262 matches found
Apple GarageBand Out of Bounds Write Code Execution Vulnerability
Summary An exploitable out of bounds write vulnerability exists in the parsing of saved files in Apple’s GarageBand version 10.1.4. A specially crafted project file can cause an out of bounds write resulting in an exploitable condition. An attacker can deliver a project file via other means to...
AZL-35109 CVE-2016-2568 affecting package polkit for versions less than 123-1
pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer...
Microsoft Windows Kernel - Registry Hive Loading Relative Arbitrary Read in nt!RtlValidRelativeSecurityDescriptor (MS16-123)
Microsoft Windows Kernel - Registry Hive Loading Relative Arbitrary Read in nt!RtlValidRelativeSecurityDescriptor MS16-123 Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=876 We have encountered a Windows kernel crash in the nt!RtlValidRelativeSecurityDescriptor function invoked...
Microsoft Windows Kernel - Registry Hive Loading Relative Arbitrary Read in nt!RtlValidRelativeSecurityDescriptor (MS16-123)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=876 We have encountered a Windows kernel crash in the nt!RtlValidRelativeSecurityDescriptor function invoked by nt!CmpValidateHiveSecurityDescriptors while loading corrupted registry hive files. An example of a crash log excerpt...
MS16-120 and MS16-123: Description of the security update for kernel-mode drivers: October 11, 2016
None None...
MS16-123: Description of the security update for kernel-mode drivers: October 11, 2016
None None...
MS16-123: Security update for kernel-mode drivers: October 11, 2016
Resolves a vulnerability in Windows that could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application that could exploit the vulnerabilities and take control of an affected system.SummaryThis security update resolves vulnerabilities in...
Microsoft Win32k Elevation of Privilege (MS16-123: CVE-2016-7211)
An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is caused when the Windows kernel-mode driver fails to properly handle objects in memory. A remote attacker could exploit this vulnerability by running a specially crafted application...
Microsoft Win32k Elevation of Privilege (MS16-123: CVE-2016-3266)
An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is caused when the Windows kernel-mode driver fails to properly handle objects in memory. A remote attacker could exploit this vulnerability by running a specially crafted application...
123 Kids Fun MUSIC Free - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application 123 Kids Fun MUSIC Free published at the 'play' market has multiple vulnerabilities...
Zahlen schreiben - Lernen 123 - Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Zahlen schreiben - Lernen 123 published at the 'play' market has multiple vulnerabilities...
Mageia: Security Advisory (MGASA-2016-0098)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : MozillaThunderbird (openSUSE-2015-877)
The MozillaThunderbird package was updated to fix the following security and non security issues : - update to Thunderbird 38.4.0 bnc952810 - MFSA 2015-116/CVE-2015-4513/CVE-2015-4514 Miscellaneous memory safety hazards - MFSA 2015-122/CVE-2015-7188 bmo1199430 Trailing whitespace in IP address...
buildpro.123-reg.co.uk XSS vulnerability
Vulnerable URL: http://buildpro.123-reg.co.uk/trellix/sitebuilder/changelooktabs.jsp?smode=2%22%3E%3Csvg/onload=alert%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
123-reg.co.uk XSS vulnerability
Vulnerable URL: https://www.123-reg.co.uk/domain-names/expiring-domains.shtml?X-CSRF-Token=226eb668da7ea14cbd79cffb6810f8d7938deb76="query=6847620655=2=1=1=6364705650enabled=true Details: Description| Value ---|--- Patched:| Yes, at 04.12.2015 Latest check for patch:| 04.12.2015 06:32 GMT...
123-reg.co.uk XSS vulnerability
Vulnerable URL: https://www.123-reg.co.uk/domain-names/expiring-domains.shtml?X-CSRF-Token=226eb668da7ea14cbd79cffb6810f8d7938deb76=1 Details: Description| Value ---|--- Patched:| Yes, at 04.12.2015 Latest check for patch:| 04.12.2015 06:26 GMT Vulnerability type:| XSS Vulnerability status:|...
SUSE SLES11 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2015:1978-1)
This Mozilla Firefox, NSS and NSPR update fixes the following security and non security issues. - mozilla-nspr was updated to version 4.10.10 bsc952810 - MFSA 2015-133/CVE-2015-7183 bmo1205157 NSPR memory corruption issues - mozilla-nss was updated to 3.19.2.1 bsc952810 - MFSA...
Microsoft Lync Information Disclosure Vulnerability (3105872)
This host is missing an important security update according to Microsoft Bulletin MS15-123. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Mozilla: Buffer overflow during image interactions in canvas (MFSA 2015-123)
Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via vectors involving a CANVAS element and crafted JavaScript code...
SOL17528 - NTP vulnerability CVE-2015-7850
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...