Microsoft Edge and Internet Explorer CVE-2016-3277 Information Disclosure Vulnerability

Description Microsoft Edge and Internet Explorer are prone to a information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Edge Microsoft Internet Explorer 10 Microsoft Internet...

Microsoft Office CVE-2016-3282 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

Microsoft Internet Explorer CVE-2016-3243 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...

Microsoft Edge CVE-2016-3246 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...

Receiver for Mac Support on macOS Sierra (macOS 10.12) Beta Builds

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The Citrix Receiver for Mac team is working on product updates to support the upcoming release ofmac...

Security Advisory - Two Buffer Overflow Vulnerabilities in Wi-Fi Driver of Huawei Smart Phone

Wi-Fi driver of some Huawei products have two buffer overflow vulnerabilities due to the lack of a parameters check. An attacker may trick a user into installing a malicious application, and the application can send given parameter to Wi-Fi driver to crash the system or escalate user privilege...

The vulnerability of the Mozilla SeaMonkey software package, which allows local users to elevate their privileges

Mozilla SeaMonkey software contains a vulnerability that can be exploited when working with mar files. Exploiting this vulnerability allows a local user to elevate their privileges and modify the content of mar files during updates...

The vulnerability of the Firefox ESR browser allows local users to elevate their privileges level.

The Mozilla Firefox ESR browser contains a vulnerability that can be exploited when working with mar-files. Exploiting this vulnerability allows a local user to elevate their privileges and modify the content of mar-files during updates...

Cisco Prime Infrastructure and Evolved Programmable Network Manager Authenticated Remote Code Execution Vulnerability

A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker to upload arbitrary files and execute commands as the prime web user. The prime web user does not have the full privileges of root...

Cisco Prime Infrastructure and Evolved Programmable Network Manager Authentication Bypass API Vulnerability

A vulnerability in the application programming interface API of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager EPNM could allow an unauthenticated, remote attacker to access and control the API resources. The vulnerability is due to improper input validation of HTTP...

Security Advisory - Weak Encryption Vulnerability in the OceanStor ReplicationDirector

OceanStor ReplicationDirector is designed to manage disaster recovery DR service of data centers DC for enterprises. Huawei OceanStor ReplicationDirector has weak encryption vulnerability. An attacker may exploit it to craft server certificate signatures. Vulnerability ID: HWPSIRT-2016-05156 Huaw...

Security Advisory - XSS Vulnerability in Huawei Public Cloud Solution

The Public Cloud Solution has a Cross-Site Scripting XSS vulnerability in volume backup service module. An attacker can insert special characters to modify server data. Vulnerability ID: HWPSIRT-2016-06017 This vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID:...

Security Advisory - Data Leak Vulnerability in the FusionCompute

The FusionCompute is a cloud operating system OS. It virtualizes computing, storage, and network resources, and implements centralized management and scheduling of the virtual resources through a unified interface. Huawei FusionCompute has sensitive data leak vulnerability. An attacker can log in...

Cisco Web Security Appliance Native FTP Denial of Service Vulnerability

A vulnerability in the native pass-through FTP functionality of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to high CPU utilization. The vulnerability is due to how the FTP client terminates the FTP...

Cisco Email Security Appliance .zip File Scanning Security Bypass Vulnerability

A vulnerability in the Message Filter and Content Filter of the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected system. The vulnerability is due to improper handling of content in .zip files. An attacker could...

Cisco Unified Contact Center Enterprise Web-Based Management Interface Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of Cisco Unified Contact Center Enterprise Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to...

Security Advisory - DoS Vulnerability in the OceanStor 5800

The OceanStor 5800 Storage Systems are mid-range storage products newly developed by Huawei. Huawei Oceanstor 5800 has a DoS vulnerability. An attacker may send massive abnormal HTTP packets to the device. As a result, the HTTP service generates a high CPU usage, and the device denies services...

Cisco Prime Collaboration Deployment SQL Injection Vulnerability

A vulnerability in the interface of the Cisco Prime Collaboration Deployment SQL database could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries. The vulnerability is due to a lack of input validation for user-supplied input in...

Cisco 8800 Series IP Phone Filesystem Permission Enforcement Unauthorized Access Vulnerability

A vulnerability in the mounted filesystem of Cisco 8800 Series IP Phones could allow an authenticated, remote attacker to access any file, including the right to change the file mode, on a targeted device. The vulnerability is due to insufficient enforcement of filesystem permissions. An attacker...

Cisco IOS Software Link Layer Discovery Protocol Processing Code Denial of Service Vulnerability (cisco-sa-20160616-ios)

A vulnerability in the Link Layer Discovery Protocol LLDP packet processing code of Cisco IOS Software could allow an unauthenticated, adjacent attacker to cause an affected device to crash. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced...