PT-2016-6204

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ Artemis versions prior to 1.4.0 Description The issue allows remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget...

CVE-2016-4772

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to cause a denial of service unintended lock via unspecified vectors...

CVE-2016-5793

Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...

CVE-2016-4301

Stack-based buffer overflow in the parsedevice function in archivereadsupportformatmtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file...

Citrix Linux Virtual Delivery Agent Local Privilege Vulnerability

Citrix Linux Virtual Delivery Agent formerly known as Linux Virtual Desktop is a suite of virtual desktop software from Citrix Systems. A local elevation of privilege vulnerability exists in Citrix Linux Virtual Delivery Agent versions prior to 1.4.0. A local attacker could exploit this...

Google Chrome Script Injection Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A script injection vulnerability exists in versions of Google Chrome prior to 53.0.2785.89. An attacker can exploit this vulnerability to execute arbitrary code in the browser context to bypass security restrictions,...

Malware Information Sharing Platform Insecure Temporary File Creation Vulnerability

The Malware Information Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and analyzing cybersecurity events and malware. A security vulnerability exists in the app/Controller/TemplatesController.php file in MISP...

Google Chrome PDFium heap buffer overflow vulnerability (CNVD-2016-07196)

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A heap buffer overflow vulnerability exists in PDFium in versions of Google Chrome prior to 53.0.2785.89. An attacker could exploit this vulnerability to execut...

Zend Framework SQL Injection Vulnerability

Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework. A SQL injection vulnerability exists in versions of ZF prior to 1.12.19, which can be exploited by attackers to compromise an application, access or modify data, or exploit potential...

Ktools Photostore SQL Injection Vulnerability

Ktools Photostore is the American Ktools company's set of professional photo gallery-like shopping cart software dedicated to selling pictures and other artwork online. A SQL injection vulnerability exists in Ktools Photostore versions prior to 4.7.5. An attacker can exploit this vulnerability to...

CVE-2016-4827

Cross-site scripting XSS vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4826...

CVE-2016-4826

Cross-site scripting XSS vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4827...

libxml2: Heap-based buffer underreads due to xmlParseName

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service heap-based buffer underread and application crash via a crafted file, involving xmlParseName...

CVE-2016-1196

Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information via an API call, a different vulnerability than CVE-2015-7776...

UBUNTU-CVE-2016-1372

ClamAV aka Clam AntiVirus before 0.99.2 allows remote attackers to cause a denial of service application crash via a crafted 7z file...

Cisco Application Policy Infrastructure Controller Elevation of Privilege Vulnerability (CNVD-2016-03960)

The Cisco Application Policy Infrastructure Controller provides centralized access to all group structure information, optimizes applications, and supports application configuration. Cisco Application Policy Infrastructure Controller APIC devices prior to software version 1.32f, the installation...

CVE-2016-2028

HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4357...

Google Chrome Extension Subsystem Homology Policy Bypass Vulnerability

Google Chrome is a web browsing tool developed by Google. In versions prior to Google Chrome 51.0.2704.79, the extension subsystem does not properly restrict bound access and a same-origin policy bypass vulnerability exists, which can be exploited by remote attackers to bypass the same-origin...

Google Chrome browsing_data_remover.cc Spoofing Vulnerability

Google Chrome is a web browsing tool developed by Google. Google Chrome versions prior to 51.0.2704.63, browser/browsingdata/browsingdataremover.cc removes HPKP within Cache Cleanup, a spoofing vulnerability exists, which can be exploited by remote attackers to spoof websites...

Google Chrome Blink Same-Origin Policy Bypass Vulnerability (CNVD-2016-03780)

Blink is the United States Google Google Inc. and Norway Opens Opera Software company jointly developed a set of browser layout engine rendering engine. An ink same-origin policy bypass vulnerability exists in Blink in versions of Google Chrome prior to 51.0.2704.63. A remote attacker can exploit...