Apache Wicket Denial of Service Vulnerability

Apache Wicket is the United States Apache Apache Software Foundation , a set of open source , lightweight , component-based framework , which provides an object-oriented way to develop Web-based dynamic UI applications . A remote denial of service vulnerability exists in Apache Wicket versions 6....

Shutter Arbitrary Command Execution Vulnerability

Shutter is a free and open source screenshot application for Linux based systems developed by German software developer MarioKemper. The program supports screenshots of the entire screen, specific area screenshots and so on. A security vulnerability exists in /usr/bin/shutter in Shutter 0.93.1 an...

UBUNTU-CVE-2016-10195

The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the labellen variable, which triggers an out-of-bounds stack read...

Multiple Samsung devices 'OTP' service remote heap buffer overflow vulnerability

Samsung Galaxy S6 is a mobile smart Android phone from Samsung Electronics. A remote heap buffer overflow vulnerability exists in multiple Samsung devices. An attacker could exploit this vulnerability to cause a denial of service...

SAP Netweaver ABAP EA-DFPS Remote Authorization Bypass Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A remote authorization bypass vulnerability exists in SAP NetWeaver, which can be exploited by attackers to gain...

RedHat Ceph Remote Denial of Service Vulnerability

Ceph is open source software that provides highly scalable object, block and file storage under a unified system. A remote denial of service vulnerability exists in RedHat Ceph. An attacker could exploit the vulnerability to cause a denial of service condition...

CVE-2016-5842

MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an out-of-bounds read...

Microsoft Office CVE-2016-7298 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

Microsoft Office CVE-2016-7289 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

Microsoft Office CVE-2016-7263 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

Tesla Motors Gateway ECU Command Injection Vulnerability

The Tesla Motors Gateway ECU is a set of firmware used to manage the car and provide driving functions. A security vulnerability in the Tesla Motors Gateway ECU firmware handling updates allows remote attackers to exploit the vulnerability to submit malicious updates that inject arbitrary command...

mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated...

Unspecified Vulnerability in IBM IMS Enterprise Suite Data Provider for Microsoft .NET

IBM IMS Enterprise Suite Data Provider for Microsoft .NET is a solution from IBM USA that provides Microsoft .NET based applications to access and manipulate IMS data. The solution supports access to IMS data from .NET applications using standard SQL queries and handling of IMS connected links an...

SPIP cross-site scripting vulnerability (CNVD-2016-11960)

SPIP is a free Web-based content publishing system. The system is primarily used for online collaboration. A cross-site scripting vulnerability exists in the ecrire/exec/plonger.php file in SPIP version 3.1.3. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...

IBM BigFix Remote Control XML Injection Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. A remote attacker can exploit this vulnerability to conduct XML injection attacks...

Red Hat Ceph Remote Denial of Service Vulnerability

Red Hat Ceph is a Linux petabyte-level distributed file system from Red Hat. The main goal of the system is to be designed as a distributed file system based on POSIX Portable Operating System Interface without a single point of failure, so that data can be fault-tolerant and seamless replication...

IBM iNotes Cross-Site Scripting Vulnerability

IBM iNotes also known as IBM Lotus iNotes is a set of Web-based e-mail software from IBM in the United States. The software helps different types of users online and offline users to effectively manage business-critical information and collaboration. A cross-site scripting vulnerability exists in...

GStreamer Bad Plug-ins Information Disclosure Vulnerability

GStreamer is a set of frameworks for handling streaming media.Bad Plug-ins is a decoding component. A remote information disclosure vulnerability exists in GStreamer Bad Plug-ins. An attacker can exploit this vulnerability to obtain sensitive information...

Telpho10 Credentials Disclosure Vulnerability

It is possible to create and read a configuration backup of Telpho10. This backup contains the credentials for admin login. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Veritas NetBackup Appliance Arbitrary Command Execution Vulnerability

Veritas NetBackup simplifies both the deployment and maintenance of data protection environments with a turnkey solution that is ideal for data centers, remote offices and virtual environments. A remote arbitrary command execution vulnerability exists in the Veritas NetBackup Appliance. An attack...