OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508...

JDK: unspecified vulnerability fixed in 7u111 and 8u101 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX...

OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508...

DEBIAN-CVE-2016-3498

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX...

Multiple vulnerabilities in OpenBSD (CNVD-2016-05204)

OpenBSD is a cross-platform, BSD-based UNIX-like operating system developed by the Canadian OpenBSD project. OpenBSD contains memory corruption vulnerabilities and denial of service vulnerabilities that can be exploited by attackers to cause kernel errors and deny service to legitimate users...

Unspecified Vulnerability in Oracle Database Server Portable Clusterware

Oracle Database Server is an object-relational database management system. It provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Portable Clusterware component of Oracle Database Server versions 11.2.0.4, 12.1.0.2, which can ...

CDNsun and OnApp Remote Denial of Service Vulnerabilities

CDNsun is a suite of solutions providing global video streaming and content delivery services from CDNsun, Czech Republic.OnApp is a suite of cloud management solutions for hosters from OnApp, UK. A remote denial of service vulnerability exists in CDNsun and OnApp, which could be exploited by an...

The vulnerability of the libpng library, which allows a hacker to cause a service failure or exert other effects

The vulnerability of the pngsetPLTE function in the libpng library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions or other effects such as the termination of an application by using a specially crafted PNG ima...

The vulnerability of the Cairo vector graphics library, which allows a hacker to cause a service failure

The vulnerability of the fillxrgb32lerpopaquespans function in the Cairo vector graphics library is due to buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure such as out-of-memory reading or application termination by setting the length of the interv...

The vulnerability of the libtorrent library, which allows a hacker to trigger a service failure

The vulnerability of the parsechunkheader function in the libtorrent library exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure abrupt termination of operations through a specially crafte...

The vulnerability of the libxml2 library, which allows a hacker to trigger a service failure

The vulnerability of the xmlParseXmlDecl function in the parser.c file of the libxml2 library arises due to an overflow of memory buffer in dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by triggering errors after a coding process interrupti...

Scan Reveals Hydropower Plants, Other Critical Infrastructure Exposed Online

An Internet scan of the IPv4 address space uncovered more than 100 critical facilities exposed to the public Internet, including hydropower plants in Germany and Italy, and a smart building in Israel hosting luxury apartments. The investigation, conducted by researchers at Internet Wache of Berli...

The vulnerability of the library that handles system calls and core functions of glibc allows a attacker to cause a service failure or execute arbitrary code.

...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kernel-headers-2.6.8-2-sparc64 Debian GNU/Linux operating system can be exploited, resulting in a violation of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Zyxel ZLD operating system, which allows a malicious individual to trigger a service failure.

The Web interface of the Zyxel ZyWALL USG 300 network switch/router contains a vulnerability related to authentication on the client side. This allows a malicious individual to obtain device administrator privileges by manipulating the “IsAdmin” parameter...

The vulnerability of the Zyxel ZLD operating system allows a remote attacker to trigger a service failure.

The Apache HTTP Server, which is part of the Zyxel ZyWALL USG 300 network interface/router, incorrectly handles HTTP requests with modified Range fields. As a result, the device stops responding to HTTP requests...

The vulnerability of the QEMU hardware emulation software allows attackers to enhance their privileges, cause service failures, or gain access to protected information.

The vulnerability of the QEMU hardware emulation software is related to lack of access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges, cause service failures, or gain access to protected information using a guest operating system...

The vulnerability of the Multimedia Toolkit QuickTime, allowing a hacker to execute arbitrary code or cause a service failure

The vulnerability of the Multimedia Toolkit QuickTime is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure using a specially crafted file...

The vulnerability of the IBM Domino electronic document management system allows a malicious actor to execute arbitrary code or trigger a service failure remotely.

The IBM Domino electronic document management system has a vulnerability related to memory errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the PHP interpreter allows a remote attacker to trigger a service failure or otherwise affect the system.

The vulnerability of the PHP interpreter in the pharrenamearchive function pharobject.c lies in the use of memory after it is freed. As a result of exploiting this vulnerability, a malicious actor who operates remotely can cause service interruptions or otherwise affect the system by attempting t...