13109 matches found
CVE-2016-6354
Heap-based buffer overflow in the yygetnextbuffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving numtoread...
CVE-2015-8871
Use-after-free vulnerability in the opjj2kwritemco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have unspecified impact via unknown vectors...
CVE-2016-6158
Multiple cross-site request forgery CSRF vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for requests that 1 restore factory settings or 2 reboot the device via unspecified vectors...
CVE-2016-4384
HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a denial of service via unspecified vectors...
CVE-2016-4382
HPE Performance Center 11.52, 12.00, 12.01, 12.20, and 12.50 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to a "remote user validation failure" issue...
RubyGems: Host Header Injection/Redirection
rubygems.org is vulnerable to host header injection because the host header can be changed to something outside the target domain. Attack vectors are somewhat limited but depends on how the host header is used by the back-end application code. If code references the hostname used in the URL such ...
The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or increase their privileges.
The vulnerability of the kernel in Mac OS X and iOS arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure memory corruption using undefined vectors...
The vulnerability of the Mac OS X operating system, which allows a hacker to trigger a service failure
Vulnerability of the Mac OS X system’s startup process due to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure using undefined vectors...
Vulnerabilities of operating systems such as Mac OS X and iOS, which allow attackers to trigger service interruptions
The vulnerability of the ImageIO component in operating systems such as Mac OS X and iOS arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor to trigger a service failure memory consumption by using undefined vectors...
The vulnerability of the Mac OS X operating system, which allows a hacker to trigger a service failure
The vulnerability of the Audio component in the Mac OS X operating system is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker, operating locally, to trigger a service failure pointer swapping of the zero pointer using uncertain vectors...
The vulnerability of the iOS operating system allows a perpetrator to trigger a service failure or obtain confidential information.
The vulnerability of the IOAcceleratorFamily component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker acting locally to obtain confidential information from the kernel’s memory or trigger a service failure...
The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to replace the signal that indicates the end of transmission, or gain access to protected audio information.
The vulnerability of the FaceTime component in Mac OS X and iOS operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to replace the signal that indicates the end of transmission, or gain access to protected audio informati...
The vulnerability of the Mac OS X operating system, which allows a hacker to increase their privileges
The vulnerability of the IOSurface component in the Mac OS X operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges using undefined vectors...
CVE-2016-4747
Mail in Apple iOS before 10 mishandles certificates, which makes it easier for man-in-the-middle attackers to discover mail credentials via unspecified vectors...
CVE-2016-4704
otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service memory corruption and application crash via unspecified vectors, a different vulnerability than CVE-2016-4705...
Memory corruption
otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service memory corruption and application crash via unspecified vectors, a different vulnerability than CVE-2016-4705...
Design/Logic Flaw
Apple iOS before 10, when Handoff for Messages is used, does not ensure that a Messages signin has occurred before displaying messages, which might allow attackers to obtain sensitive information via unspecified vectors...
CVE-2016-6643
Cross-site scripting XSS vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...