CVE-2016-5743

This CVE (CVE-2016-5743) affects Siemens SIMATIC WinCC/PCS 7/WinCC Runtime Professional. The vulnerability stems from improper input validation that allows specially crafted packets to trigger remote code execution on unauthenticated users. Affected products include WinCC before 7.3 Update 10 and...

DEBIAN-CVE-2016-4624

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4623...

CVE-2016-4589

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4622, CVE-2016-4623, and CVE-2016-4624...

Apache Continuum 'saveInstallation.action' Command Injection Vulnerability

Apache Continuum is the United States Apache Apache Software Foundation, a Java project based on the construction of continuous integration server . A command injection vulnerability exists in Apache Continuum 1.4.2 and earlier versions. A remote attacker can exploit this vulnerability to execute...

GD: Multiple vulnerabilities

Background GD is a graphic library for fast image creation. Description Multiple vulnerabilities have been discovered in GD. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause ...

CVE-2016-4372

HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC UAMTAM before 7.2 E0405P05 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apach...

CVE-2016-4372

CVE-2016-4372 affects HPE HP iMC suite (PLAT, EAD, APM, NTA, BIMS, UAM_TAM) prior to 7.2 E0403P04/E0405P05/E0401P04/E0401P01/E0402P02/E0405P05. The vulnerability stems from unsafe Java deserialization via the Apache Commons Collections (ACC) library, allowing remote attackers to execute arbitrary...

CVE-2016-4182

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4172,...

CVE-2016-3243

CVE-2016-3243 affects Microsoft Internet Explorer 10 and 11. The vulnerability arises from improper handling of memory objects, enabling remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by convincing a user to view a crafted site. Public sources consiste...

Jenkins JRMP远程代码执行漏洞

详情来源：Jenkins RCE 2CVE-2016-0788分析及利用 Author：隐形人真忙 0x00 概述 国外的安全研究人员Moritz Bechler在2月份发现了一处Jenkins远程命令执行漏洞，该漏洞无需登录即可利用，也就是CVE-2016-0788。官方公告是这样描述此漏洞的： A vulnerability in the Jenkins remoting module allowed unauthenticated remote attackers to open a JRMP listener on the server hosting the Jenkins...

CVE-2016-5781

Stack-based buffer overflow in WECON LeviStudio allows remote attackers to execute arbitrary code via a crafted file...

LibreOffice Use-after-free Vulnerability (Jul 2016) - Windows

LibreOffice is prone to a use after free vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:libreoffice:libreoffice";...

Microsoft Office CVE-2016-3280 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

Microsoft Office CVE-2016-3281 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

WECON LeviStudio Stack Buffer Overflow

The vulnerability is due to improper parsing of XML HmiSet Type attribute of LeviStudio project files. A remote attacker could exploit this vulnerability by enticing a user to open a crafted project file. Successful exploitation could allow the attacker to execute arbitrary code under the securit...

The vulnerability of the Security SiteProtector System’s security protection mechanism allows a hacker to execute arbitrary SQL commands.

The vulnerability of the Security SiteProtector System security system lies in the lack of protection for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

The vulnerability of the IntraVUE visualization and diagnosis software allows a intruder to execute arbitrary commands.

The vulnerability of the IntraVUE visualization and diagnosis software exists due to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the VLC Media Player software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Overfilling the buffer in the readserverhello function in lib/gnutlshandshake.c in GnuTLS allows remote servers to trigger a service failure a memory-related error or execute arbitrary code using the long session identifier in the ServerHello message...

The vulnerability of the Apache Tomcat software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of “Unrestricted File Upload” in Apache Tomcat, along with outdated code for java.io.File and non-standard JMX configurations, allows malicious actors to execute arbitrary code by uploading a JSP file and gaining access to it...

The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.

The Internet Explorer browser contains an unspecified vulnerability related to memory-related errors. Exploiting this vulnerability allows malicious actors, operating remotely, to execute arbitrary code or cause a service failure through a specially created website...