The vulnerability of Cisco Nexus 7000 software allows a malicious individual to increase their privileges.

The vulnerability in Cisco NX-OS devices of the Nexus 7000 series – where multiple virtual device contexts VDC are enabled, along with local authentication – allows remote users who have passed authentication to elevate their privileges within an unplanned VDC environment. This is achieved by usi...

The vulnerability of Samba software allows a malicious individual to compromise the accessibility of protected information.

The vulnerability in the pushascii function of Samba’s smbd allows remote users who have completed authentication to trigger a service failure—a memory-related error and an unexpected termination of the daemon—by attempting to read the path name in Unicode format without using Unicode. This leads...

The vulnerability of the Cisco IronPort Email Security Appliance allows a malicious individual to execute arbitrary code.

The vulnerability in the SLBL service a check for reliable/locked users in Cisco AsyncOS, used by Email Security Appliances and Content Security Management Appliances, allows remote users who have passed authentication to execute arbitrary code with superuser privileges, by downloading a modified...

The vulnerability of the MySQL database management system allows unauthorized users, after passing authentication, to affect the accessibility of data.

The Oracle MySQL Server database management system contains a vulnerability that allows remote users who have passed authentication to influence the accessibility of data by using a subcomponent called Partition...

The vulnerability of the PostgreSQL database management system allows remote users who have passed authentication to elevate their privileges levels.

The vulnerability of the PostgreSQL database management system relates to errors that occur when calling a function written in another language, or which the user cannot call directly due to established access restrictions. Exploiting this vulnerability in functions of PostgreSQL’s procedural...

The vulnerability of the MySQL database management system allows a malicious actor to trigger a service failure after passing authentication.

The Oracle MySQL database management system contains a vulnerability that can be exploited by remote users who have passed authentication. This vulnerability allows these users to affect the accessibility of data by using the Data Manipulation Language subcomponent...

HPE Insight Control server deployment information disclosure vulnerability (CNVD-2016-03947)

HPE Insight Control server deployment is a set of server management configuration tools from Hewlett Packard Enterprise HPE. An information disclosure vulnerability exists in HPE Insight Control server deployment, which could allow an authenticated remote user to obtain sensitive information or...

WordPress Cross-Site Scripting Vulnerability (CNVD-2016-03651)

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A cross-site scripting vulnerability exists in WordPress versions prior to 4.3.1 that allows remote, authenticated users to inject arbitrary...

WordPress SP Projects and Document Manager Plugin SQL Injection

An SQL injection vulnerability exists in the WordPress SP Projects and Document Manager Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...

HPE Network Node Manager Denial of Service Vulnerability

HP Network Node Manager i-series NNMi software delivers powerful out-of-the-box features to help your network operations team efficiently manage networks of any size. A security vulnerability exists in HPE Network Node Manager i NNMi versions 9.20, 9.23, 9.24, 9.25, 10.00, 10.01 that could allow ...

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer...

CVE-2016-2301

SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability (CNVD-2016-01927)

Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. Cisco Unified Communications Domain Manager CDM 8.11 suffers from a cross-site scripting vulnerability in its implementation, which can be exploited by an authenticated remote user to inject arbitrary...

Digium Asterisk Open Source Denial of Service Vulnerability (CNVD-2016-01320)

Asterisk Open Source is an open source telephone exchange PBX system software from Digium, USA. The software supports voicemail, multi-party voice conferencing, interactive voice response IVR and so on. A denial of service vulnerability exists in Digium Asterisk Open Source that allows...

Cisco StarOS Elevation of Privilege Vulnerability

Cisco StarOS on ASR 5000 is a set of operating systems from Cisco that run on 5000 series router devices. An elevation of privilege vulnerability in Cisco StarOS on Cisco ASR 5000 prior to version 19.3.M0.62771 and version 20.x prior to version 20.0.M0.62768 allows an authenticated remote user to...

NHN PlayArt LINE Denial of Service Vulnerability

NHN PlayArt LINE is a suite of live chat software from the Japanese company NHN PlayArt. A denial of service vulnerability exists in NHN PlayArt LINE version 4.3.1 and prior versions, which allows a remote, authenticated user to cause a denial of service application crash by exploiting the...

Cybozu Office Denial of Service Vulnerability (CNVD-2016-01263)

Cybozu Office is a WEB-based cross-platform office solution developed by Cybozu Japan. A denial of service vulnerability exists in Cybozu Office versions 9.9.0 through 10.3.0 that could allow an authenticated remote user to cause a denial of service via a crafted CSV file...

DEBIAN-CVE-2015-8631

Multiple memory leaks in kadmin/server/serverstubs.c in kadmind in MIT Kerberos 5 aka krb5 before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service memory consumption via a request specifying a NULL principal name...

CVE-2016-1323

The REST interface in Cisco Spark 2015-06 allows remote authenticated users to obtain sensitive information via a request for an unspecified file, aka Bug ID CSCuv84048...

CVE-2016-0882

EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...