Adobe Shockwave Player Memory Corruption Vulnerability (CNVD-2015-05963)

Adobe Shockwave Player is software that plays web content created using Macromedia and Adobe Director. A security vulnerability exists in Adobe Shockwave Player versions prior to 12.2.0.162, which can be exploited by an attacker to execute arbitrary code or cause a denial of service memory...

MyBB Cross-Site Scripting Vulnerability (CNVD-2015-05800)

MyBB is a popular web-based very good free forum software developed with PHP and MySQL. A cross-site scripting vulnerability exists in versions of MyBB prior to 1.8.5, which allows remote attackers to inject arbitrary web script or HTML via the content of a post...

IPPUSBXD Elevation of Privilege Vulnerability

IPPUSBXD is a daemon for the IPP-over-USB printer support program. A security vulnerability exists in IPPUSBXD versions prior to 1.22, which originates from the program listening on all interfaces. A remote attacker could exploit the vulnerability by sending a direct request to gain access to a...

Fortinet FortiClient Driver File Disclosure Vulnerability

Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. A driver file disclosure vulnerability exists in Fortinet FortiClient versions prior to 5.2.4, which allows local users to read arbitrary kernel memory via a...

Fortinet FortiClient Arbitrary Code Execution Vulnerability

Fortinet FortiClient is a Fortinet endpoint security solution that provides end-users with antivirus, encryption, and other services. An arbitrary code vulnerability exists in Fortinet FortiClient versions prior to 5.2.4, which allows local users to execute arbitrary code with kernel privileges b...

Design/Logic Flaw

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to read arbitrary kernel memory via a 0x22608C ioctl call...

HP Matrix Operating Environment Information Disclosure Vulnerability (CNVD-2015-05711)

HP Matrix Operating Environment is a suite of cloud management software designed for infrastructure services from Hewlett-Packard HP. A security vulnerability exists in HP Matrix Operating Environment versions prior to 7.5.0. A remote attacker could exploit the vulnerability to obtain sensitive...

OpenSSH sshd monitor.c file memory misreference vulnerability

OpenSSH OpenBSD Secure Shell on non-OpenBSD platforms is a set of connectivity tools for secure access to remote computers running on non-OpenBSD BSD-based UNIX implementations platforms maintained by the OpenBSD Project. A memory misreference vulnerability exists in the 'mmanswerpamfreectx'...

Wordpress Ephox Plupload Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed in PHP language, which supports setting up personal blog sites on PHP and MySQL servers.Ephox Plupload is a Web browser-based file upload module from Ephox, which supports displaying upload progress, automatic image...

Cisco IM and Presence Service Cross-Site Scripting Vulnerability

Cisco IM and Presence Service is the United States Cisco Cisco company's suite of software can provide enterprise-class instant messaging and network presence services. A cross-site scripting vulnerability exists in Cisco IM and Presence Service versions prior to 10.5 MR1, which stems from the...

Path Traversal Vulnerability in Joomla! Helpdesk Pro Plugin

Joomla! is a well-known content management system in foreign countries. Joomla! is a software system developed using the PHP language coupled with a MySQL database, which can be implemented on a variety of different platforms such as Linux, Windows, MacOSX and so on. A path traversal vulnerabilit...

Ansible Bypass Security Restrictions Vulnerability

Ansible is a newly emerged operation and maintenance tool that is based on Python and combines the advantages of many old operation and maintenance tools to achieve batch operating system configuration, batch program deployment, batch running commands and other functions. A security vulnerability...

Zenphoto has multiple unspecified vulnerabilities

ZenPhoto is a compact photo album software with RSS output, FTP upload method, Tag function, comment reply and other features. The following security vulnerabilities exist in versions of Zenphoto prior to 1.4.9, which can be exploited by attackers to take control of the application, access or...

jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

Cross-site scripting XSS vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option...

IBM Tivoli Storage Manager FastBack stack buffer overflow vulnerability (CNVD-2015-04177)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A stack buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack version 6.1.12 prior t...

Coppermine Photo Gallery Cross-Site Scripting Vulnerability

Coppermine Photo Gallery is a WEB-based graphics gallery management program. A cross-site scripting vulnerability exists in Coppermine Photo Gallery versions prior to 1.5.36, which allows remote, authenticated users to inject arbitrary web script or HTML via reference parameters...

Google Chrome memory misreference vulnerability (CNVD-2015-03356)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in versions of Google Chrome prior to 43.0.2357.65. This vulnerability allows remote attackers to execute arbitrary code in the current program context...

Google Chrome Denial of Service Vulnerability (CNVD-2015-03372)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in versions of Google Chrome prior to 43.0.2357.65 that allows an attacker to cause a denial of service via unknown vectors...

Google Chrome memory corruption vulnerability (CNVD-2015-02654)

Google Chrome is a web browser developed by the American company Google Google. Google Chrome versions prior to 42.0.2311.90, the function NaClSandbox::InitializeLayerTwoSandbox within components/nacl/loader/sandboxlinux/naclsandboxlinux.cc Failure to apply RLIMITAS and RLIMITDATA restrictions to...

FreeXL Arbitrary Code Execution Vulnerability

FreeXL is an open source library for extracting valid data from Excel .xls spreadsheets developed by software developer Alessandro Furieri. A security vulnerability exists in versions of FreeXL prior to 1.0.0i. The vulnerability can be exploited by a remote attacker with a specially crafted...