CVE-2019-1732

Cisco NX-OS Software Remote Package Manager (RPM) is affected by a TOCTOU race in the RPM subsystem that can allow an authenticated local attacker with administrator credentials to corrupt variables and perform arbitrary command injection. The root cause is a lack of proper locking on critical va...

Arbitrary Code Execution

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Use-After-Free

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

CVE-2017-1732

IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be...

CVE-2017-1732

IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be...

Security Bulletin: A security vulnerability has been fixed in IBM Security Access Manager for Enterprise Single-Sign On (CVE-2017-1732)

Summary IBM Security Access Manager for Enterprise Single-Sign On does not set the secure attribute on authorization tokens or session cookies. Vulnerability Details CVEID: CVE-2017-1732 DESCRIPTION: IBM Security Access Manager for Enterprise Single-Sign On does not set the secure attribute on...

CVE-2016-1732

AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2016-1732

AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2016-1732

CVE-2016-1732 concerns the AppleRAID component in OS X El Capitan prior to 10.11.4. According to Apple’s security content, it allows a local attacker to determine kernel memory layout or cause a denial of service via an out-of-bounds read, tied to a memory-corruption/input-validation issue in App...

Oracle: Security Advisory (ELSA-2013-1268)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Memory corruption

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1742, CVE-2015-1747, and...

Memory corruption

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1747, CVE-2015-1750, and...

CVE-2015-1732

CVE-2015-1732 affects Microsoft Internet Explorer 11. The connected sources describe a memory corruption vulnerability in IE11 exploitable via a crafted web site, enabling remote code execution or a denial of service. The related NVD entries for this family (including CVE-2015-1753 and other adja...

Microsoft Internet Explorer Memory Corruption (MS15-056: CVE-2015-1732)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an out of bounds memory access. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affected version of Internet Explorer...

KLA10594 Multiple vulnerabilities in Microsoft Internet Explorer

An unspecified vulnerabilities were found in Microsoft Internet Explorer. By exploiting these vulnerabilities malicious users can gain privileges or execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed web site. Original advisories Microsoft bulletin...

openSUSE Security Update : xulrunner17 (openSUSE-SU-2013:1496-1)

This xulrunner17 version update to 17.0.9esr fixes the following security issues bnc840485 : - MFSA 2013-65/CVE-2013-1705 bmo882865 Buffer underflow when generating CRMF requests - MFSA 2013-76/CVE-2013-1718 Miscellaneous memory safety hazards - MFSA 2013-79/CVE-2013-1722 bmo893308 Use-after-free...

openSUSE Security Update : chromium (openSUSE-SU-2014:0668-1)

Update to Chromium 34.0.1847.132 - Security update : - CVE-2014-1730: Type confusion in V8 - CVE-2014-1731: Type confusion in DOM - CVE-2014-1732: Use-after-free in Speech Recognition - CVE-2014-1733: Compiler bug in Seccomp-BPF - CVE-2014-1734: Various fixes from internal audits, fuzzing and...

[SECURITY] [DSA 2920-1] chromium-browser security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2920-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 03, 2014 http://www.debian.org/security/faq -...

Debian DSA-2920-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2014-1730 A type confusion issue was discovered in the v8 JavaScript library. - CVE-2014-1731 John Butler discovered a type confusion issue in the WebKit/Blink document object model implementation. - CVE-2014-1732...

[SECURITY] [DSA 2920-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2920-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 03, 2014 http://www.debian.org/security/faq -...