CVE-2016-1000140

The CVE-2016-1000140 entry concerns the WordPress plugin New Year Firework, affected

CVE-2016-1000140

Reflected XSS in wordpress plugin new-year-firework v1.1.9...

Contenido v4.9.11 - (Backend) Multiple XSS Vulnerabilities

Document Title: =============== Contenido v4.9.11 - Backend Multiple XSS Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1928 Release Date: ============= 2016-10-10 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2016-2177

creationtimestamp| type| source ---|---|--- 2016-09-20 12:28:47+00:00| seen| https://t.me/bugbountychannel/178...

CVE-2016-6936

creationtimestamp| type| source ---|---|--- 2016-09-15 20:29:14+00:00| seen| https://t.me/FullDisclosure/68...

FBI Arrests Two Hackers Who Hacked US Spy Chief, FBI and CIA Director

US authorities have arrested two North Carolina men on charges that they were part of the notorious hacking group "Crackas With Attitude." Crackas with Attitude is the group of hackers who allegedly was behind a series of audacious and embarrassing hacks that targeted personal email accounts of...

CVE-2016-3437

creationtimestamp| type| source ---|---|--- 2016-08-30 17:57:34+00:00| seen| https://t.me/FullDisclosure/25...

CVE-2016-3831

The telephony component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service device crash via a NITZ time value of 2038-01-19 or later that is mishandled by the system clock, aka internal bug 29083635,...

CVE-2016-3831

The telephony component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service device crash via a NITZ time value of 2038-01-19 or later that is mishandled by the system clock, aka internal bug 29083635,...

CVE-2016-3831

The telephony component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service device crash via a NITZ time value of 2038-01-19 or later that is mishandled by the system clock, aka internal bug 29083635,...

UBUNTU-CVE-2016-3831

The telephony component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service device crash via a NITZ time value of 2038-01-19 or later that is mishandled by the system clock, aka internal bug 29083635,...

CVE-2016-3831

The telephony component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service device crash via a NITZ time value of 2038-01-19 or later that is mishandled by the system clock, aka internal bug 29083635,...

Threat Outbreak Alert RuleID23786: Email Messages Distributing Malicious Software on July 10, 2016

Medium Alert ID: 47040 First Published: 2016 July 11 14:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23786 may contain the following files: Name | Siz...

CVE-2014-9797

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-0974. Reason: This candidate is a reservation duplicate of CVE-2014-0974. Notes: All CVE users should reference CVE-2014-0974 instead of this candidate. All references and descriptions in this candidate have been removed to...

BELL-CVE-2016-5300 CVE-2016-5300 does not affect BellSoft software

Bulletin has no description...

libdwarf dwarf_leb.c File Denial of Service Vulnerability

libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the libdwarfleb.c file in libdwarf version 20160115. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference...

CVE-2015-3571

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-3571. Reason: This candidate is a duplicate of CVE-2014-3571. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2014-3571 instead of this candidate. All references and descriptions in this...

New Year Firework <= 1.1.9 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The new-year-firework WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/new-year-firework/firework/index.php?text="alert1;"...

CVE-2016-1024

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1012,...

Chinese New Year - For Kids - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Chinese New Year - For Kids published at the 'play' market has multiple vulnerabilities...