Panasonic FPWIN Pro Buffer Overflow Vulnerability (CNVD-2016-03208)

Panasonic FPWIN Pro is a set of programming software for all FP series PLCs Programmable Logic Controllers from Panasonic. A buffer overflow vulnerability exists in Panasonic FPWIN Pro, which can be exploited by a remote attacker to write data outside of array boundaries with the help of index...

PT-2016-1974 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 21.0.0.213 and earlier Description: The issue is related to errors in the code of the Flash Player platform, which can be exploited by a remote attacker to impact the integrity, availability, and confidentiality of...

PT-2016-1976 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 21.0.0.213 and earlier Description: The issue is related to errors in the code of the Flash Player platform, which can be exploited by a remote attacker to impact the integrity, availability, and confidentiality of...

New Era Company CMS SQL Injection Vulnerability

A remote sql injection vulnerability exists in the New Era Company content management system. A remote attacker is able to execute sql commands in the application and connect to dbms...

JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue...

JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment...

Oracle MySQL Server: Unspecified Vulnerability in DML Subcomponent

Oracle MySQL is an open source relational database management system. A security vulnerability exists in the Server:DML subcomponent of Oracle MySQL that could be exploited by remote attackers to compromise the integrity and availability of the system...

NetBSD bozohttpd CGI Processor Arbitrary Code Execution Vulnerability

NetBSD is a free and open source Unix-like operating system. A security vulnerability in NetBSD's bozohttpd CGI processor allows remote attackers to submit special requests to execute arbitrary code...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2016-02559)

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle.PeopleSoft Enterprise HCM Candidate Gateway is a self-service front-end to the Oracle PeopleSoft Enterprise Recruiting solution component. An unspecified vulnerability in the Activity Guide subcomponent of t...

CVE-2016-3416

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality and integrity via vectors related to Console...

CVE-2016-0686

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization...

SAP Manufacturing Integration Intelligence Cross-Site Scripting Vulnerability

SAP Manufacturing Integration Intelligence also known as MII, formerly known as xMII is a set of Germany's SAP SAP will be the core of the manufacturing system and enterprise process integration platform. A cross-site scripting vulnerability in SAP Manufacturing Integration Intelligence allows...

PT-2016-1803

Name of the Vulnerable Software and Affected Versions: Oracle Java SE versions 6u113, 7u99, and 8u77 Java SE Embedded version 8u77 JRockit version R28.3.9 Description: The issue is related to errors in the code of Jrockit and Java Platform, allowing remote attackers to affect confidentiality,...

Cacti SQL Injection Vulnerability (CNVD-2016-02215)

Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti Group. A SQL injection vulnerability exists in the tree.php file in Cacti 0.8.8g and earlier versions, which can be exploited by remote attackers to execute arbitrary SQL commands with the help of the...

CVE-2016-0733

The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid username...

Microsoft Office CVE-2016-0139 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

Foreman Unauthorized Operation Vulnerability

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A security vulnerability exists in Foreman versions prior to 1.8.4 and 1.9.x prior to 1.9.1, which stems...

IBM DB2 LUW Denial of Service Vulnerability

IBM DB2 LUW is a set of U.S. IBM's relational database management system running in the LUW Linux, UNIX and Windows platform. A security vulnerability exists in IBM DB2 LUW. A remote attacker can exploit this vulnerability to cause a denial of service abnormal termination with the help of a...

Webline CMS (2016Q2) - SQL Injection Vulnerability

Document Title: =============== Webline CMS 2016Q2 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1823 Release Date: ============= 2016-04-12 Vulnerability Laboratory ID VL-ID: ==================================== 1823 Comm...

UBUNTU-CVE-2015-8708

Stack-based buffer overflow in the conveuctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614...