CVE-2017-6974: Improper Input Validation

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the system-installation subsystem of the "System Integrity Protection" component. It allows attackers to modify the contents of a protected disk location via a crafted app...

PT-2017-17437

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.4 Description The issue involves the system-installation subsystem of the "System Integrity Protection" component, allowing attackers to modify the contents of a protected disk location via a crafted app...

macOS 10.12.x < 10.12.4 Multiple Vulnerabilities (httpoxy)

The remote host is running a version of macOS that is 10.12.x prior to 10.12.4. It is, therefore, affected by multiple vulnerabilities in multiple components, some of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these remote code execution...

CVE-2017-5624

An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T. The attacker can persistently make the locked bootloader start the platform with dm-verity disabled, by issuing the 'fastboot oem disabledmverity' command. Having dm-verity disabled, the kernel will not verify the system...

Buffer overflow

Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

PT-2017-8381

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.7.0 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors. Recommendations For versions prior to 8.7.0, update to version 8.7.0...

PT-2017-8443

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.7.0 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors. Recommendations For versions prior to 8.7.0, update to version 8.7.0 or later ...

PT-2017-8384

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.7.0 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors. Recommendations For versions prior to 8.7.0, update to version 8.7.0 or later ...

VMware Tools kASLR Protection Bypass Vulnerability - Mac OS X

VMware Tools is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:tools";...

CVE-2016-5328

VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection SIP is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors...

CVE-2016-5329

VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection SIP is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors...

PT-2016-6365

Name of the Vulnerable Software and Affected Versions VMware Tools versions 9.x through 10.0 Description The issue allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors when System Integrity Protection SIP is enabled on OS X...

USN-3154-1: OpenJDK 6 vulnerabilities

It was discovered that OpenJDK did not restrict the set of algorithms used for Jar integrity verification. An attacker could use this to modify without detection the content of a JAR file, affecting system integrity. CVE-2016-5542 It was discovered that the JMX component of OpenJDK did not...

PT-2016-6923

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions 3.70 through 16.4.1 Cisco IOS XE Software versions Denali-16.1.3 through Denali-16.3.1 Description A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local...

VMware Fusion Local Information Disclosure Vulnerability

VMware Fusion allows Windows applications to run seamlessly on Intel-based Mac machines. A local information disclosure vulnerability exists in VMware Fusion. Since System Integrity Protection SIP is enabled by default on Mac OS X, a local attacker can exploit the vulnerability to obtain kernel...

VMware Tools Local Information Disclosure Vulnerability

VMware Tools is a set of enhancements that come with VMware's VMWare virtual machines. It is a set of drivers provided by VMware to enhance the performance of virtual graphics cards and hard drives, as well as to synchronize the clocks of the virtual machines with those of the host computer. A...

PT-2016-6472

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris 10 affected versions not specified Description The issue affects the integrity of the system, allowing local users to exploit it through vectors related to Bash. Recommendations At the moment, there is no information about a...

PT-2016-6498

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 12.2.1.0.0 through 12.2.1.2.0 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors. Recommendations For versions 12.2.1.0.0 through 12.2.1.2.0, a...

Unspecified Vulnerability in Oracle Solaris Cluster Component (CNVD-2016-09783)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local security vulnerability exists in the Kernel/X86 subcomponent of the Solaris component of the Oracle Sun Systems Products Suite, versions 10 and...

CVE-2016-7107

Huawei UMA (Unified Maintenance Audit) prior to V200R001C00SPC200 SPH206 is affected by CVE-2016-7107 due to insufficient parameter validation on certain pages, enabling remote attackers to reset arbitrary user passwords and thereby compromise data integrity via unspecified vectors. The issue is ...