DEBIAN-CVE-2016-0741

slapd/connection.c in 389 Directory Server formerly Fedora Directory Server 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service infinite loop and connection blocking by leveraging an abnormally closed connection...

UBUNTU-CVE-2016-1006

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass the ASLR protection mechanism via JIT data...

Android Mediaserver Information Disclosure Vulnerability (CNVD-2016-02053)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An information disclosure vulnerability exists in Mediaserver in Android versions prior to 6.0 and 6.0.1. The vulnerability can be...

Casebook plugin cross-site request forgery vulnerability

Casebook plugin for baserCMS is a casebook plugin for baserCMS. A cross-site request forgery vulnerability exists in Casebook plugin for baserCMS versions prior to 0.9.4, which allows remote attackers to hijack administrars authentication...

HP Operations Orchestration Arbitrary Code Execution Vulnerability

HP Operations Orchestration is an operations manual automation platform that automates client device and data center infrastructure changes and deployments. A security vulnerability exists in the ACC that handles deserialization of Java objects in versions prior to HP Operations Orchestration...

DEBIAN-CVE-2016-2795

The graphite2::FileFace::gettablefn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other...

UBUNTU-CVE-2016-2044

libraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...

Tollgrade SmartGrid LightHouse Sensor Management System Software Arbitrary Password Change Vulnerability

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software is a Web-based smart grid lighthouse sensor management system from Tollgrade, Inc. A security vulnerability exists in Tollgrade SmartGrid LightHouse SMS Software EMS versions prior to 5.1 and 4.1.0 Build 16. A remote attacker...

chromium-browser: out-of-bounds read in PDFium

The opjpiupdatedecodepoc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...

Adobe Connect Cross-Site Request Forgery Vulnerability

Adobe Connect is an enterprise-grade web-based communication solution. A cross-site request forgery vulnerability exists in versions of Adobe Connect prior to 95.2, which allows remote attackers to hijack unspecified victim authentication information via unknown vectors...

Advantech WebAccess Competitive Conditions Vulnerability

WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation devices in facility management systems, power stations and building automation systems. A competitive condition vulnerability exists in the implementation of Advantech...

Huawei Document Security Management Local Information Disclosure Vulnerability

Huawei Document Security Management DSM is a set of document rights management software from Huawei, China. The software is characterized by high stability, reliability and scalability. A security vulnerability exists in Huawei DSM using software versions prior to V100R002C05SPC661, which stems...

PT-2015-7835 · Libarchive +5 · Libarchive +5

Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.2.0 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by providing a crafted 7z file. This is related to the 7z folder struct in the archive read support format...

Adobe Flash Playe Memory Misreference Vulnerability (CNVD-2016-000167)

FlashPlayer is a multimedia program player. Adobe AIR is a technology developed for the integration of web and desktop applications, allowing control of cloud-based programs on the web without having to go through a browser. On Windows and OS X platforms, Adobe Flash Player versions prior to...

EMC RSA SecurID Web Agent Local Authentication Bypass Vulnerability

EMC RSA SecurID Web Agent is a cross-platform, Web-based solution from EMC that intercepts remote user access or user group local requests and directs them to the RSA Authentication Management Server for authentication. A local authentication bypass vulnerability exists in EMC RSA SecurID Web Age...

Android libstagefright information disclosure vulnerability (CNVD-2015-08054)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of libstagefright in Android versions prior to 5.1.1 LMY48Z and 6.0 2015-12-01, which can be exploited by remote attackers to obtain sensitive information and bypass...

chromium-browser: Integer overflow in Sfntly

Integer overflow in the FontData::Bound function in data/fontdata.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT...

PCRE Denial of Service Vulnerability (CNVD-2015-07876)

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A security vulnerability exists in PCRE versions prior to 8.38, which stems from the program's failure to properly handle '/?J??' d'?'...

Mozilla: CORS preflight is bypassed when non-standard Content-Type headers are received (MFSA 2015-127)

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm for the POST method in situations involving an unspecified Content-Type header manipulation, which allows remote attackers to bypass the Same Origin Policy by leveraging the lack...

Android Information Disclosure Vulnerability (CNVD-2015-07351)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. An information disclosure vulnerability exists in Android versions prior to 5.1.1 LMY48X and 6.0 prior to 2015. Allows remote attackers to obtain sensitive information vi...