Apache Jetspeed Cross-Site Scripting Vulnerability (CNVD-2016-01717)

Jetspeed is the United States Apache Apache Software Foundation of a set of open portal platform and enterprise information portal using Java and XML development. A cross-site scripting vulnerability exists in Jetspeed versions 2.2.0 through 2.2.2, which stems from the program allowing HTML tags ...

CVE-2016-0454

Unspecified vulnerability in the Oracle Mobile Application Servlet component in Oracle E-Business Suite 12.1 and 12.2 allows local users to affect confidentiality via vectors related to MWA Server Manager...

CVE-2016-0412

Unspecified vulnerability in the PeopleSoft Enterprise SCM eProcurement component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect integrity via unknown vectors related to Manage Requisition Status...

PT-2015-7835 · Libarchive +5 · Libarchive +5

Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.2.0 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by providing a crafted 7z file. This is related to the 7z folder struct in the archive read support format...

Idera Up.time agent for Windows formatting string vulnerability

Idera Up.time client for Windows is a Windows-based infrastructure performance monitoring software client from Idera Corporation. A formatting string vulnerability exists in Idera Up.time client for Windows versions 6.0 and 7.2. A remote attacker can exploit this vulnerability by sending a...

VulnCheck KEV: CVE-2015-7756

The encryption implementation in Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 before 6.3.0r18b, 6.3.0r19 before 6.3.0r19b,...

Apple Xcode Denial of Service Vulnerability

Apple Xcode is a set of integrated development environments IDEs provided to developers by Apple Inc. in the United States, which is mainly used to develop applications for Mac OS X and iOS. A denial of service vulnerability exists in versions of Apple Xcode prior to 7.2. It allows local users to...

Google AdWords API 'WSDLInterpreter/WSDLInterpreter.php' Arbitrary PHP Code Execution Vulnerability

Google AdWords API is the United States Google Google company's set of developers to build applications for developers to interact directly with the AdWords platform development tools. An arbitrary PHP code execution vulnerability exists in Google AdWords API version 6.2.0 and earlier. An attacke...

Multiple Cross-Site Scripting Vulnerabilities in Fortinet FortiManager (CNVD-2015-07355)

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and can group devices into different management domains ADOM to further simplify multi-device security deployment and managemen...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-06982)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. An unspecified vulnerability exists in Oracle MySQL Server versions 5.5.45 and earlier and 5.6.26 and earlier. ...

Splunk cross-site scripting vulnerability (CNVD-2015-06482)

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. A cross-site scripting vulnerability exists in Splunk versions 6.2.6 prior to 6.2.0, which can be exploited by an attacker to execute arbitrary script code, steal cookie-based authentication and...

NTP ntpd Input Validation Vulnerability

ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. A security vulnerability exists in the ntpcrypto.c file in ntpd in NTP 4.2.8 and earlier versions. A remote attacker could exploit th...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

Cisco Unified Web and E-mail Interaction Manager Cross-Site Scripting Vulnerability

Cisco Unified Web and E-mail Interaction Manager are both products in Cisco's Customer Collaboration Contact Center.Web Interaction Manager is a product that helps call center agents answer customer questions using websites and text chat or real-time Web collaboration; E-mail Interaction Manager ...

Oracle Sun Systems Products Suite Solaris Component Arbitrary Code Execution Vulnerability

Oracle Sun Solaris is a set of Unix-like operating systems from Oracle. A security vulnerability exists in the rmformat Utility subcomponent of the Solaris component of Oracle Sun Systems Products Suite version 10 and version 11.2. A local attacker could exploit this vulnerability to compromise t...

CVE-2014-8391

The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to obtain sensitive information from other users' sessions via a large number of requests...

DEBIAN-CVE-2015-3340

Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a 1 XENDOMCTLgettscinfo or 2 XENSYSCTLgetdomaininfolist request...

The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ipa-server-2.2.0 operating system from CentOS can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out...

The vulnerability of the Red Hat Linux operating system, which allows a remote attacker to compromise the accessibility of protected information

The vulnerability of the libpng-1.2.2 package on the Red Hat Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

Red Hat Drools XML External Entity Vulnerability

Red Hat Drools is the United States Red Hat Red Hat company's set of open source based on the RETE algorithm business rules management system BRMS solution. An XML external entity vulnerability exists in Red Hat Drools versions prior to 6.2.0. It allows remote attackers to read arbitrary files vi...