Oracle Sun Systems Products Suite Solaris Component Local Denial of Service Vulnerability

Oracle Solaris is a set of Unix-like operating systems from Oracle. A local denial of service vulnerability exists in the Filesystem subcomponent of the Oracle Solaris component of the Oracle Sun Systems Products Suite, versions 10 and 11.3. An attacker could exploit this vulnerability to cause a...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2016-09377)

Internet Explorer is a web browser from Microsoft. A remote memory corruption vulnerability exists in the Handle Memory object in Internet Explorer versions 10 and 11. This vulnerability allows attackers to corrupt memory and execute arbitrary code in the current user context...

Red Hat Ceph RGW Information Disclosure Vulnerability

Red Hat Ceph is a Linux petabyte-level distributed file system from Red Hat. The main goal of the system is to be designed as a distributed file system based on POSIX Portable Operating System Interface without a single point of failure, so that data can be fault-tolerant and seamless replication...

Apple iOS and Safari Safari Reader Cross Site Scripting Vulnerability

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Apple Safari is a web browser that is the default browser shipped with Mac OS X and iOS operating systems; Safari Reader is one of the browser's own Reader component. A cross-site...

Apple iOS/Safari/tvOS WebKit Memory Corruption Vulnerability (CNVD-2016-08299)

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

Apple OS X Kernel Memory Corruption Vulnerability (CNVD-2016-08113)

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which Kernel is a kernel component. A memory corruption vulnerability exists in the Kernel in Apple OS X version 10.11.6, which can be exploited by a specially crafted application to execute arbitrary code with...

AbsoluteTelnet Arbitrary Code Execution Vulnerability

AbsoluteTelnet is a terminal client program. An arbitrary code execution vulnerability in AbsoluteTelnet version 10.14 can be exploited to compromise the currently logged-in user's application by tricking the user into opening a custom library file containing malicious code using the affected...

IBM TRIRIGA Applications Privilege Vulnerability

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...

CVE-2016-1225

Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors...

IBM Security Guardium Database Activity Monitor Information Disclosure Vulnerability (CNVD-2016-03906)

IBM Security Guardium Database Activity Monitor is a database activity monitor product from IBM USA. The product provides features such as automated controls for compliance and protection against internal and external threats. A security vulnerability exists in IBM Security Guardium Database...

IBM Security Guardium Database Activity Monitor Directory Traversal Vulnerability

IBM Security Guardium Database Activity Monitor is a database activity monitor product from IBM USA. The product provides features such as automated controls for compliance and protection against internal and external threats. A security vulnerability exists in IBM Security Guardium Database...

Trend Micro Internet Security Access Restriction Vulnerability

Trend Micro Internet Security is a set of Trend Micro Trend Micro integrated with personal firewall, anti-virus, anti-spam and other features in one network security software. A security vulnerability exists in versions 8 and 10 of Trend Micro Internet Security. The vulnerability can be exploited...

Trend Micro Internet Security Arbitrary Script Execution Vulnerability

Trend Micro Internet Security is a set of Trend Micro Trend Micro integrated with personal firewall, anti-virus, anti-spam and other features in one network security software. A security vulnerability exists in versions 8 and 10 of Trend Micro Internet Security, which can be exploited by attacker...

CVE-2016-0675

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0700...

CVE-2016-2789

Cross-site scripting XSS vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

FreeBSD Kernel amd64_set_ldt Heap Overflow Vulnerability

FreeBSD is a UNIX operating system. An integer signature error in the amd64setldt function in the kernel code of versions prior to FreeBSD 10.2-RELENG can lead to a kernel heap overflow, which can cause a system crash in a local attacker...

Error: "Please check your credentials you may have mistyped them" on XenMobile

XenMobile enterprise migration is completed successfully from 9 to 10.1. Enrollment begins OK, MAM side errors out. Customer initiates enrollment and when Secure Hubagain is connecting to MAM and user is expecting to enter PIN prompt they see the following error: Please check your credentials you...

Cisco Unified Communications Domain Manager Denial of Service Vulnerability (CNVD-2015-08386)

Cisco Unified Communications Domain Manager is an enterprise-class IP telephony call-processing system from the American company Cisco Cisco. A denial of service vulnerability exists in Cisco Unified Communications Domain Manager 10.6. It allows an authenticated remote user to cause a denial of...

Cisco Emergency Responder Cross-Site Request Forgery Vulnerability (CNVD-2015-08366)

Cisco Emergency Responder's real-time location-address tracking database and enhanced routing capabilities can transfer emergency calls directly to the appropriate Public Safety Answering Point PASP based on the caller's location. Cisco Emergency Responder 10.51 and 10.51a fails to implement...

CVE-2015-5014

IBM Cognos Disclosure Management CDM 10.1.x and 10.2.x before 10.2.4 IF10 allows man-in-the-middle attackers to obtain access by spoofing an executable file during a client upload operation...