Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the samba-common-3.0.33 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

ICU: missing boundary checks in layout engine (OpenJDK 2D, 8071715)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

Unspecified Vulnerability in Oracle Fusion Oracle Endeca Information Discovery Studio Component (CNVD-2015-04743)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Oracle Fusion Middleware Oracle Endeca Information Discovery Studio component that can be exploited by remote attackers to compromise system integrity,...

OpenJDK: GCM cipher issue causing JVM crash (Security, 8067648)

Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allows remote attackers to affect availability via unknown vectors related to Security...

JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

Oracle Java SE and Java SE Embedded Libraries Subcomponent Arbitrary Code Execution Vulnerability

Oracle Java SE and Java SE Embedded are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, as well as embedded devices and real-time environments; Java SE Embedded is a Java platform for the developmen...

Oracle MySQL Server GIS Subcomponent Denial of Service Vulnerability

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A security vulnerability exists in the GIS subcomponent of Oracle MySQL Server versions 5.5.43 and earlier and...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2015-04587)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists in Microsoft IE versions 8 through 11. A remote attacker can exploit the vulnerability to obtain...

UBUNTU-CVE-2015-2621

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect confidentiality via vectors related to JMX...

OpenJDK: insufficient context checks during object deserialization (Libraries, 8076405)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-2590...

OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732...

Microsoft Internet Explorer CVE-2015-1733 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Office CVE-2015-2379 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...

Linux Kernel Remote Denial of Service Vulnerability (CNVD-2015-04577)

Linux kernel is an open source operating system. A remote denial of service vulnerability exists in Linux Kernel. A remote attacker can exploit the vulnerability to cause the kernel to enter an infinite loop, potentially leading to a denial of service...

KMPlayer Stack Buffer Overflow Vulnerability

KMPlayer is a video player based on Linux, UNIX operating system. KMPlayer suffers from a remote stack buffer overflow vulnerability that allows remote attackers to construct malicious files and trick users into parsing them, which could crash the application or execute arbitrary code...

Adobe Flash Player and AIR Security Restriction Bypass Vulnerability

Adobe Flash Player is a player that parses SWF content. Adobe AIR is a technology developed for the integration of web and desktop applications, which allows you to control cloud-based programs on the web without having to go through a browser. The implementation of Adobe Flash Player and AIR...

Tango DropBox ActiveX Control Heap Buffer Overflow Vulnerability

Etonica Tango DropBox is a suite of free FTP applications that offer features such as uploading files and folders, intermittent transfers and browsing remote folders. A remote heap buffer overflow vulnerability exists in the Etonica Tango DropBox ActiveX control, which allows remote attackers to...

UBUNTU-CVE-2015-2967

Cross-site scripting XSS vulnerability in settings.php in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Xpert.Line Authentication Bypass Vulnerability

Line is a suite of intelligent Enterprise Resource Planning ERP solutions from Swiss company Xpert. An authentication bypass vulnerability exists in the Xpert.Line remote. An attacker could use this vulnerability to bypass the authentication mechanism and perform unauthorized operations...

cups-filters 'texttopdf' heap buffer overflow vulnerability

Apple CUPS Common Unix Printing System is an open source printing system for OS X and Unix-like systems from Apple. cups-filters is a package that provides CUPS filters. A remote heap buffer overflow vulnerability exists in cups-filters. Allowing an attacker to execute arbitrary code with the...