Apache Hadoop Information Disclosure Vulnerability (CNVD-2016-01285)

Apache Hadoop is the U.S. Apache Apache Software Foundation's set of open source distributed systems infrastructure, it can be distributed processing of large amounts of data, and has high reliability, high scalability, high fault tolerance and other characteristics. An information disclosure...

IBM SPSS Modeler Information Disclosure Vulnerability

IBM SPSS Modeler formerly known as Clementine is a set of data mining platforms from the American company IBM. The platform provides a visual environment for rapid model building, and provides functions such as data source connection, data processing, modeling and analysis. A security vulnerabili...

setroubleshoot: insecure use of commands.getstatusoutput in sealert

A shell command injection flaw was found in the way the setroubleshoot executed external commands. A local attacker able to trigger certain SELinux denials could use this flaw to execute arbitrary code with root privileges...

Multiple Arbitrary File Read Vulnerabilities in Cisco Firepower 9000 Series

Cisco Firepower 9000 is a set of Cisco Cisco running in the 9000 series of firewall devices in the operating system. Multiple arbitrary file read vulnerabilities exist in the Cisco Firepower 9000 Series. This vulnerability could be exploited by an attacker to read arbitrary files on an affected...

The vulnerability of the Oracle E-Business Suite system’s automation activities allows a perpetrator to gain unauthorized access to read data.

The vulnerability of the Oracle Application Object Library component in the Oracle E-Business Suite automation system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read data...

The vulnerability of the Mac OS X operating system allows a perpetrator to gain access to protected information in the kernel’s memory.

The vulnerability of the IOGraphics component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information in the kernel memory through a specially...

Apple OS X IOAudioFamily Kernel Memory Leak Vulnerability

Apple OS X is an operating system developed by Apple Inc. A security vulnerability exists in Apple OS X IOAudioFamily, which can be exploited by local attackers to gain access to kernel memory contents...

The vulnerability of the iOS operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the iTunes Store component of the iOS operating system is related to the lack of protection for operational data. Exploiting this vulnerability could allow a local attacker to access protected information due to errors in AppleID processing...

Cisco IOS/IOS XE SSHv2 Body Authentication Bypass Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. Cisco IOS and IOS XE Software have a security vulnerability in the implementation of the SSHv2 protocol. A remote attacker could exploit this vulnerability to bypass the user...

The vulnerability of the Internet Explorer browser, which allows a violator to access protected information

The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially crafted web page...

CVE-2013-2056

The Inter-Satellite Sync ISS operation in Red Hat Network RHN Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to obtain channel content by skipping the initial authentication call...

Filet-o-Firewall UPnP Security Vulnerability in Home Routers

Security vulnerabilities in UPnP continue to crop up and continue to put millions of home networking devices at risk for compromise. The latest was revealed in early August, but prompted an advisory yesterday from the DHS-sponsored CERT at the Software Engineering Institute at Carnegie Mellon...

The vulnerability of the Internet Explorer browser, which allows a hacker to gain access to the history of visited pages

The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the history of visited pages through image caching errors...

Microsoft Windows OpenType Font Remote Code Execution Vulnerability (CNVD-2015-05364)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A font remote code execution vulnerability exists in Microsoft Windows OpenType, which can be exploited by an attacker to take full control of an affected system...

The vulnerability of the Windows operating system, which allows a perpetrator to gain access to protected information

The vulnerability of kernel-level drivers in the Windows operating system is related to the lack of protection for privileged data. Exploiting this vulnerability can allow a local attacker to gain access to protected information through a specially crafted application...

Thetis vulnerable to SQL injection

Overview Thetis provided by Sysphonic Co., Ltd. is an open source groupware and SNS. Thetis contains a SQL injection CWE-89 vulnerability. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An attack...

Apache Tomcat JK Connector (mod_jk) < 1.2.41 Authentication Bypass Vulnerability

Apache Tomcat JK Connector modjk is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

Multiple vulnerabilities exist in the kernel-image-2.4.27-xxs1500 operating system of the Debian GNU/Linux distribution. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The “multiple vulnerabilities” of the squashfs-modules-2.6.18-6-xen-vserver-686 package of the Debian GNU/Linux operating system may lead to violations of confidentiality, integrity, and accessibility of protected information. The exploitation of these vulnerabilities can be carried out by local...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

Multiple vulnerabilities exist in the varnish operating system package for Debian GNU/Linux; exploiting these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...