DEBIAN-CVE-2016-9814

The validateSignature method in the SAML2\Utils class in SimpleSAMLphp before 1.14.10 and simplesamlphp/saml2 library before 1.9.1, 1.10.x before 1.10.3, and 2.x before 2.3.3 allows remote attackers to spoof SAML responses or possibly cause a denial of service memory consumption by leveraging...

Drupal Hotjar Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in the Drupal Hotjar module, which stems from the program failing to properly validate user-supplied input. When an unknowing...

Design/Logic Flaw

Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not completely validated...

Ionize Arbitrary Code Execution Vulnerability

ionize is a CMS system developed using CodeIgniter. A cross-site scripting vulnerability exists in Ionize version 1.0.8 due to the program failing to adequately validate user-supplied input. An attacker can exploit this vulnerability to execute arbitrary HTML and script code in a user's browser...

Phalcon Eye Arbitrary Code Execution Vulnerability

Phalcon is an extension implemented in C. Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tools provide features such as service provisioning, configuration management, and reporting status. An arbitrary code execution vulnerability exists in Phalcon Ey...

Fortinet Connect Elevation of Privilege Vulnerability

Fortinet Connect is a device-based and user-based policy deployment network security access device developed by Fiat Fortinet. A security vulnerability exists in Fortinet Connect that stems from the program failing to adequately validate uploaded files. The vulnerability can be exploited to execu...

IBM Security Access Manager Security Bypass Vulnerability (CNVD-2017-01409)

IBM Security Access Manager is a security access manager from IBM USA. A security vulnerability exists in IBM Security Access Manager that stems from the program failing to properly validate content. An attacker could exploit the vulnerability by tricking a user into opening specially crafted...

Vulnerability of the Java Platform software platform, which allows a perpetrator to trigger a service failure

The vulnerability of the 2D software platform of Java exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash through network packets...

CVE-2016-3020

IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused by improper content validation. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to bypass validation and load a...

D-Link DWR-932B SHELL Command Execution Vulnerability

The D-Link DWR-932B is a popular router device. An input validation vulnerability exists in the D-Link DWR-932B, which allows remote attackers to exploit the vulnerability to submit a special request to execute the command "/sbin/telnetd -l /bin/sh"...

CVE-2016-8212

An issue was discovered in EMC RSA BSAFE Crypto-J versions prior to 6.2.2. There is an Improper OCSP Validation Vulnerability. OCSP responses have two time values: thisUpdate and nextUpdate. These specify a validity period; however, both values are optional. Crypto-J treats the lack of a nextUpda...

The vulnerability of Google Chrome browser allows a perpetrator to replace the content of the Omnibox component.

The vulnerability of the Google Chrome browser’s API extension exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to replace the content of the Omnibox component remotely...

Cisco Hybrid Meeting Server Cross-Site Request Forgery Vulnerability

Cisco Hybrid Meeting Server is a Cisco conferencing system. A cross-site request forgery vulnerability exists in Cisco Hybrid Meeting Server, which stems from the program failing to properly validate HTTP requests. An attacker could be allowed to exploit this vulnerability to perform certain...

Design/Logic Flaw

The content view client in Google Chrome prior to 54.0.2840.85 for Android insufficiently validated intent URLs, which allowed a remote attacker who had compromised the renderer process to start arbitrary activity on the system via a crafted HTML page...

The vulnerability of the Android operating system, which allows a intruder to gain unauthorized access to the supervisor’s memory

The vulnerability of the Android operating system’s supervisor exists due to insufficient checking of input data. Exploiting this vulnerability can allow an intruder, operating locally, to gain unauthorized access to the supervisor’s memory using HLOS...

Foxit Reader alert Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Adobe Acrobat Pro DC ImageConversion TIFF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

USN-3161-1 linux vulnerabilities

Tilman Schmidt and Sasha Levin discovered a use-after-free condition in the TTY implementation in the Linux kernel. A local attacker could use this to expose sensitive information kernel memory. CVE-2015-8964 It was discovered that the Video For Linux Two v4l2 implementation in the Linux kernel d...

CVE-2016-7882

Adobe Experience Manager versions 6.2 and earlier have an input validation issue in the WCMDebug filter that could be used in cross-site scripting attacks...

Delta Industrial Automation ISPSoft dvl File Parsing Heap-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation ISPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...