CVE-2016-2428

libAACdec/src/aacdecdrc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly limit the number of threads, which allows remote attackers to execute arbitrary code or cause a denial of service stack memory corruption via...

CVE-2016-2439

Buffer overflow in btif/src/btifdm.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows remote attackers to execute arbitrary code via a long PIN value, aka internal bug 27411268...

CVE-2016-2439: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in btif/src/btifdm.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows remote attackers to execute arbitrary code via a long PIN value, aka internal bug 27411268...

PT-2016-1873

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Android 5.0.x versions prior to 5.0.2 Android 5.1.x versions prior to 5.1.1 Android 6.x versions prior to 2016-05-01 Description The issue is caused by a buffer overflow in the btif/src/btif dm.c component of th...

CVE-2016-2428: Improper Restriction of Operations within the Bounds of a Memory Buffer

libAACdec/src/aacdecdrc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly limit the number of threads, which allows remote attackers to execute arbitrary code or cause a denial of service stack memory corruption via...

PT-2016-5206

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.5.x through 4.5.5.0 Description A cross-site scripting XSS issue exists in the SQL parser of phpMyAdmin, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted query. This is due to a...

Claws-Mail 'src/codeconv.c' Stack Buffer Overflow Vulnerability

Claws-Mail is a mail client product based on GTK+ development. Claws-Mail suffers from a stack buffer overflow vulnerability that could be exploited by remote attackers to submit a special request to crash the application or execute arbitrary code...

pdfium IsFlagSet (v8 memory management) - SIGSEGV Exploit

Exploit for hardware platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=622 The following crash was encountered in pdfium the Chrome PDF renderer during PDF fuzzing: --- cut --- ==31710==ERROR: AddressSanitizer: SEGV on unknown address...

NodeBB v0.8.2 - Client Side Cross Site Web Vulnerability

Document Title: =============== NodeBB v0.8.2 - Client Side Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1600 Release Date: ============= 2015-09-24 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2015-6756

Removed by vendor...

PT-2015-7546

Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.4.23 FreeSWITCH versions 1.6.x prior to 1.6.2 Description The issue is related to a heap-based buffer overflow in the parse string function, located in libs/esl/src/esl json.c. This allows remote attackers to...

PT-2015-2164

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 Description The issue is related to the mishandling of certain receiver arguments in the js/src/proxy/Proxy.cpp component, which can be exploited by remote attackers to bypass intended window access...

src.ac.uk XSS vulnerability

Vulnerable URL: http://www.src.ac.uk/student-life/136-courses/part-time-courses/esol/2294-city-guilds-entry-level-certificate-in-esol-international-entry-level-1-a1? Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:42 GMT Vulnerability type:|...

Updated remind package fixes security vulnerability

Buffer overflow in remind before 3.1.15 in the DumpSysVar function in src/var.c...

ds36.ru XSS vulnerability

Vulnerable URL: http://www.ds36.ru/firms/?text=%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1783484 Google Pagerank| 1 VIP...

WS-2015-0065

In php-src, php-5.3.0RC1 to php-5.6.11RC1, there is “use-after-free” vulnerability related to the PHP methods “lasterrorcode” and “lasterrormessage”. Using an invalid SQL query, an attacker may leverage the vulnerability in order to crash the program, and potentially allow a RCE...

Ubuntu: Security Advisory (USN-2626-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerabilities of the Debian GNU/Linux operating system, which allow a remote attacker to compromise the integrity and accessibility of protected information

The multiple vulnerabilities in the selinux-policy-refpolicy-src package of the Debian GNU/Linux operating system may lead to a violation of the integrity and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libgcj-src-4.1.2 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Important: php54

Issue Overview: A use-after-free flaw was found in the way PHP's unserialize function processed data. If a remote attacker was able to pass crafted input to PHP's unserialize function, they could cause the PHP interpreter to crash or, possibly, execute arbitrary code. CVE-2015-0231 An integer...