The vulnerability in Microsoft Office Compatibility Pack allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Microsoft Lync Attendee User allows for the execution of code remotely. If a user entering the system has administrator privileges, a malicious individual can gain full control over the system. They can then install programs, view, modify, or delete data, as well as creat...

Adobe Flash Player Arbitrary Code Execution Vulnerability (CNVD-2016-04064)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player 21.0.0.242 and prior versions for Windows, Macintosh, Linux,...

Microsoft Office OLE DLL End Load Vulnerability

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A security vulnerability exists in Microsoft Office that originates from the program failing to properly...

Oracle MySQL Multiple Unspecified Vulnerabilities-11 (Jun 2016) - Linux

Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql";...

Memory Corruption Vulnerability in Multiple Adobe Products (CNVD-2016-03225)

Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center provides...

Memory Corruption Vulnerability in Multiple Adobe Products (CNVD-2016-03155)

Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center provides...

Microsoft Windows Direct3D Memory Misreference Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A memory misreference vulnerability exists in the GDI component of Microsoft Windows, which arises from a program's failure to properly handle objects in memory. A remote attacker could exploit the...

Memory Corruption Vulnerability in Multiple Adobe Products (CNVD-2016-03082)

Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center to provid...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-02111)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-02108)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-02113)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-02112)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

Microsoft Windows DLL Loading Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows, which originates when a program fails to properly validate input before loading a dynamic link library DLL file. A local attacker could...

Adobe Acrobat Multiple Vulnerabilities - 01 (Jan 2016) - Mac OS X

Adobe Acrobat is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat"; ifdescription...

Adobe Reader Multiple Vulnerabilities - 01 (Jan 2016) - Mac OS X

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

HTML injection in homescreen app bypassing DOM sanitizer — Mozilla

Mozilla fixed a bug in the l10n localization of the default homescreen app of Firefox OS reported by security researcher Muneaki Nishimura. Exploiting this issue requires tricking the user into bookmarking a specially crafted web page via the 'Add to home screen' functionality. As a result, an...

Juniper Networks ScreenOS Authentication Bypass (CVE-2015-7755)

An authentication bypass vulnerability exists in Juniper Networks ScreenOS. The vulnerability is due to the presence of a default administrative account with a hard-coded password. A remote, unauthenticated attacker could exploit this vulnerability to gain administrative access to the target...

用友某系统漏洞(SSRF&Java反序列化命令执行漏洞)

简要描述： 1.SSRF内网信息嗅探； 2.Java反序列化命令执行：获取系统权限。 详细说明： 用友私有云运营中心 http://219.232.202.154:8080//home 部署的weblogic： 漏洞证明： 1.SSRF 默认搜索页面存在： 结合http://blog.gdssecurity.com/labs/2015/3/30/weblogic-ssrf-and-xss-cve-2014-4241-cve-2014-4210-cve-2014-4.html，以localhost为例进行测试： 2.Java反序列化命令执行 测试EXP:...

Cyclope Employee Surveillance 8.6.1 - Insecure File Permissions

Author: loneferret of Offensive Security Product: Cyclope Employee Surveillance Solution again Version: icacls mysqld.exe...

Aeris Calandar v2.1 - Buffer Overflow Vulnerability

Document Title: =============== Aeris Calandar v2.1 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1656 Release Date: ============= 2015-12-01 Vulnerability Laboratory ID VL-ID: ==================================== 1656...