Multiple cross-site scripting vulnerabilities in Fortinet FortiManager (CNVD-2015-07354)

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and can group devices into different management domains ADOM to further simplify multi-device security deployment and managemen...

librsync Limit Bypass Vulnerability

librsync is a free software library developed by software developer Martin Pool that implements the rsync remote-delta algorithm which enables fast and instantaneous updating of remote files over a network. A security restriction bypass vulnerability exists in versions of librsync prior to 1.0.0...

Apple Safari/iTunes WebKit Memory Corruption Vulnerability (CNVD-2015-07108)

IOS is an operating system developed by Apple for mobile devices; Safari is the latest operating system for Apple computers; the browser in Mac OS X; and iTunes is a digital media playback application. A security vulnerability exists in WebKit in Apple iOS versions prior to 9.1, Safari versions...

Dojo Toolkit Cross-Site Scripting Vulnerability

Dojo Toolkit is the Dojo Foundation a JavaScript language implementation of open source DHTML toolkit . A cross-site scripting vulnerability exists in versions of Dojo Toolkit prior to 1.2. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...

Android elevation of privilege vulnerability (CNVD-2015-06569)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. An elevation of privilege vulnerability exists in Android versions prior to 5.1.1, LMY48T, which allows an attacker to gain privileges through a crafted application...

Android elevation of privilege vulnerability (CNVD-2015-06568)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. An elevation of privilege vulnerability exists in Android versions prior to 5.1.1, LMY48T, which allows an attacker to gain privileges through a crafted application...

Newphoria Koritore app has full vulnerability

Newphoria Koritore for Android and iOS is a set of Android and iOS based platforms from Newphoria Japan. A security vulnerability exists in versions of the Newphoria Koritore app for Android and iOS based platforms prior to version 1.1. An attacker can exploit the vulnerability to bypass the URL...

FreeType parse_encoding function denial of service vulnerability

FreeType is a library of popular font functions. A security vulnerability exists in the parseencoding function of type1/t1load.c in versions of FreeType prior to 2.5.3, which can be exploited by remote attackers to cause a denial of service infinite loop...

NScripter Buffer Overflow Vulnerability

NScripter is a suite of scripting engines for building and executing games from the Japanese company NScripter. A buffer overflow vulnerability exists in versions of NScripter prior to 3.00, allowing remote attackers to execute arbitrary code via carefully saved data...

FFmpeg Denial of Service Vulnerability (CNVD-2015-05845)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'decodeihdrchunk' function in the libavcodec/pngdec.c file in versions of FFmpeg prior to 2.7.2, which can be exploited by remote attackers to cause a...

HP Version Control Repository Manager Information Disclosure Vulnerability (CNVD-2015-05736)

HP Version Control Repository Manager is a set of version control repository management products from Hewlett-Packard HP. An information disclosure vulnerability exists in HP Version Control Repository Manager versions prior to 7.5.0. It allows an authenticated remote user to obtain sensitive...

HP KeyView Arbitrary Code Execution Vulnerability (CNVD-2015-05714)

HP KeyView is file filtering and conversion software that extracts file content and metadata. A security vulnerability exists in the implementation of HP KeyView versions prior to 10.23.0.1 and prior to 10.24.0.1. A remote attacker can exploit this vulnerability to execute arbitrary code...

HP KeyView Arbitrary Code Execution Vulnerability (CNVD-2015-05718)

HP KeyView is file filtering and conversion software that extracts file content and metadata. A security vulnerability exists in the implementation of HP KeyView versions prior to 10.23.0.1 and prior to 10.24.0.1. A remote attacker can exploit this vulnerability to execute arbitrary code...

EUVD-2015-5380

Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2885...

DEBIAN-CVE-2015-6524

The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-361...

Foreman Information Disclosure Vulnerability

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A security vulnerability exists in Foreman versions prior to 1.8.1 that stems from the program not setti...

mysql: unspecified vulnerability related to Server:Security:Encryption (CPU Jan 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption...

mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU July 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Pluggable Auth...

UBUNTU-CVE-2015-3438

Multiple cross-site scripting XSS vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, allow remote attackers to inject arbitrary web script or HTML via a 1 four-byte UTF-8 character or 2 invalid character that reaches the database layer, as demonstrated by a crafted...

LEMON-S PHP Simple Oekaki BBS Cross-Site Scripting Vulnerability

LEMON-S PHP Simple Oekaki BBS is a PHP-based electronic bulletin board BBS script. A cross-site scripting vulnerability exists in the index.php script in LEMON-S PHP Simple Oekaki BBS versions prior to 1.21. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...