CVE-2016-8398

Unauthenticated messages processed by the UE. Certain NAS messages are processed when no EPS security context exists in the UE. Product: Android. Versions: Kernel 3.18. Android ID: A-31548486. References: QC-CR877705...

CVE-2016-8398: Undefined Security Weakness

Unauthenticated messages processed by the UE. Certain NAS messages are processed when no EPS security context exists in the UE. Product: Android. Versions: Kernel 3.18. Android ID: A-31548486. References: QC-CR877705...

PT-2017-1206

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to unauthenticated messages being processed by the UE, specifically when certain NAS messages are processed without an existing EPS security context. This could...

Design/Logic Flaw

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled...

CVE-2016-7967

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled...

CVE-2016-7967

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled...

CVE-2016-7967

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled...

CVE-2016-7967

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled...

CVE-2016-7967

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled...

CVE-2016-7967

CVE-2016-7967 affects KMail since version 5.3.0, where the QWebEngine-based viewer ran with JavaScript enabled. The generated HTML is executed in the local file security context, enabling access to remote and local URLs. The provided documents do not specify a remediation; CVSS metrics in the sou...

CVE-2016-7967: Improper Control of Generation of Code

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled...

PT-2016-7450

Name of the Vulnerable Software and Affected Versions KMail versions 5.3.0 and later Description The issue concerns the use of a QWebEngine based viewer in KMail that has JavaScript enabled. This allows the generated HTML to be executed in the local file security context, enabling access to both...

Microsoft Browser Remote Code Execution (MS16-129: CVE-2016-7241)

A type confusion vulnerability has been reported in the Scripting Engines of Microsoft Edge and Internet Explorer. This vulnerability is due to improper access of objects in memory when the JSON.parse JavaScript function is called. A remote attacker could exploit this vulnerability by enticing th...

Microsoft Edge Memory Corruption (MS16-132: CVE-2016-7217)

A memory corruption vulnerability has been reported in Microsoft Edge. The vulnerability is due to improper handling of objects in memory. A remote attacker could exploit the vulnerability by enticing the target user to open a specially crafted web page. Successful exploitation could lead to...

OpenJPEG JPEG2000 Image Processing Out-of-Bounds Write (CVE-2016-8332)

An out-of-bounds write vulnerability has been discovered in OpenJPEG. The vulnerability is due to a lack of validation on the index values of MCC markers when parsing maliciously crafted JPEG2000 image files. A remote attacker could exploit this vulnerability by enticing a user to open a maliciou...

FreePBX Framework remotemod Parameter Remote Command Execution

A remote command execution vulnerability exists in FreePBX. The vulnerability is due to lack of sanitization for 'remotemod' parameter. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary command in the security context of the affected service...

GD Library LibGD Integer Overflow (CVE-2016-5766)

A code execution vulnerability exists in LibGD. The vulnerability is due to an integer overflow leading to a heap buffer overflow. A remote attacker can exploit this flaw by getting the target application to process a crafted malicious GD2 file. Successful exploitation could result in code...

op5 Monitor command_test.php Command Injection

A cross-site request forgery vulnerability leading to command injection has been reported in the commandtest.php script of op5 Monitor. The vulnerability is due to a lack of any cross-site request forgery prevention mechanism. A remote attacker could exploit this vulnerability by enticing an...

Trend Micro SafeSync for Enterprise ad.pm id Remote Command Execution

A remote command execution vulnerability exists in Trend Micro Safe Sync for Enterprise ad.pm page. The vulnerability is due to insufficient validation of the user-supplied id parameter. A remote, authenticated attacker could exploit this vulnerability by sending a crafted input to the vulnerable...

Zend Studio IDE 13.5.1 - Insecure File Permissions Privilege Escalation

Zend Studio IDE 13.5.1 - Insecure File Permissions Privilege Escalation + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ZEND-STUDIO-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ============ www.zend.com Product:...