jenkins: JNLP slaves not subject to slave-to-master access control (SECURITY-206)

Jenkins before 1.638 and LTS before 1.625.2 allow attackers to bypass intended slave-to-master access restrictions by leveraging a JNLP slave. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3665...

CVE-2016-0495

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and 5.0.14 allows remote attackers to affect availability via unknown vectors related to Core...

UBUNTU-CVE-2016-0495

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and 5.0.14 allows remote attackers to affect availability via unknown vectors related to Core...

Advantech WebAccess SQL Injection Vulnerability (CNVD-2016-00425)

WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation devices in facility management systems, power stations and building automation systems. A SQL injection vulnerability exists in Advantech WebAccess versions prior to 8.1,...

Advantech WebAccess Cross-Site Scripting Vulnerability

WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation devices in facility management systems, power stations and building automation systems. A cross-site scripting vulnerability exists in Advantech WebAccess versions prior to...

Advantech WebAccess Security Restriction Bypass Vulnerability

WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation devices in facility management systems, power stations and building automation systems. A security vulnerability exists in Advantech WebAccess versions prior to 8.1, which c...

PT-2016-1111 · Php · Php

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 7.0.0 Description: The issue is related to errors in the code of the php str replace in subject function in the PHP interpreter. It allows remote attackers to execute arbitrary code via a crafted value in the third...

Code injection

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

CVE-2016-0937

Use-after-free vulnerability in the OCG object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via...

Schneider Electric ProClima Denial of Service Vulnerability

Schneider Electric ProClima is a thermal calculation software from Schneider Electric France. A denial of service vulnerability exists in Schneider Electric ProClima versions prior to 6.2. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted integer valu...

PT-2015-7560 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 1.10.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML via global parameters, smart class parameters, or smart variables in the host or hostgroup edit forms, potentially leading ...

Android libstagefright Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of libstagefright in Android versions prior to 5.1.1 LMY48Z and 6.0 2015-12-01, which can be exploited by remote attackers to obtain sensitive information and bypass...

Android Native Frameworks Library Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of the Native Frameworks Library in Android versions prior to 5.1.1 LMY48Z and 6.0 2015-12-01, which can be exploited by remote attackers to obtain sensitive information...

Android Media Framework Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of Media Framework in Android versions prior to 5.1.1 LMY48Z and 6.0 2015-12-01, which can be exploited by remote attackers to obtain sensitive information and bypass...

Android mediaserver memory corruption vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in mediaserver, a version prior to Android 5.1.1 LMY48Z, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service memory corruption via a constructed...

Google Chrome Same Origin Policy Bypass Vulnerability (CNVD-2015-07960)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the implementation of the professional-load commit in the WebKit/Source/bindings/core/v8/WindowProxy.cpp file in versions of Google Chrome prior to 47.0.2526.73. A remote attacker ca...

PCRE Denial of Service Vulnerability (CNVD-2015-07884)

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A security vulnerability exists in PCRE versions prior to 8.38, which stems from the program's failure to properly handle the '/? :|a|100x...

AZL-35337 CVE-2015-7697 affecting package unzip for versions less than 6.0-20

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...

Apache Ambari Open Redirect Vulnerability

Apache Ambari is the tool to provision, manage, and monitor Apache Hadoop clusters. An open redirection security vulnerability exists in Apache Ambari versions prior to 2.1.2. A remote attacker can exploit this vulnerability to redirect a user to an arbitrary website and perform a phishing attack...

Atlassian Bamboo Remote Code Execution Vulnerability

Atlassian Bamboo is a set of continuous integration build tools from Atlassian Australia. A remote code execution vulnerability exists in Atlassian Bamboo versions prior to 5.6. An attacker can exploit this vulnerability to execute arbitrary code on an affected system...