JasPer Denial of Service Vulnerability (CNVD-2016-11398)

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

Cisco ASR 5000 Series Denial of Service Vulnerability

Cisco ASR 5000 is the ASR 5000 series multifunction router products from Cisco USA. The Cisco ASR 5000 Series has a denial of service vulnerability that can be exploited by an attacker to cause the device to reboot and deny legitimate users...

CVE-2016-3325

creationtimestamp| type| source ---|---|--- 2016-11-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40747...

CVE-2016-7391

creationtimestamp| type| source ---|---|--- 2016-10-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40661...

OSIsoft PI Web API Account Privilege Vulnerability

OSIsoft is the world's leading provider of real-time performance management software RtPM™ suites. A security issue exists in OSIsoft PI Web API 2015 R2, which can be exploited by unauthenticated attackers to access affected devices...

Cisco Nexus 7000/7700 OTV Buffer Overflow Vulnerability

Cisco Nexus 7000 Series Switches is a modular data center-class product family. A security vulnerability exists in the OTV GRE implementation of the Cisco Nexus 7000/7700 Series Switches. A remote attacker could exploit the vulnerability to reload the affected system or remotely execute arbitrary...

bouncycastle: Invalid curve attack allowing to extract private keys

It was found that bouncycastle is vulnerable to an invalid curve attack. An attacker could extract private keys used in elliptic curve cryptography with a few thousand queries...

VMware Workstation and Workstation Player Memory Corruption Vulnerability

VMware Workstation and VMware Workstation Player are virtual machine software products from VMware, Inc. VMware Workstation is a paid, feature-rich virtual machine software. VMware Workstation Player is a free and open source virtual machine software with simpler features. A memory corruption...

chromium-browser: heap overflow in pdfium

Integer overflow in the opjtcdgetdecodedtilesize function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified...

OpenJPEG opj_dwt_interleave_v heap overflow vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in the opjdwtinterleavev function of OpenJPEG, which allows remote attackers to construct specially crafted JPEG 2000 images to trigger a heap overflow vulnerability that can be exploited for arbitrary code...

UBUNTU-CVE-2016-5139

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JPEG 2000 data...

Thousand OA collaborative office management platform defaultroot/mobile/setting/setPersonInfo. jsp injection vulnerability

No description provided by source...

Thousand OA /defaultroot/public/editor/tpsc. jsp file upload vulnerability

No description provided by source...

mysql: unspecified vulnerability related to Server:DDL (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL...

mysql: unspecified vulnerability related to Server:Types (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types...

Thousand OA collaborative office management platform GovReceiveFileAction. do RecordID parameter id injection vulnerability

No description provided by source...

Thousand OA collaborative office management platform govdocumentmanager_judge. jsp numId parameter sql injection vulnerability

No description provided by source...

Cisco IOS XR for Cisco Network Convergence System Denial of Service Vulnerability

Cisco IOS XR on NCS 6000 is an operating system from Cisco that runs on 6000 series router devices. A denial of service vulnerability exists in Cisco IOS XR versions 5.x through 5.2.5 on NCS 6000 devices, which arises from the program failing to properly manage system timer resources. A remote...

CVE-2016-1426

Cisco IOS XR 5.x through 5.2.5 on NCS 6000 devices allows remote attackers to cause a denial of service timer consumption and Route Processor reload via crafted SSH traffic, aka Bug ID CSCux76819...

Android Qualcomm component lifting vulnerability (CNVD-2016-04854)

Android on Nexus 7 is an open source Linux-based operating system for the Nexus 7 smartphone developed by Google and the Open Handset Alliance OHA.Qualcomm is one of the Qualcomm components used in the Qualcomm devices. Qualcomm is a Qualcomm component used in one of Qualcomm's devices. A securit...