Buffer Overflow Vulnerability in Scada-os Configuration Software Project Files

Scada-OS is a SCADA system developed by several SCADA configuration software engineers. A buffer overflow vulnerability exists in the project file of Scada-os configuration software version 6.1.0.0. Because the software fails to detect the length of the name tag content of the project file, an...

kernel: use-after-free via crafted IPV6 sendmsg for raw / tcp / udp / l2tp sockets.

It was found that the Linux kernel's IPv6 implementation mishandled socket options. A local attacker could abuse concurrent access to the socket options to escalate their privileges, or cause a denial of service use-after-free and system crash via a crafted sendmsg system call...

Cisco IOS XR Elevation of Privilege Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A root elevation of privilege vulnerability exists in Cisco IOS XR version 6.1.1, which allows local users to execute arbitrary operating system commands as root by leveraging...

CVE-2016-6411

Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons between URLs and X.509 certificates, which allows remote attackers to bypass intended do-not-decrypt settings via a crafted URL, aka Bug ID CSCva50585...

XenServer 6.5 - VM IP configuration switches back to DHCP

XenServer 6.5 - VM IP configuration switches back to DHCP...

IBM Tivoli Storage Manager for Virtual Environments Security Bypass Vulnerability

IBM Tivoli Storage Manager for Virtual Environments TSMVE is a VM backup and recovery solution from IBM USA. The solution protects VMware vSphere virtual machines by offloading backup workloads to a central server. A security bypass vulnerability exists in IBM TSMVE versions 7.1.0.0 through 7.1.4...

Trend Micro Control Manager SQL Injection Vulnerability

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. A SQL injection vulnerability exists in version 6.0 of Trend Micro Control Manager TMCM, which can be exploited by an attacker to compromise an application, access o...

IBM Jazz Reporting Service Session Hijacking Vulnerability

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...

IBM Jazz Reporting Service Information Disclosure Vulnerability

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...

Red Hat Satellite HTML Injection Vulnerability

Red Hat Satellite is a suite of system management platforms from Red Hat, Inc. that can be used to extend Linux infrastructures and provide system management functions such as administration, configuration, and monitoring. An HTML injection vulnerability exists in Red Hat Satellite version 6, whi...

VMware vCenter Server/ESXi CRLF Injection Vulnerability

VMware vCenter Server enables rapid deployment of virtual machines and monitors the performance of physical servers and virtual machines. A CRLF injection vulnerability exists in VMware vCenter Server U2 prior to version 6.0 and ESXi 6.0, which can be exploited by remote attackers to inject...

CVE-2016-6152

CA eHealth 6.2.x and 6.3.x before 6.3.2.13 allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors...

Unspecified Vulnerability in Oracle Supply Chain Products Suite Oracle Transportation Management Component

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle that provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Transportation Management OTM is one of the components that can be used to manage all transportation activities...

SugarCRM 'SugarRestSerialize.php' PHP Object Injection Vulnerability

SugarCRM is an open source Customer Relationship Management CRM system from SugarCRM USA. The system supports differentiated marketing, management and distribution of sales leads for different customer needs, and enables information sharing and tracking of sales representatives. A PHP object...

Multiple stored cross-site scripting vulnerabilities in emlog

emlog is a functional blog and CMS builder based on PHP and MySQL. There are multiple stored cross-site scripting vulnerabilities in emlog. The stored XSS vulnerabilities are caused due to the emlog 6.9 open source software code writing process, some of which fails to do input filtering...

Android LockSettingsService java file lifting vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which LockSettingsService is a screen locking service component. The server/LockSettingsService.java file in the LockSettingsService component in Android versions 6.0 and 6.0.1 ...

The vulnerability of the Cisco Wireless LAN Controller 2500 software allows a malicious individual to cause service failure.

The vulnerability in the monitoring service of Multimedia Delivery MLD for Cisco Wireless LAN Controllers WLC – when the MLDv2 Snooping function is enabled – allows malicious actors operating remotely to trigger a service failure rebooting the device by using improperly crafted IPv6 MLDv2 packets...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure

Cisco IOS software contains a vulnerability that, when exploited, can cause the error ID CSCtj30155 and trigger a router reboot by sending specially crafted ICMPv6 packets via Multiprotocol Label Switching MPLS...

OpenStack Neutron ICMPv6 Source Address Spoofing Vulnerability

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration NASA in collaboration with Rackspace, Inc. in the U.S. Neutron is one of the networking components that provides Network-as-a-Service NaaS, which enables the creating networks between...