7958 matches found
CVE-2015-3734
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...
Memory corruption
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...
CVE-2015-3747
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...
mail.kirche-moers.de XSS vulnerability
Vulnerable URL: https://mail.kirche-moers.de:4443/error.php?message=%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...
Joomla Docman Path Disclosure / Local File Inclusion
Joomla docman Component 'comdocman' Full Path DisclosureFPD & Local File Disclosure/IncludeLFD/LFI CWE: CWE-200FPD CWE-98LFI/LFD Risk: High Author: Hugo Santiago dos Santos Contact: [email protected] Date: 13/07/2015 Vendor Homepage:...
Joomla Docman Path Disclosure / Local File Inclusion Vulnerabilities
Joomla Docman suffers from full path disclosure and local file inclusion vulnerabilities. Joomla docman Component 'comdocman' Full Path DisclosureFPD & Local File Disclosure/IncludeLFD/LFI CWE: CWE-200FPD CWE-98LFI/LFD Risk: High Author: Hugo Santiago dos Santos Contact: email protected Date:...
saudeperformance.com.br XSS vulnerability
Vulnerable URL: http://www.saudeperformance.com.br/cal/calendar.php?op=cal=9=2016%22%3E%3Csvg/onload=alert%28/xssposed/%29%3E=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...
zemlebaza.ru XSS vulnerability
Vulnerable URL: http://www.zemlebaza.ru/search/?s=1=0to=to=name='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 463678 Google Pagerank| 0 VIP website status:| No Check zemlebaza....
allest.su XSS vulnerability
Vulnerable URL: http://allest.su/search/?a=0=%22%3E%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...
PT-2015-1511 · Adobe +3 · Flash Player +3
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 11.x through 11.2.202.481 Adobe Flash Player versions 12.x through 18.0.0.204 Adobe Flash Player versions 13.x through 13.0.0.302 Adobe Flash Player versions 14.x through 18.0.0.203 Description: The issue is relate...
elvira.mav-start.hu XSS vulnerability
Vulnerable URL: http://elvira.mav-start.hu/elvira.dll/x/uf?iehack=?=559E98F6=-1=0=2====&charset=UTF-8=%27-alert%28%27xssposed%27%29-%27====15.07.09=58=Timetable Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...
PolarSSL -- Security Fix Backports
Paul Bakker reports: PolarSSL 1.2.14 fixes one remotely-triggerable issues that was found by the Codenomicon Defensics tool, one potential remote crash and countermeasures against the "Lucky 13 strikes back" cache-based attack...
Threat Outbreak Alert RuleID15263: Email Messages Distributing Malicious Software on May 13, 2015
Medium Alert ID: 38837 First Published: 2015 May 14 18:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15263 and RuleID15263KVR may contain the following...
Fedora 20 : wpa_supplicant-2.0-13.fc20 (2015-6952)
This update addresses a security vulnerability identified as CVE-2015-1863 . More information on this vulnerability is provided by upstream at https://w1.fi/security/2015-1/wpasupplicant-p2p-ssid-overflow.txt . An extract : Attacker or a system controlled by the attacker needs to be within radio...
Fedora 20 : lcms-1.19-13.fc20 (2015-1648)
apply patch for CVE-2013-4276 - apply patch for 'Use of uninitialized values on 64 bit machines.' Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Nodes Studio CMS XSS / Path Disclosure / SQL Injection
Hello list! There are SQL Injection, Cross-Site Scripting and Full Path Disclosure vulnerabilities in Nodes Studio CMS. This is Russian commercial CMS, which I found at one site of Russian terrorists and propagandists. ------------------------- Affected vendors: ------------------------- Nodes...
lexon-design.com XSS vulnerability
Open Bug Bounty ID: OBB-58229 Description| Value ---|--- Affected Website:| lexon-design.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
Threat Outbreak Alert RuleID14559: Email Messages Distributing Malicious Software on April 13, 2015
Medium Alert ID: 38344 First Published: 2015 April 13 12:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14559 may contain the following files: Name | Si...
Threat Outbreak Alert RuleID13988: Email Messages Distributing Malicious Software on March 13, 2015
Medium Alert ID: 37864 First Published: 2015 March 14 05:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13988 may contain the following files: Name | Si...