Wireshark DIAMETER parser denial of service vulnerability

Wireshark is the most popular network protocol parser. In Wireshark versions 2.0.x before 2.0.1 and 1.12.x before 1.12.9, the function dissectdiameterbaseframedipv6prefix in epan/dissectors/packet-diameter.c in the DIAMETER parser does not properly validate the IPv6 prefix length. prefix does not...

IBM MQ Light Denial of Service Vulnerability (CNVD-2016-00011)

IBM MQ Light is a messaging service based on IBM Bluemix. A remote security vulnerability exists in IBM MQ Light, which allows remote attackers to conduct denial-of-service attacks by exploiting the vulnerability to crash applications...

ASUS Japan WL-330NUL Device Cross-Site Scripting Vulnerability

The ASUS Japan WL-330NUL is a portable wireless LAN router from ASUS. The ASUS Japan WL-330NUL suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...

IBM Tivoli Storage Manager for Virtual Environments Command Execution Vulnerability

IBM Tivoli Storage Manager for Virtual Environments is a VM backup and recovery solution from IBM USA. A remote elevation vulnerability exists in IBM Tivoli Storage Manager for Virtual Environments, which allows an attacker to submit a special request to execute operating system commands with roo...

Microsoft Edge CVE-2015-6168 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed...

OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883...

OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881...

OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries...

ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

TECO SG2 LAD Client 3.51 SEH Overwrite Buffer Overflow Exploit

Summary SG2 Client is a program that enables to create and edit applications. The program is providing two edit modes, LADDER and FBD to rapidly and directly input the required app. The Simulation Mode allows users to virtually run and test the program before it is loaded to the controller...

Symantec Endpoint Protection Manager-RU6-MP3 Arbitrary OS Command Execution Vulnerability

Symantec Endpoint Protection Manager is a centralized manager for Symantec's enterprise-class antivirus software. An arbitrary operating system command execution vulnerability exists in version 12.1 of Symantec Endpoint Protection Manager prior to 12.1-RU6-MP3. This allows remote attackers to...

SAP HANA DB Remote Trace Disclosure Vulnerability

SAP HANA DB is an in-memory, row- and column-based database from SAP. The database provides fast queries against multidimensional data, filtering out cluttered and useless data, and synchronizing the execution of multiple queries. A security vulnerability exists in the Web Dispatcher service in S...

Microsoft Office CVE-2015-6093 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...

Mozilla Firefox Browser Engine Buffer Overflow Vulnerability

Mozilla Firefox is an open source web browser. A buffer overflow vulnerability exists in the Mozilla Firefox browser engine, which allows remote attackers to construct malicious web pages that could be tricked into being parsed by the user, crashing the application or executing arbitrary code...

ALPINE-CVE-2015-7697

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...

Vulnerability of Jrockit and Java Platform software platforms, which allow attackers to trigger service failures

The vulnerability of the JAXP sub-component in Jrockit and Java Platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by using specially crafted data for the API function...

Samsung SmartViewer Arbitrary Code Execution Vulnerability (CNVD-2015-07353)

Samsung SmartViewer is a hard disk recorder DVR monitoring software from Samsung. An arbitrary code execution vulnerability exists in Samsung SmartViewer. It allows remote attackers to execute arbitrary code via indexed values...

Wireshark '/wiretap/pcapng.c' Remote Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A remote denial of service vulnerability exists in Wireshark versions 1.12.0 through 1.12.7, which can be exploited by an attacker to cause the application to crash and deny servic...

USN-2791-1 nss vulnerabilities

Tyson Smith and David Keeler discovered that NSS incorrectly handled decoding certain ASN.1 data. An remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code...

Multiple Cross-Site Scripting Vulnerabilities in Fortinet FortiManager

Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices and the ability to group devices into different management domains ADOM to further simplify multi-device security deployment and management...