The vulnerability of the Cisco Secure Access Control System allows a intruder to inject arbitrary web or HTML code.

The vulnerability of the Cisco Secure Access Control System exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code remotely...

CVE-2015-8051: Undefined Security Weakness

The Adobe Premiere Clip app before 1.2.1 for iOS mishandles unspecified input, which has unknown impact and attack vectors...

ssl-dh-params NSE Script

Weak ephemeral Diffie-Hellman parameter detection for SSL/TLS services. This script simulates SSL/TLS handshakes using ciphersuites that have ephemeral Diffie-Hellman as the key exchange algorithm. Diffie-Hellman MODP group parameters are extracted and analyzed for vulnerability to Logjam CVE...

MS KB3108638: Update for Windows Hyper-V to Address CPU Weakness

The remote Windows host is affected by multiple denial of service vulnerabilities that can be triggered with certain central processing unit CPU chipsets. A local attacker with kernel-mode privileges on a Hyper-V guest can exploit this to cause all Hyper-V guests to become unresponsive. C Tenable...

Cumulative update for Windows 10: November 10, 2015

None None...

Kingsoft Defender Elevation of Privilege Vulnerability

Kingsoft Defender is a free security software with strong Trojan detection capability, fast vulnerability detection and compact size produced by Kingsoft Network Technology Co. The system service installed by Kingsoft Defender provides the function of creating high-privilege processes, but there...

The vulnerability of the Cisco AnyConnect Secure Mobility Client’s cryptographic protection allows a perpetrator to move arbitrary files.

The vulnerability of the Cisco AnyConnect Secure Mobility Client’s IPC channel implementation is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a local attacker to move arbitrary files around...

The vulnerability of the Flash Player and Adobe Integrated Runtime software allows attackers to circumvent existing restrictions and gain access to protected information.

The vulnerability of the Flash Player and Adobe Integrated Runtime programming platforms is related to deficiencies in access control mechanisms. Exploiting this vulnerability allows a malicious actor to bypass existing restrictions and gain access to protected information...

The vulnerability of the AIX operating system, which allows a perpetrator to increase their privileges

The vulnerability of the netstat component in the AIX operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker, who operates locally, to increase their privileges...

CVE-2015-4870: Undefined Security Weakness

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser...

CVE-2015-4804: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Management component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...

CVE-2015-4892: Undefined Security Weakness

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2015-4917...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Android operating system’s mediaserver component is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially crafted application...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Android operating system’s mediaserver component is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially crafted application...

The vulnerability of the Mac OS X operating system, which allows a hacker to gain root user privileges

The vulnerability of the Install Framework Legacy component in the Mac OS X operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker, operating locally, to gain root user privileges...

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 programmable logic controller allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller is due to authentication deficiencies. Exploiting this vulnerability could allow an attacker to cause malfunctions in service operations or execute arbitrary codes...

CVE-2015-5569: Undefined Security Weakness

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 improperly implement the Flash broker API, which has unspecified impac...

The vulnerability of the Cisco IOS operating system, which allows a perpetrator to gain unauthorized access to the device

The vulnerability of the SSHv2 component in Cisco IOS systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to a device by manipulating information about known user names and their associated RSA keys...

CVE-2015-5922: Undefined Security Weakness

Unspecified vulnerability in International Components for Unicode ICU before 53.1.0, as used in Apple OS X before 10.11 and watchOS before 2, has unknown impact and attack vectors...

CVE-2015-5915: Undefined Security Weakness

Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly, which has unspecified impact and attack vectors...