to the mishandling of skb truncation in the TCP stack, which can be exploited by local users to cause a denial of service, resulting in a system crash. This can be achiev...

Juniper Junos Space Cross-Site Request Forgery Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. A cross-site request forgery vulnerability exists in Juniper Junos Space versions prior to...

GNU Guile Local Security Bypass Vulnerability

GNU Guile is a set of programming languages developed by the GNU Project for creating flexible applications. A local security bypass vulnerability exists in GNU Guile 2.0.12 and earlier versions, which can be exploited by an attacker to bypass security restrictions and perform unauthorized...

CVE-2016-6939

Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

ZOHO ManageEngine ServiceDesk Plus Security Bypass Vulnerability

ZOHO ManageEngine ServiceDesk is the United States ZhuoHao ZOHO company's set of web-based help desk HelpDesk and asset management software. A security bypass vulnerability exists in ManageEngine ServiceDesk Plus 9.2 and prior versions, which can be exploited by an attacker to bypass security...

BaserCMS cross-site scripting vulnerability (CNVD-2016-08858)

baserCMS is an enterprise-level content management system CMS. A cross-site scripting vulnerability exists in baserCMS 3.0.10 and prior versions, which stems from the program failing to adequately filter user-submitted input. The vulnerability allows an attacker to steal cookie-based authenticati...

ClamAV Denial of Service Vulnerability (CNVD-2016-09015)

ClamAV Clam AntiVirus is a free and open source antivirus program developed by the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. Versions of ClamAV prior to 0.99.2 have a denial of service vulnerability that can be exploited by an attacker to...

EMC ViPR SRM Cross-Site Request Forgery Vulnerability (CNVD-2016-07741)

EMC ViPR SRM is a suite of storage resource management software from EMC Corporation. The software enables intuitive understanding of storage relationships, analyzes configuration and capacity growth and optimizes resources to improve return on investment ROI in storage environments. A cross-site...

CVE-2016-4263

Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code via unspecified vectors...

Android Qualcomm DMA Component Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. An information disclosure vulnerability exists in the Qualcomm sound/soc/codecs/wcdcal-hwdep.c/wcdcalhwdepioctlshared function on Nexus 6P devices in versions of Android prior to 2016-09-05, which can be exploited by a remot...

jose-php information disclosure vulnerability (CNVD-2016-07257)

jose-php is suitable for PHP JSON object signature and encryption library . A security vulnerability exists in versions of jose-php prior to 2.2.1, due to the non-use of constant time for HMAC comparisons. Remote attackers can obtain sensitive information by timing attacks...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-07209)

Google Chrome is a web browser developed by the American company Google Google. An arbitrary code execution vulnerability exists in versions of Google Chrome prior to 53.0.2785.89. An attacker can exploit this vulnerability to execute arbitrary code in the context of the browser, bypass security...

PT-2016-3354

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.5 Description The issue is related to the kernel in Apple iOS, which lacks protection for sensitive data. This allows attackers to obtain sensitive information from memory via a crafted app. Recommendations For...

jenkins: HTTP response splitting vulnerability (SECURITY-238)

CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote attackers to affect confidentiality via vectors related to Server: Security: Encryption...