Exploit for CVE-2016-2384

Linux kernel exploits ===================== | Date | Link | Des...

CVE-2016-2388

The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

PT-2016-1282 · Sap · Sap Netweaver As Java

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS JAVA version 7.4 Description: The issue is related to insufficient access control in the Universal Worklist Configuration component of SAP NetWeaver, allowing remote attackers to obtain sensitive user information via a crafte...

DEBIAN-CVE-2015-7566

The clie5attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by inserting a USB device that lacks a bulk-out endpoint...

The vulnerability of the Cisco Firepower Extensible Operating System allows a intruder to trigger a maintenance failure.

The vulnerability of the Cisco Firepower Extensible Operating System’s driver exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor, operating locally, to trigger a service failure using a pre-prepared USB device that transmits erroneous USB...

WordPress Universal Analytics Plugin <= 1.3.0 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Universal Analytics <= 1.3.0 - Authenticated Cross-Site Scripting (XSS)

"A subscriber could update the plugins settings via the URL or AJAX. The settings were not sanitized before saving to the database and not escaped before outputted on the front end."...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Universal Work Queue Work Provider Administration Component (CNVD-2016-00600)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle Universal Work Queue Work Provider Administration component of Oracle E-Business Suite, which allows remote attackers to exploit the vulnerability to submit...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Universal Work Queue Error Messages Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle Universal Work Queue Error Messages component, which could be exploited by a remote attacker to submit a special request to modify data...

CVE-2016-0536

Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to error messages...

CVE-2016-0524

Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Work Provider Administration...

CVE-2016-0524

CVE-2016-0524 affects Oracle E-Business Suite 11.5.10.2 via the Oracle Universal Work Queue component, specifically the Work Provider Administration area. The vulnerability is described as allowing remote attackers to impact confidentiality and integrity through unknown vectors; the underlying ro...

The vulnerability of clients to universal configuration management databases like USMDB Browser allows attackers to obtain confidential information or circumvent existing access restrictions.

The vulnerability of the client for universal configuration management databases of the USMDB Browser is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating locally, to obtain confidential information or circumvent existing access restrictions...

UBUNTU-CVE-2015-8713

epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not properly reserve memory for channel ID mappings, which allows remote attackers to cause a denial of service out-of-bounds memory access and application crash via a crafted packet...

wiki.universal-devices.com XSS vulnerability

Vulnerable URL: http://wiki.universal-devices.com/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Chakra JavaScript Engine: Microsoft Open-Sources the Heart of Edge browser

Microsoft has announced the plans to open source the core components of its "Chakra" – the JavaScript engine behind the new Edge browser – to GitHub code-sharing and collaboration repository next month. The company made this announcement at the JSConf US Last Call conference in Florida this...

[SECURITY] Fedora 22 Update: rpcbind-0.2.3-0.3.fc22

The rpcbind utility is a server that converts RPC program numbers into universal addresses. It must be running on the host to be able to make RPC calls on a server on that machine...

SolarWinds DameWare Mini Remote Control Stack Buffer Overflow Vulnerability

SolarWinds DameWare Mini Remote Control is a suite of remote control software for laptops and servers that provides remote desktop access and screen sharing capabilities. A stack buffer overflow vulnerability exists in the URI handler in the DWRCC.exe file in versions prior to SolarWinds DameWare...

store.universal-music.co.jp XSS vulnerability

Vulnerable URL: http://store.universal-music.co.jp/GoodsSearchList.jsp?keyword="'--; Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

[SECURITY] Fedora 23 Update: rpcbind-0.2.3-0.4.fc23

The rpcbind utility is a server that converts RPC program numbers into universal addresses. It must be running on the host to be able to make RPC calls on a server on that machine...