Microsoft Edge CVE-2015-6168 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed...

OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883...

OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881...

OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries...

ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

TECO SG2 LAD Client 3.51 SEH Overwrite Buffer Overflow Exploit

Summary SG2 Client is a program that enables to create and edit applications. The program is providing two edit modes, LADDER and FBD to rapidly and directly input the required app. The Simulation Mode allows users to virtually run and test the program before it is loaded to the controller...

Symantec Endpoint Protection Manager-RU6-MP3 Arbitrary OS Command Execution Vulnerability

Symantec Endpoint Protection Manager is a centralized manager for Symantec's enterprise-class antivirus software. An arbitrary operating system command execution vulnerability exists in version 12.1 of Symantec Endpoint Protection Manager prior to 12.1-RU6-MP3. This allows remote attackers to...

SAP HANA DB Remote Trace Disclosure Vulnerability

SAP HANA DB is an in-memory, row- and column-based database from SAP. The database provides fast queries against multidimensional data, filtering out cluttered and useless data, and synchronizing the execution of multiple queries. A security vulnerability exists in the Web Dispatcher service in S...

Microsoft Office CVE-2015-6093 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...

Mozilla Firefox Browser Engine Buffer Overflow Vulnerability

Mozilla Firefox is an open source web browser. A buffer overflow vulnerability exists in the Mozilla Firefox browser engine, which allows remote attackers to construct malicious web pages that could be tricked into being parsed by the user, crashing the application or executing arbitrary code...

ALPINE-CVE-2015-7697

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...

Wireshark '/wiretap/pcapng.c' Remote Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A remote denial of service vulnerability exists in Wireshark versions 1.12.0 through 1.12.7, which can be exploited by an attacker to cause the application to crash and deny servic...

Samsung SmartViewer Arbitrary Code Execution Vulnerability (CNVD-2015-07353)

Samsung SmartViewer is a hard disk recorder DVR monitoring software from Samsung. An arbitrary code execution vulnerability exists in Samsung SmartViewer. It allows remote attackers to execute arbitrary code via indexed values...

Vulnerability of Jrockit and Java Platform software platforms, which allow attackers to trigger service failures

The vulnerability of the JAXP sub-component in Jrockit and Java Platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by using specially crafted data for the API function...

USN-2791-1 nss vulnerabilities

Tyson Smith and David Keeler discovered that NSS incorrectly handled decoding certain ASN.1 data. An remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code...

Multiple Cross-Site Scripting Vulnerabilities in Fortinet FortiManager

Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices and the ability to group devices into different management domains ADOM to further simplify multi-device security deployment and management...

Samsung SmartViewer 'DVRSetupSave' Method Remote Code Execution Vulnerability

Samsung SmartViewer is a suite of video viewing software designed for video surveillance systems. An unspecified security vulnerability exists in Samsung SmartViewer that could be exploited by remote attackers to conduct a denial-of-service attack and crash the application...

Techno Project Japan Enisys Gw Security Bypass Vulnerability

Techno Project Japan Enisys Gw is an open source groupware software from Techno Project Japan. A security vulnerability exists in Techno Project Japan Enisys Gw that can be exploited by remote attackers to bypass security restrictions and read arbitrary web ROOT files...

Huawei FusionServer Product Information Change Vulnerability

Huawei FusionServer RH2288 V3 is a server product from Huawei, China. A security vulnerability exists in the Huawei FusionServer product that allows a remote attacker to submit a special request to change server information...

Infinite Automation Mango Automation Information Disclosure Vulnerability (CNVD-2015-07171)

Infinite Automation Mango Automation is the United States Infinite Automation Systems, Inc. of a set of open source Web-based SCADA data acquisition and supervisory control, HMI and automation software. An information disclosure vulnerability exists in Infinite Automation Mango Automation 2.5.x...