Apple WebKit Renderbox Type Confusion

Apple WebKit: Type confusion in RenderBox with accessibility enabled CVE-2017-2373 There is a type confusion vulnerability that affects WebKit with accessibility enabled WebCore::AXObjectCache::gAccessibilityEnabed. PoC: =============================== function boom...

CVE-2017-2373

creationtimestamp| type| source ---|---|--- 2017-02-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41216...

CVE-2016-2373

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-of-bounds read. A malicious server or user can send an invalid mood to trigger this vulnerability...

CVE-2016-2373

CVE-2016-2373 affects the Pidgin MXIT protocol handling. Across connected sources, a malicious server or user can send specially crafted MXIT data (e.g., invalid mood) that can trigger a crash through a null pointer dereference or an out-of-bounds read/write in the MXIT processing, depending on t...

SUSE-SU-2016:2416-1 Security update for pidgin

This update for pidgin fixes the following issues: Security issues fixed: - CVE-2016-2367: Fixed a MXIT Avatar Length Memory Disclosure Vulnerability bsc991715. - CVE-2016-2370: Fixed a MXIT Custom Resource Denial of Service Vulnerability bsc991712. - CVE-2016-2371: Fixed a MXIT Extended Profiles...

[SECURITY] [DSA 3620-1] pidgin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3620-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 15, 2016 https://www.debian.org/security/faq -...

Oracle: Security Advisory (ELSA-2011-0885)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2012-2021)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2012-2022)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2012-0743)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Remote Desktop Remote Code Execution Vulnerability (3073094)

This host is missing a critical security update according to Microsoft Bulletin MS15-067. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-2373

CVE-2015-2373 is the RDP remote code execution vulnerability affecting Windows 7 SP1, Windows 8, and Windows Server 2012, caused by improper handling of crafted RDP packets in the RDP server. It can allow remote attackers to execute arbitrary code without authentication; public exploits exist. Mi...

Accuenergy Acuvim II AXM-NET 3.04 Multiple Vulnerabilities

Binary data 7162.pasl...

SlimFTPd LIST Command Buffer Overflow (CVE-2005-2373)

A buffer overflow vulnerability exists in SlimFTPd server. The vulnerability is due to insufficient bounds verification on certain FTP service commands. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted FTP LIST service command to the target server...

XOOPS Module WF Links Remote SQL Injection (CVE-2007-2373)

An SQL injection vulnerability has been reported in Wf-links. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-2373

The CVE-2014-2373 issue affects the AXN-NET Ethernet module (v3.04) for the Accuenergy Acuvim II. The root cause is a web server authentication bypass and a client-side password disclosure via JavaScript, enabling remote attackers to discover passwords and modify network settings. The vulnerabili...

Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2373-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2373-1 advisory. Bobby Holley, Christian Holler, David Bolter, Byron Campen and Jon Coppeard discovered multiple memory safety issues in Thunderbird. If a user were trick...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-4800)

Mozilla Thunderbird was updated to the 3.1.11 release. It has new features, fixes lots of bugs, and also fixes the following security issues : - MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 CVE-2011-2365 Miscellaneous memory safety hazards - MFSA 2011-20/CVE-2011-2373 bmo617247...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-4761)

Mozilla Firefox was updated to the 3.6.18 security release. - MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 CVE-2011-2365 Miscellaneous memory safety hazards - MFSA 2011-20/CVE-2011-2373 bmo617247 Use-after-free vulnerability when viewing XUL document with script disabled - MFSA...

openSUSE Security Update : mozilla-js192 (mozilla-js192-4771)

mozilla-xulrunner192 was updated to the 1.9.2.18 security release. dbg114-mozilla-js192-4771 mozilla-js192-4771 newupdateinfo MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 CVE-2011-2365 Miscellaneous memory safety hazards dbg114-mozilla-js192-4771 mozilla-js192-4771 newupdateinfo MFSA...