PT-2016-2919 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.8.12 Description: The issue exists due to insufficient input validation in the icmp6 send function. Exploitation of this issue may allow a remote attacker to cause a denial of service using a specially crafted...

PT-2016-3456 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 4.17.2 Description: The issue is related to the Linux kernel's page allocator not yielding CPU resources to the owner of the oom lock mutex. This can allow a local unprivileged user to lock up the system forever ...

CVE-2016-3002

IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows physically proximate attackers to obtain sensitive information by reading cached data on a client device...

Xen Information Disclosure Vulnerability (CNVD-2016-11647)

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. An information disclosure...

IBM Connections Information Disclosure Vulnerability (CNVD-2016-11535)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. An information...

LibTIFF tools/tiffcp.c heap buffer overflow vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A heap buffer overflow vulnerability exists in libtiff version 4.0.6 in tools/tiffcp.c, whic...

WordPress All In One WP Security And Firewall Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site.All In One WP Security & Firewall is one of the security management and firewall plug-ins. A cross-site scripting...

Reflective Cross-Site Scripting Vulnerability in Knight Talent System 'key' Parameter

Knight Talent System is a professional talent system based on PHP + MYSQL as the core development, free + open source. A reflective cross-site scripting vulnerability exists in the search 'key' parameter of the Knight Talent System v4.0 job search function. The vulnerability allows attackers to...

PT-2017-7947 · Mysql Server +3 · Dbd::Mysql +3

Name of the Vulnerable Software and Affected Versions: DBD::mysql versions prior to 4.039 Description: The issue allows attackers to cause a denial of service, specifically an out-of-bounds read, when using server-side prepared statement support. This can be achieved through vectors involving an...

Faraznet CMS Cross-Site Scripting Vulnerability

Faraznet CMS is a content management system. A cross-site scripting vulnerability exists in the ssearch.php page in version 4.x of Faraznet CMS. Due to the program failing to adequately filter user-submitted input. An attacker can exploit the vulnerability to steal cookie-based authentication or...

UBUNTU-CVE-2016-8331

An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be triggered via a TIFF file delivered to the applicatio...

Network Scanner Buffer Overflow Vulnerability

MiTec Network Scanner is a multi-threaded port, IP, NetBIOS and SNMP scanner. A buffer overflow vulnerability exists in Network Scanner version 4.0.0, which can be exploited by an attacker to execute arbitrary code within the context of an application, which may also result in a denial of service...

CVE-2016-5525

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.3 allows local users to affect integrity via vectors related to Cluster check files...

Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2016-10246)

Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A cross-site scripting vulnerability exists in Subrion CMS version 4.0.5, which stems from the failure of...

Unspecified Vulnerability in Oracle Virtualization Secure Global Desktop (CNVD-2016-10287)

Oracle Virtualization is a suite of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software architecture from applications to disk, enabling virtualization from the desktop to the data center.Oracle Secure Global Desktop S...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris Cluster Component (CNVD-2016-09693)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Solaris Cluster is one of the enterprise cluster components for the Oracle Sun Solaris operating system. A local security vulnerability exists in the Cluster Geo subcomponent of the Solaris Cluster...

CVE-2016-7097

The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions...

Linux kernel the __sys_recvmmsg function content misreference vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A content misreference vulnerability exists in the 'the sysrecvmmsg' function in the net/socket.c file in versions of Linux kernel prior to 4.5.2. A remote attacker could...

ALPINE-CVE-2016-3624

The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write by setting the "-v" option to -1...

UBUNTU-CVE-2016-3631

The 1 cpStrips and 2 cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service out-of-bounds read via vectors related to the bytecounts array variable...