CVE-2017-3836

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Information: CSCvb61689. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.162 12.00.98000.178 12.00.98000.383...

DEBIAN-CVE-2016-7586

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a crafted we...

CVE-2016-4613

An issue was discovered in certain Apple products. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a craft...

Little CMS Out-of-Bounds Read Denial of Service Vulnerability

Little CMS aka lcms or liblcms is an open source color management system developed by software developer Marti Maria. The system provides black point compensation, multiple pixel format processing, profile editing and other features. A security vulnerability exists in the 'TypeMLURead' function o...

CVE-2016-8328

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Java Mission Control. The supported version that is affected is Java SE: 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

CVE-2016-5546

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with...

HPE Version Control Repository Manager Information Disclosure Vulnerability

HPE Version Control Repository Manager VCRM is a repository for storing software and firmware that supports ProLiant servers from HewlettPackardEnterprise HPE, USA. An information disclosure vulnerability exists in HPE Version Control Repository Manager versions prior to 7.6. A remote attacker...

UBUNTU-CVE-2016-5597

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality via vectors related to Networking...

Unspecified Vulnerability in Oracle Fusion Middleware BI Publisher Component (CNVD-2016-10064)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments, which provides middleware, software collections, etc. BI Publisher formerly known as XML Publisher is one of the reporting components. A remote securit...

Unspecified Vulnerability in Oracle Solaris Cluster Component (CNVD-2016-09784)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A remote security vulnerability exists in the Installation subcomponent of the Solaris component of Oracle Sun Systems Products Suite, version 11.3. An...

Unspecified Vulnerability in Oracle Financial Services Applications FLEXCUBE Universal Banking Component (CNVD-2016-09688)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools 'LDAP' Subware

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2016-10122)

Oracle PeopleSoft Enterprise is a set of enterprise human capital management solutions from Oracle Oracle. The program provides human capital management, financial management, supplier relationship management and other functions. A remote security vulnerability exists in the Oracle PeopleSoft...

Cisco IOS and IOS XE Software ZBFW Feature Security Bypass Vulnerability

Cisco IOS and IOS XE Software are operating systems developed by Cisco for its network devices.Zone-Based Firewall ZBFW is one of the policy firewall components. A security bypass vulnerability exists in the ZBFW feature in Cisco IOS and IOS XE Software, which stems from the program failing to...

CVE-2016-5282

Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource...

CVE-2016-3374

The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka "PDF Library Information Disclosure Vulnerability," a different vulnerability th...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the sndcomprtstamp function in the sound/core/compressoffload.c file of Linux kernels up to version 4.7, including in the Android operating system, is related to improper initialization of the timestamp data structure. Exploiting this vulnerability can allow a remote attacker...

PT-2016-3449 · Xmlsoft +9 · Libxml2 +9

Name of the Vulnerable Software and Affected Versions: libxml2 affected versions not specified Description: The issue is related to a possible cross-site scripting vulnerability in libxml2. This vulnerability may allow a remote attacker to access and compromise confidential data. The vulnerabilit...

Oracle Communications Applications Unspecified Vulnerability in Oracle Communications Operations Monito Component

Oracle Communications is Oracle's suite of applications for rapidly delivering and monetizing digital life communications. oracle Communications Operations Monitor is one of the components used to enhance the end-to-end network monitoring service. An unspecified vulnerability exists in the...

Oracle Siebel CRM Siebel Core - Server Framework component has an unspecified vulnerability (CNVD-2016-05487)

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions, which includes sales management, marketing management, customer service systems, call centers and other modules.Siebel Core - Server Framework is one of the server framework component...