CVE-2016-7052

crypto/x509/x509vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service NULL pointer dereference and application crash by triggering a CRL operation...

Error "The tools ISO must be ejected from all running VMs in the pool" While installing XenServer hotfix.

When attempting to install XenServer hotfix the following error message is displayed: Note that there are no ISO's attached to any of the VM's running in the pool. Also executed the 'xe vm-cd-eject --multiple' command to ensure this is the case: xe vm-cd-eject --multiple operation failed on...

Ubuntu 14.04 LTS / 16.04 LTS : Firefox vulnerabilities (USN-3076-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3076-1 advisory. Atte Kettunen discovered an out-of-bounds read when handling certain Content Security Policy CSP directives in some circumstances. If a user...

The vulnerability of the Microsoft Office software package, which allows a perpetrator to obtain confidential information

The vulnerability of the Microsoft Office application framework in Visual Basic relates to the export of a secret key from the certificate storage during document saving operations. Exploiting this vulnerability could allow an attacker, operating remotely, to obtain confidential information using...

kernel: vfs: missing detection of hardlinks in vfs_rename() on overlayfs

A flaw was found that the vfsrename function did not detect hard links on overlayfs. A local, unprivileged user could use the rename syscall on overlayfs on top of xfs to crash the system...

kernel: vfs: missing detection of hardlinks in vfs_rename() on overlayfs

A flaw was found that the vfsrename function did not detect hard links on overlayfs. A local, unprivileged user could use the rename syscall on overlayfs on top of xfs to crash the system...

CVE-2016-0141

The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allows attackers to obtain sensitive information via unspecified vectors, aka "Microsoft Information Disclosure Vulnerability."...

Veritas Infoscale Operations Manager Unauthorized Operation Vulnerability

Veritas Infoscale Operations Manager is a suite of software from Veritas that is used to manage the entire InfoScale deployment. An unauthorized operation vulnerability exists in Veritas Infoscale Operations Manager, which could be exploited by an attacker to perform an unauthorized operation...

PHP 5.0.0 'snmpset()' Local Denial of Service Vulnerability

PHP is a new language for writing CGI programs. PHP 5.0.0 'snmpset' local denial of service vulnerability can be exploited by attackers to launch denial of service attacks...

Information Disclosure Vulnerability in Hitachi Automation Director and JP1/Automatic Operation

Overview An Information Disclosure Vulnerability was found in Hitachi Automation Director and JP1/Automatic Operation. Impact Remote attackers might exploit this vulnerability to obtain user credentials. Solution Please refer to the 'Vendor Information' section for the official countermeasure and...

Unauthorized operation vulnerability in '/user/regin.php' in biweb version 5.86

BIWEB Business Intelligence Website System is a website system relying on ArthurXF enterprise application-level PHP development framework, developed and designed by the Shanghai NetWorks Network Information Co., Ltd. is a rapid development, simple and easy to use object-oriented enterprise...

OwnCloud WebDAV 'COPY' Security Bypass Vulnerability

OwnCloud is a free and open source personal cloud storage solution from German company OwnCloud. The solution offers file management, music storage, calendars and more. A security bypass vulnerability exists in OwnCloud WebDAV 'COPY', which allows attackers to bypass security restrictions and...

SQL Injection Vulnerability in Name Parameter of VoIP Operation Support System of Kunshi Network Technology Co.

The VoIP operation support system of Kunshi Network Technology Co., Ltd. is a support system for small and medium-sized VoIP operation business. A SQL injection vulnerability exists in the name parameter of the VoIP operation support system of Kunshi Network Technology Co. An attacker can exploit...

Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl

Quick EmulatorQEMU built with the Block driver for iSCSI images support virtio-blk is vulnerable to a heap-based buffer overflow issue. The flaw could occur while processing iSCSI asynchronous I/O ioctl2 calls. A user inside a guest could exploit this flaw to crash the QEMU process resulting in...

Operation Ghoul Targeting Middle Eastern Industrial, Engineering Organizations

Researchers today identified a series of ongoing targeted attacks primarily designed to steal sensitive corporate financial data from industrial and engineering organizations in the Middle East. The group behind the campaign, nicknamed Operation Ghoul by researchers at Kaspersky Lab’s Global...

OpenSSH 7.x < 7.3 Multiple Vulnerabilities

Binary data 9507.prm...

DEBIAN-CVE-2016-6198

The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service system crash via a rename system call, related to fs/namei.c and fs/open.c...

CVE-2015-8943

drivers/video/msm/mdss/mdssmdputil.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a mapping exists before proceeding with an unmap operation, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28815158 a...

UBUNTU-CVE-2015-8943

drivers/video/msm/mdss/mdssmdputil.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a mapping exists before proceeding with an unmap operation, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28815158 a...

kernel: Permission bypass on overlayfs during copy_up

The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application...