Apache Tomcat Security Manager Security Restriction Bypass Vulnerability (CNVD-2016-10421)

Apache Tomcat is a popular open source JSP application server program. Apache Tomcat 7.0.0-7.0.70 suffers from a security restriction bypass vulnerability in its implementation. An attacker can exploit this vulnerability to bypass certain security restrictions and perform unauthorized operations...

PT-2022-21128 · Ovs +3 · Ovs +3

Name of the Vulnerable Software and Affected Versions: ovs versions v0.90.0 through v2.5.0 Description: The issue is related to a heap buffer over-read in flow.c, caused by an unsafe comparison in the minimasks function. This could lead to access to an unmapped region of memory, resulting in...

Cisco NX-OS Denial of Service Vulnerability (CNVD-2016-09438)

Cisco NX-OS on Nexus 2000, etc. is the United States Cisco Cisco company's set of operating system running in the Nexus 2000 and other series of devices. A denial of service vulnerability exists in Cisco NX-OS versions 4.0 through 7.3 and 11.0 through 11.2, which can be exploited by a remote...

Cybozu Office Restriction Bypass Vulnerability

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A security vulnerability exists in Cybozu Office versions 9.0.0 through 10.4.0. An attacker can exploit the vulnerability to modify project information...

Cybozu Office Reflected File Download Vulnerability

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A security vulnerability exists in Cybozu Office versions 9.0.0 through 10.4.0. The vulnerability can be exploited by an attacker to download files by tricking users into visiting a malicious page...

UBUNTU-CVE-2016-3920

id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service device hang or reboot via a crafted file, aka internal bug 30744884...

c-ares heap buffer overflow vulnerability

c-ares is a C library for asynchronous execution of DNS requests and name resolution. A heap buffer overflow vulnerability exists in the 'arescreatequery' function in versions c-ares 1.0.0 through 1.11.0. A remote attacker could exploit this vulnerability to cause a denial of service write across...

CVE-2016-6433

The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters, aka Bug ID CSCva30872...

IBM Spectrum Control and IBM Storage Insights Catalog Traversal Vulnerability

IBM Spectrum Control and IBM Storage Insights are both storage resource management software from IBM USA. A directory traversal vulnerability exists in IBM Spectrum Control versions 5.2.8 through 5.2.10.1 and IBM Storage Insights. An attacker can exploit this vulnerability by sending a URL reques...

Haxx libcurl Integer Overflow Vulnerability

Haxx libcurl is a free , open source client-side URL transport library from the Swedish company Haxx. The library supports FTP, FTPS, TFTP, HTTP and so on. An integer overflow vulnerability exists in Haxx libcurl versions 7.11.1 through 7.50.2. An attacker can exploit this vulnerability to execut...

Cybozu Garoon Open Redirect Vulnerability (CNVD-2016-06711)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. An open redirection vulnerability exists in Cyboz...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2016-06713)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting vulnerability exists in...

NUUO NVRmini 2 and NVRsolo Hardcoded Certificate Vulnerability

The NUUO NVRsolo and NVRmini 2 are both network video recorders from NUUO. A hardcoded certificate vulnerability exists in NUUO NVRmini 2 and NVRsolo versions 1.0.0 through 3.0.0, which stems from a program using hardcoded certificates. The vulnerability can be exploited by an attacker to log int...

Wireshark MMSE Dissector Remote Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A remote denial of service vulnerability exists in Wireshark versions 1.12.0 through 1.12.12, which can be exploited by an attacker to crash an application and cause a denial of...

RubyGems Paperclip Excessive Logging Content Spoofing Vulnerability

RubyGems Paperclip is a plugin for extending ActiveRecord ORM model and providing simple file attachment functionality. A content spoofing vulnerability exists in RubyGems Paperclip versions 4.2.2 through 4.3.5. An attacker can exploit this vulnerability to spoof content...

WordPress Jetpack Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language.Jetpack is one of the plugin packages that includes a variety of features such as social sharing, social login and social commenting. An HTML injection vulnerability exists in WordPress...

Apache Qpid Proton Security Bypass Vulnerability

Apache Qpid Proton is the United States Apache Apache Software Foundation developed a high-performance, lightweight messaging library. A security bypass vulnerability exists in Apache Qpid Proton versions 0.8 through 0.13.0, which can be exploited by an attacker to conduct a man-in-the-middle...

Samba libcli/smb/smbXcli_base.c Security Mechanism Bypass Vulnerability

Samba is a freeware implementation of the SMB protocol on Linux and UNIX systems, consisting of a server and a client program. Samba 4.0.0 - 4.4.4 libcli/smb/smbXclibase.c suffers from a security vulnerability in its implementation, which allows a man-in-the-middle attacker, via the...

CVE-2016-1193

Cybozu Garoon 3.7 through 4.2 allows remote attackers to obtain sensitive email-reading information via unspecified vectors...

PT-2016-5363

Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.3.19 through 2.3.28 Description The issue allows remote attackers to execute arbitrary code via vectors related to an ! exclamation mark operator to the REST Plugin when Dynamic Method Invocation is enabled...