Plone Elevation of Privilege Vulnerability

Plone is the United States Plone Foundation's set of free and open source content management system CMS built on the application server Zope. A privilege extraction vulnerability exists in webdav in Plone versions 5.0 through 5.1a1 and 4.0 through 4.3.9, which can be exploited by an attacker to...

Apple OS X Server Information Disclosure Vulnerability (CNVD-2016-01860)

Apple OS X Server is a set of Unix-based server operating software from the U.S. company Apple Apple. The software can realize file sharing, meeting arrangement, website hosting, network remote access, etc. Web Server is one of the Web servers. A security vulnerability exists in Apple OS X Server...

Tollgrade SmartGrid LightHouse Sensor Management System Software Arbitrary Password Change Vulnerability

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software is a Web-based smart grid lighthouse sensor management system from Tollgrade, Inc. A security vulnerability exists in Tollgrade SmartGrid LightHouse SMS Software EMS versions prior to 5.1 and 4.1.0 Build 16. A remote attacker...

Apache CloudStack Trust Management Vulnerability

Apache CloudStack is a suite of open source cloud computing software from the Apache Apache Software Foundation in the United States. The software can be used to deploy, manage, and configure public and private clouds IaaS. A security vulnerability exists in Apache CloudStack 4.5.1 and earlier...

UBUNTU-CVE-2016-0812

The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.0 before 2016-02-01 does not properly check for setup completion, which allows physically proximate attackers to bypass the...

Cisco Emergency Responder Cross-Site Request Forgery Vulnerability (CNVD-2015-08366)

Cisco Emergency Responder's real-time location-address tracking database and enhanced routing capabilities can transfer emergency calls directly to the appropriate Public Safety Answering Point PASP based on the caller's location. Cisco Emergency Responder 10.51 and 10.51a fails to implement...

Android SystemUI Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. SystemUI in versions prior to Android 5.1.1 LMY48Z, 6.0 2015-12-01 and 6.0 2015-12-01 has a security vulnerability in its implementation, which can be exploited by remote attackers to read screenshots and then elevate...

Android libstagefright elevation of privilege vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of libstagefright in Android versions prior to 5.1.1 LMY48Z and 6.0 2015-12-01, which can be exploited by remote attackers to gain elevated privileges...

Cisco WebEx Meetings for Android Access Bypass Vulnerability

Cisco WebEx Meetings for Android are a set of web-based online meeting applications for the WebEx Meetings solution from Cisco USA based on the Android platform. A security vulnerability exists in Cisco WebEx Meetings for Android versions prior to 8.5.1, which can be exploited by an attacker to...

Android Display Driver Memory Corruption Vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the display driver of Android versions prior to 5.1.1 LMY48Z, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...

The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a intruder to authenticate as an arbitrary user.

The vulnerability of the Microprogramming Software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to bypass authentication by acting as an arbitrary user...

IBM Sterling B2B Integrator Authentication Bypass Vulnerability

IBM Sterling B2B Integrator is IBM's software for integrating critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A security vulnerability exists in IBM Sterling B2B Integrator versions 5.1 and...

Android mediaserver information disclosure vulnerability

mediaserver is a very important process in android, audio, video, camera are all related to mediaserver process. A vulnerability exists in mediaserver in Android versions prior to 5.1.1. A remote attacker can use this vulnerability to bypass the protection mechanism to obtain sensitive informatio...

Android Denial of Service Vulnerability (CNVD-2015-06580)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial of service vulnerability exists in Android versions prior to 5.1.1 LMY48T, which allows attackers to cause a denial of service via an unspecified vector...

Android Denial of Service Vulnerability (CNVD-2015-06535)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial of service vulnerability exists in Android version 5.x prior to 5.1.1, LMY48T6.0before2015, which allows attackers to cause a denial of service via an unspecifie...

Android Denial of Service Vulnerability (CNVD-2015-06584)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial of service vulnerability exists in Android versions prior to 5.1.1 LMY48T, which could allow a remote attacker to execute arbitrary code or cause a denial of...

Android Denial of Service Vulnerability (CNVD-2015-06583)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial of service vulnerability exists in Android versions prior to 5.1.1 LMY48T, which could allow a remote attacker to execute arbitrary code or cause a denial of...

Google Android Skia Denial of Service Vulnerability

Google Skia is the United States Google Google company's an open source and C + + based graphics library , it can be used in Mozilla Firefox, Google Chrome and other browsers , but also available in the Android open mobile platform . A security vulnerability exists in Google Skia used in Android...

Android Buffer Overflow Vulnerability (CNVD-2015-06605)

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. A buffer overflow vulnerability exists in LMY48I, a version of Android prior to 5.1.1. Allowing an attacker to execute arbitrary code via a crafted application...

Android integer overflow vulnerability (CNVD-2015-06608)

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. An integer overflow vulnerability exists in LMY48M, a version of Android prior to 5.1.1, which allows remote attackers to cause a denial of service attack via specially...