Microsoft Windows Information Disclosure Vulnerability (CNVD-2017-12788)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to obtain sensitive information...

CVE-2016-7835

Use-after-free vulnerability in H2O allows remote attackers to cause a denial-of-service DoS or obtain server certificate private keys and possibly other information...

CVE-2016-9100

Symantec Advanced Secure Gateway ASG 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.13, and ProxySG 6.7 prior to 6.7.3.1 are susceptible to an information disclosure vulnerability. An attacker with local access to the client host of an...

Microsoft Windows Kernel Local Information Disclosure Vulnerability (CNVD-2017-06610)

Microsoft Windows is the popular computer operating system. The Windows kernel does not properly handle memory objects and is implemented with a local information disclosure vulnerability that, when successfully exploited, allows an attacker to obtain sensitive information...

Hitek Software Automize Information Disclosure Vulnerability (CNVD-2017-05643)

Hitek Software Automize is an automation software suite from HitekSoftware that increases productivity and saves time. An information disclosure vulnerability exists in Hitek Software Automize. An attacker could exploit the vulnerability to obtain sensitive information...

CVE-2016-9165

The getsessions servlet in CA Unified Infrastructure Management formerly CA Nimsoft Monitor before 8.5 and CA Unified Infrastructure Management Snap formerly CA Nimsoft Monitor Snap allows remote attackers to obtain active session ids and consequently bypass authentication or gain privileges via...

Google Chrome Blink Information Disclosure Vulnerability (CNVD-2017-03627)

Google Chrome is a web browser developed by the American company Google Google. Google Chrome Blink suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

KLA11833 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Windows Graphics Component can be...

Design/Logic Flaw

MatrixSSL before 3.8.7, when the DHERSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conducting a Lenstra side-channel attack...

CVE-2016-2879

IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a local user to obtain and decrypt user credentials. IBM Reference : 1997341...

Google Chrome Devtools Unauthorized File Access Vulnerability

Google Chrome is a popular web browser. An unauthorized file access vulnerability exists in Google Chrome Devtools, which allows remote attackers to exploit the vulnerability to build malicious web pages that can be parsed by the user and can be used to obtain sensitive information...

Apple iOS APPLE-SA-2016-12-12-1 has multiple vulnerabilities (CNVD-2016-12705)

Apple iOS is an operating system developed for mobile devices. Apple iOS has multiple vulnerabilities. An attacker can exploit the vulnerabilities to bypass security restrictions, execute arbitrary code or perform unauthorized actions, and obtain sensitive information...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability (CNVD-2016-12549)

Cisco Prime Collaboration Assurance is a video and voice services solution. A cross-site scripting vulnerability in Cisco Prime Collaboration Assurance allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that, when viewed with malicious data, can obtain...

KLA10922 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Windows Graphics Component can be exploited...

Apereo Webproxy Portlet Information Disclosure Vulnerability

Apereo Central Authentication Service CAS Server is a Jasig project under the Apereo Foundation that provides a trusted way for authenticated users to access applications. An information disclosure vulnerability exists in Apereo Webproxy Portlet versions prior to 2.2.2. An attacker could exploit...

Google Android Qualcomm Component Information Disclosure Vulnerability (CNVD-2016-11051)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. An information disclosure vulnerability exists in the Google Android Qualcomm component. An attacke...

Microsoft Windows Graphics Component Information Disclosure Vulnerability (CNVD-2016-09365)

Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in the Windows Graphics Device Interface GDI processing memory object. An attacker could exploit this vulnerability to obtain sensitive information on the target system...

CVE-2016-7154

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service host crash and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number...

Adobe Flash Player Information Disclosure Vulnerability (CNVD-2016-07667)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from the American company Adobe. An information disclosure vulnerability exists in Adobe Flash Player, which can be exploited by attackers to bypass established access restrictions and obtain sensitive information...

SSD Firmware Information Disclosure Vulnerability in Multiple Lenovo Products

An information disclosure vulnerability exists in the SSD firmware of multiple Lenovo products. An attacker can exploit the vulnerability to obtain sensitive information, which could lead to further attacks...