Quadcopter FX Simulator - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Quadcopter FX Simulator published at the 'play' market has multiple vulnerabilities...

Rotate Video FX - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Rotate Video FX published at the 'play' market has multiple vulnerabilities...

Slow Motion Video FX - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Slow Motion Video FX published at the 'play' market has multiple vulnerabilities...

Currency FX Rates Converter - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Currency FX Rates Converter published at the 'play' market has multiple vulnerabilities...

FireEye Operating System Multiple Vulnerabilities

The remote host is running a version of FireEye Operating System FEOS that is missing a vendor-supplied security patch. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the Virtual Execution Engine VXE during the handling of file names that were previously flagged for t...

Cisco Unified Computing System Manager and FX-OS for Firepower 9000 Series Remote Code Execution Vulnerability

Cisco Unified Computing System Manager and Cisco FX-OS on Firepower 9000 are both products of the U.S. company Cisco Cisco. The former is a set of embedded device management software, it can be Cisco Unified Computing System as a single, highly usable logical entity, from end to end to manage, th...

CVE-2015-6435

An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System UCS Manager before 2.24b, 2.25 before 2.25a, and 3.0 before 3.02e allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888...

Command injection

An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System UCS Manager before 2.24b, 2.25 before 2.25a, and 3.0 before 3.02e allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888...

CVE-2015-6435

Cisco CVE-2015-6435 describes a remote command execution vulnerability via an unprotected CGI script in Cisco FX-OS on Firepower 9000 devices and Cisco UCS Manager. A crafted HTTP request to the CGI script can allow an unauthenticated attacker to execute arbitrary shell commands. Affected softwar...

EUVD-2015-6376

An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System UCS Manager before 2.24b, 2.25 before 2.25a, and 3.0 before 3.02e allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888...

CVE-2015-6435

An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System UCS Manager before 2.24b, 2.25 before 2.25a, and 3.0 before 3.02e allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888...

Unspecified Vulnerability in Oracle Java SE (CNVD-2015-06934)

Oracle Java SE is the standard version of the Java platform is a Java2 platform to provide users with a program development environment. Oracle Java SE 8u60, JavaFX 2.2.85 An unspecified vulnerability exists. Allows remote attackers to affect confidentiality via unspecified vectors...

JDK: unspecified vulnerability fixed in 7u85 and 8u51 (2D)

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D...

JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D)

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0491...

JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D)

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0459...

JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D)

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0459...

JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D)

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0459...

JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D)

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0491...

JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D)

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0459...