w3m arbitrary code execution vulnerability (CNVD-2016-11683)

w3m is an open source text-based Web browser . An arbitrary code execution vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

CVE-2016-6729

An elevation of privilege vulnerability in the Qualcomm bootloader in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, whi...

UBUNTU-CVE-2016-9073

WebExtensions can bypass security checks to load privileged URLs and potentially escape the WebExtension sandbox. This vulnerability affects Firefox 50...

DEBIAN-CVE-2016-7911

Race condition in the gettaskioprio function in block/ioprio.c in the Linux kernel before 4.6.6 allows local users to gain privileges or cause a denial of service use-after-free via a crafted ioprioget system call...

gd: gdImageFillToBorder deep recursion leading to stack overflow

Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a crafted imagefilltoborder call...

PT-2017-4325 · Secret Rabbit Code +3 · Libsamplerate +3

Name of the Vulnerable Software and Affected Versions: libsamplerate versions prior to 0.1.9 Description: The issue is related to a buffer over-read in the calc output single function of the src sinc.c component in the Secret Rabbit Code library, which is used for audio sample rate conversion. Th...

DotCMS SQL Injection Vulnerability (CNVD-2016-11004)

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A SQL injection vulnerability exists in the JSONTags servlet in versions of DotCMS prior to 3.3.1. A remote...

Symantec Norton Mobile Security for Android Local Information Disclosure Vulnerability

Symantec Norton Mobile Security for Android is a set of software from Symantec Symantec that provides security for mobile devices based on the Android platform. A local information disclosure vulnerability exists in versions of Symantec Norton Mobile Security for Android prior to 3.16. A local...

CVE-2016-5605

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.1.4 in Oracle Virtualization allows remote attackers to affect confidentiality and integrity via vectors related to VRDE...

DEBIAN-CVE-2016-1000031

Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution...

PT-2016-6204

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ Artemis versions prior to 1.4.0 Description The issue allows remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget...

CVE-2016-4772

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to cause a denial of service unintended lock via unspecified vectors...

CVE-2016-5793

Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...

CVE-2016-4301

Stack-based buffer overflow in the parsedevice function in archivereadsupportformatmtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file...

Citrix Linux Virtual Delivery Agent Local Privilege Vulnerability

Citrix Linux Virtual Delivery Agent formerly known as Linux Virtual Desktop is a suite of virtual desktop software from Citrix Systems. A local elevation of privilege vulnerability exists in Citrix Linux Virtual Delivery Agent versions prior to 1.4.0. A local attacker could exploit this...

Google Chrome PDFium heap buffer overflow vulnerability (CNVD-2016-07196)

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A heap buffer overflow vulnerability exists in PDFium in versions of Google Chrome prior to 53.0.2785.89. An attacker could exploit this vulnerability to execut...

Malware Information Sharing Platform Insecure Temporary File Creation Vulnerability

The Malware Information Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and analyzing cybersecurity events and malware. A security vulnerability exists in the app/Controller/TemplatesController.php file in MISP...

Google Chrome Script Injection Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A script injection vulnerability exists in versions of Google Chrome prior to 53.0.2785.89. An attacker can exploit this vulnerability to execute arbitrary code in the browser context to bypass security restrictions,...

Zend Framework SQL Injection Vulnerability

Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework. A SQL injection vulnerability exists in versions of ZF prior to 1.12.19, which can be exploited by attackers to compromise an application, access or modify data, or exploit potential...

Ktools Photostore SQL Injection Vulnerability

Ktools Photostore is the American Ktools company's set of professional photo gallery-like shopping cart software dedicated to selling pictures and other artwork online. A SQL injection vulnerability exists in Ktools Photostore versions prior to 4.7.5. An attacker can exploit this vulnerability to...