appleple a-blog cms unauthorized operation vulnerability

appleple a-blog cms is a content management system CMS from appleple Japan. A security vulnerability exists in the session management of the comment feature in appleple a-blog cms 2.6.0.1 and earlier versions. A remote attacker can exploit this vulnerability to delete arbitrary comments or obtain...

Android Mediaserver Information Disclosure Vulnerability (CNVD-2016-02054)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An information disclosure vulnerability exists in Mediaserver in Android versions prior to 6.0 and 6.0.1. The vulnerability can be...

CVE-2016-0822

The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application that leverages connlauncher access, aka internal bug 25873324...

UBUNTU-CVE-2016-0825

The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 20860039...

UBUNTU-CVE-2016-0812

The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.0 before 2016-02-01 does not properly check for setup completion, which allows physically proximate attackers to bypass the...

CVE-2016-1293

Multiple cross-site scripting XSS vulnerabilities in the Management Center in Cisco FireSIGHT System Software 6.0.0 and 6.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCux40414...

Grassroots DICOM (GDCM) Buffer Overflow Vulnerability

Grassroots DICOM GDCM is a C++ library for processing DICOM medical images. A buffer overflow vulnerability exists in Grassroots DICOM GDCM versions prior to 2.6.0 and 2.6.1, which could be exploited by an attacker to perform a remote code attack...

Android Skia Memory Corruption Vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in Skia in versions prior to Android 5.1.1 LMY48Z and 6.0 2015-12-01, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...

Android SystemUI Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. SystemUI in versions prior to Android 5.1.1 LMY48Z, 6.0 2015-12-01 and 6.0 2015-12-01 has a security vulnerability in its implementation, which can be exploited by remote attackers to read screenshots and then elevate...

Android libstagefright elevation of privilege vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of libstagefright in Android versions prior to 5.1.1 LMY48Z and 6.0 2015-12-01, which can be exploited by remote attackers to gain elevated privileges...

The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a intruder to authenticate as an arbitrary user.

The vulnerability of the Microprogramming Software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to bypass authentication by acting as an arbitrary user...

Multiple Cross-Site Scripting Vulnerabilities in Cisco FireSIGHT Management Center

Cisco FireSIGHT Management Center is the United States Cisco Cisco company's set of support for centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security equipment network security and operational functions of the management center software. Multiple...

ALPINE-CVE-2015-7697

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...

Android Arbitrary Code Execution Vulnerability (CNVD-2015-07369)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. An arbitrary code execution vulnerability exists in Android versions 5.x prior to 5.1.1 LMY48X and 6.0 prior to 2015. It allows remote attackers to execute arbitrary code...

Elasticsearch Directory Traversal Vulnerability

Elasticsearch is the Netherlands Elasticsearch company's set of open source distributed RESTful search engine built on Lucene , it is mainly used in cloud computing , and supports the use of JSON over HTTP for data indexing . A directory traversal vulnerability exists in Elasticsearch versions...

ALPINE-CVE-2014-9636

unzip 6.0 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression...

CVE-2015-0436

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Login...

UBUNTU-CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

CVE-2014-2057

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 6.0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

UBUNTU-CVE-2013-7077

Cross-site scripting XSS vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.x before 6.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...