F5 BIG-IP - TMM vulnerability CVE-2016-5022

An unauthenticated remote attacker maybe be able to disrupt services on the BIG-IP system with maliciously crafted network traffic. This vulnerability affects virtual servers of all types and for all protocols. Self IP addresses may also be exposed to this vulnerability. The management interface ...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption through a...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption through a...

SAP Adaptive Server Enterprise Denial of Service Vulnerability (CNVD-2016-09659)

SAP Adaptive Server Enterprise ASE is a relational database management system from SAP. The system can be used in data-intensive environments and is characterized by high speed and stable performance. A denial of service vulnerability exists in SAP Adaptive Server Enterprise V16.0. An attacker...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption through a...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption through a...

Nuclear Power Plant Disrupted by Cyber Attack

The head of an international nuclear energy consortium said this week that a cyber attack caused a “disruption” at a nuclear power plant at some point during the last several years. Yukiya Amano, the head of the International Atomic Energy Agency IAEA didn’t go into detail about the attack, but...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3098-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3098-1 advisory. Vladimr Bene discovered an unbounded recursion in the VLAN and TEB Generic Receive Offload GRO processing implementations in the Linux kernel, A remote...

USN-3096-1 ntp vulnerabilities

Aanchal Malhotra discovered that NTP incorrectly handled authenticated broadcast mode. A remote attacker could use this issue to perform a replay attack. CVE-2015-7973 Matt Street discovered that NTP incorrectly verified peer associations of symmetric keys. A remote attacker could use this issue ...

TYPO3 CMS Denial of Service Vulnerability

TYPO3 is a free and open source content management system maintained by the Swiss TYPO3 Association. A denial-of-service vulnerability exists in TYPO3, which allows attackers to exploit the vulnerability to cause a denial of service...

kernel: challenge ACK counter information disclosure.

It was found that the RFC 5961 challenge ACK rate limiting as implemented in the Linux kernel's networking subsystem allowed an off-path attacker to leak certain information about a given connection by creating congestion on the global challenge ACK rate limit counter and then measuring the chang...

OpenStack Nova Denial of Service Vulnerability (CNVD-2016-08221)

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration and Rackspace, Inc. in the U.S. OpenStack Nova is one of the cloud computing construct controllers written in Python. It is part of the IaaS system. A denial of service vulnerability...

CVE-2016-4860

Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconfigure the device or cause a denial of service via a 1 stop application program, 2 change value, or 3 modify application command...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-07670)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from the American company Adobe. A security vulnerability exists in Adobe Flash Player, which can be exploited by attackers to execute arbitrary code or cause a denial of service memory corruption...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2016-07613)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel is one of the kernels. An elevation of privilege vulnerability exists in the Microsoft Windows kernel. When the kernel API executes privileges, an attacker can exploit the vulnerabili...

libarchive Denial of Service Vulnerability

libarchive is a multi-format archive and compression library. A denial of service vulnerability exists in libarchive. A remote attacker can exploit this vulnerability to exhaust memory and cause a denial of service...

phpIPAM <= 1.2.1 Multiple Vulnerabilities

phpIPAM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpipam:phpipam"; ifdescription...

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, which are PDF viewer programs, as well as Adobe Acrobat and Adobe Acrobat Document Cloud, which are PDF editing programs, allow a perpetrator to cause service interruptions or execute arbitrary codes.

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, as well as Adobe Acrobat and Adobe Acrobat Document Cloud PDF editing programs, are due to buffer overflow attacks. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code or trigger a service failure...

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, which are PDF viewer programs, as well as Adobe Acrobat and Adobe Acrobat Document Cloud, which are PDF editing programs, allow a perpetrator to cause service interruptions or execute arbitrary codes.

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, as well as Adobe Acrobat and Adobe Acrobat Document Cloud, which are PDF viewer programs, are due to buffer overflow attacks. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code or cause a service...

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, which are PDF viewer programs, as well as Adobe Acrobat and Adobe Acrobat Document Cloud, which are PDF editing programs, allow a perpetrator to cause service interruptions or execute arbitrary codes.

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, as well as Adobe Acrobat and Adobe Acrobat Document Cloud PDF editing programs, are due to buffer overflow attacks. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code or trigger a service failure...