IBM Tivoli Storage Manager FastBack Buffer Overflow Vulnerability (CNVD-2016-02021)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack versions 6.1.0.0 through...

Cisco IOS and IOS XE Software DHCPv6 relay denial of service vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in the DHCP version 6 DHCPv6 relay feature of Cisco IOS and IOS XE Software. A remote attacker could exploit this vulnerability by sending a specially...

BusyBox OPTION_6RD Parsing Heap Buffer Overflow Vulnerability

BusyBox is a set of applications containing several linux commands and tools maintained by Ukrainian software developer Denis Vlasenko. A heap buffer overflow vulnerability exists in BusyBox version 1.24.1, which stems from an error in udhcpc when the program parses the IPv6 Rapid Deployment DHCP...

The vulnerability of the microprogramming software of the Cisco Wireless LAN Controller allows a intruder to cause incorrect traffic redirection.

The vulnerability of the Internet Access Point Protocol IAPP module in the Cisco Wireless LAN Controller software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause incorrect traffic redirection using specially created IPv6...

CVE-2016-0212

Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service daemon crash via unspecified vectors, a different vulnerability than CVE-2016-0213 and CVE-2016-0216...

TYPO3 Front-end Component Cross-Site Scripting Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in the front-end component of TYPO3 versions 6.2.x before 6.2.16 and 7.x before 7.6.1. A remote attacker can exploit this vulnerabilit...

ISC Kea kea-dhcp4 and kea-dhcp6 Server Denial of Service Vulnerabilities

ISC Kea is an open source DHCPv4 and DHCPv6 server developed by ISC Internet Systems Consortium. A security vulnerability exists in ISC Kea's kea-dhcp4 and kea-dhcp6 servers, versions 0.9.2 and 1.0.0-beta. A remote attacker can exploit the vulnerability by sending malformed packets to cause a...

Android libstagefright Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of libstagefright in Android versions prior to 5.1.1 LMY48Z and 6.0 2015-12-01, which can be exploited by remote attackers to obtain sensitive information and bypass...

Red Hat JBoss Portal Security Bypass Vulnerability

Red Hat JBoss Portal is an open source and standards-compliant portal platform from Red Hat Red Hat. The platform can build , layout of a portal Web interface for publishing , managing content and customizing the user experience. A security vulnerability exists in the Red Hat JBoss Portal 6.x...

PT-2015-3272 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.3.3 Description: The issue is related to the IPv6 stack in the Linux kernel, which mishandles options data. This can be exploited by local users to gain privileges or cause a denial of service, resulting in a...

Google AdWords API 'WSDLInterpreter/WSDLInterpreter.php' Arbitrary PHP Code Execution Vulnerability

Google AdWords API is the United States Google Google company's set of developers to build applications for developers to interact directly with the AdWords platform development tools. An arbitrary PHP code execution vulnerability exists in Google AdWords API version 6.2.0 and earlier. An attacke...

NetworkManager: remote DoS using IPv6 RA with bogus MTU

It was discovered that NetworkManager would set device MTUs based on MTU values received in IPv6 RAs Router Advertisements, without sanity checking the MTU value first. A remote attacker could exploit this flaw to create a denial of service attack, by sending a specially crafted IPv6 RA packet to...

DEBIAN-CVE-2015-8215

net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers to cause a denial of service packet loss via a value that is 1 smaller than the minimum compliant value or 2 larger than the MTU of a...

DEBIAN-CVE-2015-2924

The receivera function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery ND protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message, a similar issue to CVE-2015-2922...

UBUNTU-CVE-2015-8215

net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers to cause a denial of service packet loss via a value that is 1 smaller than the minimum compliant value or 2 larger than the MTU of a...

Multiple Cross-Site Scripting Vulnerabilities in Cisco FireSIGHT Management Center

Cisco FireSIGHT Management Center is the United States Cisco Cisco company's set of support for centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security equipment network security and operational functions of the management center software. Multiple...

Dwango niconico for iOS security bypass vulnerability

Dwango niconico for iOS is a suite of online pop-up video sharing website applications based on the iOS platform by Japanese company Dwango. A security bypass vulnerability exists in Dwango niconico for iOS version 6.37 and earlier. An attacker can exploit the vulnerability to conduct a...

Cisco Adaptive Security Appliance Denial of Service Vulnerability (CNVD-2015-06862)

The Cisco ASA 5500 Series Adaptive Security Appliances are modular platforms for delivering security and VPN services, providing firewall, IPS, anti-X, and VPN services. The Cisco Adaptive Security Appliance ASA has a security vulnerability in its implementation. A remote attacker could cause a...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2015-06892)

Juniper Networks Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. A security vulnerability in Juniper Networks Junos OS can be exploited by remote attackers to cause a denial of service mbuf chain corruption and unexpected kernel termination by...

Splunk Enterprise Cross-Site Scripting Vulnerability (CNVD-2015-06521)

Splunk Enterprise is an enterprise-grade log analytics software that runs in Unix environments. A cross-site scripting vulnerability in Splunk Enterprise version 6.2.x prior to 6.2.6 and Splunk Light version 6.2.x prior to 6.2.6 allows remote attackers to inject arbitrary web script or HTML via...