The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone technology’s authentication mode for Qualcomm Secure Execution Environment for Android, as found in the CAF repository, stems from synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker operating remotely to...

Schneider Electric homeLYnk Controller Security Bypass Vulnerability

The Schneider Electric homeLYnk Controller is a logic controller. A security bypass vulnerability exists in all versions of the Schneider Electric homeLYnk Controller prior to 1.5.0. A remote attacker could exploit this vulnerability to obtain sensitive information...

CVE-2016-1178

The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive data via unspecified vectors...

Google Android Qualcomm SPMI driver information disclosure vulnerability

Google Android is a mobile operating system based on the Linux open kernel. Google Android suffers from an information disclosure vulnerability in the Qualcomm SPMI driver implementation, which allows remote attackers to exploit the vulnerability by submitting a special application that can acces...

Apple iOS/tvOS/macOS/watchOS Information Disclosure Vulnerability

iOS is a mobile operating system developed by Apple Inc. First announced at the Macworld conference on January 9, 2007, it was originally designed for use with the iPhone, and has since been applied to the iPod touch, iPad, and Apple TV. tvOS is an Apple-developed system based on iOS. tvOS is the...

DEBIAN-CVE-2017-2447

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a...

CVE-2016-5546

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with...

HPE Version Control Repository Manager Information Disclosure Vulnerability

HPE Version Control Repository Manager VCRM is a repository for storing software and firmware that supports ProLiant servers from HewlettPackardEnterprise HPE, USA. An information disclosure vulnerability exists in HPE Version Control Repository Manager versions prior to 7.6. A remote attacker...

Unspecified Vulnerability in Oracle Fusion Middleware BI Publisher Component (CNVD-2016-10064)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments, which provides middleware, software collections, etc. BI Publisher formerly known as XML Publisher is one of the reporting components. A remote securit...

Unspecified Vulnerability in Oracle Financial Services Applications FLEXCUBE Universal Banking Component (CNVD-2016-09688)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2016-10122)

Oracle PeopleSoft Enterprise is a set of enterprise human capital management solutions from Oracle Oracle. The program provides human capital management, financial management, supplier relationship management and other functions. A remote security vulnerability exists in the Oracle PeopleSoft...

PT-2016-3449 · Xmlsoft +9 · Libxml2 +9

Name of the Vulnerable Software and Affected Versions: libxml2 affected versions not specified Description: The issue is related to a possible cross-site scripting vulnerability in libxml2. This vulnerability may allow a remote attacker to access and compromise confidential data. The vulnerabilit...

Oracle Communications Applications Unspecified Vulnerability in Oracle Communications Operations Monito Component

Oracle Communications is Oracle's suite of applications for rapidly delivering and monetizing digital life communications. oracle Communications Operations Monitor is one of the components used to enhance the end-to-end network monitoring service. An unspecified vulnerability exists in the...

Unspecified Vulnerability in Oracle Communications Applications PCz Oracle Enterprise Communications Broker Component (CNVD-2016-05444)

Oracle Communications is Oracle's suite of applications for rapidly delivering and monetizing digital life communications. oracle Enterprise Communications Broker is one of the components used to manage the enterprise voice, video, and unified communications network. An unspecified vulnerability...

Unspecified Vulnerability in Oracle Retail Applications Oracle Retail Integration Bus Component (CNVD-2016-05446)

Oracle Retail Applications is a suite of retail application store solutions from Oracle Corporation, of which the Oracle Retail Integration Bus RIB is a component that provides real-time messaging for retailer surveys. An unspecified vulnerability exists in the Install subcomponent of the Oracle...

Unspecified Vulnerability in Oracle Siebel CRM Siebel UI Framework Component (CNVD-2016-05470)

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions , which includes sales management , marketing management , customer service systems , call centers and other modules.Siebel UI Framework is one of the framework components based on the...

Unspecified Vulnerability in Oracle Financial Services Applications Oracle FLEXCUBE Direct Banking Component

Oracle Financial Services Applications is a set of core banking, online banking and property management financial services software from Oracle Corporation, of which Oracle FLEXCUBE Direct Banking is an Internet and mobile banking solution component. An unspecified vulnerability exists in the...

Unspecified Vulnerability in Oracle Supply Chain Products Suite Oracle Demand Planning Component

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle that provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Demand Planning is an Internet-based planning component that rapidly improves supply chain performance by...

Unspecified Vulnerability in Oracle Fusion Middleware BI Publisher Component

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments, which provides middleware, software collections, etc. BI Publisher formerly known as XML Publisher is one of the reporting components. A security...

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat allow attackers to obtain confidential information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the lack of protection for operational data. Exploiting these vulnerabilities can allow a malicious...