Google Android Mediaserver elevation of privilege vulnerability (CNVD-2016-06126)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Mediaserver in Android, which can be exploited by a remote attacker to build special applications, induce application parsing, and elevate privileges...

phpMyAdmin Double URL Decoding XSS Vulnerability (PMASA-2016-16) - Windows

phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Multiple Apple products libxslt memory corruption denial of service vulnerability (CNVD-2016-05739)

Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. libxslt is an XSLTC library developed for the GNOME project. A security vulnerability in...

Multiple Apple Products libxslt Denial of Service Vulnerability

Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. libxslt is an XSLTC library developed for the GNOME project. A security vulnerability in...

Apple iOS Calendar Denial of Service Vulnerability

Apple iOS is an operating system developed for mobile devices. A security vulnerability in Calendar in Apple iOS allows remote attackers to exploit the vulnerability to conduct denial-of-service attacks using special invitations...

Multiple Apple Products libxslt Memory Corruption Denial of Service Vulnerability (CNVD-2016-05769)

Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. libxslt is an XSLTC library developed for the GNOME project. A security vulnerability in...

Drupal Features Module Remote Denial of Service Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A remote denial of service vulnerability exists in the Drupal Features module, which could be exploited by remote attackers to submit a special request for a denial of...

Zen Cart 'admin_account.php' Remote Elevation of Privilege Vulnerability

Zen Cart is Zen Cart team developed an open source shopping cart system . A remote elevation of privilege vulnerability exists in Zen Cart 'adminaccount.php', which allows remote attackers to submit a special period request to gain privileges...

Juniper Junos Administrator Privilege Acquisition Vulnerability

Juniper Junos is a network operating system dedicated to the company's hardware systems. A security vulnerability exists in Juniper Junos that could be exploited by a remote attacker to submit a special request to gain administrator privileges...

Huawei AR3200 Routers Remote Code Execution Vulnerability

Huawei AR3200 is an AR3200 series enterprise router product. A remote code execution vulnerability exists in the Huawei AR3200 Routers, which allows remote attackers to submit a special request to execute arbitrary code...

Juniper Junos Denial of Service Vulnerability (CNVD-2016-05039)

Juniper Junos is a network operating system dedicated to the company's hardware systems. A security vulnerability exists in Juniper Junos that could be exploited by a remote attacker to submit a special request for a denial-of-service attack...

The vulnerability of the microprogramming software of Siemens Simatic S7-1200 programmable logic controllers allows a malicious actor to cause malfunctions during maintenance operations.

The software of the Siemens SIMATIC S7-1200 programmable logic controller contains a vulnerability. When this vulnerability is exploited, a special SNMP packet can be sent to trigger a “failure to service” condition for the device...

CVE-2016-5099

Cross-site scripting XSS vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mishandled during double URL decoding...

Cross site scripting

Cross-site scripting XSS vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mishandled during double URL decoding...

CVE-2016-0364

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special characters...

Design/Logic Flaw

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special characters...

CVE-2016-0364

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special characters...

Security Advisory - XSS Vulnerability in Huawei Public Cloud Solution

The Public Cloud Solution has a Cross-Site Scripting XSS vulnerability in volume backup service module. An attacker can insert special characters to modify server data. Vulnerability ID: HWPSIRT-2016-06017 This vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID:...

Adding a group as a reviewer fails when the group id contains special characters because is not encoded

h3. Summary Groups containing special characters e.g. or / cannot be added as Reviewers. h3. Steps to Reproduce Create a group with a special character in it in an external user directory e.g. JIRA or LDAP Synchronize the group to FishEye Add the groups as a reviewer to a review h3. Expected...

Adding a group as a reviewer fails when the group id contains special characters because is not encoded

h3. Summary Groups containing special characters e.g. or / cannot be added as Reviewers. h3. Steps to Reproduce Create a group with a special character in it in an external user directory e.g. JIRA or LDAP Synchronize the group to FishEye Add the groups as a reviewer to a review h3. Expected...