PT-2016-2262

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-06-01 Description The issue is related to the Broadcom Wi-Fi driver in Android, which allows attackers to gain privileges for certain system calls via a crafted application. This is due to insufficient input...

Cisco Nexus Devices NX-OS Software Command-Line Interpreter Local Privilege Escalation Vulnerability (Cisco-SA-20150630-CVE-2015-4232)

A local privilege escalation vulnerability in the command-line interpreter of Cisco Nexus devices could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with user privileges. Copyright C 2016 Greenbone Networks GmbH Some text descriptions mig...

Oracle Application Testing Suite DownloadServlet file Directory Traversal (CVE-2016-0482)

A directory traversal vulnerability exists in Oracle Application Testing Suite. The vulnerability is due to insufficient input validation while processing HTTP requests to the "/otm/download" URI with the "file" parameter. A remote unauthenticated attacker can exploit this vulnerability by sendin...

Oracle ATS DownloadServlet scheduleReportName Directory Traversal (CVE-2016-0481)

A directory traversal vulnerability exists in Oracle's Application Testing Suite. The vulnerability is due to insufficient input validation while processing HTTP requests to the "/otm/download" URI with parameter scheduleReportName. A remote unauthenticated attacker can exploit this vulnerability...

PT-2016-1721

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-04-01 Description The issue is related to a Qualcomm Power Management kernel driver in Android, which allows attackers to gain privileges via a crafted application that leverages root access. This is due to...

Oracle Application Testing Suite ReportImage tempfilename Directory Traversal (CVE-2016-0489)

A directory traversal vulnerability exists in Oracle's Application Testing Suite. The vulnerability is due to insufficient input validation in the Oracle Test Manager component while processing the HTTP request parameter tempfilename. A remote, authenticated attacker could exploit this...

PT-2016-1402

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 Gold and 1511 Description The issue...

PT-2016-1378

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Microsoft Windows 10 Gold and 1511 Description The issue exists due to insufficient input validation in the PDF library of the Windows operating system. Exploitation of this issue may allow...

Adobe Connect < 9.5.2 Multiple Vulnerabilities (APSB16-07)

Adobe Connect is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:connect"; ifdescription...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Adobe Type Manager Library component on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted font file...

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure or cause other effects

The vulnerability in the gdk-pixbuf library of Firefox exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects by using a specially crafted JPEG 2000 image...

PT-2015-3133

Name of the Vulnerable Software and Affected Versions Safari in Apple iOS versions prior to 9.2 Description The issue allows remote attackers to spoof a URL in the user interface via a crafted web site. This is due to insufficient input validation in the Safari browser interface. Exploitation of...

PT-2015-2266

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 9 Description The issue concerns the API in the WebKit Plug-ins component, which fails to notify plugins of HTTP Redirection status codes. This allows remote attackers to bypass intended request restrictions by...

Advantech WebAccess AspVCObj.AspDataDriven ActiveX Stack Buffer Overflow (CVE-2014-9208)

A stack buffer overflow vulnerability exists in Advantech's WebAccess SCADA software. The vulnerability is due to insufficient input validation of an argument of multiple functions in the AspVCObj ActiveX control. A remote, unauthenticated attacker can exploit this vulnerability by enticing a...

PT-2015-2142

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 18.0.0.241 Adobe Flash Player versions 19.x prior to 19.0.0.185 Adobe Flash Player versions prior to 11.2.202.521 on Linux Adobe AIR versions prior to 19.0.0.190 Adobe AIR SDK versions prior to 19.0.0.190...

PT-2015-2115

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the implementation of the Neighbor Discovery ND protocol in the IPv6 stack, which allows remote attackers to reconfigure a hop-limit setting via a small hop limit value in a...

PT-2015-2065

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iOS versions prior to 9 WebKit, as used in Apple iTunes versions prior to 12.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and...

PT-2015-2075

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iOS versions prior to 9 WebKit, as used in Apple iTunes versions prior to 12.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and...

PT-2015-2067

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iOS versions prior to 9 WebKit, as used in Apple iTunes versions prior to 12.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and...

PT-2015-2070

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iOS versions prior to 9 WebKit, as used in Apple iTunes versions prior to 12.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and...