OIC Exponent CMS Information Disclosure Vulnerability (CNVD-2016-11167)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. An information disclosure...

PCMan FTP Server 'PORT' Command Buffer Overflow Vulnerability

PCMan FTP Server is a full-featured FTP server software. A buffer overflow vulnerability exists in PCMan FTP Server version 2.0.7. A remote attacker can exploit this vulnerability to execute arbitrary code in the context of an affected application with the help of a long string in the PORT comman...

Spark Arbitrary File Read Vulnerability

Spark is a miniature Java Web framework designed to let you create a Java Web application with minimal effort. An arbitrary file read vulnerability exists in Spark version 2.5, which can be exploited by an attacker to gain access to sensitive system information and launch further attacks...

Exponent CMS 'version' Parameter SQL Injection Vulnerability

Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. Exponent CMS version 2.3.9 suffers from a...

Exponent CMS 'src' Parameter SQL Injection Vulnerability

Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. Exponent CMS version 2.3.9 suffers from a...

UBUNTU-CVE-2016-5598

Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Connector/Python...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2016-09465)

Cisco IOS XE is the United States Cisco Cisco company's next-generation network operator routing system, a fully modular and fully distributed network interconnection operating system. A denial-of-service vulnerability exists in Cisco IOS XE, which allows an attacker to exploit the vulnerability ...

Wireshark NCP Parser Denial of Service Vulnerability (CNVD-2016-09585)

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial of service vulnerability exists in the packet-ncp2222.inc file in the NCP parse...

Mobilya Script Upload Vulnerability

Mobilya Scripti is a script that creates furniture appearance settings. An upload vulnerability exists in the insankaynaklarigonder.php page in the v2 version of Mobilya Scripti, which can be exploited by an attacker to upload and execute arbitrary files in the context of an affected application...

Abyss Web Server Elevation of Privilege Vulnerability

Abyss Web Server is a free WEB service program available for Windows and Linux operating systems. Multiple elevation of privilege vulnerabilities exist in Abyss Web Server X1 version 2.11.1, which can be exploited by an attacker to gain system administrator privileges...

CVE-2016-6423

The IKEv2 client and initiator implementations in Cisco IOS 15.53M and IOS XE allow remote IKEv2 servers to cause a denial of service device reload via crafted IKEv2 packets, aka Bug ID CSCux97540...

Cisco WebEx Meetings Server Command Injection Vulnerability (CNVD-2016-07731)

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A command injection vulnerability exists in CWMS version 2.6. A remote attacker can exploit this vulnerability to...

CVE-2016-1482

Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by injecting these commands into an application script, aka Bug ID CSCuy83130...

DEBIAN-CVE-2016-7175

epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted packet...

HTTP Information Disclosure Vulnerability

HTTP HyperText Transfer Protocol is one of the most widely used network protocols on the Internet. HTTP was designed to provide a means of publishing and receiving HTML pages, and the resources requested through the HTTP protocol are identified by Uniform Resource Identifiers URIs.HTTP/2 is one o...

Cisco Virtual Media Packager Unauthorized Access Vulnerability

Cisco Virtual Media Packager is a virtual media packaging device. An unauthorized access vulnerability exists in Cisco Virtual Media Packager VMP versions 2.6 and earlier, which allows attackers to obtain sensitive information...

SQL Injection Vulnerability in TUTUCMS Order Parameter

TUTUCMS is a CMS image management system focused on the development of image-based websites. TUTUCMS x2.6 version has a SQL injection vulnerability, due to the system does not strictly filter order parameters, only the source code to do the corresponding code audit. Allow attackers to exploit the...

YoruFukurou Denial of Service Vulnerability

YoruFukurou is a very easy to use native Twitter client for Mac OS X. It is a very easy to use Twitter client for Mac OS X. It is a very easy to use Twitter client for Mac OS X. A denial of service vulnerability exists in YoruFukurou version 2.84. An attacker can exploit this vulnerability to cau...

DEBIAN-CVE-2016-5353

epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Wireshark CORBA IDL Dissector Remote Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A remote denial of service vulnerability exists in Wireshark versions 2.0.0 through 2.0....