Fortinet FortiClient SSL_VPN for Linux Remote Code Execution Vulnerability

Fortinet FortiClient SSLVPN for Linux is a Linux-based VPN client for connecting to Fortinet devices. A remote code execution vulnerability exists in Fortinet FortiClient SSLVPN for Linux. An attacker can exploit this vulnerability to overwrite arbitrary files with FortiClient log files...

Cisco IOS DHCP Denial of Service Vulnerability

Cisco IOS is an operating system developed by Cisco for its network devices. A security vulnerability exists in the DHCP client implementation of Cisco IOS. A remote attacker can exploit this vulnerability to send specially crafted DHCP messages to conduct denial-of-service attacks...

QEMU 'nbd/client.c' Stack Buffer Overflow Vulnerability

QEMU aka Quick Emulator is a suite of analog processor software developed by French programmer Fabrice Bellard. QEMU suffers from a stack buffer overflow vulnerability that arises from the program's failure to perform sufficient boundary checks on user-supplied data before copying it to an...

CVE-2016-1548

An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimat...

IBM Tivoli Storage Manager Client Local Buffer Overflow Vulnerability

IBM Tivoli Storage Manager Client is a storage-based solution in the IT administrator management component of IBM USA specifically tailored for enterprise use of IBM products. A local buffer overflow vulnerability exists in IBM Tivoli Storage Manager Client that stems from a failure to adequately...

EMC RSA BSAFE Micro Edition Suite Brute Force Vulnerability

EMC RSA BSAFE Micro Edition Suite MES is an encryption toolkit from EMC Corporation. The toolkit can help developers achieve stable and secure application design. A brute force vulnerability exists in the client in EMC RSA BSAFE MES version 4.0.x prior to 4.0.9 and version 4.1.x prior to 4.1.5. A...

China Telecom WingPay Android client gesture lock has design flaws

Wing Pay is a mobile payment service launched by China Telecom. A design vulnerability exists in the gesture lock of the Wing Pay Android client. By exploiting the vulnerability, an attacker can bypass the gesture lock security mechanism of the Wing Pay Android client and obtain users' private...

Cygnus eMail Client - Email Content Cross-Site Scripting Vulnerability

Cygnus EaseMail Client is a professional e-mail client software for sending, receiving and managing e-mails, supporting the import of certificates and encrypted sending. A cross-site scripting vulnerability exists in the Cygnus Ease Mail client. It allows attackers to insert malicious js code int...

mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. NOTE: the previo...

Symantec Endpoint Protection Client Competitive Conditions Vulnerability

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec Corporation. It provides security across physical and virtual systems, and SEP Client is the client software. A competitive condition vulnerability exists in SEP Client version 12.1. An attacker with local access coul...

FSMCMS /cms/client/uploadpic_html. jsp arbitrary file upload

No description provided by source...

Medium: ntp

Issue Overview: It was found that an ntpd client could be forced to change from basic client/server mode to the interleaved symmetric mode. A remote attacker could use a spoofed packet that, when processed by an ntpd client, would cause that client to reject all future legitimate server responses...

Code injection

The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream...

UBUNTU-CVE-2016-0777

The resendbytes function in roamingcommon.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key...

The vulnerability of the Mac OS X operating system allows a perpetrator to gain access to protected information in the kernel’s memory.

The vulnerability of the SMBClient component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an intruder, operating locally, to gain access to protected information in the kernel memory...

PT-2019-5368 · Mysql Server +8 · Mysql Client +8

Name of the Vulnerable Software and Affected Versions: MySQL Client versions 5.6.47 and prior MySQL Client versions 5.7.29 and prior MySQL Client versions 8.0.18 and prior Description: The issue is related to a lack of protection for service data in the MySQL Client C API component. It allows a...

PT-2020-2609 · Mysql Server +9 · Mysql Client +9

Name of the Vulnerable Software and Affected Versions: MySQL Client versions 5.6.47 and prior MySQL Client versions 5.7.27 and prior MySQL Client versions 8.0.17 and prior Description: The issue is related to the C API component of the MySQL Client product, which has inadequate access control. Th...

PT-2020-1448 · Mysql Server +8 · Mysql Client +8

Name of the Vulnerable Software and Affected Versions: MySQL Client versions 5.6.46 and prior MySQL Client versions 5.7.28 and prior MySQL Client versions 8.0.18 and prior Description: The issue is related to errors in resource release in the C API component of the MySQL Client product. It allows...

UBUNTU-CVE-2015-4600

The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an unexpected data type, related to "type confusion" issues in the 1...

async-http-client certificate validation vulnerability

async-http-client is a client library that allows Java applications to perform HTTP requests and asynchronously process that HTTP response. async-http-client fails to properly disable SSL/TLS certificate validation, allowing an attacker to exploit the vulnerability to conduct a man-in-the-middle...