PT-2016-6530

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u121, 7u111, 8u102 Java SE Embedded version 8u101 Description The issue affects the integrity of the system, with low impact, and has no confidentiality or availability impact. It is related to the Libraries component...

PT-2016-6526

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u121, 7u111, 8u102 Java SE Embedded version 8u101 Description The issue affects the integrity of the system, with low impact, and has no confidentiality or availability impact. It is related to the Libraries component...

PT-2016-6572

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u121, 7u111, 8u102 Java SE Embedded version 8u101 Description The issue affects confidentiality and is related to the Networking component in Oracle Java SE, and the Libraries component in both Oracle Java SE and Java ...

Debian DLA-664-1 : libxrender security update

Tobias Stoeckmann from the OpenBSD project has discovered a number of issues in the way various X client libraries handle the responses they receive from servers. Insufficient validation of data from the X server could cause out of boundary memory writes in the libXrender library potentially...

PT-2016-6549

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u121, 7u111, 8u102 Oracle Java SE Embedded version 8u101 Description The issue affects confidentiality, integrity, and availability. It is related to the Hotspot component in Oracle Java SE and to the Libraries compone...

DLA-667-1 libxv - security update

Bulletin has no description...

CVE-2016-5542

It was discovered that the Libraries component of OpenJDK did not restrict the set of algorithms used for JAR integrity verification. This flaw could allow an attacker to modify content of the JAR file that used weak signing key or hash algorithm...

JVN#63012325: The installer of e-Tax Software may insecurely load Dynamic Link Libraries

The installer of e-Tax Software provided by National Tax Agency contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Impact This vulnerability can be exploited when the following condition is met. If this vulnerability is exploited, arbitrary co...

DLA-664-1 libxrender - security update

Bulletin has no description...

USN-3100-1: KDE-PIM Libraries vulnerability

Roland Tapken discovered that the KDE-PIM Libraries incorrectly filtered URLs. A remote attacker could use this issue to perform an HTML injection attack in the KMail plain text viewer...

Microsoft Office Multiple Remote Code Execution Vulnerabilities (3192884)

This host is missing a critical security update according to Microsoft Bulletin MS16-120. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Word Viewer Remote Code Execution Vulnerabilities (3192884)

This host is missing a critical security update according to Microsoft Bulletin MS16-120. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : X.org libraries -- multiple vulnerabilities (1cf65085-a760-41d2-9251-943e1af62eb8)

Matthieu Herrb reports : Tobias Stoeckmann from the OpenBSD project has discovered a number of issues in the way various X client libraries handle the responses they receive from servers, and has worked with X.Org's security team to analyze, confirm, and fix these issues. These issue come in...

[SECURITY] Fedora 25 Update: openssl-1.0.2j-1.fc25

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Aura Video Converter 1.6.3 - DLL Hijacking Exploit

Document Title: =============== Aura Video Converter 1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1965 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ==================================== 1965...

X.org libraries -- multiple vulnerabilities

Matthieu Herrb reports: Tobias Stoeckmann from the OpenBSD project has discovered a number of issues in the way various X client libraries handle the responses they receive from servers, and has worked with X.Org's security team to analyze, confirm, and fix these issues. These issue come in...

CVE-2016-4385

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC and Commons BeanUtils libraries...

Design/Logic Flaw

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC and Commons BeanUtils libraries...

CVE-2016-4385

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC and Commons BeanUtils libraries...

iPod Video Converter v1.34 - DLL Hijacking Exploit

Document Title: =============== iPod Video Converter v1.34 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1961 Release Date: ============= 2016-09-29 Vulnerability Laboratory ID VL-ID: ==================================== 1961...