Xen Denial of Service Vulnerability (CNVD-2016-12884)

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A denial of service vulnerability...

Adobe indesign Memory Corruption Vulnerability

Adobe indesign is an American Adobe company launched a set in the field of professional typography design software. A memory corruption vulnerability exists in Adobe indesign, which can be exploited by an attacker to execute arbitrary code in the context of a user running the affected application...

Apple macOS Security Bypass Vulnerability

Apple macOS is a specialized operating system developed by Apple for Mac computers. A security bypass vulnerability exists in Apple macOS. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Linux Kernel Information Disclosure Vulnerability (CNVD-2016-11073)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. Linux Kernel has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Axessh 4.2.2 Denial Of Service

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AXESSH-DENIAL-OF-SERVICE.txt + ISR: ApparitionSec Vendor: ============ www.labf.com Product: ============= Axessh 4.2.2 Axessh is a SSH client. It is a superb terminal...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2016-10570)

Freefloat FTP Server is a free software package for uploading files and managing wired and wireless devices from the Swedish company Freefloat. A buffer overflow vulnerability exists in version 1.0 of FreeFloat FTP Server. A remote attacker can exploit this vulnerability to execute arbitrary code...

Zortam MP3 Studio 21.15 - Insecure File Permissions Vulnerability

Zortam Mp3 Media Studio is a great all-in-one music tool for organizing your Mp3/Karaoke collection for editing Mp3 ID3 tags, ripping your CD, normalizing Mp3, converts Mp3/Wav and Wav/Mp3, to get song lyric and cover arts from the internet and keeping your music collection well organized. Copy o...

JasPer Denial of Service Vulnerability (CNVD-2016-10036)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in JasPer. An attacker could exploit this vulnerability to crash the application, resulting in a denial of service...

ImageMagick heap buffer overflow vulnerability (CNVD-2016-09855)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A heap buffer overflow vulnerability exists in the 'pixel-accessor.h' script in ImageMagick version 7.0.3.0 because it fails to adequately bounds-check the data before the user provides it ...

Pivotal Spring Data JPA SQL Injection Vulnerability

Pivotal is a new company formed by EMC and VMware. A SQL injection vulnerability exists in Pivotal Spring Data JPA due to the program's inability to adequately clean user input data. An attacker could exploit the vulnerability to access and modify data...

PHPCMS V9 role.php file SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the PHPCMS V9 role.php file, which allows attackers to exploit the vulnerability to obtai...

ImageMagick bmp.c Buffer Overflow Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. ImageMagick in the processing of other formats of image files into bmp when the conversion of buffer overflow...

Arbitrary File Deletion Vulnerability in the fileservice/FileManage.asmx?op Page of the Elearning Management System of Xinwei Software

E-learning management system is an online learning platform of Shenzhen Xinwei Software Co. The E-learning management system fileservice/FileManage.asmx?op page contains an arbitrary file deletion vulnerability that can be exploited by an attacker to delete files and folders...

Google Android Mediaserver elevation of privilege vulnerability (CNVD-2016-07547)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. An elevation of privilege vulnerability exists in Google Android Mediaserver, which can be exploited by an attacker to gain elevated privileges...

Asterisk and Asterisk RTP Denial of Service Vulnerabilities

Asterisk is a free software, open source software that implements the functionality of a telephone user switch PBX. Asterisk and Asterisk RTP are vulnerable to a denial of service vulnerability. An attacker could exploit this vulnerability to cause a denial of service...

PHP 'php_quot_print_encode()' function integer overflow vulnerability

PHP is an open source general-purpose computer scripting language. An integer overflow vulnerability in the PHP 'phpquotprintencode' function allows an attacker to exploit the vulnerability to execute arbitrary code in the context of a user's affected application, or a failed attack will result i...

Foxit Reader and Foxit PhantomPDF Out-of-Bounds Reading Information Disclosure Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. Foxit Reader and Foxit PhantomPDF have an out-of-bounds read information disclosure vulnerability that could be exploited by attackers to obtain...

Weak Password Vulnerability in Tiandiweiye Digital Technology Easy7 Video Surveillance Platform

TDWI Easy7 video surveillance platform is a professional security management software for centralized cross-regional network video surveillance. A generic weak password vulnerability exists in Easy7 video surveillance platform. An attacker can exploit the vulnerability to log into the video...

SQL Injection Vulnerability in zzcms Latest Product Version /zs/search.php Page

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. zzcms latest product version /zs/search.php page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database data...

Perixx PERIDUO-710W Security Bypass Vulnerability

The Perixx PERIDUO-710W is a wireless desktop kit that includes a mouse and keyboard from Perixx Germany. A security bypass vulnerability exists in Perixx PERIDUO-710W. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...