CVE-2016-1335

The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication configuration, which allows remote authenticated users to gain privileges by establishing a connection from an endpoint that was previous...

CVE-2016-7028

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-0728. Reason: This candidate is a duplicate of CVE-2016-0728. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2016-0728 instead of this candidate. All references and descriptions in this...

Hospira Communication Engine Stack Buffer Overflow Vulnerability

The Hospira LifeCare PCA Infusion System, Plum A+ Infusion System, and Plum A+3 Infusion System are all intelligent infusion systems from Hospira, U.S.A. The Hospira Communication Engine CE is one of the Ethernet port components used to communicate with external systems. The Hospira Communication...

Cambium Networks ePMP 1000 Authentication Bypass Vulnerability

Cambium Networks ePMP 1000 is a suite of wireless network access platforms from Cambium Networks, USA. The platform provides video surveillance, Wi-Fi hotspot and sensor connectivity. An authentication bypass vulnerability exists in the Cambium Networks ePMP 1000. An attacker could exploit the...

UBUNTU-CVE-2015-6776

The opjdwtdecode1 functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during a discrete wavele...

CVE-2015-7865

creationtimestamp| type| source ---|---|--- 2015-11-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38792...

Cisco Firepower 9000 Firepower Extensible Operating System File Read Vulnerability

The Cisco Firepower Extensible Operating System on Firepower 9000 is an operating system from Cisco that runs in the 9000 series firewall appliances. A security vulnerability in Cisco Firepower Extensible Operating System 1.1 1.160 on Cisco Firepower 9000 devices allows remote attackers to read...

UBUNTU-CVE-2015-4852

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to...

SAP 3D Visual Enterprise Viewer Arbitrary Code Execution Vulnerability (CNVD-2015-07257)

SAP 3D Visual Enterprise Viewer VEV is a suite of software from SAP for viewing, zooming, panning and rotating interactive 3D data and playing step-by-step animations. A security vulnerability exists in SAP 3D Visual Enterprise Viewer VEV. The vulnerability can be exploited by a remote attacker t...

MobaXterm server unauthorized access vulnerability

MobaXterm is a suite of terminal software developed by MobaXterm Inc. that integrates an enhanced terminal, an X server, and a Unix command set GNU/Cygwin.MobaXterm server is a server edition. A security vulnerability exists in versions of MobaXterm server prior to 8.3. Due to the program failing...

Cisco ASR 5000 Device Denial of Service Vulnerability

Cisco ASR 5000 is the 5000 series of mobile multimedia service solutions from Cisco. The solution enables operators to deploy large, high-demand 3G networks, as well as support migration to 4G networks.CDMA is one of the Code Division Multiple Access CDMA mobile network implementations. A securit...

Cisco ASR 5000 and 5500 Device TACACS Packet Denial of Service Vulnerability

The Cisco ASR 5000 and 5500 devices are Cisco's 5000 series of wireless controller products. A security vulnerability exists in the Cisco ASR 5000 and 5500 device. It allows a remote attacker to submit a special TACACS packet header to restart the vpnmgr process...

Cisco FirePOWER 7000 and 8000 Appliance Denial of Service Vulnerability

The Cisco FirePOWER 7000 and 8000 are Cisco's 7000 and 8000 series firewall appliances. The Cisco FirePOWER 7000 and 8000 appliances have a security vulnerability that allows remote attackers to send specially crafted packets for denial of service attacks...

Microsoft Office Malformed EPS File Vulnerability

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A security vulnerability exists in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, which can be exploited by remote attackers to execute arbitrary code via a constructed EPS...

CVE-2015-5784

creationtimestamp| type| source ---|---|--- 2015-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38137...

CVE-2015-3704

creationtimestamp| type| source ---|---|--- 2015-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38138...

jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012)

A double free flaw was found in the way JasPer parsed ICC color profiles in JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

Cisco ASR 1000 Series Router IP Message Handling Denial of Service Vulnerability

The Cisco ASR1000 Series Aggregation Services Routers provide a WAN edge solution that integrates information, communication, collaboration, and commerce. The Cisco ASR 1000 Series Router has a security vulnerability in the processing of IP v4 and IPv6 messages that allows a remote attacker to...

Cisco IOS XR for ASR 9000 Series Router Message Processing Target BGP Service Denial Vulnerability

Cisco IOS XR is a member of the Cisco IOS software family and uses a microkernel-based distribution operating system architecture. A security vulnerability in the Cisco ASR 9000 series routers allows a remote user to send specially crafted BGPv4 messages, resulting in device processing errors tha...

Cisco Application Policy Infrastructure Controllers and Nexus 9000 Series ACI Mode Switches Unauthorized Access Vulnerability

Cisco Application Policy Infrastructure is a controller that automates the management of application-centric infrastructures.Cisco Nexus 9000 Series ACI Mode Switches The Cisco Nexus 9000 Series ACI Mode Switches are 9000 series switches for application-centric infrastructure ACI. An unauthorized...