Apport Local Elevation of Privilege Vulnerability (CNVD-2015-03433)

Apport is a toolkit for collecting and providing feedback on error messages. A local boost vulnerability exists in Apport, which allows a local attacker to gain root privileges...

python-dbusmock local code execution vulnerability

python-dbusmock is a Python library for creating simulated objects on the D-Bus. A security vulnerability exists in python-dbusmock that allows a local attacker to exploit the vulnerability to execute arbitrary code...

Amazon App Store Cross-Site Scripting Vulnerability

The Amazon App Store is a set of application stores from Amazon.com, Inc. in the United States. A cross-site scripting vulnerability exists in Amazon App Store. An attacker can exploit the vulnerability to execute arbitrary script code in the browser of a trusted user in the context of the affect...

Linux Kernel Local Elevation of Privilege Vulnerability (CNVD-2015-03232)

The Linux Kernel is the kernel of the Linux operating system. Linux kernel has a local elevation of privilege vulnerability in its implementation. A local attacker can exploit this vulnerability to gain elevated privileges...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-03092)

Microsoft Internet Explorer is a WEB-based browser. An unspecified memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by a remote attacker to construct a malicious web page that could be parsed by the user, causing the application to crash or execute...

Microsoft Windows Kernel Mode Driver Information Disclosure Vulnerability (CNVD-2015-03070)

Microsoft Windows is a popular operating system. An unspecified security vulnerability in Microsoft Windows Win32k.sys allows local attackers to exploit the vulnerability to build special applications that run on the system to obtain kernel memory information...

Unspecified Memory Corruption Arbitrary Code Execution Vulnerability in Adobe Reader/Acrobat (CNVD-2015-03132)

Adobe Reader/Acrobat are popular applications for processing PDF files. A memory corruption vulnerability exists in Adobe Reader/Acrobat's handling of particular PDF files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing them,...

PHP '__toString()' Function Type Obfuscation Information Disclosure Vulnerability

PHP is a widely used general-purpose scripting language that is particularly well suited for web development and can be embedded in HTML. PHP suffers from a type confusion vulnerability in the 'toString' function. An attacker can exploit this vulnerability to obtain vulnerability information...

Microsoft Internet Explorer ASLR Bypass Vulnerability (CNVD-2015-03104)

Microsoft Internet Explorer is a WEB-based browser. An unspecified ASLR bypass vulnerability exists in Microsoft Internet Explorer, which allows remote attackers to exploit the vulnerability to construct a malicious WEB page that can be tricked into parsing, bypassing security restrictions, and...

Apple Safari WebKit Memory Corruption Vulnerability (CNVD-2015-02941)

WebKit is the open source web browser engine currently used by Safari, Chrome and other browsers. A memory corruption vulnerability exists in Apple Safari prior to 6.2.6, 7.x prior to 7.1.6, and 8.x prior to 8.0.6 using WebKit, which allows remote attackers to execute arbitrary code or cause a...

Oracle E-Business Suite suffers from a remote vulnerability (CNVD-2015-02472)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. A remote security vulnerability exists in Oracle E-Business Suite. It allows attackers to exploit this vulnerability to compromise the 'Configurator DMZ rules' subcomponent in the 'HTTP' protocol...

Oracle Database Server has a remote vulnerability (CNVD-2015-02520)

Oracle Database is a large database of commercial nature. A remote vulnerability exists in Oracle Database Server that allows an attacker to gain 'Valid account' privileges using the 'Oracle Net' protocol...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-02478)

Oracle MySQL Server is an open source relational database management system. A security vulnerability exists in Oracle MySQL Server:InnoDB. An attacker is allowed to exploit this vulnerability to affect the availability of the system...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-02473)

Oracle MySQL Server is an open source relational database management system. A security vulnerability exists in the 'Server : Compiling' subpart of Oracle MySQL. An attacker is allowed to exploit this vulnerability to affect the availability of the system...

Adobe Flash Player Arbitrary Code Execution Vulnerability (CNVD-2015-02488)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. An arbitrary code execution vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerabili...

Apple Mac OS X fontd arbitrary code execution vulnerability (CNVD-2015-02344)

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X fontd has an unspecified input validation vulnerability that allows local users to exploit the vulnerability to elevate privileges...

Apple Mac OS X fontd arbitrary code execution vulnerability (CNVD-2015-02345)

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X fontd has an unspecified input validation vulnerability that allows local users to exploit the vulnerability to elevate privileges...

Apple iOS Safari History Disclosure Vulnerability (CNVD-2015-02332)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A state management vulnerability exists in Apple iOS Safari's handling of user browser clearing, which could result in the history not being cleared correctly. A remote attacker can exploit the...

Apple iOS Safari History Disclosure Vulnerability (CNVD-2015-02331)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS Safari fails to properly clear recently closed tabs when clearing history, allowing attackers to exploit the vulnerability to obtain sensitive information...

Apple iOS Webkit suffers from unspecified memory corruption vulnerability (CNVD-2015-02328)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An unspecified memory corruption vulnerability exists in Apple iOS Webkit, which allows attackers to exploit the vulnerability to construct a malicious web page that can be tricked into being parsed by a...