Wireshark NCP Parser Denial of Service Vulnerability (CNVD-2016-09585)

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial of service vulnerability exists in the packet-ncp2222.inc file in the NCP parse...

Mobilya Script Upload Vulnerability

Mobilya Scripti is a script that creates furniture appearance settings. An upload vulnerability exists in the insankaynaklarigonder.php page in the v2 version of Mobilya Scripti, which can be exploited by an attacker to upload and execute arbitrary files in the context of an affected application...

Abyss Web Server Elevation of Privilege Vulnerability

Abyss Web Server is a free WEB service program available for Windows and Linux operating systems. Multiple elevation of privilege vulnerabilities exist in Abyss Web Server X1 version 2.11.1, which can be exploited by an attacker to gain system administrator privileges...

CVE-2016-6423

The IKEv2 client and initiator implementations in Cisco IOS 15.53M and IOS XE allow remote IKEv2 servers to cause a denial of service device reload via crafted IKEv2 packets, aka Bug ID CSCux97540...

Cisco WebEx Meetings Server Command Injection Vulnerability (CNVD-2016-07731)

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A command injection vulnerability exists in CWMS version 2.6. A remote attacker can exploit this vulnerability to...

CVE-2016-1482

Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by injecting these commands into an application script, aka Bug ID CSCuy83130...

DEBIAN-CVE-2016-7175

epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted packet...

HTTP Information Disclosure Vulnerability

HTTP HyperText Transfer Protocol is one of the most widely used network protocols on the Internet. HTTP was designed to provide a means of publishing and receiving HTML pages, and the resources requested through the HTTP protocol are identified by Uniform Resource Identifiers URIs.HTTP/2 is one o...

Cisco Virtual Media Packager Unauthorized Access Vulnerability

Cisco Virtual Media Packager is a virtual media packaging device. An unauthorized access vulnerability exists in Cisco Virtual Media Packager VMP versions 2.6 and earlier, which allows attackers to obtain sensitive information...

SQL Injection Vulnerability in TUTUCMS Order Parameter

TUTUCMS is a CMS image management system focused on the development of image-based websites. TUTUCMS x2.6 version has a SQL injection vulnerability, due to the system does not strictly filter order parameters, only the source code to do the corresponding code audit. Allow attackers to exploit the...

YoruFukurou Denial of Service Vulnerability

YoruFukurou is a very easy to use native Twitter client for Mac OS X. It is a very easy to use Twitter client for Mac OS X. It is a very easy to use Twitter client for Mac OS X. A denial of service vulnerability exists in YoruFukurou version 2.84. An attacker can exploit this vulnerability to cau...

DEBIAN-CVE-2016-5353

epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Wireshark CORBA IDL Dissector Remote Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A remote denial of service vulnerability exists in Wireshark versions 2.0.0 through 2.0....

SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)

A padding oracle flaw was found in the Secure Sockets Layer version 2.0 SSLv2 protocol. An attacker could potentially use this flaw to decrypt RSA-encrypted cipher text from a connection using a newer SSL/TLS protocol version, allowing them to decrypt such connections. This cross-protocol attack ...

httpd: X509 client certificate authentication bypass using HTTP/2

A flaw was found in the way httpd performed client authentication using X.509 client certificates. When the HTTP/2 protocol was enabled, a remote attacker could use this flaw to access resources protected by certificate authentication without providing a valid client certificate...

Cisco WebEx Meetings Server SQL Injection Vulnerability

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A SQL injection vulnerability exists in CWMS version 2.6. A remote attacker can exploit this vulnerability to execu...

Cisco WebEx Meetings Server Cross-Site Scripting Vulnerability (CNVD-2016-04942)

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A cross-site scripting vulnerability exists in Cisco WebEx Meetings Server CWMS version 2.6. A remote attacker can...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kernel-headers-2.6.8-3-686-smp operating system of the Debian GNU/Linux distribution can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Apache HTTPD Information Disclosure Vulnerability

Apache HTTP Server is an open source web server from the Apache Software Foundation. Apache HTTPD Web Server 2.4.18-2.4.20 fails to properly validate X509 client certificates for resource access over HTTP/2. This could allow third parties to access web server resources without credentials, leadin...

Vulnerability of Cisco IOS software, which allows a malicious actor to trigger a service failure

The vulnerability in Cisco IOS and IOS XE allows malicious actors operating remotely to trigger a service failure device reboot through improperly generated IKEv2 packets...