PT-2016-4804

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 6.x through 6.0.1 Description The issue allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access. This is due to insufficient input validation, which could be...

PT-2016-2455

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.4 Android versions 5.0.x through 5.0.2 Android versions 5.1.x through 5.1.1 Android versions 6.x before 2016-07-01 Description The issue exists due to insufficient input validation in the...

PT-2016-2320

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure versions prior to 3.1.1 Description The administrative web interface in Cisco Prime Infrastructure has a weakness due to insufficient input validation, allowing remote authenticated users to execute arbitrary command...

PT-2016-2303

Name of the Vulnerable Software and Affected Versions Apache Struts 2 versions 2.3.20 through 2.3.28.1 Description The issue allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a crafted request. This is due to insufficient input validation in the...

Security Advisory - Insufficient Input Validation Vulnerability in the FusionInsight

The FusionInsight has an insufficient input validation vulnerability. An attacker may exploit it to gain the root privilege of the Linux system where the software resides and control the operating system cluster. Vulnerability ID: HWPSIRT-2016-06010 This vulnerability has been assigned Common...

PT-2016-2123

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-06-01 Description The issue allows attackers to gain privileges via a crafted application, potentiall...

PT-2016-2262

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-06-01 Description The issue is related to the Broadcom Wi-Fi driver in Android, which allows attackers to gain privileges for certain system calls via a crafted application. This is due to insufficient input...

Oracle Application Testing Suite DownloadServlet file Directory Traversal (CVE-2016-0482)

A directory traversal vulnerability exists in Oracle Application Testing Suite. The vulnerability is due to insufficient input validation while processing HTTP requests to the "/otm/download" URI with the "file" parameter. A remote unauthenticated attacker can exploit this vulnerability by sendin...

Oracle ATS DownloadServlet scheduleReportName Directory Traversal (CVE-2016-0481)

A directory traversal vulnerability exists in Oracle's Application Testing Suite. The vulnerability is due to insufficient input validation while processing HTTP requests to the "/otm/download" URI with parameter scheduleReportName. A remote unauthenticated attacker can exploit this vulnerability...

PT-2016-1721

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-04-01 Description The issue is related to a Qualcomm Power Management kernel driver in Android, which allows attackers to gain privileges via a crafted application that leverages root access. This is due to...

Oracle Application Testing Suite ReportImage tempfilename Directory Traversal (CVE-2016-0489)

A directory traversal vulnerability exists in Oracle's Application Testing Suite. The vulnerability is due to insufficient input validation in the Oracle Test Manager component while processing the HTTP request parameter tempfilename. A remote, authenticated attacker could exploit this...

PT-2016-1402

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 Gold and 1511 Description The issue...

PT-2016-1378

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Microsoft Windows 10 Gold and 1511 Description The issue exists due to insufficient input validation in the PDF library of the Windows operating system. Exploitation of this issue may allow...

Adobe Connect < 9.5.2 Multiple Vulnerabilities (APSB16-07)

Adobe Connect is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:connect"; ifdescription...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Adobe Type Manager Library component on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted font file...

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure or cause other effects

The vulnerability in the gdk-pixbuf library of Firefox exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects by using a specially crafted JPEG 2000 image...

PT-2015-3133

Name of the Vulnerable Software and Affected Versions Safari in Apple iOS versions prior to 9.2 Description The issue allows remote attackers to spoof a URL in the user interface via a crafted web site. This is due to insufficient input validation in the Safari browser interface. Exploitation of...

PT-2015-2266

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 9 Description The issue concerns the API in the WebKit Plug-ins component, which fails to notify plugins of HTTP Redirection status codes. This allows remote attackers to bypass intended request restrictions by...

Advantech WebAccess AspVCObj.AspDataDriven ActiveX Stack Buffer Overflow (CVE-2014-9208)

A stack buffer overflow vulnerability exists in Advantech's WebAccess SCADA software. The vulnerability is due to insufficient input validation of an argument of multiple functions in the AspVCObj ActiveX control. A remote, unauthenticated attacker can exploit this vulnerability by enticing a...

PT-2015-2142

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 18.0.0.241 Adobe Flash Player versions 19.x prior to 19.0.0.185 Adobe Flash Player versions prior to 11.2.202.521 on Linux Adobe AIR versions prior to 19.0.0.190 Adobe AIR SDK versions prior to 19.0.0.190...