Dojo Toolkit Cross-Site Scripting Vulnerability

Dojo Toolkit is the Dojo Foundation a JavaScript language implementation of open source DHTML toolkit . A cross-site scripting vulnerability exists in versions of Dojo Toolkit prior to 1.2. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...

Android elevation of privilege vulnerability (CNVD-2015-06569)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. An elevation of privilege vulnerability exists in Android versions prior to 5.1.1, LMY48T, which allows an attacker to gain privileges through a crafted application...

Android elevation of privilege vulnerability (CNVD-2015-06568)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. An elevation of privilege vulnerability exists in Android versions prior to 5.1.1, LMY48T, which allows an attacker to gain privileges through a crafted application...

Newphoria Koritore app has full vulnerability

Newphoria Koritore for Android and iOS is a set of Android and iOS based platforms from Newphoria Japan. A security vulnerability exists in versions of the Newphoria Koritore app for Android and iOS based platforms prior to version 1.1. An attacker can exploit the vulnerability to bypass the URL...

FreeType parse_encoding function denial of service vulnerability

FreeType is a library of popular font functions. A security vulnerability exists in the parseencoding function of type1/t1load.c in versions of FreeType prior to 2.5.3, which can be exploited by remote attackers to cause a denial of service infinite loop...

NScripter Buffer Overflow Vulnerability

NScripter is a suite of scripting engines for building and executing games from the Japanese company NScripter. A buffer overflow vulnerability exists in versions of NScripter prior to 3.00, allowing remote attackers to execute arbitrary code via carefully saved data...

FFmpeg Denial of Service Vulnerability (CNVD-2015-05845)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'decodeihdrchunk' function in the libavcodec/pngdec.c file in versions of FFmpeg prior to 2.7.2, which can be exploited by remote attackers to cause a...

HP Version Control Repository Manager Information Disclosure Vulnerability (CNVD-2015-05736)

HP Version Control Repository Manager is a set of version control repository management products from Hewlett-Packard HP. An information disclosure vulnerability exists in HP Version Control Repository Manager versions prior to 7.5.0. It allows an authenticated remote user to obtain sensitive...

HP KeyView Arbitrary Code Execution Vulnerability (CNVD-2015-05714)

HP KeyView is file filtering and conversion software that extracts file content and metadata. A security vulnerability exists in the implementation of HP KeyView versions prior to 10.23.0.1 and prior to 10.24.0.1. A remote attacker can exploit this vulnerability to execute arbitrary code...

HP KeyView Arbitrary Code Execution Vulnerability (CNVD-2015-05718)

HP KeyView is file filtering and conversion software that extracts file content and metadata. A security vulnerability exists in the implementation of HP KeyView versions prior to 10.23.0.1 and prior to 10.24.0.1. A remote attacker can exploit this vulnerability to execute arbitrary code...

EUVD-2015-5380

Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2885...

DEBIAN-CVE-2015-6524

The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-361...

Foreman Information Disclosure Vulnerability

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A security vulnerability exists in Foreman versions prior to 1.8.1 that stems from the program not setti...

mysql: unspecified vulnerability related to Server:Security:Encryption (CPU Jan 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption...

mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU July 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Pluggable Auth...

UBUNTU-CVE-2015-3438

Multiple cross-site scripting XSS vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, allow remote attackers to inject arbitrary web script or HTML via a 1 four-byte UTF-8 character or 2 invalid character that reaches the database layer, as demonstrated by a crafted...

LEMON-S PHP Simple Oekaki BBS Cross-Site Scripting Vulnerability

LEMON-S PHP Simple Oekaki BBS is a PHP-based electronic bulletin board BBS script. A cross-site scripting vulnerability exists in the index.php script in LEMON-S PHP Simple Oekaki BBS versions prior to 1.21. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Unspecified Vulnerability in Apple QuickTime QT Media Foundation (CNVD-2015-04328)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in QT Media Foundation in Apple QuickTime versions prior to 7.7.7. The vulnerability...

GetSimple CMS Cross-Site Scripting Vulnerability (CNVD-2015-04183)

GetSimple CMS is an XML-based content management system CMS from Cagintranet Networks, USA. The system includes a theme selector and editor, component editor, image and file managers, and more. A cross-site scripting vulnerability exists in the admin/filebrowser.php script in GetSimple CMS versio...

UBUNTU-CVE-2014-0230

Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service thread consumption via a series of aborted uploa...