96 matches found
Updated firefox package fixes CVE-2015-4495
Updated firefox packages fix security vulnerability: Security researcher Cody Crews reported on a way to violate the same origin policy and inject script into a non-privileged part of the built-in PDF Viewer in Firefox. This would allow an attacker to read and steal sensitive local files on the...
USN-2707-1 firefox vulnerability
Cody Crews discovered a way to violate the same-origin policy to inject script in to a non-privileged part of the PDF viewer. If a user were tricked in to opening a specially crafted website, an attacker could exploit this to read sensitive information from local files. CVE-2015-4495...
USN-2707-1: Firefox vulnerability
Cody Crews discovered a way to violate the same-origin policy to inject script in to a non-privileged part of the PDF viewer. If a user were tricked in to opening a specially crafted website, an attacker could exploit this to read sensitive information from local files. CVE-2015-4495...
Firefox ESR < 38.1.1 PDF Reader Arbitrary File Access
The version of Firefox ESR installed on the remote Windows host is prior to 38.1.1. It is, therefore, affected by a vulnerability in the same origin policy in which an attacker can inject script code into a non-privileged part of browser's built-in PDF reader, resulting in gaining access to...
Firefox < 39.0.3 PDF Reader Arbitrary File Access (Mac OS X)
The version of Firefox installed on the remote Mac OS X host is prior to 39.0.3. It is, therefore, affected by a vulnerability in the same origin policy in which an attacker can inject script code into a non-privileged part of browser's built-in PDF reader, resulting in gaining access to sensitiv...
Firefox < 39.0.3 PDF Reader Arbitrary File Access
The version of Firefox installed on the remote Windows host is prior to 39.0.3. It is, therefore, affected by a vulnerability in the same origin policy in which an attacker can inject script code into a non-privileged part of browser's built-in PDF reader, resulting in gaining access to sensitive...
KLA10642 Obtain sensitive information vulnerability in Mozilla Firefox and Firefox ESR
An unspecified vulnerability was found in Mozilla Firefox. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via vectors related ti PDF viewer. Technical details There are way to bypass same origin policy and inject...
VulnCheck KEV: CVE-2015-4495
Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges...
Fedora Update for torque FEDORA-2015-8544
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for torque FEDORA-2015-8571
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-4495
CVE-2014-4495 affects Appleās Kernel: the kernel shared memory subsystem allowed writing to read-only shared memory segments when using a custom cache mode, bypassing access restrictions. Affected products include iOS prior to 8.1.3, OS X prior to 10.10.2, and Apple TV prior to 7.0.3. Root cause:...
GLSA-201412-47 : TORQUE Resource Manager: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201412-47 TORQUE Resource Manager: Multiple vulnerabilities Multiple vulnerabilities have been discovered in TORQUE Resource Manager. Please review the CVE identifiers referenced below for details. Impact : A context-dependent...
Fedora 20 : torque-3.0.4-6.fc20 (2014-11989)
Fix CVE-2013-4319 RHBZ 1005918, 1005919 Fix CVE-2013-4495: arbitrary code execution via job submission RHBZ 1029752 Fix CVE-2013-4495: arbitrary code execution via job submission RHBZ 1029752 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Fedora Update for torque FEDORA-2014-12059
Check the version of torque SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868413";...
Fedora Update for torque FEDORA-2014-11989
Check the version of torque SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868411";...
Mandriva Linux Security Advisory : torque (MDVSA-2013:268)
Updated torque packages fix security vulnerability : A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub. This was later passed to a pipe, making it possible for these commands to be executed as root on the pbsserver CVE-2013-4495. %NASLMINLEVEL...
CVE-2013-4495
The vulnerability CVE-2013-4495 affects TORQUE Resource Manager before 4.2.6, where the send_the_mail function in server/svr_mail.c allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M) switch to qsub. This is a remote, unauthenticated vector with high i...
MGASA-2013-0327 Updated torque packages fix CVE-2013-4495
Updated torque packages fix security vulnerability: A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub. This was later passed to a pipe, making it possible for these commands to be executed as root on the pbsserver CVE-2013-4495...
Updated torque packages fix CVE-2013-4495
Updated torque packages fix security vulnerability: A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub. This was later passed to a pipe, making it possible for these commands to be executed as root on the pbsserver CVE-2013-4495...
[SECURITY] [DSA 2796-1] torque security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2796-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 13, 2013 http://www.debian.org/security/faq -...