CVE-2016-6099

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system...

CVE-2016-6020

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to ...

Cisco WebEx Meetings Server Information Disclosure Vulnerability (CNVD-2017-00870)

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. An information disclosure vulnerability exists in Cisco WebEx Meetings Server. An attacker could exploit this...

Phoenix Contact mGuard Security Bypass Vulnerability

Phoenix Contact mGuard is a security device from Phoenix Contact that protects systems from unauthorized access and installation. A security bypass vulnerability exists in Phoenix Contact mGuard. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized...

IBM Sterling Order Management Information Disclosure Vulnerability (CNVD-2017-00862)

IBM Sterling Order Management is a suite of order management software that orchestrates the cross-channel sales and order fulfillment process across a dynamic business network of customers, suppliers and partners. A remote information disclosure vulnerability exists in IBM Sterling Order...

Google Android Audioserver Information Disclosure Vulnerability (CNVD-2017-00211)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There are information disclosure vulnerabilities in Google Android. Attackers can exploit these vulnerabilities to obtain potentially sensitive information, and the information...

Google Android Audioserver Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There are information disclosure vulnerabilities in Google Android. Attackers can exploit these vulnerabilities to obtain potentially sensitive information, and the information...

OpenSSH Security Bypass Vulnerability

OpenSSH OpenBSD Secure Shell is a set of connection tools maintained by the OpenBSD Project Group for secure access to remote computers. A security bypass vulnerability exists in OpenSSH. An attacker could use the vulnerability to bypass certain security restrictions and perform unauthorized...

Mozilla Network Security Services Information Disclosure Vulnerability

Mozilla Network Security Services NSS is the United States Mozilla Foundation developed a library network security services library, it can provide cross-platform support for SSL, S/MIME and other Internet security standards. An information disclosure vulnerability exists in Mozilla Network...

Docker Security Bypass Vulnerability (CNVD-2016-11230)

Docker is an open source application container engine from Docker Inc. in the United States, which supports the creation of a container lightweight virtual machine and deployment and running applications on Linux systems, as well as automated installation, deployment and upgrading of applications...

Drupal Workbench Moderation Module Information Disclosure Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.The Workbench Moderation module enables you to customize the editorial workflow in your website. An information disclosure vulnerability exists in the Drupal Workbench Moderation module...

Google Android Qualcomm Component Information Disclosure Vulnerability (CNVD-2016-11054)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. An information disclosure vulnerability exists in the Google Android Qualcomm component. An attacke...

Unspecified vulnerability in Google Android 'Qualcomm' component (CNVD-2016-11032)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An unspecified vulnerability exists in the Google Android 'Qualcomm' component. An attacker can exploit the vulnerability to perform unauthorized operations. This could facilitate...

Google Android Qualcomm Component Information Disclosure Vulnerability (CNVD-2016-11056)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. An information disclosure vulnerability exists in the Google Android Qualcomm component. An attacke...

Google Android 'Qualcomm' Component Has Unspecified Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An unspecified vulnerability exists in the Google Android 'Qualcomm' component. An attacker can exploit the vulnerability to perform unauthorized operations. This could facilitate...

Foxit Reader Boundary Read Local Information Disclosure Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing programs. Foxit Reader suffers from a Boundary Read Local Information Disclosure vulnerability, which can be exploited by local attackers to obtain sensitive information and launch further...

Adobe Flash Player Security Bypass Vulnerability (CNVD-2016-09025)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. A security vulnerability exists in Adobe Flash Player that could be exploited by attackers to bypass security restrictions or launch further attacks...

Multiple Content Spoofing Vulnerabilities in Open-Xchange AppSuite

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. Open-Xchange AppSuite suffers from multiple content spoofing vulnerabilities that c...

Joyent SmartOS Local Information Disclosure Vulnerability (CNVD-2016-06912)

Joyent SmartOS is a set of open source operating system from Joyent, USA. A local information disclosure vulnerability exists in Joyent SmartOS. An attacker can exploit the vulnerability to obtain sensitive information that may be useful in launching further attacks...

Eclipse Development Framework File Inclusion Vulnerability

Eclipse is an extensible Java-based development platform that supports the development of JAVA, PHP, C++ and other languages. The Eclipse development framework has a file inclusion vulnerability that allows attackers to exploit the vulnerability to obtain sensitive information or launch further...