6262 matches found
mysql: unspecified vulnerability related to Server:RBR (CPU July 2015)
Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to RBR...
Cisco Media Convergence Server WebEx Node Open Redirect Vulnerability
WebEx Meeting Services is a hosted multimedia conferencing solution managed and maintained by Cisco WebEx. The Cisco WebEx Node for Media Convergence Server MCS suffers from an open redirection vulnerability in its implementation, which can be exploited by a remote attacker to redirect a user to ...
EMC Documentum Content Server Remote Lift Vulnerability (CNVD-2015-05447)
EMC Documentum Content Server is a content management service system from EMC. The system is mainly used to manage Documentum content repository, can create, modify and track documents and other operations. A remote elevation vulnerability exists in EMC Documentum Content Server. A remote attacke...
mysql: unspecified vulnerability related to Server:Security:Firewall (CPU October 2015)
Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows local users to affect availability via unknown vectors related to Server : Security : Firewall...
mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU April 2015)
Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB : DML...
GE Healthcare Centricity PACS Workstation and Server Trust Management Vulnerability
GE Healthcare Centricity PACS is a General Electric GE image archiving and transfer system PACS for the healthcare industry.Workstation is a PACS workstation; Server is a PACS server. A security vulnerability exists in GE Healthcare Centricity PACS Workstation and Server, which stems from the...
FreeBSD -- Resource exhaustion due to sessions stuck in LAST_ACK state
Problem Description: TCP connections transitioning to the LASTACK state can become permanently stuck due to mishandling of protocol state in certain situations, which in turn can lead to accumulated consumption and eventual exhaustion of system resources, such as mbufs and sockets. Impact: An...
CVE-2015-2662
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to DHCP Server...
Remote code execution
The Remote Desktop Protocol RDP server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a series of crafted packets, aka "Remote Desktop Protocol RDP Remote Code Execution Vulnerability."...
php: use after free vulnerability in unserialize() with DateTimeZone
A use-after-free flaw was found in the unserialize function of PHP's DateTimeZone implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory...
The vulnerability of the microprogramming software of Siemens Simatic S7-1200 programmable logic controllers allows a intruder to perform inter-site fraudulently by manipulating requests.
The software of the programmable logic controller Simatic S7-1200 contains a vulnerability in its built-in server port 80 TCP and port 443 TCP. Exploiting this vulnerability allows for inter-site request forgery attacks...
Design/Logic Flaw
The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2015-1986...
IBM Lotus Domino Web Server Webmail Cross-Site Scripting Vulnerability
The IBM Lotus Domino server is a WEB-based collaborative application architecture. A cross-site scripting vulnerability exists in the webmail interface of IBM Lotus Domino Web Server, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be us...
openSUSE Security Update : strongswan (openSUSE-2015-432)
strongswan was updated to fix a rogue servers vulnerability, that may enable rogue servers able to authenticate itself with certificate issued by any CA the client trusts, to gain user credentials from a client in certain IKEv2 setups bsc933591,CVE-2015-4171. More information can be found on...
eyou某服务器OPENSSL漏洞(影响大量网站邮箱系统)
简要描述： 详细说明： 118.194.236.38 Connecting... Sending Client Hello... Waiting for Server Hello... ... received message: type = 22, ver = 0302, length = 66 ... received message: type = 22, ver = 0302, length = 770 ... received message: type = 22, ver = 0302, length = 203 ... received message: type = 22...
New Logjam Attack on Diffie-Hellman Threatens Security of Browsers, VPNs
Researchers have uncovered a flaw in the way that some servers handle the Diffie-Hellman key exchange, a bug that’s somewhat similar to the FREAK attack and threatens the security of many Web and mail servers. The bug affects all of the major browsers and any server that supports export-grade...
The vulnerability of the Gentoo Linux operating system allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the xorg-server package up to version 1.3.0.0-r1 in the Gentoo Linux operating system can lead to violations of privacy, integrity, and accessibility of protected information. This vulnerability can be exploited by a malicious individual who has completed the authentication...
The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the systemtap-server-0.7.2 package of the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the openssh-server-3.6.1p2 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
