flash-plugin: multiple code execution issues fixed in APSB16-18

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083...

CVE-2016-4784

A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

WordPress WP External Links plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WP External Links version 1.80. An attacker is able to inject malicious script...

Denial of Service Vulnerability in OMRON CP1W-C1F41 Module HTTP Service

OMRON CP1H-XA40DT-D is a compact PLC from OMRON Japan, widely used in manufacturing industry.CP1W-C1F41 is an Ethernet module for CP1H-XA40DT-D PLC. A denial of service vulnerability exists in the HTTP protocol of the CP1W-C1F41 module. After establishing a link with port 80 of the CP1W-C1F41 via...

CVE-2016-2859

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-0834. Reason: This candidate is a reservation duplicate of CVE-2016-0834. Notes: All CVE users should reference CVE-2016-0834 instead of this candidate. All references and descriptions in this candidate have been removed to...

OpenJDK: protected methods can be used as interface methods via DirectMethodHandle (Libraries)

Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries...

DHCP Denial of Service Vulnerability in Multiple Huawei Products

The Huawei USG5500, USG2100, USG2200, and USG5100 are firewall products from Huawei China. The Huawei USG5500, USG2100, USG2200, and USG5100 fail to properly parse 'option82 insert' or 'option82 rebuild' when enabled. DHCP packets, allowing remote attackers to conduct denial of service attacks by...

UBUNTU-CVE-2015-4908

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4916...

Unspecified Vulnerability in Oracle Java SE (CNVD-2015-06919)

Oracle Java SE is the standard version of the Java platform is a Java2 platform to provide users with a program development environment. An unspecified vulnerability exists in Oracle Java SE 7u85 8u60,Java SE Embedded 8u51. Allows remote attackers to affect confidentiality via unspecified vectors...

OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732...

The vulnerability of the microprogramming software of Siemens Simatic S7-1200 programmable logic controllers allows a intruder to perform inter-site fraudulently by manipulating requests.

The software of the programmable logic controller Simatic S7-1200 contains a vulnerability in its built-in server port 80 TCP and port 443 TCP. Exploiting this vulnerability allows for inter-site request forgery attacks...

kernel: int80 fork from 64-bit tasks mishandling

A flaw was found in the way the Linux kernel's 32-bit emulation implementation handled forking or closing of a task with an 'int80' entry. A local user could potentially use this flaw to escalate their privileges on the system...

kernel: int80 fork from 64-bit tasks mishandling

A flaw was found in the way the Linux kernel's 32-bit emulation implementation handled forking or closing of a task with an 'int80' entry. A local user could potentially use this flaw to escalate their privileges on the system...

kernel: int80 fork from 64-bit tasks mishandling

A flaw was found in the way the Linux kernel's 32-bit emulation implementation handled forking or closing of a task with an 'int80' entry. A local user could potentially use this flaw to escalate their privileges on the system...

The vulnerability of the Red Hat Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the minicom-1.83.1 operating system from Red Hat Linux can lead to breaches of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503...

JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532...

DEBIAN-CVE-2012-5671

Heap-based buffer overflow in the dkimeximquerydnstxt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and aclsmtpconnect and aclsmtprcpt are not set to "warn control = dkimdisableverify," allows remote attackers to execute arbitrary code via an email from a malicious DN...

AZL-34841 CVE-2010-0309 affecting package kernel for versions less than 6.6.35.1-4

The pitioportread function in the Programmable Interval Timer PIT emulation in i8254.c in KVM 83 does not properly use the pitstate data structure, which allows guest OS users to cause a denial of service host OS crash or hang by attempting to read the /dev/port file...

PT-2007-3611 · 3Com · 3Com Tippingpoint Ips

Name of the Vulnerable Software and Affected Versions: 3Com TippingPoint IPS affected versions not specified Description: The issue allows remote attackers to cause a denial of service, resulting in a device hang, by flooding packets on TCP port 80 with sequentially increasing source ports. This ...