CVE-2016-7815

CVE-2016-7815 affects Cybozu Remote Service Manager (RSM) versions 3.0.0 through 3.1.4. The root cause is failure to verify client certificates, potentially allowing remote attackers to access internal systems on the network. Impact is access to internal web systems that should be inaccessible fr...

CVE-2016-7815

Remote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote attackers to gain access to systems on the network...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to trigger service interruptions.

The vulnerability of the JPEG 2000 stream processing service for programs used to view and edit PDF files, such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud, is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to trigger service interruptions.

The vulnerability of the JPEG 2000 stream processing service software for viewing and editing PDF files in Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to trigger service interruptions.

The vulnerability of JPEG 2000 stream parser programs for viewing and editing PDF files from Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause service interruptions...

CVE-2017-5162

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives access to application set up and configuration...

CVE-2017-5162

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives access to application set up and configuration...

The vulnerability of the Android operating system, which allows a perpetrator to cause the device to freeze or restart.

The vulnerability of the Qualcomm FUSE file system in the Android operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to use a specially crafted file to cause the device to freeze or restart. This issue is considered “high” due to the...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the privateClass extension in Google Chrome’s browser API is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to remotely cause service failures or otherwise affect the system through a specially created HTML page...

DEBIAN-CVE-2016-6911

The dynamicGetbuf function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF image...

Red Hat JBoss Enterprise Application Platform Remote Denial of Service Vulnerability (CNVD-2017-01088)

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. A remote denial of service vulnerability exists in Red Hat JBo...

Cybozu Remote Service Manager fails to verify client certificates

Overview Remote Service Manager provided by Cybozu, Inc. is a software to access internal systems such as Cybozu products via "Cybozu Remote Service". Remote Service Manager fails to verify client certificates. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution...

JVN#19241292: Cybozu Remote Service Manager fails to verify client certificates

Remote Service Manager provided by Cybozu, Inc. is a software to access internal systems such as Cybozu products via "Cybozu Remote Service". Remote Service Manager fails to verify client certificates. Impact A user may access internal web systems that do not allow access from external network. A...

OpenSSL 1.0.2i < 1.0.2j Vulnerability

The version of OpenSSL installed on the remote host is prior to 1.0.2j. It is, therefore, affected by a vulnerability as referenced in the 1.0.2j advisory. - crypto/x509/x509vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service NULL pointer dereference and application crash...

The vulnerability of the WebSphere MQ message processing service allows a perpetrator to trigger a service failure.

The vulnerability of the WebSphere MQ message queue manager agent is related to a memory leak. Exploiting this vulnerability allows an attacker, operating remotely, to cause service failures e.g., excessive memory consumption by triggering multiple errors...

The vulnerability of the libxml2 library, which allows a hacker to trigger a service failure

The vulnerability of the xmlDictComputeFastQKey function in the dict.c file of the libxml2 library is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

The vulnerability of the application interface of the IBM WebSphere Portal server allows a hacker to trigger a service failure.

The vulnerability of the IBM WebSphere Portal application server’s user interface is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Cisco Wireless LAN Controller 2000 software allows a malicious individual to cause service failure.

Vulnerability exists in Cisco Wireless LAN Controller WLC devices due to improper memory release. This allows malicious actors operating remotely to trigger a service failure by sending frequent WebAuth authorization requests...

The vulnerability of the Cisco Wireless LAN Controller 5500 software allows a malicious individual to cause service failure.

The vulnerability in the implementation of IGMP for Cisco Wireless LAN Controllers WLCs, when the IGMPv3 Snooping feature is enabled, allows malicious actors operating remotely to trigger service interruptions such as reading beyond the boundaries and rebooting the device by using a specially...

Vulnerabilities of the enterprise automation system 1C:Enterprise, allowing a malicious individual to trigger service failures or gain access to encrypted data without knowing the encryption key

Multiple vulnerabilities in the OpenSSL cryptographic package of the 1C: enterprise automation system allow a malicious actor to remotely cause service failures or gain access to encrypted data without knowing the encryption key...