Vulnerability of Cisco Nexus 7000 software, allowing attackers to access confidential information

The GNU Bash command shell, as of version 4.3 bash43-025 and later, incorrectly handles lines that follow the declaration of a specially crafted function, which is exported as a variable. This allows a malicious actor to read and write arbitrary files, as well as perform other undefined actions...

OpenJPEG 'color_esycc_to_rgb' function denial of service vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's coloresycctorgb function allows remote attackers to construct specially crafted JPEG 2000 images for denial of service attacks or to remotely execute arbitrary code...

OpenJPEG 'sycc444_to_rgb_of_color' function denial of service vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's sycc444torgbofcolor function allows remote attackers to construct specially crafted JPEG 2000 images for denial-of-service attacks or to remotely execute arbitrary code...

CVE-2016-4808

creationtimestamp| type| source ---|---|--- 2016-05-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39821...

BELL-CVE-2016-3672 CVE-2016-3672 does not affect BellSoft software

Bulletin has no description...

Manage Engine Network Configuration Manager Cross-Site Request Forgery Vulnerability

Network Configuration Manager is a web-based, multi-vendor Network Change, Configuration and Compliance Management NCCCM solution for switches, routers, firewalls and other network devices. A cross-site request forgery vulnerability exists in Manage Engine Network Configuration Manager Build 1100...

Thousand (1000) Online HD - Dangerous filesystem permissions, MIT license, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Thousand 1000 Online HD published at the 'play' market has multiple vulnerabilities...

Thousand+ - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Thousand+ published at the 'play' market has multiple vulnerabilities...

Thousand (1000) online - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Thousand 1000 online published at the 'play' market has multiple vulnerabilities...

Thousand II+ - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Thousand II+ published at the 'play' market has multiple vulnerabilities...

mysql: unspecified vulnerability related to Server:DML (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858...

The vulnerability of Cisco ASR 5000 router microprogramming software allows attackers to enhance their privileges.

The vulnerability of the SSH protocol implementation in Cisco ASR 5000 microprogramming software is related to deficiencies in the configuration of multi-user authentication with a public key. Exploiting this vulnerability allows a malicious actor to gain increased privileges by establishing a...

Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects

The multiple vulnerabilities of the opjj2kupdateimagedata function j2k.c in the OpenJPEG component, which is used in the Google Chrome browser’s PDFium engine, are caused by buffer overflows. Exploitation of these vulnerabilities could allow a malicious actor to cause a service failure memory spi...

The vulnerability of the Zhuhai RaySharp video surveillance software allows a intruder to gain access to protected information.

The software of the video surveillance device Zhuhai RaySharp has a default root user password. Exploiting this vulnerability allows a malicious actor to gain access to protected information via the TCP port 23 or 9000...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the pi.c function in OpenJPEG, a component of PDFium for the Google Chrome browser, is caused by buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure memory-bound reading using a specially crafted JPEG 2000 ima...

UBUNTU-CVE-2016-2841

The ne2000receive function in the NE2000 NIC emulation support hw/net/ne2000.c in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via crafted values for the PSTART and PSTOP registers, involving ring buffer control...

USN-2919-1 jasper vulnerabilities

Jacob Baines discovered that JasPer incorrectly handled ICC color profiles in JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges. CVE-2016-1577...

UBUNTU-CVE-2016-1577

Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137...

Cisco Application Policy Infrastructure Controller and Nexus 9000 ACI Mode Switches Security Bypass Vulnerability

Cisco Application Policy Infrastructure Controllers and Cisco Nexus 9000 Series ACI Mode Switches are both products of the American company Cisco. The former is a controller that automates the management of application-centric infrastructure ACI. The latter is an application-centric infrastructur...

CVE-2015-3591

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-3591. Reason: This candidate is a duplicate of CVE-2014-3591. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2014-3591 instead of this candidate. All references and descriptions in this...