ISC BIND 9 DS Response Assertion Failure Denial of Service Vulnerability

BIND is an open source suite of software for implementing the DNS protocol. A DS response assertion failure denial of service vulnerability exists in ISC BIND 9. A remote attacker can exploit the vulnerability to cause a denial of service via a specially crafted DS resource logging response that...

Local Authentication Bypass Vulnerability in Multiple McAfee Products

McAfee SIEM Enterprise Security Manager and SIEM Event Receiver are both products of McAfee, Inc. McAfee SIEM Enterprise Security Manager provides intelligent, fast, and accurate security and information SIEM and log management. SIEM Event Receiver collects third-party events and logs and...

IBM License Metric Tool and BigFix Inventory Open Redirect Vulnerability

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2016-10907)

Adobe Connect formerly known as Macromedia Breeze is a set of enterprise-level web-based communication solutions from the U.S. company Audobee Adobe. The program provides web conferencing, e-learning and webinar features. A cross-site scripting vulnerability exists in Adobe Connect 9.5.6 and prio...

Micro Focus Rumba Local Denial of Service Vulnerability

Micro Focus Rumba FTP is an easy-to-use graphical FTP client file transfer tool from Micro Focus UK. A local denial of service vulnerability exists in Micro Focus Rumba version 9.4, which can be exploited by an attacker to cause a denial of service program crash...

CVE-2016-8295

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2016-5512

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5521...

CVE-2016-0246

Cross-site scripting XSS vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Oracle PeopleSoft Enterprise HCM Component Remote Data Read Vulnerability

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the human capital management HCM components. A remote data read...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise HCM (CNVD-2016-09930)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the Human Capital Management HCM components. An unspecified...

ZOHO ManageEngine ServiceDesk Plus Privilege Vulnerability

ZOHO ManageEngine ServiceDesk is the United States ZhuoHao ZOHO company's set of web-based help desk HelpDesk and asset management software. An elevation of privilege vulnerability exists in ManageEngine ServiceDesk Plus 9.0 and prior versions, which can be exploited by an attacker to gain...

Kerio Control Cross-Site Scripting Vulnerability

Kerio Control is a simple and fast unified threat management system. Cross-site scripting attack vulnerabilities in Kerio Control version 9.1.3 can be exploited by an attacker to execute arbitrary script code in the context of an affected site, steal cookie-based authentication, disclose sensitiv...

PHPCMS V9 Trojan Bypass Configuration Vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. PHPCMS V9 Trojan horse checking at the existence of bypass configuration vulnerability, allowing attackers to exploit the...

PHPCMS V9 badword.php file SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the PHPCMS V9 badword.php file, which allows attackers to exploit the vulnerability to...

PT-2016-3354

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.5 Description The issue is related to the kernel in Apple iOS, which lacks protection for sensitive data. This allows attackers to obtain sensitive information from memory via a crafted app. Recommendations For...

ReadyDesk SQL Injection Vulnerability

ReadyDesk is a Web-based helpdesk software solution from ReadyDesk, Inc. A SQL injection vulnerability exists in ReadyDesk version 9.1, which can be exploited by an attacker to compromise an application, access or modify data, or exploit a potential vulnerability in the underlying database...

ReadyDesk Arbitrary File Upload Vulnerability

ReadyDesk is a Web-based helpdesk software solution from ReadyDesk, Inc. An arbitrary file upload vulnerability exists in ReadyDesk version 9.1. A remote attacker can exploit this vulnerability by uploading or sending a request to a specially crafted page to execute arbitrary code...

Multiple Apple Products WebKit Unauthorized Access Vulnerability

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

CVE-2016-3557

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to File Load...

Unspecified Vulnerability in Oracle Agile PLM (CNVD-2016-05336)

Oracle Agile Product Lifecycle Management PLM solutions enable organizations to manage product information, processes, and decisions across a global product network throughout the product lifecycle. A security vulnerability exists in Oracle Supply Chain Products Suite version 9.3.4, 9.3.5, Oracle...