Linux kernel local denial of service vulnerability (CNVD-2015-05213)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the Linux kernel. A local attacker could exploit the vulnerability to deny elevated privileges to a valid user, service, or...

IBM MQ Light Denial of Service Vulnerability (CNVD-2015-05120)

IBM MQ Light is a messaging service from IBM USA based on IBM Bluemix, a PaaS platform for creating, deploying and managing applications on the cloud. A security vulnerability exists in IBM MQ Light versions 1.0 and 1.0.0.1 due to the program failing to properly handle authentication credentials....

Google Stagefright Media Playback Engine Remote Code Execution Vulnerability (CNVD-2015-05030)

Stagefright is a media playback service for Android, introduced since version 2.2 Froyo. A remote code execution vulnerability exists in the Google Stagefright Media Playback Engine, which can be exploited by an attacker to execute arbitrary code in the context of an affected device...

Google Chrome PDFium memory misreference vulnerability (CNVD-2015-04880)

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome 44.0.2403.89 previous version of PDFium used in the fpdfsdk/src/javascript/Document.cpp file there is a memory misreference vulnerability. A remot...

Unspecified Vulnerability in Oracle Database Application Express Component (CNVD-2015-04809)

Oracle Database is a large database of commercial nature. A security vulnerability exists in the Oracle Database Application Express component that allows an authenticated user to affect system availability...

Oracle Berkeley DB Local Arbitrary Code Execution Vulnerability (CNVD-2015-04770)

Oracle Berkeley DB is the industry's leading open source, embeddable storage engine that provides developers with a fast, reliable native database that requires no administration. A security vulnerability exists in the Oracle Berkeley DB Data Store component that can be exploited by a local...

Oracle Berkeley DB Local Arbitrary Code Execution Vulnerability (CNVD-2015-04777)

Oracle Berkeley DB is the industry-leading open source, embeddable storage engine that provides developers with a fast, reliable native database that requires no administration. A security vulnerability exists in the Oracle Berkeley DB Data Store component that can be exploited by a local attacke...

Unspecified vulnerability in Oracle MySQL Server:Security:Firewall component (CNVD-2015-04718)

Oracle MySQL Server is a relational and popular database. A security vulnerability exists in the Server:Security:Firewall subcomponent of Oracle MySQL Server, which can be exploited by remote attackers to construct a malicious WEB page and trick users into parsing it, which can impact system...

Unspecified Vulnerability in Oracle Fusion Oracle Endeca Information Discovery Studio Component (CNVD-2015-04746)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Oracle Fusion Middleware Oracle Endeca Information Discovery Studio component that can be exploited by remote attackers to compromise system integrity,...

Oracle Berkeley DB Local Arbitrary Code Execution Vulnerability (CNVD-2015-04768)

Oracle Berkeley DB is the industry's leading open source, embeddable storage engine that provides developers with a fast, reliable native database that requires no administration. A security vulnerability exists in the Oracle Berkeley DB Data Store component that can be exploited by a local...

Xen stack buffer overflow vulnerability (CNVD-2015-04947)

Xen is an open source virtual machine monitor product. Xen xl command line configuration handling suffers from a stack buffer overflow vulnerability, which allows attackers to exploit the vulnerability to crash the system and cause a denial of service attack...

Adobe Reader/Acrobat JavaScript API Execution Limit Bypass Vulnerability (CNVD-2015-04647)

Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. An execution limit bypass vulnerability exists in the Adobe Reader/Acrobat JavaScript API that allows attackers to bypass JavaScript API execution limits via unknown vectors...

Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2015-04664)

Microsoft Windows Server is a series of servers based on the windows operating system launched by the U.S. Microsoft Microsoft. A security vulnerability exists in the Windows Installer service for Microsoft Windows. A local attacker can exploit the vulnerability to gain privileges via custom acti...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-04619)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A memory corruption vulnerability exists in Microsoft Internet Explorer versions 8 and 9, which allows remote attackers to exploit t...

Adobe Reader/Acrobat Security Bypass Vulnerability (CNVD-2015-04636)

Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. A security bypass vulnerability exists in Adobe Reader/Acrobat that allows an attacker to bypass intended access restrictions and perform a low-to-high integer conversion via an...

Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2015-04666)

Microsoft Windows Server is a series of servers based on the windows operating system launched by the U.S. Microsoft Microsoft. A security vulnerability exists in the authentication implementation in the RPC subsystem of Microsoft Windows due to the program not restricting link reflection. A loca...

Adobe Reader/Acrobat memory misreference vulnerability (CNVD-2015-04643)

Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. A memory misreference vulnerability exists in Adobe Reader/Acrobat that allows an attacker to execute arbitrary code via unspecified vectors...

Adobe Reader/Acrobat memory misreference vulnerability (CNVD-2015-04641)

Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. A memory misreference vulnerability exists in Adobe Reader/Acrobat that allows an attacker to execute arbitrary code via unspecified vectors...

Multiple Cross-Site Scripting Vulnerabilities in Cisco Unified Communications Manager (CNVD-2015-04702)

Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A cross-site scripting vulnerability exists in Cisco Unified Communications Manager, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can ...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-04625)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A memory corruption vulnerability exists in Microsoft Internet Explorer versions 6 through 11, which allows remote attackers to...