2275 matches found
CVE-2016-7478
Zend/zendexceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service infinite loop via a crafted Exception object in serialized data, a related issue to CVE-2015-8876...
PHP Standard PHP Library Memory Misreference Vulnerability (CNVD-2017-00068)
PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and program extensions in C, C++, etc. The Standard PHP Libra...
PHP Standard PHP Library Memory Misreference Vulnerability (CNVD-2017-00067)
PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and program extensions in C, C++, etc. The Standard PHP Libra...
HPE Systems Insight Manager Denial of Service Vulnerability (CNVD-2016-13230)
HPE Systems Insight Manager SIM is a set of management software for Hewlett Packard servers and storage devices from Hewlett Packard Enterprise HPE in the U.S. The software provides multi-system management, fault management and event handling, privilege management, and other features. A security...
uninitialized random
libcurl's new internal function that returns a good 32-bit random value was implemented poorly and overwrote the pointer instead of writing the value into the buffer the pointer pointed to. This random value is used to generate nonces for Digest and NTLM authentication, for generating boundary...
CVE-2016-0909
EMC Avamar Data Store ADS and Avamar Virtual Edition AVE versions 7.3 and older contain a vulnerability that may expose the Avamar servers to potentially be compromised by malicious users...
WinaXe 'FTP client' Remote Buffer Remote Vulnerability
WinaXe is an X terminal emulation program running on Windows platform, fully compatible with X11 R6, allowing you to enjoy Unix/Linux on Windows. A remote buffer overflow vulnerability exists in WinaXe version 7.7, which can be exploited by an attacker to execute arbitrary code in the context of ...
CVE-2016-4395
HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...
NetIQ Sentinel Arbitrary Code Execution Vulnerability
NetIQ Sentinel is a Security Information and Event Management SIEM solution from NetIQ USA. A security vulnerability exists in NetIQ Sentinel version 7.4x, which can be exploited by an attacker to execute arbitrary code in an affected application...
EMC Avamar Data Store and Avamar Virtual Edition Elevation of Privilege Vulnerability
EMC Avamar is a backup and recovery solution from EMC Corporation. The solution provides data backup, disaster recovery, deduplication, etc. Avamar Data Store ADS is one of the components used for data backup; Avamar Virtual Edition AVE is one of the components used to realize the replication...
Android devices cannot launch apps after updating VDA agent to version 7.11
After upgrading VDA to v7.11; Receiver for Android users cannot launch published Apps or Desktops. The following error message is observed on the Android devices: "The common name on the ID certificate is not what was expected" In addition, the receiver logs shall contain similar stack trace: 09-...
SAP NetWeaver Security Bypass Vulnerability (CNVD-2016-09869)
SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A security bypass vulnerability exists in SAP NetWeaver version 7.4, which can be exploited by attackers to bypa...
SAP Standalone SAPConsole Information Disclosure Vulnerability
SAP Console is a set of distribution components from SAP that supports connectivity to exchange information within the SAP system. An information disclosure vulnerability exists in SAP Console version 7.30, which can be exploited by an attacker to obtain sensitive system information...
Wordpress wpsolr-search-engine plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. wpsolr-search-engine is one of the plug-ins used to change the way of search. A cross-site scripting vulnerability exists i...
ZZCMS 7.1 Multiple Arbitrary File Deletion Vulnerabilities
Z Station Chief Merchants Content Management System ZZCMS developed by the ZZCMS team, incorporating database optimization, content caching, AJAX and other technologies,, open source, independent functional modules, to facilitate secondary development. ZZCMS 7.1 version of the existence of multip...
Red Hat Enterprise Linux Local Security Bypass Vulnerability
Red Hat Enterprise Linux RHEL is a set of Linux operating systems maintained and distributed by Red Hat for business users. A local security bypass vulnerability exists in RHEL version 7.2, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations...
PHP Heap Overflow Vulnerability
PHP is a popular general-purpose scripting language that is particularly well suited for web development. A memory overflow vulnerability exists in the phpmysqlndrowpreadtextprotocolaux field in PHP version 7.0.10, which can be exploited by an attacker to cause a memory overflow...
SAP TREX Information Disclosure Vulnerability (CNVD-2016-07355)
SAP TREX is a search engine from SAP for the SAP NetWeaver integrated technology platform. An information disclosure vulnerability exists in SAP TREX version 7.10 Revision 63, which can be exploited by a remote attacker to disclose technical information about the TREX system and perform queries o...
IBM Tivoli Storage Manager for Virtual Environments Security Bypass Vulnerability
IBM Tivoli Storage Manager for Virtual Environments TSMVE is a VM backup and recovery solution from IBM USA. The solution protects VMware vSphere virtual machines by offloading backup workloads to a central server. A security bypass vulnerability exists in IBM TSMVE versions 7.1.0.0 through 7.1.4...