PT-2018-4221

Name of the Vulnerable Software and Affected Versions Scheme 48 affected versions not specified Description The issue allows local users to write to arbitrary files via a symlink attack on /tmp/s48lose.tmp, specifically through the scheme48-send-definition function in cmuscheme48.el...

Information disclosure

Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox 49.0.2...

CVE-2016-5288

Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox 49.0.2...

CVE-2016-5288

Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox 49.0.2...

CVE-2016-5288

Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox 49.0.2...

Ruckus ICX7450-48 Cross-Site Scripting Vulnerability

The Ruckus ICX7450-48 is a switching device from Ruckus Wireless. A cross-site scripting vulnerability exists in the Ruckus ICX7450-48. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2018-11027

A reflected XSS vulnerability on Ruckus ICX7450-48 devices allows remote attackers to inject arbitrary web script or HTML...

Cross site scripting

A reflected XSS vulnerability on Ruckus ICX7450-48 devices allows remote attackers to inject arbitrary web script or HTML...

CVE-2018-11027

CVE-2018-11027 affects Ruckus ICX7450-48 devices, with a reflected XSS in the web interface. The issue arises from improper handling of input in the web app, allowing remote attackers to inject arbitrary script/HTML when a victim visits a crafted URL. Documents confirm affected device family (ICX...

PT-2018-10251

Name of the Vulnerable Software and Affected Versions Ruckus ICX7450-48 devices affected versions not specified Description A reflected XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations At the moment, there is no information about a newer version that...

CVE-2018-11027: Improper Neutralization of Input During Web Page Generation

A reflected XSS vulnerability on Ruckus ICX7450-48 devices allows remote attackers to inject arbitrary web script or HTML...

Ruckus (Brocade) ICX7450-48 Reflected Cross Site Scripting

I. VULNERABILITY ------------------------- Ruckus Brocade ICX7450-48 Reflected Cross Site Scripting II. CVE REFERENCE ------------------------- CVE-2018-11027 III. VENDOR HOMEPAGE ------------------------- https://www.ruckuswireless.com IV. DESCRIPTION ------------------------- Ruckus Brocade...

CVE-2017-6154: Improper Input Validation

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores...

FreeBSD : wireshark -- multiple security issues (4b228e69-22e1-4019-afd0-8aa716d0ec0b)

wireshark developers reports : wnpa-sec-2017-47: The IWARPMPA dissector could crash. CVE-2017-17084 wnpa-sec-2017-48: The NetBIOS dissector could crash. Discovered by Kamil Frankowicz. CVE-2017-17083 wnpa-sec-2017-49: The CIP Safety dissector could crash. CVE-2017-17085 %NASLMINLEVEL 70300 C...

jhmt.org.uk Open Redirect vulnerability

Vulnerable URL: http://jhmt.org.uk/go.php?id=3666=http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 15486074 VIP website status:| No Coordinated...

Chrome Universal XSS by circumventing the unload event ( CVE-2016-1623)

VULNERABILITY DETAILS From /thirdparty/WebKit/Source/core/dom/Document.cpp: void Document::dispatchUnloadEvents PluginScriptForbiddenScope forbidPluginDestructorScripting; RefPtrWillBeRawPtrprotectthis; if mparser mparser-stopParsing; if mloadEventProgress == LoadEventNotRun return; if...

CVE-2016-5288

Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox 49.0.2...

CVE-2016-5288

Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox 49.0.2...

Mozilla Thunderbird Security Advisories (MFSA2016-39, MFSA2016-48) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

pushkino.pw Open Redirect vulnerability

Vulnerable URL: http://pushkino.pw/redirect?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:48 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 29169291 VIP websit...