The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.

The Internet Explorer browser contains a vulnerability related to memory handling errors. This vulnerability allows attackers to execute arbitrary code or cause a service failure by accessing objects stored in memory in the context of the current user, through improper access...

The vulnerability of the LibXLST transformation library allows a attacker to cause a service failure or exert other effects.

The vulnerability of the numbers.c file in the LibXLST library is related to errors in name space handling. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects through a specially crafted document...

Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2016-02281)

Microsoft Windows is a series of operating systems released by Microsoft USA. win32k.sys is the kernel part of the Windows subsystem, a kernel-mode device driver, which contains a window manager, background control windows and screen output management. An elevation of privilege vulnerability exis...

Foxit Reader Format Operation Memory Error References Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in field handling that could allow the reuse of a pointer that has been released in a hanging pointer. An attacker could execute arbitrary code in the current process context...

CVE-2015-8734

The dissectnwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, which allows remote attackers to cause a denial of service application crash via a crafted packet...

SUSE-SU-2015:2294-1 Security update for krb5

The krb5 package was updated to fix the following security and non security issues: - CVE-2015-2695: Fixed missing functions that were still vulnerable bsc954270. - Fixed a memory leak in the handling of error messages bsc954470...

SUSE SLED12 / SLES12 Security Update : coreutils (SUSE-SU-2015:1637-1)

This update for coreutils provides the following fixes : - Fix memory handling error with case insensitive sort using UTF-8. CVE-2015-4041, CVE-2015-4042 - Ensure 'df -a' shows all remote file system entries. - Only suppress remote mounts of separate exports with 'df --total'. - Document that 'df...

Adobe Flash Player Use After Free (APSB15-19: CVE-2015-5124; CVE-2015-5566)

A use after free vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in the way Flash Player handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted SWF file...

PT-2015-1155

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to memory handling errors, allowing a remote attacker to execute arbitrary code or cause a denial of service by using a specially crafted web page. This could...

PT-2015-1154

Name of the Vulnerable Software and Affected Versions Adobe AIR affected versions not specified Adobe Flash Player affected versions not specified Adobe AIR SDK affected versions not specified Adobe AIR SDK & Compiler affected versions not specified Description The issue exists due to a memory...

PT-2015-1146

Name of the Vulnerable Software and Affected Versions Foxit Reader, Enterprise Reader, and PhantomPDF versions prior to 7.1.5 Description The issue is caused by a memory handling error, allowing remote attackers to cause a denial of service memory corruption and crash via a crafted GIF in a PDF...

Cross site scripting

Cross-site scripting XSS vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via a custom JavaScript file, which is not properly handled when previewing the file...

PT-2015-1138

Name of the Vulnerable Software and Affected Versions Adobe AIR versions prior to 16.0.0.245 on Windows and OS X and prior to 16.0.0.272 on Android Adobe AIR SDK versions prior to 16.0.0.272 Adobe AIR SDK & Compiler versions prior to 16.0.0.272 Adobe Flash Player versions prior to 13.0.0.260 and...

PT-2015-1136

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 13.0.0.260 Adobe Flash Player versions 14.x through 16.x prior to 16.0.0.257 Adobe Flash Player version 11.2.202.429 and earlier on Linux Adobe AIR versions prior to 16.0.0.245 on Windows and OS X Adobe AIR...

CVE-2014-3569

The ssl23getclienthello function in s23srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an unexpected handshake, as demonstrated by...

USN-2353-1 apt vulnerability

It was discovered that APT incorrectly handled certain http URLs. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to cause APT to crash, resulting in a denial of service, or possibly execute arbitrary code. The default compiler options for...

PHP 5.5.x < 5.5.14 Multiple Vulnerabilities

According to its banner, the version of PHP 5.5.x installed on the remote host is a version prior to 5.5.14. It is, therefore, affected by the following vulnerabilities : - Boundary checking errors exist related to the Fileinfo extension, Composite Document Format CDF handling and the functions...

PT-2014-1071

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to memory handling errors, allowing an attacker to execute arbitrary code or cause a denial of service using a specially crafted website. This is due to imprope...

PT-2014-1107

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to memory handling errors, allowing remote attackers to execute arbitrary code or cause a denial of service by accessing a specially crafted website. This could...

PT-2014-1138

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to memory handling errors. It allows an attacker to execute arbitrary code in the context of the current user by corrupting memory. Recommendations At the momen...