phpMyAdmin security bypass vulnerability (CNVD-2016-07929)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...

CVE-2016-6802

Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path...

CVE-2016-6662

Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-07800)

Google Chrome is a web browser developed by the American company Google Google. An arbitrary code execution vulnerability exists in versions of Google Chrome prior to 53.0.2785.113. An attacker can exploit this vulnerability to execute arbitrary code in the context of the browser to obtain...

Apache Shiro Security Bypass Vulnerability

Apache Shiro is the United States Apache Apache Software Foundation for the implementation of authentication , authorization , encryption and session management of the Java security framework . A remote security bypass vulnerability exists in Apache Shiro. An attacker could exploit this...

Design/Logic Flaw

Cisco Fog Director 1.00 for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368...

Apple iOS Security Restriction Bypass Vulnerability (CNVD-2016-07700)

Apple iOS is an operating system developed by Apple for mobile devices. A security restriction bypass vulnerability exists in Keyboards in versions prior to Apple iOS 10. An attacker can exploit this vulnerability to bypass security restrictions, perform unauthorized actions, or obtain sensitive...

Apple iOS Security Restriction Bypass Vulnerability (CNVD-2016-07698)

Apple iOS is an operating system for mobile devices developed by Apple Inc. Messages is a component of the application used to send text, photos and videos. A security restriction bypass vulnerability exists in Messages in versions of Apple iOS prior to 10. An attacker could use this vulnerabilit...

Apple iOS Security Restriction Bypass Vulnerability (CNVD-2016-07699)

Apple iOS is an operating system developed by Apple for mobile devices, and Mail is one of the mail clients. A security restriction bypass vulnerability exists in Mail in Apple iOS versions prior to 10. The vulnerability can be exploited by an attacker to bypass security restrictions, perform...

HPE Performance Center Remote Security Bypass Vulnerability

HPE Performance Center is a suite of performance load testing software from Hewlett-Packard in the United States. A remote security bypass vulnerability exists in HPE Performance Center that could be exploited by a remote attacker to submit a special request to bypass security restrictions and...

openSUSE Security Update : flash-player (openSUSE-2016-1083)

This update for flash-player fixes the following security issues APSB16-29, boo998589 : - integer overflow vulnerability that could lead to code execution CVE-2016-4287. - use-after-free vulnerabilities that could lead to code execution CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923,...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2016:2312-1)

This update for flash-player fixes the following security issues APSB16-29, boo998589 : - integer overflow vulnerability that could lead to code execution CVE-2016-4287. - use-after-free vulnerabilities that could lead to code execution CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923,...

Google Chrome Security Updates (stable-channel-update-for-desktop_13-2016-09) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Adobe Flash Player Security Bypass (APSB16-29: CVE-2016-4277)

A security bypass vulnerability exists in Adobe Flash Player. The vulnerability is due to insufficient security restrictions while handling specially crafted URL of a HTTP request to SWF file. Successful exploitation could lead to information disclosure...

lib32-flashplugin: multiple issues

CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, CVE-2016-6924 arbitrary code execution Multiple Memory corruption vulnerabilities that could lead to arbitrary code execution have been found...

flashplugin: multiple issues

CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, CVE-2016-6924 arbitrary code execution Multiple Memory corruption vulnerabilities that could lead to arbitrary code execution have been found...

CVE-2016-4278

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-4271 and...

CVE-2016-4271

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-4277 and...

CVE-2016-4271

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-4277 and...

CVE-2016-4277

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-4271 and...