QEMU 'qemu-char.c' Denial of Service Vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in the qemu-char.c file in QEMU. An attacker can exploit this vulnerability to cause a denial of...

Microsoft Office Information Disclosure Vulnerability (CNVD-2016-12362)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An information disclosure vulnerability exists in Microsoft Office. An attacker can exploit this...

Google Nexus NVIDIA GPU Driver Local Elevation of Privilege Vulnerability (CNVD-2016-12234)

Android on Nexus 9 is a Linux-based open source operating system for the Nexus 9 tablet PC developed by Google and the Open Handheld Alliance OHA.The NVIDIA GPU Driver is one of the NVIDIA GPU drivers that is used in the... A local elevation of privilege vulnerability exists in the NVIDIA GPU...

Microsoft Win32k Elevation of Privilege Vulnerability (CNVD-2016-10936)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the kernel mode driver for Microsoft Windows. An attacker could exploit this vulnerability to run arbitrary code in kernel mode...

Google Chrome DevTools Boundary Read Vulnerability

Google Chrome is a popular web browser. A boundary read vulnerability exists in Google Chrome DevTools. An attacker can exploit the vulnerability to obtain sensitive information...

Adobe Flash Player Competitive Conditions Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A competitive condition vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability t...

The vulnerability of the Cisco Wireless LAN Controller 2500 software allows a malicious individual to cause service failure.

The vulnerability in Cisco Wireless LAN Controller WLC devices allows malicious actors to trigger a service failure device reboot by using specially crafted Ethernet frames based on 802.11 protocols...

Unspecified Vulnerability in libarchive ZIP Parser

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's ZIP parser that can be exploited by an attacker to cause a program crash...

libarchive ISO Parser Infinite Loop Vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in the ISO parser of libarchive. An attacker could exploit this vulnerability to cause an infinite loop...

libarchive RAR Parser Null Pointer Access Vulnerability

libarchive is a multi-format archive and compression library. A null pointer access vulnerability exists in libarchive's RAR parser. An attacker could exploit this vulnerability to cause null pointer access...

PHP 5.6.x < 5.6.22 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.22. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds read error exists in the gdContributionsCalc function within file ext/gd/libgd/gdinterpolation.c. An unauthenticated,...

Adobe Flash Player Use After Free Code Execution (APSB16-15: CVE-2016-1097)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Uclibc-ng Denial of Service Vulnerability

Uclibc-ng is a C library for developing embedded Linux systems. A denial of service vulnerability exists in Uclibc-ng. An attacker can exploit this vulnerability to cause a denial of service...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a local attacker to increase their privileges by using a special application known as “Win32k Pool Buffer Overflow Vulnerability”...

Adobe Flash Player Heap Buffer Overflow (APSB15-32: CVE-2015-8446)

A heap buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Huawei LogCenter Denial of Service Vulnerability

Huawei LogCenter is a set of log management software from Huawei, China. A denial of service vulnerability exists in Huawei LogCenter. An attacker could exploit this vulnerability to cause the application to deny service to legitimate users...

Google Android Security Restriction Bypass Vulnerability

Android is an operating system based on the Linux open kernel and is a mobile operating system announced on November 5, 2007 by Google Inc. Google Android is implemented with a security restriction bypass vulnerability, which can be exploited by an attacker to bypass certain security restrictions...

Filezilla Client - SEH Buffer Overflow Vulnerability

FileZilla Client is a free FTP client software. A buffer overflow vulnerability exists in Filezilla Client - SEH. An attacker can exploit the vulnerability to perform a task vulnerability...

Adobe Flash Player Same Origin Policy Bypass (APSB15-16: CVE-2015-3116; CVE-2015-3115)

A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

FileZilla FTP Client Remote Denial of Service Vulnerability

FileZilla FTP Client is a free FTP client software. The software supports intermittent file transfers, site management, and encryption. FileZilla FTP Client suffers from a remote denial of service vulnerability. An attacker can exploit this vulnerability to crash the affected application and deny...