CVE-2015-8099: Improper Input Validation

F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP AAM 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP DNS 12....

PT-2016-5340

Name of the Vulnerable Software and Affected Versions IBM PowerKVM versions 2.1 before 2.1.1.3-65.10 IBM PowerKVM versions 3.1 before 3.1.0.2 Description The issue allows guest OS users to cause a denial of service, resulting in a host OS infinite loop and hang, via unspecified vectors...

PT-2016-5481

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.6.30 and earlier Oracle MySQL versions 5.7.12 and earlier MariaDB versions 10.0.x before 10.0.25 MariaDB versions 10.1.x before 10.1.14 Description The issue allows remote administrators to affect availability via vecto...

PT-2016-5831

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 7.3.4 Description The issue allows remote attackers to cause a denial of service, resulting in an application hang, by providing a crafted PDF. This is due to improper reporting of format errors...

PT-2016-1774

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.10 and earlier Description The issue is related to errors in the code of the MySQL database management system. It allows a remote attacker to affect availability by exploiting vectors related to the Performance Schema...

PT-2016-1778

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.10 and earlier Description The issue is related to errors in the code of the MySQL database management system, specifically in the Optimizer component. It allows an attacker, potentially with network access, to impact...

PT-2016-1777

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.11 and earlier Description The issue is related to errors in the code of the MySQL database management system, specifically in the Optimizer component. It allows an attacker, potentially with network access, to impact...

PT-2016-1787

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.5.48 and earlier Oracle MySQL versions 5.6.29 and earlier Oracle MySQL versions 5.7.11 and earlier MariaDB versions prior to 5.5.49 MariaDB versions 10.0.x prior to 10.0.25 MariaDB versions 10.1.x prior to 10.1.14...

PT-2016-1790

Name of the Vulnerable Software and Affected Versions MySQL versions 5.5.48 and earlier MySQL versions 5.6.29 and earlier MySQL versions 5.7.11 and earlier MariaDB versions prior to 5.5.49 MariaDB versions 10.0.x prior to 10.0.25 MariaDB versions 10.1.x prior to 10.1.14 Description The issue is...

PT-2016-1793

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.6.29 and earlier Oracle MySQL versions 5.7.11 and earlier Description The issue is related to errors in the code of the MySQL database management system, specifically in the Pluggable Authentication component. It allows...

PT-2016-1776

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.6.28 and earlier Oracle MySQL versions 5.7.10 and earlier Description The issue is related to errors in the code of the MySQL database management system. It can be exploited by a remote attacker to disrupt availability ...

PT-2016-1773

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.6.28 and earlier Oracle MySQL versions 5.7.10 and earlier Description The issue is related to errors in the code of the MySQL database management system, specifically in the Security: Encryption component. It allows an...

PT-2016-4349

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.10 and earlier Description The issue allows local users to affect availability via vectors related to DML. It is an easily exploitable vulnerability that allows a high privileged attacker with network access via...

PT-2016-1780

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.10 and earlier Description The issue is related to errors in the code of the MySQL database management system. It can be exploited by a remote attacker to affect availability by impacting the InnoDB server. This can...

PT-2016-1783

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.10 and earlier Description The issue is related to errors in the code of the MySQL database management system. It can be exploited by a remote attacker to affect availability by impacting the FTS server. The...

PT-2016-4350

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.11 and earlier Description The issue allows local users to affect availability via vectors related to Locking. It is an easily exploitable vulnerability that can be compromised by a high privileged attacker with netwo...

CVE-2016-4014

XML external entity XXE vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of service system hang via a crafted DTD in an XML request to uddi/api/replication, aka SAP Security Note 2254389...

Xxe

XML external entity XXE vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of service system hang via a crafted DTD in an XML request to uddi/api/replication, aka SAP Security Note 2254389...

PT-2016-1706

Name of the Vulnerable Software and Affected Versions SAP NetWeaver JAVA AS 7.4 Description The issue is related to an XML external entity XXE vulnerability in the UDDI component, which is caused by incorrect restriction of XML links to external objects. This can be exploited by a remote attacker...

Denial of service

HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service system hang via crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability."...