CVE-2015-7975

The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service application crash...

ALPINE-CVE-2016-7933

The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppphdlcifprint...

CVE-2017-3316

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2017-00751)

Zimbra can provide open source email server software and shared calendars. A cross-site scripting vulnerability exists in Zimbra Collaboration versions prior to 8.7.0. Allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, also known as Bug 101813...

Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2017-00752)

Zimbra can provide open source email server software and shared calendars. A cross-site scripting vulnerability exists in Zimbra Collaboration versions prior to 8.7.0. Allows remote attackers to inject arbitrary web script or HTML via unspecified vectors also known as bug 102637...

WordPress Cross-Site Scripting Vulnerability (CNVD-2017-00617)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the wp-admin/update-core.php file in WordPress before 4.7.1. A...

Information disclosure

MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated user...

Borg Spoofing Vulnerability

Borg is a deduplication backup program that supports compression and authentication encryption, among other things. A security vulnerability exists in versions of Borg prior to 1.0.9, which stems from an error in the encryption protocol used to validate manifests archive lists. An attacker could...

PHPMailer Remote Code Execution Vulnerability (CNVD-2017-00052)

PHPMailer is a PHP class library for sending e-mail . A remote code execution vulnerability exists in versions of PHPMailer prior to 5.2.20, which can be bypassed due to a filter function used in official PHPMailer patches. A remote attacker can exploit this vulnerability to execute arbitrary cod...

SwiftMailer Remote Code Execution Vulnerability

SwiftMailer is a package of PHP functions for sending e-mail. A remote code execution vulnerability exists in versions of SwiftMailer prior to 5.4.5-DEV, which can be exploited by an attacker to execute arbitrary code in the context of an affected application...

PT-2023-16824 · Phpipam +1 · Phpipam +1

Name of the Vulnerable Software and Affected Versions: phpipam/phpipam versions prior to 1.5.2 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing an attacker to inject...

w3m denial of service vulnerability (CNVD-2016-13124)

w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-33. A remote attacker can exploit this vulnerability to cause a denial of service segmentation error and crash with the help of specially crafted HTML pages...

Mozilla Firefox Arbitrary Code Execution Vulnerability (CNVD-2016-12690)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox versions prior to 50.1 and Firefox ESR version...

Mozilla Firefox WebVR Memory Misreference Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A memory misreference vulnerability exists in versions of Mozilla Firefox prior to 50.1. An attacker can exploit this vulnerability to execute arbitrary code...

Apple macOS Sierra Bluetooth Component Arbitrary Code Execution Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.Bluetooth is one of the Bluetooth components. A security vulnerability exists in the Bluetooth component of Apple macOS Sierra versions prior to 10.12.2. The vulnerability can be exploited to execute arbitra...

ALPINE-CVE-2016-9862

An issue was discovered in phpMyAdmin. With a crafted login request it is possible to inject BBCode in the login page. All 4.6.x versions prior to 4.6.5 are affected...

UBUNTU-CVE-2016-9863

An issue was discovered in phpMyAdmin. With a very large request to table partitioning function, it is possible to invoke a Denial of Service DoS attack. All 4.6.x versions prior to 4.6.5 are affected...

Google Android Broadcom Wi-Fi Driver Elevation of Privilege Vulnerability (CNVD-2016-12216)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Broadcom Wi-Fi Driver is a Broadcom-developed Wi-Fi driver module used in it. An elevation of privilege vulnerability exists in the Broadcom Wi-Fi Driver in versions of Androi...

Google Chrome Denial of Service Vulnerability (CNVD-2016-11965)

Google Chrome is a web browser developed by the American company Google Google. A denial of service vulnerability exists in versions of Google Chrome prior to 55.0.2883.75. An attacker can exploit this vulnerability to cause a denial of service...

PT-2016-2997 · Siemens · Sicam Pas

Name of the Vulnerable Software and Affected Versions: Siemens SICAM PAS versions prior to 8.00 Description: The issue is related to a factory account with hard-coded passwords in SICAM PAS installations. This could allow attackers to gain privileged access to the database over Port 2638/TCP. The...