Multiple vulnerabilities in multiple Kaspersky products

Kaspersky Total Security and others are antivirus programs from Kaspersky Lab Russia. Information Disclosure Vulnerability and Security Bypass Vulnerability exist in several Kaspersky products. An attacker could exploit the vulnerabilities to obtain sensitive information or bypass certain securit...

Kaspersky Anti-Virus Local CA Root Security Bypass Vulnerability

Kaspersky Anti-Virus products are prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA10935 Multiple vulnerabilities in Adobe Acrobat and Adobe Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code or bypass security restrictions. Below is a complete list of vulnerabilities: 1. A type confusion vulnerability in the XSLT engine relate...

KLA10926 Cross-site scripting vulnerability in Tenable Nessus

Cross-site scripting vulnerability was found in Tenable Nessus. By exploiting this vulnerability malicious users can inject HTML code or arbitrary web script. This vulnerability can be exploited remotely via unspecified vectors. Original advisories Nessus 6.9.3 Release Notes Related products Ness...

KLA10927 Denial of service vulnerabilities in PHP

Multiple serious vulnerabilities have been found in PHP before 5.6.28 and PHP 7.x before 7.0.13. Malicious users can exploit these vulnerabilities to cause a denial of service. Other unspecified impacts are also possible. Below is a complete list of vulnerabilities: 1. NULL pointer dereference in...

KLA10931 Denial of service vulnerability in PHP

An unspecified vulnerability was found in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14. By exploiting this vulnerability malicious users can cause a denial of service. Other unspecified impacts are also possible. This vulnerability can be exploited remotely via a...

KLA10928 Denial of service vulnerabilities in PHP

Multiple serious vulnerabilities have been found in PHP through 5.6.27 and 7.x through 7.0.12. Malicious users can exploit these vulnerabilities to cause a denial of service. Other unspecified impacts are also possible. Below is a complete list of vulnerabilities: 1. Mishandling of property...

ImageMagick Security Bypass Vulnerability

ImageMagick is an open source image viewing and editing tool for Unix/Linux platforms. A security bypass vulnerability exists in ImageMagick, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

Mozilla Thunderbird < 45.6 Multiple Vulnerabilities

The version of Mozilla Thunderbird installed on the remote Windows host is prior to 45.6. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exists, such as when handling document state changes or HTML5 content, or else due to dereferencing already...

Mozilla Thunderbird < 45.6 Multiple Vulnerabilities (macOS)

The version of Mozilla Thunderbird installed on the remote macOS or Mac OS X host is prior to 45.6. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exists, such as when handling document state changes or HTML5 content, or else due to dereferencing...

Pivotal Spring Security Security Bypass Vulnerability

Pivotal Software Spring Security is a suite of security frameworks from Pivotal Software, Inc. that provide illustrative security protection for Spring-based applications. A security bypass vulnerability exists in Spring Security versions 3.2.0 - 3.2.9, 4.0.x - 4.1.3 and 4.2.0. An attacker can...

Ignite Realtime Smack Man-in-the-Middle Security Bypass Vulnerability

Ignite Realtime Smack is the open source XMPP client library for instant messaging and presentation. A security bypass vulnerability exists in Exponent Ignite Realtime Smack versions prior to version 4.1.9. Successful exploitation of this vulnerability may allow an attacker to perform unauthorize...

OWASP AntiSamy Security Bypass Vulnerability

OWASP AntiSamy is a library for HTML and CSS coding from the OWASP Foundation in the United States. A security bypass vulnerability exists in OWASP AntiSamy. An attacker can exploit this vulnerability by submitting specially crafted input to bypass the library's security protections and submit...

IBM Tivoli Storage Manager Operations Center Security Bypass Vulnerability

IBM Tivoli Storage Manager Operations Center is a next-generation solution from IBM USA that simplifies backup management. The solution provides a centralized view of backup issues across multiple TSM servers and extends features such as DB2 databases. A security bypass vulnerability exists in IB...

Red Hat FreeIPA Insecure File Permissions Vulnerability

Red Hat FreeIPA is an integrated security information management solution from Red Hat, Inc. The solution provides an easy-to-manage identity, policy and audit IPA suite for Linux and Unix computer networks. An insecure file permission vulnerability exists in Red Hat FreeIPA. An attacker could...

Multiple Cisco Intercloud Fabric Security Bypass Vulnerabilities

Cisco Intercloud Fabric for Business and Intercloud Fabric for Providers are both products of the American company Cisco. The former is a service for managing hosting deployments and the latter is a virtual appliance for deploying and managing cloud providers. A security vulnerability exists in...

The vulnerability of the Flash Player software platform, which allows a violator to bypass the security measures

The vulnerability of the Flash Player software is related to the implementation of domain restriction rules. Exploiting this vulnerability allows a malicious actor to bypass the security mechanisms...

OpenSSH Security Bypass Vulnerability

OpenSSH OpenBSD Secure Shell is a set of connection tools maintained by the OpenBSD Project Group for secure access to remote computers. A security bypass vulnerability exists in OpenSSH. An attacker could use the vulnerability to bypass certain security restrictions and perform unauthorized...

OpenSSH authentication security bypass Vulnerability, CVE-2016-10012）

No description provided by source...

CVE-2016-7266

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, and Excel 2016 for Mac mishandle a registry check, which allows user-assisted remote attackers to execute arbitrary commands via crafted embedded content in a...