PT-2016-6826 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 1.12.2 Description: A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form. This is...

jQuery cross-site scripting vulnerability

jQuery is an American programmer John Resig developed a set of open source , cross-browser JavaScript library . The library simplifies the operation between HTML and JavaScript , and has a modular , plug-in extensions and other features . A cross-site scripting vulnerability exists in versions of...

Python priority denial of service vulnerability

Python is a suite of open source, object-oriented programming languages from the Python Software Foundation. json is one of the modules that provides a lightweight format for exchanging data. priority is one of the modules used to implement ordering. A denial of service vulnerability exists in...

PHP Remote Code Execution Vulnerability (CNVD-2016-05253)

PHP PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A remote code execution vulnerability exists in versions of PHP prior to 5.5.36. An attacker could exploit this...

Unspecified Vulnerability in MySQL Server (CNVD-2016-05292)

Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. An unspecified vulnerability exists in Oracle MySQL versions prior to 5.5.48, 5.6.29, and 5.7.11, which could be exploited by...

CVE-2016-4176

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service stack memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4177...

Android NVIDIA Driver Elevation of Privilege Vulnerability

Android on Nexus 9 is a Linux-based open source operating system for the Nexus 9 Tablet PC developed by Google and the Open Handset Alliance OHA.NVIDIA video driver is a component of the NVIDIA video card driver. An elevation of privilege vulnerability exists in the NVIDIA video driver in version...

Cisco AMP Threat Grid Unauthorized Access Vulnerability

Cisco AMP Threat Grid is the United States Cisco Cisco company's set of integrated static and dynamic malware analysis and threat intelligence in one solution. The program can help enterprises to analyze the behavior and intent of malware, the impact of the threat level and defense methods. An...

DMM Movie Player App for Android and for iPhone/iPad Man-in-the-Middle Attack Vulnerability

DMM Movie Player App is a suite of video player applications from DMM Japan. A security vulnerability exists in DMM Movie Player App for Android before 1.2.1 and for iPhone/iPad before 2.1.3, which originates from the program failing to validate an SSL server-side certificate. An attacker could u...

UBUNTU-CVE-2016-5360

HAproxy 1.6.x before 1.6.6, when a deny comes from a reqdeny rule, allows remote attackers to cause a denial of service uninitialized memory access and crash or possibly have unspecified other impact via unknown vectors...

Puppet Server and Agent Arbitrary Code Execution Vulnerability

Puppet Server and Agent are both U.S. Puppet Labs based on the client/server C/S architecture of the configuration management tool, the tool can be used to manage configuration files, users, cron tasks, packages, system services and so on. An arbitrary code execution vulnerability exists in Puppe...

chromium-browser: use-after-free in extensions

extensions/renderer/runtimecustombindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via vectors related ...

Google Chrome Same Origin Policy Bypass Vulnerability (CNVD-2016-03781)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in extensions for Google Chrome versions prior to 51.0.2704.63. A remote attacker can exploit the vulnerability to bypass the same-origin policy...

Unspecified Vulnerability in Lenovo SHAREit

Lenovo SHAREit 茄子快传 on Android is a set of file-sharing software based on the Android platform by the Chinese company Lenovo Lenovo. An unspecified vulnerability exists in Lenovo SHAREit versions prior to 3.5.98ww, based on Android platforms prior to version 4.2. A remote attacker can exploit thi...

Squid Security Bypass Vulnerability (CNVD-2016-03061)

Squid full name Squid Cache is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security bypass vulnerability exists in the mimeheader.cc file in versions of Squid prior to...

Linux kernel denial of service vulnerability (CNVD-2016-02776)

The Linux kernel, released by the Linux Foundation in the United States and used by the operating system Linux, is an open-source, free, and most widely ported operating system kernel. A denial of service vulnerability exists in versions of Linux kernel prior to 3.18.5 that allows local users to...

Mozilla Firefox Privilege Bypass Vulnerability

Mozilla Firefox on Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A privilege bypass vulnerability exists in Mozilla Firefox versions prior to 46.0 on Android platforms prior to version 5.0. An attacker can exploit this vulnerability to...

CVE-2016-2516

NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service ntpd abort by using the same IP address multiple times in an unconfig directive...

Foxit Reader/PhantomPDF Memory Misreference Vulnerability

Foxit Reader is a small PDF document viewer and printing program. A memory misreference vulnerability exists in Foxit Reader/PhantomPDF versions prior to 7.3.4, which can be exploited by remote attackers to execute arbitrary code...

UBUNTU-CVE-2016-4082

epan/dissectors/packet-gsmcbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses the wrong variable to index an array, which allows remote attackers to cause a denial of service out-of-bounds access and application crash via a crafted packet...