cve homes

PhpMyAdmin redirection function content Spoofing Vulnerability (CVE-2015-7873)PhpMyAdmin redirection function content Spoofing Vulnerability (CVE-2015-7873) Release date:Updated on:Affected Systems: phpMyAdmin phpMyAdmin 4.5.x-4.5.1phpMyAdmin phpMyAdmin 4.4.x-4.4.15.1 Description: CVE (CAN) ID: CVE-2015-7873Phpmyadmin

389 Directory Server nsSSL3Ciphers preference Vulnerability (CVE-2015-3230)389 Directory Server nsSSL3Ciphers preference Vulnerability (CVE-2015-3230) Release date:Updated on:Affected Systems: 389 Directory Server 389 Directory Server Description: CVE (CAN) ID: CVE-2015-3230389 Directory Server is an LDAP Server

Mozilla Firefox Denial of Service Vulnerability (CVE-2015-7192)Mozilla Firefox Denial of Service Vulnerability (CVE-2015-7192) Release date:Updated on:Affected Systems: Mozilla Firefox Description: CVE (CAN) ID: CVE-2015-7192Mozilla Firefox is an open-source web browser that uses the Gecko engine.On the OS X pla

OwnCloud Desktop Client man-in-the-middle attack Vulnerability (CVE-2015-4456)OwnCloud Desktop Client man-in-the-middle attack Vulnerability (CVE-2015-4456) Release date:Updated on:Affected Systems: OwnCloud Desktop Client Description: CVE (CAN) ID: CVE-2015-4456OwnCloud is a solution for source file synchroniza

Adobe Shockwave Player Memory Corruption Vulnerability (CVE-2015-7649)Adobe Shockwave Player Memory Corruption Vulnerability (CVE-2015-7649) Release date:Updated on:Affected Systems: Adobe Shockwave Player Description: CVE (CAN) ID: CVE-2015-7649Adobe Shockwave Player is a software used to play web content creat

MediaWiki Information Leakage Vulnerability (CVE-2015-8005)MediaWiki Information Leakage Vulnerability (CVE-2015-8005) Release date:Updated on:Affected Systems: MediaWiki MediaWiki 1.25.x-1.25.3MediaWiki 1.24.x-1.24.4 Description: CVE (CAN) ID: CVE-2015-8005MediaWiki is a famous wiki program running in the PHP +

Wpa_supplicant P2P SSID Management Vulnerability (CVE-2015-1863)Wpa_supplicant P2P SSID Management Vulnerability (CVE-2015-1863) Release date:Updated on:Affected Systems: Android Android 5.xAndroid Android 4.xAndroid wpa_supplicant 1.0-2.4 Description: CVE (CAN) ID: CVE-2015-1863Wpa_supplicant is a Wi-Fi function comp

HP Multiple Remote Code Execution Vulnerabilities (CVE-2015-2113)HP Multiple Remote Code Execution Vulnerabilities (CVE-2015-2113) Release date:Updated on:Affected Systems: HP Thin Client t820 Flexible Thin ClientHP Thin Client t620 Flexible Thin ClientHP Thin Client t610 Flexible Thin ClientHP Thin Client t5740e Thin ClientHP Thin Client t5740 Thin ClientHP Thin Client t5540 Thin ClientHP Thin Client t52

Chrony Memory Corruption Vulnerability (CVE-2015-1822)Chrony Memory Corruption Vulnerability (CVE-2015-1822) Release date:Updated on:Affected Systems: Chrony Description: CVE (CAN) ID: CVE-2015-1822Chrony is a tool used for computer time synchronization. It implements the NTP protocol and can be used as both a cl

Adobe Flash Player post-release Reuse Vulnerability (CVE-2015-0349)Adobe Flash Player post-release Reuse Vulnerability (CVE-2015-0349) Release date:Updated on:Affected Systems: Adobe Flash Player Adobe Flash Player Adobe Flash Player Adobe Flash Player 14. x-17.x Description: CVE (CAN) ID: CVE-2015-0349Adobe Flas

Tcpdump DoS Vulnerability (CVE-2015-2154) Release date:Updated on: Affected Systems:Tcpdump 4.xDescription:Bugtraq id: 73017CVE (CAN) ID: CVE-2015-2154 Tcpdump is a sniffing tool running on the command line. It allows users to intercept and display the TCP/IP and other packets sent or received by the network connected to the computer. Tcpdump's ethernet printer has a remote denial-of-service vulnerabili

Cisco ASR1000 series router Denial-of-Service Vulnerability (CVE-2015-0685)Cisco ASR1000 series router Denial-of-Service Vulnerability (CVE-2015-0685) Release date:Updated on:Affected Systems: Cisco ASR 1000 Description: CVE (CAN) ID: CVE-2015-0685The Cisco ASR1000 Series Aggregation Service Router provides a wid

Ntpd Vulnerability (CVE-2014-9297)Ntpd Vulnerability (CVE-2014-9297) Release date:Updated on:Affected Systems: NTP NTP 4.x Description: CVE (CAN) ID: CVE-2014-9297Network Time Protocol (NTP) is a Protocol used to synchronize computer Time. It can synchronize computers with their servers or clock sources (such as quart

SIMATIC WinCC device information leakage Vulnerability (CVE-2015-1601)SIMATIC WinCC device information leakage Vulnerability (CVE-2015-1601) Release date:Updated on:Affected Systems: Siemens SIMATIC WinCC (TIA Portal) Description: CVE (CAN) ID: CVE-2015-1601Siemens simatic step 7 TIA Portal is the engineering so

Android DropBox SDK Vulnerability (CVE-2014-8889) Analysis0x00 Preface This article is a translation of the detailed analysis of DropBox SDK vulnerabilities by the ibm iss security team. Today, personal data is stored on the cloud, so that services such as photo backup and general storage can be accessed by users and apps that represent users. In many aspects, the interoperability between apps and services, including access control functions, is alwa

Apache Axis incomplete repair SSL certificate verification Bypass Vulnerability (CVE-2014-3596) Release date:Updated on: Affected Systems:Apache Group AxisDescription:--------------------------------------------------------------------------------Bugtraq id: 69295CVE (CAN) ID: CVE-2014-3596 Apache Axis is a fully functional Web service implementation framework, while Axis2 is a restructured version of ax

Android Qualcomm Privilege Elevation Vulnerability (CVE-2016-0819)Android Qualcomm Privilege Elevation Vulnerability (CVE-2016-0819) Release date:Updated on:Affected Systems: Android 6.0 Description: CVE (CAN) ID: CVE-2016-0819Android is a mobile phone operating system based on the Linux open kernel.In some Andro

Apache Struts 2 remote code execution vulnerability in CVE-2016-0785)Apache Struts 2 remote code execution vulnerability in CVE-2016-0785) Release date:Updated on:Affected Systems: Apache Group Struts2 2.0.0 - 2.3.14.1 Description: CVE (CAN) ID: CVE-2016-0785Struts2 is an extensible framework for building enterprise-l

Apple iOS HTTPProtocol remote code execution vulnerability in CVE-2015-8659)Apple iOS HTTPProtocol remote code execution vulnerability in CVE-2015-8659) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2015-8659IOS is an operating system developed by Apple for mobile devices. It

Apple iOS Kernel NULL pointer indirect reference vulnerability (CVE-2016-1756)Apple iOS Kernel NULL pointer indirect reference vulnerability (CVE-2016-1756) Release date:Updated on:Affected Systems: Apple iOS Description: CVE (CAN) ID: CVE-2016-1756IOS is an operating system developed by Apple for mobile devices