The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the pi.c function in OpenJPEG, a component of PDFium for the Google Chrome browser, is caused by buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure memory-bound reading using a specially crafted JPEG 2000 ima...

UBUNTU-CVE-2016-2841

The ne2000receive function in the NE2000 NIC emulation support hw/net/ne2000.c in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via crafted values for the PSTART and PSTOP registers, involving ring buffer control...

USN-2919-1 jasper vulnerabilities

Jacob Baines discovered that JasPer incorrectly handled ICC color profiles in JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges. CVE-2016-1577...

UBUNTU-CVE-2016-1577

Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137...

Cisco Application Policy Infrastructure Controller and Nexus 9000 ACI Mode Switches Security Bypass Vulnerability

Cisco Application Policy Infrastructure Controllers and Cisco Nexus 9000 Series ACI Mode Switches are both products of the American company Cisco. The former is a controller that automates the management of application-centric infrastructure ACI. The latter is an application-centric infrastructur...

CVE-2015-3591

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-3591. Reason: This candidate is a duplicate of CVE-2014-3591. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2014-3591 instead of this candidate. All references and descriptions in this...

CVE-2016-1335

The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication configuration, which allows remote authenticated users to gain privileges by establishing a connection from an endpoint that was previous...

CVE-2016-7028

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-0728. Reason: This candidate is a duplicate of CVE-2016-0728. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2016-0728 instead of this candidate. All references and descriptions in this...

Hospira Communication Engine Stack Buffer Overflow Vulnerability

The Hospira LifeCare PCA Infusion System, Plum A+ Infusion System, and Plum A+3 Infusion System are all intelligent infusion systems from Hospira, U.S.A. The Hospira Communication Engine CE is one of the Ethernet port components used to communicate with external systems. The Hospira Communication...

Cambium Networks ePMP 1000 Authentication Bypass Vulnerability

Cambium Networks ePMP 1000 is a suite of wireless network access platforms from Cambium Networks, USA. The platform provides video surveillance, Wi-Fi hotspot and sensor connectivity. An authentication bypass vulnerability exists in the Cambium Networks ePMP 1000. An attacker could exploit the...

UBUNTU-CVE-2015-6776

The opjdwtdecode1 functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during a discrete wavele...

CVE-2015-7865

creationtimestamp| type| source ---|---|--- 2015-11-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38792...

Cisco Firepower 9000 Firepower Extensible Operating System File Read Vulnerability

The Cisco Firepower Extensible Operating System on Firepower 9000 is an operating system from Cisco that runs in the 9000 series firewall appliances. A security vulnerability in Cisco Firepower Extensible Operating System 1.1 1.160 on Cisco Firepower 9000 devices allows remote attackers to read...

UBUNTU-CVE-2015-4852

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to...

MobaXterm server unauthorized access vulnerability

MobaXterm is a suite of terminal software developed by MobaXterm Inc. that integrates an enhanced terminal, an X server, and a Unix command set GNU/Cygwin.MobaXterm server is a server edition. A security vulnerability exists in versions of MobaXterm server prior to 8.3. Due to the program failing...

SAP 3D Visual Enterprise Viewer Arbitrary Code Execution Vulnerability (CNVD-2015-07257)

SAP 3D Visual Enterprise Viewer VEV is a suite of software from SAP for viewing, zooming, panning and rotating interactive 3D data and playing step-by-step animations. A security vulnerability exists in SAP 3D Visual Enterprise Viewer VEV. The vulnerability can be exploited by a remote attacker t...

Cisco ASR 5000 Device Denial of Service Vulnerability

Cisco ASR 5000 is the 5000 series of mobile multimedia service solutions from Cisco. The solution enables operators to deploy large, high-demand 3G networks, as well as support migration to 4G networks.CDMA is one of the Code Division Multiple Access CDMA mobile network implementations. A securit...

Cisco ASR 5000 and 5500 Device TACACS Packet Denial of Service Vulnerability

The Cisco ASR 5000 and 5500 devices are Cisco's 5000 series of wireless controller products. A security vulnerability exists in the Cisco ASR 5000 and 5500 device. It allows a remote attacker to submit a special TACACS packet header to restart the vpnmgr process...

Cisco FirePOWER 7000 and 8000 Appliance Denial of Service Vulnerability

The Cisco FirePOWER 7000 and 8000 are Cisco's 7000 and 8000 series firewall appliances. The Cisco FirePOWER 7000 and 8000 appliances have a security vulnerability that allows remote attackers to send specially crafted packets for denial of service attacks...

Microsoft Office Malformed EPS File Vulnerability

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A security vulnerability exists in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, which can be exploited by remote attackers to execute arbitrary code via a constructed EPS...