PT-2015-1370

Name of the Vulnerable Software and Affected Versions Microsoft Office Compatibility Pack affected versions not specified Microsoft Office Compatibility Pack SP3 Description The issue is related to improper data handling, which can be exploited by a remote attacker to execute arbitrary code using...

KLA10537 Multiple vulnerabilities in CA Spectrum

Multiple serious vulnerabilities have been found in CA Spectrum. Malicious users can exploit these vulnerabilities to gain privileges or inject arbitrary code. Below is a complete list of vulnerabilities 1. Improper data serialization can be exploited remotely via a specially designed Java object...

Google Chrome Font Uninitialization Vulnerability

Google Chrome is a simple and efficiently designed web browsing tool developed by Google. Google Chrome Font has an uninitialized vulnerability due to the program fails to properly initialize data structure vulnerability, allowing attackers to construct malicious WEB pages and trick users into...

CVE-2014-9115

SQL injection vulnerability in the ratepicture function in include/functionsrate.inc.php in Piwigo before 2.5.5, 2.6.x before 2.6.4, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary SQL commands via the rate parameter to picture.php, related to an improper data type in a...

CVE-2014-9115

SQL injection vulnerability in the ratepicture function in include/functionsrate.inc.php in Piwigo before 2.5.5, 2.6.x before 2.6.4, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary SQL commands via the rate parameter to picture.php, related to an improper data type in a...

CVE-2014-7252

Multiple unspecified vulnerabilities in the Syslink driver for Texas Instruments OMAP mobile processor, as used on NTT DOCOMO ARROWS Tab LTE F-01D, ARROWS X LTE F-05D, Disney Mobile on docomo F-08D, REGZA Phone T-01D, and PRADA phone by LG L-02D; and SoftBank SHARP handsets 102SH allow local user...

CVE-2014-7252

Multiple unspecified vulnerabilities in the Syslink driver for Texas Instruments OMAP mobile processor, as used on NTT DOCOMO ARROWS Tab LTE F-01D, ARROWS X LTE F-05D, Disney Mobile on docomo F-08D, REGZA Phone T-01D, and PRADA phone by LG L-02D; and SoftBank SHARP handsets 102SH allow local user...

CVE-2014-7252: Undefined Security Weakness

Multiple unspecified vulnerabilities in the Syslink driver for Texas Instruments OMAP mobile processor, as used on NTT DOCOMO ARROWS Tab LTE F-01D, ARROWS X LTE F-05D, Disney Mobile on docomo F-08D, REGZA Phone T-01D, and PRADA phone by LG L-02D; and SoftBank SHARP handsets 102SH allow local user...

PT-2014-7858

Name of the Vulnerable Software and Affected Versions Syslink driver for Texas Instruments OMAP mobile processor affected versions not specified Description The issue is related to multiple unspecified vulnerabilities in the Syslink driver. These vulnerabilities could allow local users to execute...

JVN#67792023: Multiple improper data validation vulnerabilities in Syslink driver for Texas Instruments OMAP mobile processors

The OMAP mobile processor provided by Texas Instruments is used in some Android tablets, smartphones and other devices. The Syslink driver for some OMAP mobile processors is used to implement the communication of processes between the host and slave processors. The Syslink driver contains multipl...

Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities

No description provided by source. Five models of the Zoom Telephonics ADSL Modem/Router line suffer from multiple critical vulnerabilities, almost all being of a remote access attack vector. Models affected: Zoom X3 ADSL Modem/Router Zoom X4 ADSL Modem/Router Zoom X5 ADSL Modem/Router Zoom ADSL...

PHP 5.5.x < 5.5.9 Multiple Vulnerabilities (May 2014)

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

Mozilla Thunderbird Multiple Vulnerabilities-01 (Nov 2013) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Mozilla Firefox Multiple Vulnerabilities - 01 (Nov 2013) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Design/Logic Flaw

Off-by-one error in the getprngbytes function in crypto/ansicprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the...

Zoom Telephonics ADSL ModemRouter - Multiple Vulnerabilities

Zoom Telephonics ADSL ModemRouter - Multiple Vulnerabilities Five models of the Zoom Telephonics ADSL Modem/Router line suffer from multiple critical vulnerabilities, almost all being of a remote access attack vector. Models affected: Zoom X3 ADSL Modem/Router Zoom X4 ADSL Modem/Router Zoom X5 AD...

PT-2013-3078

Name of the Vulnerable Software and Affected Versions Microsoft Publisher version 2003 SP3 Description A remote code execution issue exists due to improper data type checking of an unspecified return value when parsing Publisher files. This could allow an attacker to execute arbitrary code via a...

PT-2012-1968

Name of the Vulnerable Software and Affected Versions Tencent QQPimSecure version 3.0.2 Description The issue concerns improper data protection, allowing remote attackers to access and modify sensitive information, including SMS/MMS messages and contact lists, by using a crafted application...

PT-2012-1954

Name of the Vulnerable Software and Affected Versions AnGuanJia com.anguanjia.safe version 2.10.343 Description The issue allows remote attackers to read or modify SMS messages and a contact list via a crafted application, due to improper data protection. Recommendations For version 2.10.343, at...

PT-2012-1970

Name of the Vulnerable Software and Affected Versions Tencent WBlog version 3.3.1 MicroBlogPad version 1.4.0 Description The issue allows remote attackers to read or modify message drafts and search keywords via a crafted application, due to improper data protection. Recommendations For Tencent...