SAP NetWeaver AS JAVA 7.4 Denial Of Service

Application: SAP NetWeaver AS JAVA Versions Affected: SAP NetWeaver AS JAVA 7.4 Vendor URL: http://SAP.com Bug: Denial of Service Sent: 22.04.2016 Reported: 23.04.2016 Vendor response: 23.04.2016 Date of Public Advisory: 09.08.2016 Reference: SAP Security Note 2313835 Author: Vahagn Vardanyan...

SAP NetWeaver AS JAVA 7.4 XXE Injection

Application: SAP NetWeaver AS JAVA Versions Affected: SAP NetWeaver AS JAVA 7.4 Vendor URL: http://SAP.com Bug: XXE Sent: 09.03.2016 Reported: 10.03.2016 Vendor response: 10.03.2016 Date of Public Advisory: 09.08.2016 Reference: SAP Security Note 2296909 Author: Vahagn Vardanyan ERPScan Descripti...

SAP NetWeaver AS ABAP 7.4 Directory Traversal

Application: SAP NetWeaver AS ABAP Versions Affected: SAP NetWeaver AS ABAP 7.4 Vendor URL: http://SAP.com Bugs: Directory traversal Sent: 22.04.2016 Reported: 23.04.2016 Vendor response: 23.04.2016 Date of Public Advisory: 09.08.2016 Reference: SAP Security Note 2312966 Author: Daria Prosochkina...

SAP NetWeaver AS JAVA 7.5 Directory Traversal Vulnerability

SAP NetWeaver AS JAVA versions 7.1 through 7.5 suffer from a directory traversal vulnerability. Application: SAP NetWeaver AS JAVA Versions Affected: SAP NetWeaver AS JAVA 7.1 to 7.5 Vendor URL: http://SAP.com Bugs: Directory traversal Sent: 04.12.2015 Reported: 05.12.2015 Vendor response:...

php: Out-of-bounds access in exif_process_IFD_in_MAKERNOTE

The exifprocessIFDinMAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service out-of-bounds array access and memory corruption, obtain sensitive information from process memory, or possibly have...

Samsung Note Device Integer Overflow Vulnerability

The SamsungNote is a smartphone released by the South Korean company Samsung.KK is a reactivation locking module that runs on... An integer overflow vulnerability exists in SystemUI in KK version 4.4 and L5.0 and 5.1 on SamsungNote devices. An attacker can exploit this vulnerability to cause a...

CVE-2016-9277

Integer overflow in SystemUI in KK4.4 and L5.0/5.1 on Samsung Note devices allows attackers to cause a denial of service UI restart via vectors involving APIs and an activity that computes an out-of-bounds array index, aka SVE-2016-6906...

Integer overflow

Integer overflow in SystemUI in KK4.4 and L5.0/5.1 on Samsung Note devices allows attackers to cause a denial of service UI restart via vectors involving APIs and an activity that computes an out-of-bounds array index, aka SVE-2016-6906...

CVE-2016-9277

Integer overflow in SystemUI in KK4.4 and L5.0/5.1 on Samsung Note devices allows attackers to cause a denial of service UI restart via vectors involving APIs and an activity that computes an out-of-bounds array index, aka SVE-2016-6906...

CVE-2016-9277

Integer overflow in SystemUI in KK4.4 and L5.0/5.1 on Samsung Note devices allows attackers to cause a denial of service UI restart via vectors involving APIs and an activity that computes an out-of-bounds array index, aka SVE-2016-6906...

CVE-2016-9277

The CVE-2016-9277 entry concerns an integer overflow in SystemUI on Samsung Note devices running KK (Android 4.4) and L (Android 5.0/5.1). The underlying issue is an integer overflow in SystemUI that can be triggered via APIs and an activity, leading to a denial of service (UI restart). Affected ...

CherryTree Memory Corruption Vulnerability

CherryTree is a note-taking software that supports unlimited levels of categorization, written in Python, rich text editing and code highlighting support, and supports Linux and Windows platforms. A memory corruption vulnerability exists in CherryTree version 0.36.9, which can be exploited by an...

CVE-2016-5616

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason: This candidate is a reservation duplicate of CVE-2016-6663. Notes: All CVE users should reference CVE-2016-6663 instead of this candidate. All references and descriptions in this candidate have been removed to...

BELL-CVE-2016-5556 CVE-2016-5556 does not affect BellSoft software

Bulletin has no description...

Linux Kernel Vulnerability

US-CERT is aware of a Linux kernel vulnerability known as Dirty COW CVE-2016-5195. Exploitation of this vulnerability may allow an attacker to take control of an affected system. US-CERT recommends that users and administrators review the Red Hat CVE Database, the Canoical Ubuntu CVE Tracker, and...

SAP Adaptive Server Enterprise 16 - Denial of Service

SAP Adaptive Server Enterprise 16 - Denial of Service ''' Application: SAP Adaptive Server Enterprise Versions Affected: SAP Adaptive Server Enterprise 16 Vendor URL: http://SAP.com Bugs: Denial of Service Sent: 01.02.2016 Reported: 02.02.2016 Vendor response: 02.02.2016 Date of Public Advisory:...

SAP NetWeaver KERNEL 7.0 < 7.5 - Denial of Service

''' Application: SAP NetWeaver KERNEL Versions Affected: SAP NetWeaver KERNEL 7.0-7.5 Vendor URL: http://SAP.com Bugs: Denial of Service Sent: 09.03.2016 Reported: 10.03.2016 Vendor response: 10.03.2016 Date of Public Advisory: 12.07.2016 Reference: SAP Security Note 2295238 Author: Dmitry Yudin...

SAP Adaptive Server Enterprise 16 - Denial of Service

''' Application: SAP Adaptive Server Enterprise Versions Affected: SAP Adaptive Server Enterprise 16 Vendor URL: http://SAP.com Bugs: Denial of Service Sent: 01.02.2016 Reported: 02.02.2016 Vendor response: 02.02.2016 Date of Public Advisory: 12.07.2016 Reference: SAP Security Note 2330839 Author...

SAP Adaptive Server Enterprise 16 Denial Of Service

Application: SAP Adaptive Server Enterprise Versions Affected: SAP Adaptive Server Enterprise 16 Vendor URL: http://SAP.com Bugs: Denial of Service Sent: 01.02.2016 Reported: 02.02.2016 Vendor response: 02.02.2016 Date of Public Advisory: 12.07.2016 Reference: SAP Security Note 2330839 Author:...

SAP NetWeaver KERNEL 7.5 Buffer Overflow

Application: SAP NetWeaver KERNEL Versions Affected: SAP NetWeaver KERNEL 7.0-7.5 Vendor URL: http://SAP.com Bugs: Denial of Service Sent: 09.03.2016 Reported: 10.03.2016 Vendor response: 10.03.2016 Date of Public Advisory: 12.07.2016 Reference: SAP Security Note 2295238 Author: Dmitry Yudin...