simons.ca XSS vulnerability

Vulnerable URL: http://www.simons.ca//simons/product/6741-2152101/Checks%20&%20Stripes/Chambray%20stripe%20woven%20cotton%20tablecloth?/en/=" Details: Description| Value ---|--- Patched:| Yes, at 12.10.2016 Latest check for patch:| 12.10.2016 09:09 GMT Vulnerability type:| XSS Vulnerability...

simons.ca XSS vulnerability

Vulnerable URL: http://www.simons.ca/simons/product/6741-1142101/The+New+Naturals/Solid+chambray+tablecloth?/en/=" Details: Description| Value ---|--- Patched:| Yes, at 27.10.2016 Latest check for patch:| 27.10.2016 13:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

CVE-2015-2011

The xmlrpc.cgi Webmin script in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors...

CVE-2015-2011

The xmlrpc.cgi Webmin script in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors...

WinRar 5.30 beta 4 - Settings Import Command Execution Exploit

Exploit for windows platform in category local exploits !/usr/bin/python -w Title : WinRar Settings Import Command Execution Date : 02/10/2015 Author : R-73eN Tested on : Windows 7 Ultimate Vulnerable Versions : Winrar 5.30 beta 4 The vulnerability exists in the "Import Settings From File"...

backlinkwatch.com XSS vulnerability

Vulnerable URL: http://backlinkwatch.com/index.php Details: Description| Value ---|--- Patched:| Yes, at 10.10.2015 Latest check for patch:| 10.10.2015 18:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5570 Google Pagerank| 4 VIP website status:| Yes Check...

CVE-2015-3827

The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relationship between chunk sizes and skip sizes, which allows remote attackers to execute arbitrary code or cause a denial of service integer underflow and memory...

Integer overflow

The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict size addition, which allows remote attackers to execute arbitrary code or cause a denial of service integer overflow and memory corruption via a crafted MPEG-4...

CVE-2015-3827

The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relationship between chunk sizes and skip sizes, which allows remote attackers to execute arbitrary code or cause a denial of service integer underflow and memory...

Integer overflow

The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relationship between chunk sizes and skip sizes, which allows remote attackers to execute arbitrary code or cause a denial of service integer underflow and memory...

CVE-2015-3824

The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict size addition, which allows remote attackers to execute arbitrary code or cause a denial of service integer overflow and memory corruption via a crafted MPEG-4...

CVE-2015-3827

The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relationship between chunk sizes and skip sizes, which allows remote attackers to execute arbitrary code or cause a denial of service integer underflow and memory...

CVE-2015-3824

The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict size addition, which allows remote attackers to execute arbitrary code or cause a denial of service integer overflow and memory corruption via a crafted MPEG-4...

CVE-2015-3864

CVE-2015-3864 is a remote-code-execution vulnerability in Android’s mediaserver (libstagefright). It arises from an integer underflow when parsing the MPEG-4 tx3g chunk in the Stagefright parser, enabling crafted MPEG-4 data to corrupt memory. The issue is tied to an incomplete fix for CVE-2015-3...

Fedora 22 : firefox-41.0-4.fc22 (2015-16455)

firefox-41.0-4.fc21 - New upstream 41.0 firefox-41.0-4.fc22 - New upstream 41.0 firefox-41.0-4.fc23 - New upstream 41.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

chartsinfrance.net XSS vulnerability

Vulnerable URL: http://www.chartsinfrance.net/rechercher/index.php?q=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=002211763391307717086%3Axvnptwgng-g=FORID%3A9=ISO-8859-1=tous=22=8=http%3A%2F%2Fwww.chartsinfrance.net%2FCleary---Le-Grand-Fusil---Dimone%2FParis-18-Les-Trois-Baudets%2CACMT...

maxidom.ru Open Redirect vulnerability

Vulnerable URL: http://www.maxidom.ru/bitrix/rk.php?goto=https://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 12.10.2016 Latest check for patch:| 12.10.2016 07:30 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 41790 Google...

Design/Logic Flaw

The lutinverseinterp16 function in the QCMS library in Mozilla Firefox before 41.0 allows remote attackers to obtain sensitive information or cause a denial of service buffer over-read and application crash via crafted attributes in the ICC 4 profile of an image...

CVE-2015-4504

Mozilla Firefox contains a vulnerable entry for CVE-2015-4504 in the QCMS library: lut_inverse_interp16 allows remote attackers to read sensitive data or crash the browser via crafted ICC v4 profile attributes, due to an out-of-bounds read. Affected versions are Firefox before 41.0. Mitigation: u...

Fedora 23 : qemu-2.4.0-4.fc23 (2015-16370)

CVE-2015-6815: net: e1000: infinite loop issue bz 1260225 CVE-2015-6855: ide: divide by zero issue bz 1261793 CVE-2015-5278: Infinite loop in ne2000receive bz 1263284 CVE-2015-5279: Heap overflow vulnerability in ne2000receive bz 1263287 ---- Fix emulation of various instructions, required by...