CVE-2016-6392

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service device restart via a crafted IPv4 Multicast Source Discovery Protocol MSDP Source-Active SA message, aka Bug ID CSCud36767...

Apple OS X AppleEFIRuntime Arbitrary Code Execution Vulnerability

Apple OS X is a proprietary operating system developed by Apple for Mac computers.AppleEFIRuntime is one of the components used to display the BIOS initialization in the EFI environment. An arbitrary code execution vulnerability exists in AppleEFIRuntime in versions of Apple OS X prior to 10.12,...

Apple OS X Date & Time Pref Pane Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.Date & Time Pref Pane is one of the components of the time and date display panel. An information disclosure vulnerability exists in the Date & Time Pref Pane component of Apple OS X versions prior to 10.12, which c...

Apple OS X Terminal Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which Terminal is a terminal component. An information disclosure vulnerability exists in Terminal in versions of Apple OS X prior to 10.12, which can be exploited by a local attacker to obtain sensitive...

Apple iOS/Safari/iTunes WebKit Information Disclosure Vulnerability

Apple iOS, Safari and iTunes are all products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems. iTunes is a set of media player applications. WebKit is an open source...

Apple OS X WindowServer Type Obfuscation Vulnerability (CNVD-2016-08248)

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which WindowServer is a Window Service component. A type obfuscation vulnerability exists in WindowServer in Apple OS X versions prior to 10.12, which can be exploited by a local attacker to gain root privileges...

Apple OS X File Bookmark Denial of Service Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.File Bookmark is one of the file bookmarking components. A denial of service vulnerability exists in the File Bookmark component of Apple OS X versions prior to 10.12, which can be exploited to cause a denial of...

Apple OS X Bluetooth Memory Corruption Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.Bluetooth is one of the Bluetooth components. A memory corruption vulnerability exists in Bluetooth in Apple OS X versions prior to 10.12, which can be exploited by an attacker to execute arbitrary code with kernel...

Apple OS X WindowServer Type Obfuscation Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which WindowServer is a Window Service component. A type obfuscation vulnerability exists in WindowServer in Apple OS X versions prior to 10.12, which can be exploited by a local attacker to gain root privileges...

Apple OS X Kerberos 5 PAM Module User Account Enumeration Vulnerability

Apple OS X is a proprietary operating system developed by Apple for Mac computers.Kerberos 5 also known as krb5 PAM is one of the network authentication protocol components. A user account enumeration vulnerability exists in the Kerberos 5 PAM module in Apple OS X versions prior to 10.12, which c...

Apple OS X Information Disclosure Vulnerability (CNVD-2016-08245)

Apple OS X is a specialized operating system developed by Apple for Mac computers. The SecKeyDeriveFromPassword function in Apple OS X versions prior to 10.12 has an information disclosure vulnerability that can be exploited by an attacker to gain access to sensitive information in process memory...

Apple OS X Intel Graphics Driver Memory Corruption Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.Intel Graphics Driver is one of the graphics drivers. A memory corruption vulnerability exists in Intel Graphics Driver in Apple OS X versions prior to 10.12, which can be exploited by attackers to execute arbitrary...

Apple OS X ATS Memory Corruption Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.Apple Type Service ATS is one of the font type services. A memory corruption vulnerability exists in ATS in Apple OS X versions prior to 10.12. A remote attacker can exploit this vulnerability to execute arbitrary...

CVE-2016-4742

NSSecureTextField in Apple OS X before 10.12 does not enable Secure Input, which allows attackers to discover credentials via a crafted app...

CVE-2016-4727

IOThunderboltFamily in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-4709

WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4710...

VMware Workstation Pro and Player Remote Code Execution Vulnerability

VMware Workstation and VMware Workstation Player are virtual machine software products from VMware, Inc. VMware Workstation Pro is a professional version of VMware Workstation; VMware Workstation Player is a free and open-source virtual machine software program with simpler features. VMware...

USN-3068-1 libidn vulnerabilities

Thijs Alkemade, Gustavo Grieco, Daniel Stenberg, and Nikos Mavrogiannopoulos discovered that Libidn incorrectly handled invalid UTF-8 characters. A remote attacker could use this issue to cause Libidn to crash, resulting in a denial of service, or possibly disclose sensitive memory. This issue on...

mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Security: Encryption...

Wireshark UMTS FP Parser Denial of Service Vulnerability (CNVD-2016-06208)

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability in the epan/dissectors/packet-umtsfp.c file in the UMTS FP pars...