DEBIAN-CVE-2016-3119

The processdbargs function in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 aka krb5 through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service NULL pointer dereferenc...

CA Single Sign-On non-Domino Web Proxy Denial of Service Vulnerability

CA Single Sign-On is a suite of software for secure access to Web applications via single sign-on from CA USA. A security vulnerability exists in CA Single Sign-On's Domino Web Agent. A remote attacker could exploit the vulnerability by sending a specially crafted request to cause a denial of...

Design/Logic Flaw

WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to bypass the Same Origin Policy and obtain physical-location data via a crafted geolocation request...

Cross site request forgery (csrf)

The Domino web agent in CA Single Sign-On aka SSO, formerly SiteMinder R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5, R12.51 before CR4, and R12.52 before SP1 CR3 allows remote attackers to cause a denial of service daemon crash or obtain sensitive information via a crafted...

IBM WebSphere Commerce Denial of Service Vulnerability (CNVD-2016-01748)

IBM WebSphere Commerce is a suite of e-commerce solutions. The solution supports all sales business models, including B2C, B2B and B2B2C, on a single customer interaction platform. An unspecified security vulnerability exists in IBM WebSphere Commerce that could be exploited by a remote attacker ...

Apache Subversion mod_dav_svn Integer Overflow (CVE-2015-5343)

Heap overflow and out-of-bounds read vulnerabilities have been reported in the moddavsvn of Apache Subversion web servers. These vulnerabilities are caused by an integer overflow when parsing certain encoded requests. A remote, authenticated attacker could exploit this vulnerability by sending...

Cisco DPC3939B and DPC3941 Information Disclosure Vulnerabilities

The Cisco DPC3939B and DPC3941 are both wireless voice network management products from Cisco USA. web-based administration interface is one of the web-based administration interfaces. A security vulnerability exists in the web-based administration interface of the Cisco DPC3939B and DPC3941. A...

CVE-2016-1325

The administration interface on Cisco DPC3939B and DPC3941 devices allows remote attackers to obtain sensitive information via a crafted HTTP request, aka Bug ID CSCus49506...

CVE-2016-1359

Cisco Prime Infrastructure 3.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP request that is mishandled during viewing of a log file, aka Bug ID CSCuw81494...

phpMyAdmin 4.4.x < 4.4.15.3 / 4.5.x < 4.5.4 Multiple Vulnerabilities (PMASA-2016-6, PMASA-2016-7)

Binary data 9116.prm...

The vulnerability of Microsoft SharePoint Foundation software allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially created request...

IBM WebSphere Commerce Information Disclosure Vulnerability (CNVD-2016-01374)

IBM WebSphere Commerce is a suite of e-business solutions. A security vulnerability exists in IBM WebSphere Commerce. An attacker could exploit the vulnerability by submitting a special request to obtain sensitive information...

Squid Denial of Service Vulnerability (CNVD-2016-01384)

Squid is a suite of proxy server and web caching server software. A security vulnerability exists in Squid that could be exploited by remote attackers to submit a special request that could crash an application and cause a denial of service...

phpMyAdmin 4.5.x < 4.5.4 Multiple Vulnerabilities (PMASA-2016-8, PMASA-2016-9)

According to its self-reported version number, the phpMyAdmin application hosted on the remote web server is 4.5.x prior to 4.5.4. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists in multiple scripts that allows a remote attacker, via ...

CVE-2016-2044

libraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...

Design/Logic Flaw

phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...

CVE-2016-2042

phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request to 1 libraries/phpseclib/Crypt/AES.php or 2 libraries/phpseclib/Crypt/Rijndael.php, which reveals the full path in an error message...

UBUNTU-CVE-2016-2044

libraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...

CVE-2016-2038

phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...

CVE-2016-2042

phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request to 1 libraries/phpseclib/Crypt/AES.php or 2 libraries/phpseclib/Crypt/Rijndael.php, which reveals the full path in an error message...