1585 matches found
Symantec Web Gateway Anti-Virus Definition < 20160628.037 Multiple Vulnerabilities (SYM16-010) (credentialed check)
According to its self-reported anti-virus definition version number, the remote web server is hosting a version of Symantec Web Gateway with an anti-virus definition version prior to 20160628.037. It is, therefore, affected by multiple vulnerabilities : - An array indexing error exists in the UnR...
CVE-2016-1698
The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition...
CVE-2016-1698
The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition...
CVE-2016-1698
The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition...
CVE-2016-1698
Removed by vendor...
CVE-2016-1698: Exposure of Sensitive Information to an Unauthorized Actor
The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition...
中软华泰防火墙HuaTech-2000 definition/temp/user.txt 敏感信息泄露漏洞
No description provided by source...
mysql: unspecified vulnerability related to Server:DDL (CPU October 2015)
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL...
PHP has an unspecified vulnerability (CNVD-2016-02887)
PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. PHP allows overriding of 'one definition' values, and no detailed vulnerability details are currently provided...
mysql: unspecified vulnerability in subcomponent: Server: DDL (CPU April 2016)
Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DDL...
Oracle MySQL Server: Unspecified Vulnerability in DDL Subcomponent
Oracle MySQL is an open source relational database management system. A security vulnerability exists in the Server:DDL subcomponent of Oracle MySQL, which allows remote attackers to exploit the vulnerability to affect system availability...
CVE-2016-4007
Multiple unspecified vulnerabilities in the obs-service-extractfile package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal options."...
CVE-2016-4007
Multiple unspecified vulnerabilities in the obs-service-extractfile package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal options."...
mysql: unspecified vulnerability related to Server:DDL (CPU October 2015)
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL...
AVG Internet Security 2015.5736 Address Space Layout Disclosure
The AVG Internet Security application installed on the remote Windows host is a version between 2015.5315 through 2015.5751, inclusive, with a virus definition database prior to version 9364. It is, therefore, affected by an information disclosure vulnerability due to insecure allocation of memor...
Unspecified Vulnerability in Oracle E-Business Suite Oracle E-Business Intelligence Definition Component (CNVD-2016-00642)
Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle E-Business Intelligence Definition component, which allows remote attackers to exploit the vulnerability to submit special requests to...
Unspecified Vulnerability in Oracle E-Business Suite Oracle E-Business Intelligence Definition Component (CNVD-2016-00603)
Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle E-Business Intelligence Definition component, which allows remote attackers to exploit the vulnerability to submit special requests to...
Unspecified Vulnerability in Oracle E-Business Suite Oracle E-Business Intelligence Definition Component
Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle E-Business Intelligence Common component, which could be exploited by remote attackers to submit a special request to access and modify...
SUSE SLED11 / SLES11 Security Update : xfsprogs (SUSE-SU-2015:2383-1)
xfsprogs was updated to fix one security vulnerability and several bugs. - Handle unwanted data disclosure in xfsmetadump bsc939367, CVE-2012-2150 - Fix segfault during xfsrepair run bsc911866 - Fix definition of leaf attribute block to avoid gcc optimization xfsprogs-fix-leaf-block-definition No...
The vulnerability of the MySQL database management system allows a hacker to cause a service failure.
Vulnerability of the Server sub-component: The DDL operations of the MySQL database management system are related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...