Microsoft Windows ATMFD.DLL Elevation of Privilege (MS16-074: CVE-2016-3220)

An out of bound memory access vulnerability exists in Microsoft Windows ATMFD.DLL. The root cause is within atmfd.dll sub components that miscalculate indices to an array when dealing with a specially crafted ttf file. A successful exploitation could allow an attacker to run arbitrary code with...

rConfig 3.1.1 - Local File Inclusion

Title =================== rConfig, the open source network device configuration management tool, Vulnerable to Local File Inclusion Summary =================== rConfig, the open source network device configuration management tool, is vulnerable to local file inclusion in /lib/crud/downloadFile.ph...

Design/Logic Flaw

A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

Adobe Flash Out of Bounds Access Code Corruption (CVE-2016-4117)

An out of bounds access vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a type-confused parameter in Adobe Flash Player SWF file. A remote attacker can exploit this issue by using the out of bounds access for unintended reads, writes or frees – potentially leadi...

Accuenergy Acuvim II and IIR AXN-NET Module Configuration Modification Vulnerability

Accuenergy Acuvim II and IIR are Accuenergy's multi-function network power meters that provide power parameter measurement, four-quadrant power metering, and out-of-limit alarms.AXN-NET is one of the Ethernet module accessories. A security vulnerability in the AXN-NET module of the Accuenergy...

CVE-2016-1034

The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attackers to read or write to arbitrary files via unspecified vectors...

Tap play Anime Music SAO ver - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Tap play Anime Music SAO ver published at the 'play' market has multiple vulnerabilities...

Cut and Edit Photos - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Cut and Edit Photos published at the 'play' market has multiple vulnerabilities...

Mein Budget - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Mein Budget published at the 'play' market has multiple vulnerabilities...

The vulnerability of the application interface of IBM WebSphere Portal servers allows a hacker to gain access to read data or modify data.

The vulnerability of the application interface of IBM WebSphere Portal servers exists due to the lack of measures to eliminate special elements in LDAP requests implementation of LDAP. Exploiting this vulnerability allows a malicious actor to gain access to read data or modify data remotely...

openssh, pam_ssh_agent_auth security update

CentOS Errata and Security Advisory CESA-2016:0465 Updated openssh packages that fix two security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...

Ecava IntegraXor SCADA Server权限访问漏洞

No description provided by source...

Android Widevine Trusted Application Information Disclosure Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Widevine Trusted Application is one of the components used to validate the Google DRM platform. A security vulnerability exists in Widevine Trusted Application in version 6.0.1 of...

CVE-2016-0763

The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass...

CVE-2016-0753

Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters...

CVE-2015-8792

The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access...

Unspecified Vulnerability in Oracle E-Business Suite Oracle E-Business Intelligence Definition Component (CNVD-2016-00642)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle E-Business Intelligence Definition component, which allows remote attackers to exploit the vulnerability to submit special requests to...

Oracle Supply Chain Configurator UI Servlet Component Data Access Vulnerability

Oracle Supply Chain Products Suite is a suite of supply chain solutions that provides value chain planning, value chain execution, and product lifecycle management. An unspecified security vulnerability exists in the Oracle Supply Chain Configurator UI Servlet component, which allows remote...

CVE-2016-0556

Unspecified vulnerability in the Oracle Advanced Collections component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Administration, a different vulnerability than...

SUSE-SU-2016:0178-1 Security update for libxml2

This update for libxml2 fixes the following security issue: - CVE-2015-8710: Parsing short unclosed HTML comment could cause uninitialized memory access, which allowed remote attackers to read contents from previous HTTP requests depending on the application bsc960674...