6625 matches found
CVE-2016-0595
CVE-2016-0595 affects Oracle MySQL Server 5.6.27 and earlier, allowing remote authenticated users to affect availability via DML vectors. Connected advisories specify remediation by upgrading to a newer upstream version (e.g., MySQL 5.6.30 or later). The MiracleLinux and Red Hat advisories list 5...
FFmpeg and Libav Information Disclosure Vulnerability
FFmpeg is a complete solution for recording, converting and streaming audio and video.Libav is a cross-platform solution for recording and converting audio and video from the Libav team that includes a libavcodec encoder. A security vulnerability exists in FFmpeg and Libav that can be exploited b...
Pygments Arbitrary Command Execution Vulnerability
Pygments is a set of syntax highlighting tools that can be used in forums, wikis and other web applications with command line tools and development packages. A security vulnerability in the 'FontManager.getnixfontpath' function in Pygments' formatters/img.py file allows remote attackers to execut...
MediaWiki Remote Vulnerability
MediaWiki is a free and free web-based Wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers, which can be used to deploy in-house knowledge management and content management systems. A remote security vulnerability exists in MediaWiki. An attacker could exploi...
USN-2856-1 ldb vulnerabilities
Thilo Uttendorfer discovered that the ldb incorrectly handled certain zero values. A remote attacker could use this issue to cause applications using ldb, such as Samba, to stop responding, resulting in a denial of service. CVE-2015-3223 Douglas Bagnall discovered that ldb incorrectly handled...
Wireshark DIAMETER parser denial of service vulnerability
Wireshark is the most popular network protocol parser. In Wireshark versions 2.0.x before 2.0.1 and 1.12.x before 1.12.9, the function dissectdiameterbaseframedipv6prefix in epan/dissectors/packet-diameter.c in the DIAMETER parser does not properly validate the IPv6 prefix length. prefix does not...
ASUS Japan WL-330NUL Device Cross-Site Scripting Vulnerability
The ASUS Japan WL-330NUL is a portable wireless LAN router from ASUS. The ASUS Japan WL-330NUL suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...
IBM MQ Light Denial of Service Vulnerability (CNVD-2016-00011)
IBM MQ Light is a messaging service based on IBM Bluemix. A remote security vulnerability exists in IBM MQ Light, which allows remote attackers to conduct denial-of-service attacks by exploiting the vulnerability to crash applications...
IBM Tivoli Storage Manager for Virtual Environments Command Execution Vulnerability
IBM Tivoli Storage Manager for Virtual Environments is a VM backup and recovery solution from IBM USA. A remote elevation vulnerability exists in IBM Tivoli Storage Manager for Virtual Environments, which allows an attacker to submit a special request to execute operating system commands with roo...
Microsoft Edge CVE-2015-6168 Remote Memory Corruption Vulnerability
Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed...
OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883...
OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383)
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881...
OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193)
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries...
ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...
TECO SG2 LAD Client 3.51 SEH Overwrite Buffer Overflow Exploit
Summary SG2 Client is a program that enables to create and edit applications. The program is providing two edit modes, LADDER and FBD to rapidly and directly input the required app. The Simulation Mode allows users to virtually run and test the program before it is loaded to the controller...
Symantec Endpoint Protection Manager-RU6-MP3 Arbitrary OS Command Execution Vulnerability
Symantec Endpoint Protection Manager is a centralized manager for Symantec's enterprise-class antivirus software. An arbitrary operating system command execution vulnerability exists in version 12.1 of Symantec Endpoint Protection Manager prior to 12.1-RU6-MP3. This allows remote attackers to...
SAP HANA DB Remote Trace Disclosure Vulnerability
SAP HANA DB is an in-memory, row- and column-based database from SAP. The database provides fast queries against multidimensional data, filtering out cluttered and useless data, and synchronizing the execution of multiple queries. A security vulnerability exists in the Web Dispatcher service in S...
Microsoft Office CVE-2015-6093 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...
Mozilla Firefox Browser Engine Buffer Overflow Vulnerability
Mozilla Firefox is an open source web browser. A buffer overflow vulnerability exists in the Mozilla Firefox browser engine, which allows remote attackers to construct malicious web pages that could be tricked into being parsed by the user, crashing the application or executing arbitrary code...