YUI 3.10.2 Cross-site Scripting

According to its self-reported version number, YUI is at least 3.0.0 and prior to 3.10.1 or 3.10.2. Therefore, it may be affected by a cross-site scripting vulnerability via YUI io.swf file. Note that the scanner has not tested for these issues but has instead relied only on the application's...

wolfSSL Denial of Service Vulnerability (CNVD-2017-09924)

wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A denial-of-service vulnerability exists in wolfSSL 3.10.2 and earlier versions. A remote attacker can exploit this vulnerability to cau...

PT-2017-15545 · Wolfssl · Wolfssl

Name of the Vulnerable Software and Affected Versions: wolfSSL versions 3.10.2 and earlier Description: A specially crafted x509 certificate can cause a single out of bounds byte overwrite, resulting in potential certificate validation issues, denial of service, and possible remote code execution...

Gnome Eye Of Gnome Denial Of Service Vulnerability

Gnome Eye Of Gnome is a desktop environment developed by the Gnome project team. A denial of service vulnerability exists in Gnome Eye Of Gnome versions 3.10.2 and 2.22.3. An attacker can exploit this vulnerability to crash the application...

eog -- out-of-bounds write

Felix Riemann reports: CVE-2016-6855 out-of-bounds write in eog 3.10.2...

Code injection

Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter to user-edit-form.jsp...

Multiple Cross-Site Request Forgery Vulnerabilities in Ignite Realtime Openfire

Ignite Realtime Openfire formerly known as Wildfire is the IgniteRealtime community of a Java development and based on XMPP formerly known as Jabber, Instant Messaging Protocol cross-platform open-source real-time collaboration RTC server , it can build a high-efficiency instant messaging servers...

Multiple Cross-Site Scripting Vulnerabilities in Ignite Realtime Openfire

Ignite Realtime Openfire formerly known as Wildfire is the IgniteRealtime community of a Java development and based on XMPP formerly known as Jabber, Instant Messaging Protocol cross-platform open-source real-time collaboration RTC server , it can build a high-efficiency instant messaging servers...

CVE-2015-6973

Multiple cross-site request forgery CSRF vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to hijack the authentication of administrators for requests that 1 change a password via a crafted request to user-password.jsp, 2 add users via a crafted request to user-create.jsp,...

Openfire 3.10.2 - Unrestricted Arbitrary File Upload

Openfire 3.10.2 - Unrestricted Arbitrary File Upload...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 2258)

This update brings MozillaFirefox to the security update release 1.5.0.8, including the following security fixes. Full details can be found on: http://www.mozilla.org/projects/security/known-vulnerabiliti es.html - Is split into 3 sub-entries, for ongoing stability improvements in the Mozilla...

openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-2252)

This security update brings Mozilla Thunderbird to version 1.5.0.8. More Details can be found on this page: http://www.mozilla.org/projects/security/known-vulnerabilities.html It includes fixes to the following security problems : MFSA2006-65: Is split into 3 sub-entries, for ongoing stability...