JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

Oracle MySQL Server GIS Subcomponent Denial of Service Vulnerability

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A security vulnerability exists in the GIS subcomponent of Oracle MySQL Server versions 5.5.43 and earlier and...

Oracle Java SE and Java SE Embedded Libraries Subcomponent Arbitrary Code Execution Vulnerability

Oracle Java SE and Java SE Embedded are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, as well as embedded devices and real-time environments; Java SE Embedded is a Java platform for the developmen...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2015-04587)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists in Microsoft IE versions 8 through 11. A remote attacker can exploit the vulnerability to obtain...

UBUNTU-CVE-2015-2621

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect confidentiality via vectors related to JMX...

OpenJDK: insufficient context checks during object deserialization (Libraries, 8076405)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-2590...

OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732...

Microsoft Office CVE-2015-2379 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...

Microsoft Internet Explorer CVE-2015-1733 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Linux Kernel Remote Denial of Service Vulnerability (CNVD-2015-04577)

Linux kernel is an open source operating system. A remote denial of service vulnerability exists in Linux Kernel. A remote attacker can exploit the vulnerability to cause the kernel to enter an infinite loop, potentially leading to a denial of service...

KMPlayer Stack Buffer Overflow Vulnerability

KMPlayer is a video player based on Linux, UNIX operating system. KMPlayer suffers from a remote stack buffer overflow vulnerability that allows remote attackers to construct malicious files and trick users into parsing them, which could crash the application or execute arbitrary code...

Tango DropBox ActiveX Control Heap Buffer Overflow Vulnerability

Etonica Tango DropBox is a suite of free FTP applications that offer features such as uploading files and folders, intermittent transfers and browsing remote folders. A remote heap buffer overflow vulnerability exists in the Etonica Tango DropBox ActiveX control, which allows remote attackers to...

Adobe Flash Player and AIR Security Restriction Bypass Vulnerability

Adobe Flash Player is a player that parses SWF content. Adobe AIR is a technology developed for the integration of web and desktop applications, which allows you to control cloud-based programs on the web without having to go through a browser. The implementation of Adobe Flash Player and AIR...

UBUNTU-CVE-2015-2967

Cross-site scripting XSS vulnerability in settings.php in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Xpert.Line Authentication Bypass Vulnerability

Line is a suite of intelligent Enterprise Resource Planning ERP solutions from Swiss company Xpert. An authentication bypass vulnerability exists in the Xpert.Line remote. An attacker could use this vulnerability to bypass the authentication mechanism and perform unauthorized operations...

cups-filters 'texttopdf' heap buffer overflow vulnerability

Apple CUPS Common Unix Printing System is an open source printing system for OS X and Unix-like systems from Apple. cups-filters is a package that provides CUPS filters. A remote heap buffer overflow vulnerability exists in cups-filters. Allowing an attacker to execute arbitrary code with the...

The vulnerability of the Tivoli Storage Manager FastBack data management program allows a hacker to read and execute arbitrary files.

The vulnerability of the Tivoli Storage Manager FastBack data management program exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to read and execute arbitrary files by sending specially crafted TCP packets...

UBUNTU-CVE-2015-2735

nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive...

Viber for Android Remote Arbitrary Code Execution Vulnerability

Viber Media Viber for Android is a suite of VoIP and instant messaging software for the Android platform. A remote security vulnerability exists in Viber Media Viber for Android, which can be exploited by remote attackers to submit a special request to execute arbitrary code and take control of t...

IBM Tivoli Storage Manager FastBack Arbitrary Command Execution Vulnerability (CNVD-2015-04165)

IBM Tivoli Storage Manager FastBack is a suite of software that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. An arbitrary command execution vulnerability in IBM Tivoli Storage Manager FastBack version 6.1 prior to 6.1.12 allows...