The vulnerability of the Tivoli Storage Manager FastBack data management program allows a hacker to read and execute arbitrary files.

The vulnerability of the Tivoli Storage Manager FastBack data management program exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to read and execute arbitrary files by sending specially crafted TCP packets...

UBUNTU-CVE-2015-2735

nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive...

Viber for Android Remote Arbitrary Code Execution Vulnerability

Viber Media Viber for Android is a suite of VoIP and instant messaging software for the Android platform. A remote security vulnerability exists in Viber Media Viber for Android, which can be exploited by remote attackers to submit a special request to execute arbitrary code and take control of t...

IBM Tivoli Storage Manager FastBack Arbitrary Command Execution Vulnerability (CNVD-2015-04165)

IBM Tivoli Storage Manager FastBack is a suite of software that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. An arbitrary command execution vulnerability in IBM Tivoli Storage Manager FastBack version 6.1 prior to 6.1.12 allows...

IBM Tivoli Storage Manager FastBack Arbitrary File Read Vulnerability (CNVD-2015-04163)

IBM Tivoli Storage Manager FastBack is a suite of software that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. An arbitrary file read vulnerability in IBM Tivoli Storage Manager FastBack version 6.1 prior to 6.1.12 allows remote...

GarrettCom Magnum 6K and 10K Switches Remote Denial of Service Vulnerability

GarrettCom Magnum 6K and 10K Switches are managed switches from GarrettCom USA. A security vulnerability exists in the GarrettCom Magnum 6K and 10K Switches that allows remote attackers to exploit the vulnerability by submitting a special request to reload the device, resulting in a denial of...

BlackCat CMS 'logs.php' Arbitrary File Download Vulnerability

BlackCat CMS is a content management system based on PHP5 and HTML5. BlackCat CMS suffers from an input validation vulnerability that allows remote attackers to submit a special request to download arbitrary files...

PuTTY remote denial of service vulnerability

PuTTY is a free Telnet, Rlogin and SSH client software. A security vulnerability exists in PuTTY that allows an attacker to conduct denial-of-service attacks by exploiting the vulnerability to crash the application...

CHICKEN 'string-translate' program buffer overflow vulnerability

Chicken is a compiler and interpreter based on the Scheme language , it can compile Scheme code into standard C code , and supports extensions . A remote buffer overflow vulnerability exists in Chicken, which stems from the program's failure to perform proper boundary checks on user-submitted...

ABRT Remote Security Bypass Vulnerability

ABRT is a set of automated bug reporting tools. ABRT suffers from a remote security bypass vulnerability. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Actian Matrix Access Restriction Bypass Vulnerability

Actian Matrix is a set of tools for analyzing and processing big data in the MPP database. A security vulnerability exists in Actian Matrix. A remote attacker can exploit the vulnerability to bypass write access restrictions and execute UPDATE statements...

Cisco Email Security Appliance Anti-Spam Scanner Remote Security Bypass Vulnerability

Cisco Email Security Appliance ESA is a set of e-mail security appliances from the American company Cisco Cisco. The appliance provides spam protection, email encryption, data loss prevention and other features. A security vulnerability exists in the anti-spam scanner of the Cisco ESA appliance...

rubygem-sprockets: arbitrary file existence disclosure

Multiple directory traversal vulnerabilities in server.rb in Sprockets before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before 2.3.3, 2.4.x before 2.4.6, 2.5.x before 2.5.1, 2.6.x and 2.7.x before 2.7.1, 2.8.x before 2.8.3, 2.9.x before 2.9.4, 2.10.x before 2.10.2, 2.11.x before 2.11.3...

Igreks MilkyStep Light and Professional Access Restriction Bypass Vulnerability

Igreks MilkyStep is a magazine push CGI via email system from Igreks Japan.MilkyStep Light and MilkyStep Professional are the lightweight and professional versions respectively. A security vulnerability exists in Igreks MilkyStep Light and Professional. A remote attacker could exploit the...

ZTE ZXV10 W300 v3.1.0c_DR0 - UI Session Vulnerability

Document Title: =============== ZTE ZXV10 W300 v3.1.0cDR0 - UI Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1522 Release Date: ============= 2015-06-16 Vulnerability Laboratory ID VL-ID: ==================================== 1522...

WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload

Title: Remote file upload vulnerability in aviary-image-editor-add-on-for-gravity-forms v3.0beta Wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-06-07 Download Site: https://wordpress.org/plugins/aviary-image-editor-add-on-for-gravity-forms Vendor: Waters Edge Web Design and...

JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D)

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0491...

Multiple Igreks MilkyStep Product Security Bypass Vulnerabilities

Igreks MilkyStep is a CGI for pushing magazines through the email system. A security bypass vulnerability exists in multiple Igreks MilkyStep products, which allows remote attackers to bypass security restrictions and perform unauthorized operations...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2015-03706)

Microsoft Internet Explorer is a popular WEB browser. An unspecified memory corruption vulnerability exists in Microsoft Internet Explorer that could allow a remote attacker to construct a malicious web page and trick the user into parsing it, which could crash the application or execute arbitrar...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2015-03698)

Microsoft Internet Explorer is a popular WEB browser. An unspecified memory corruption vulnerability exists in Microsoft Internet Explorer that could allow a remote attacker to construct a malicious web page and trick the user into parsing it, which could crash the application or execute arbitrar...