Google Android Broadcom Wi-Fi Driver Elevation of Privilege Vulnerability (CNVD-2016-12216)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Broadcom Wi-Fi Driver is a Broadcom-developed Wi-Fi driver module used in it. An elevation of privilege vulnerability exists in the Broadcom Wi-Fi Driver in versions of Androi...

Google Chrome Denial of Service Vulnerability (CNVD-2016-11965)

Google Chrome is a web browser developed by the American company Google Google. A denial of service vulnerability exists in versions of Google Chrome prior to 55.0.2883.75. An attacker can exploit this vulnerability to cause a denial of service...

PT-2016-2997 · Siemens · Sicam Pas

Name of the Vulnerable Software and Affected Versions: Siemens SICAM PAS versions prior to 8.00 Description: The issue is related to a factory account with hard-coded passwords in SICAM PAS installations. This could allow attackers to gain privileged access to the database over Port 2638/TCP. The...

PT-2021-5177 · Saltstack +3 · Saltstack Salt +3

Name of the Vulnerable Software and Affected Versions: SaltStack Salt versions prior to 3002.5 Description: The issue is related to improper access restriction in SaltStack Salt, allowing a remote attacker to gain unauthorized access to restricted functions. Specifically, salt-api does not honor...

Mozilla Firefox Memory Misreference Vulnerability (CNVD-2016-11417)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A memory misreference vulnerability exists in the 'nsINode::ReplaceOrInsertBefore' function in versions of Mozilla Firefox prior to 50. An attacker could exploit this vulnerability to cause a...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2016-11416)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A denial of service vulnerability exists in the 'nsRefreshDriver' function in versions of Mozilla Firefox prior to 50. An attacker can exploit this vulnerability to cause a denial of service...

Mozilla Firefox Memory Misreference Vulnerability (CNVD-2016-11415)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A memory misreference vulnerability exists in the 'nsINode::ReplaceOrInsertBefore' function in versions of Mozilla Firefox prior to 50. An attacker could exploit this vulnerability to cause a...

Mozilla Firefox Timing Attack Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A timing attack vulnerability exists in the Canvas filter in versions of Mozilla Firefox prior to 50. An attacker can exploit this vulnerability to conduct timing attacks...

Python Cryptography Security Bypass Vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security bypass vulnerability in Python Cryptography versions prior to 1.5.3 allows attackers to bypass...

DotCMS SQL Injection Vulnerability (CNVD-2016-11003)

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A SQL injection vulnerability exists in the Site BrowserContainers pages screen in versions of DotCMS prior to...

Juniper Junos Space Cross-Site Scripting Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. A cross-site scripting vulnerability exists in Juniper Junos Space versions prior to 15.2R2...

Kabona AB WDC Open Redirect Vulnerability

Kabona AB WDC is a web-based SCADA system from the Swedish company Kabona AB. An open redirection vulnerability exists in Kabona AB WDC versions prior to 3.4.0. An attacker can exploit this vulnerability to redirect users to a malicious page...

Apple Safari Tabs Spoofing Vulnerability

Apple Safari is an American Apple web browser that is the default browser that comes with the Mac OS X and iOS operating systems; Safari Tabs is one of the extended Safari tabs components for use in Safari the web browser. A spoofing vulnerability exists in the Safari Tabs component in versions o...

OpenSSL Certificate Message Out-of-Bounds Read Vulnerability

OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. Versions of OpenSSL prior to 1.0.2i and 1.0.1u sometimes lack message length checks, resulting in a risk of denial-of-service attacks...

Pivotal Cloud Foundry Ops Manager Insecure Default Password Vulnerability

Pivotal Cloud Foundry PCF is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software, Inc. that provides container scheduling, continuous delivery, and automated service deployment, etc. PCF Ops Manager is one of the management tools used for deployment, online...

OwnCloud Server and Nextcloud Server Cross-Site Scripting Vulnerabilities

OwnCloud is a free and open source personal cloud storage solution from OwnCloud Germany.Nextcloud is an open source self-hosted file synchronization and sharing communication application platform.OwnCloud Server and Nextcloud Server are both a server version of one of them. A cross-site scriptin...

Apple iOS Security Restriction Bypass Vulnerability (CNVD-2016-07699)

Apple iOS is an operating system developed by Apple for mobile devices, and Mail is one of the mail clients. A security restriction bypass vulnerability exists in Mail in Apple iOS versions prior to 10. The vulnerability can be exploited by an attacker to bypass security restrictions, perform...

Apple iOS Sandbox Profiles Component Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Sandbox Profiles is a Sandbox component. An information disclosure vulnerability exists in the Sandbox Profiles component in versions of Apple iOS prior to 10, which stems from a program that fails to properly...

Apple iOS Security Restrictions Bypass Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices. A security restriction bypass vulnerability exists in Assets in Apple iOS versions prior to 10. An attacker can exploit this vulnerability to bypass security restrictions, perform unauthorized actions, or obtain sensitive...

Google Android Qualcomm Wireless Interface Layer Elevation of Privilege Vulnerability

Android on Nexus 5, 5X, 6, 6P, and Android One is a Linux-based open source operating system for the Nexus 5, 5X, 6, 6P, and Android One smartphones developed by Google and the Open Handset Alliance OHA. The Qualcomm radio interface layer is one of the radio interface layers RIL between the Andro...