4741 matches found
DEBIAN-CVE-2016-9632
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service global buffer overflow and crash via a crafted HTML page...
UBUNTU-CVE-2016-9626
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page...
Google Chrome Blink Out-of-Bounds Write Vulnerability (CNVD-2016-12100)
Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security vulnerability exists in Blink in versions of Google Chrome prior to 55.0.2883.75. An attacker could exploit this...
Google Chrome Blink Security Bypass Vulnerability (CNVD-2016-12106)
Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security bypass vulnerability exists in Blink in versions of Google Chrome prior to 55.0.2883.75. An attacker could use this...
CVE-2016-3012
IBM API Connect aka APIConnect before 5.0.3.0 with NPM before 2.2.8 includes certain internal server credentials in the software package, which might allow remote attackers to bypass intended access restrictions by leveraging knowledge of these credentials...
CVE-2016-2933
Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary files via a crafted request...
CVE-2016-2951
IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data...
w3m arbitrary code execution vulnerability (CNVD-2016-11718)
w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service...
w3m arbitrary code execution vulnerability (CNVD-2016-11683)
w3m is an open source text-based Web browser . An arbitrary code execution vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...
CVE-2016-6729
An elevation of privilege vulnerability in the Qualcomm bootloader in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, whi...
UBUNTU-CVE-2016-9073
WebExtensions can bypass security checks to load privileged URLs and potentially escape the WebExtension sandbox. This vulnerability affects Firefox 50...
DEBIAN-CVE-2016-7911
Race condition in the gettaskioprio function in block/ioprio.c in the Linux kernel before 4.6.6 allows local users to gain privileges or cause a denial of service use-after-free via a crafted ioprioget system call...
gd: gdImageFillToBorder deep recursion leading to stack overflow
Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a crafted imagefilltoborder call...
PT-2017-4325 · Secret Rabbit Code +3 · Libsamplerate +3
Name of the Vulnerable Software and Affected Versions: libsamplerate versions prior to 0.1.9 Description: The issue is related to a buffer over-read in the calc output single function of the src sinc.c component in the Secret Rabbit Code library, which is used for audio sample rate conversion. Th...
DotCMS SQL Injection Vulnerability (CNVD-2016-11004)
DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A SQL injection vulnerability exists in the JSONTags servlet in versions of DotCMS prior to 3.3.1. A remote...
Symantec Norton Mobile Security for Android Local Information Disclosure Vulnerability
Symantec Norton Mobile Security for Android is a set of software from Symantec Symantec that provides security for mobile devices based on the Android platform. A local information disclosure vulnerability exists in versions of Symantec Norton Mobile Security for Android prior to 3.16. A local...
CVE-2016-5605
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.1.4 in Oracle Virtualization allows remote attackers to affect confidentiality and integrity via vectors related to VRDE...
DEBIAN-CVE-2016-1000031
Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution...
PT-2016-6204
Name of the Vulnerable Software and Affected Versions Apache ActiveMQ Artemis versions prior to 1.4.0 Description The issue allows remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget...