Linux kernel denial of service vulnerability (CNVD-2016-02592)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the imspcuparsecdcdata function in the drivers/input/misc/ims-pcu.c file in Linux kernel version 3.10, which can be exploited by a...

Linux kernel iowarrior Driver Component Denial of Service Vulnerability

Linux kernel is the kernel used by Linux, the operating system released by the Linux Foundation in the United States. iowarrior Driver is one of the USB serial port converter driver components. A denial of service vulnerability exists in the iowarrior Driver component of Linux kernel version...

Varnish Proxy Server HTTP Response Splitting Vulnerability

Varnish is a high-performance open source HTTP gas pedal . A security vulnerability exists in Varnish version 3.x prior to 3.0.7, which stems from the program's use of CR as an HTTP line separator. An attacker can exploit this vulnerability by sending a request with a Content-Length header to...

Libreswan Denial of Service Vulnerability (CNVD-2016-02380)

Libreswan is an Openswan-like implementation of IPsec developed by software developer Paul Wouters, which is used to ensure security and integrity issues in data transmission. A security vulnerability exists in Libreswan version 3.16. A remote attacker can exploit this vulnerability to cause a...

Squid Denial of Service Vulnerability (CNVD-2016-01441)

Squid full name Squid Cache is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security vulnerability exists in the Edge Side Includes ESI parser in Squid versions 3.x prior...

UBUNTU-CVE-2016-2523

The dnp3alprocessobject function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service infinite loop via a crafted packet...

Microsoft Active Directory Federated Authentication Service Denial of Service Vulnerability

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. Microsoft Active Directory Federation Services ADFS is an Active Directory Federation Service that runs on Windows systems. The service provides Web Single Sign-On SSO technology, which enables...

DEBIAN-CVE-2015-8379

CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to bypass the CSRF protection mechanism via the method parameter...

CVE-2016-1256

Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R7, 14.1 before 14.1R5, 14.1X53 before 14.1X53-D18 or 14.1X53-D30, 14.1X55 before...

UBUNTU-CVE-2015-8931

Multiple integer overflows in the 1 gettimetmax and 2 gettimetmin functions in archivereadsupportformatmtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior...

PT-2015-7833 · Libarchive +5 · Libarchive +5

Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.2.0 Description: The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds stack read, by using a crafted ar file. This is due to a problem in the ar read header function in...

Xen elevation of privilege vulnerability (CNVD-2015-07060)

Xen is an open source virtual machine that is the foundation for virtualizing cloud computing. An elevation of privilege vulnerability exists in versions prior to Xen 3.4. An attacker can elevate privileges to take control of the entire system, leading to the escape of a virtual machine and posin...

The vulnerability of the NX-OS network operating system allows a hacker to induce a maintenance failure.

The vulnerability of the NX-OS network operating system is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure for the IGMP protocol by sending a specially crafted IGMPv3 packet...

BisonWare BisonFTP Information Disclosure Vulnerability

BisonFTP is an FTP service program. A directory traversal vulnerability exists in BisonWare BisonFTP version 3.5. A remote attacker can exploit this vulnerability to read arbitrary files via a RETR command within the '... /' within a RETR command can be exploited to read arbitrary files...

acsno Probe Management and Test System V3.4. Series Directory Traversal Vulnerability

Shenyang ACSNO Communication Equipment Co., Ltd. is a high-tech enterprise specializing in the development, production and sales of communication equipment software and hardware, and a member of MEF Association. There is a directory traversal vulnerability in the acsno probe management and testin...

WordPress wp-powerplaygallery plugin 'upload.php' has multiple SQL injection vulnerabilities

WordPress is a blogging platform developed using the PHP language. WordPress wp-powerplaygallery plugin version 3.3 and earlier, there are multiple sql injection vulnerabilities in the implementation of upload.php, which can be exploited by an attacker to access or modify data, etc...

Rockwell Automation RSLinx Classic Vulnerability

RSLinx Classic is used to enable communication between Rockwell Software applications within an industrial control system. A stack buffer overflow vulnerability exists in the implementation of OPCTest.exe in RSLinx Classic versions prior to 3.73.00. This allows an attacker to exploit this...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the bash-debuginfo-3.2 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the samba-3.0.10 package for the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the accessibility of protected information

The dhcp-3.0.5 package on the CentOS operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...