1023 matches found
Apache Tomcat information disclosure Vulnerability, CVE-2016-6816）
Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.0.M11 Apache Tomcat 8.5.0 to 8.5.6 Apache Tomcat 8.0.0.RC1 to 8.0.38 Apache Tomcat 7.0.0 to 7.0.72 Apache Tomcat 6.0.0 to 6.0.47 Earlier, unsupported versions may also be affected...
SUSE-SU-2016:2408-1 Security update for php5
This update for php5 fixes the following security issues: CVE-2016-6128: Invalid color index not properly handled bsc987580 CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif bsc988032 CVE-2016-6292: Null pointer dereference in exifprocessusercomment...
Cisco IOS and IOS XE Software ZBFW Feature Security Bypass Vulnerability
Cisco IOS and IOS XE Software are operating systems developed by Cisco for its network devices.Zone-Based Firewall ZBFW is one of the policy firewall components. A security bypass vulnerability exists in the ZBFW feature in Cisco IOS and IOS XE Software, which stems from the program failing to...
openSUSE Security Update : php5 (openSUSE-2016-1095)
This update for php5 fixes the following security issues : - CVE-2016-7124: Create an Unexpected Object and Don't Invoke wakeup in Deserialization - CVE-2016-7125: PHP Session Data Injection Vulnerability - CVE-2016-7126: selectcolors write out-of-bounds - CVE-2016-7127: imagegammacorrect allowed...
CVE-2016-7125
ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers incorrect parsing, which allows remote attackers to inject arbitrary-type session data by leveraging control of a session name, as demonstrated by object injection...
PHP < 5.6.25, 7.x < 7.0.10 Multiple Vulnerabilities (Sep 2016) - Linux
PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...
CVE-2 0 1 6-5 6 9 6 vulnerability analysis: TCP side channel security-vulnerability warning-the black bar safety net
In this article, we are going to discuss one of the latest TCP side channel Vulnerability, CVE-2 0 1 6-5 6 9 6 to. This standard is in the Linux version 3.6 before proposed, and the impact of numerous device and the host. Simply put, as long as it is between two hosts via TCP Protocol to...
SUSE-SU-2016:2019-1 Security update for rubygem-bson-1_11, rubygem-easy_diff, rubygem-redcarpet, and rubygem-sprockets-2_11
This update for rubygem-bson-111, rubygem-easydiff, rubygem-redcarpet, and rubygem-sprockets-211 fixes the following issues: - Avoid monodb data injection bnc933961, CVE-2015-4410 - Fixes merging of Arrays of Hashes bsc982364 - Fix XSS via autolinking of untrusted markdown bsc926328...
JDK: J9 JVM allows code to invoke non-public interface methods
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods...
CVE-2015-5041: Exposure of Sensitive Information to an Unauthorized Actor
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods...
Multiple I-O DATA Products Cross-Site Scripting Vulnerabilities
The I-O DATA WN-G300R is a wireless LAN router product from I-O DATA Japan. A cross-site scripting vulnerability exists in multiple I-O DATA WN-G300R products, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to...
Cisco IOS XE Multiple OpenSSL Vulnerabilities (CSCup22487)
The remote Cisco IOS XE device is missing a vendor-supplied security patch, and its web user interface is configured to use HTTPS. It is, therefore, affected by the following vulnerabilities in the bundled OpenSSL library : - An error exists in the ssl3readbytes function that could allow data to ...
Cisco NX-OS OpenSSL Multiple Vulnerabilities
The remote Cisco device is running a version of NX-OS software that is affected by multiple vulnerabilities in the bundled OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or allow denial of service attacks. Note this iss...
JDK: J9 JVM allows code to invoke non-public interface methods
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods...
JDK: J9 JVM allows code to invoke non-public interface methods
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods...
JDK: J9 JVM allows code to invoke non-public interface methods
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods...
Microsoft Internet Explorer XSS Filter Bypass Vulnerability (CNVD-2015-08027)
Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security feature bypass vulnerability exists in Microsoft IE that originates from the program failing to properly enforce...
Data Injection Vulnerability in bson Rubygem
A flaw in the ObjectId validation regular expression can enable attackers to inject arbitrary information into a given BSON object...
