CVE-2018-7034

TRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733GR v1.03B01 devices allow authentication bypass via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...

CVE-2018-7034

CVE-2018-7034 impacts TRENDnet TEW-751DR (v1.03B03), TEW-752DRU (v1.03B01) and TEW733GR (v1.03B01). The vulnerability is an authentication bypass via AUTHORIZED_GROUP=1 in requests to getcfg.php, enabling access to sensitive information. Several connected sources corroborate that this is a router...

Moderate: Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.4 security update

An update is now available for Red Hat JBoss Data Virtualization. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Security update for webkit2gtk3 (important)

This update for webkit2gtk3 to version 2.18.0 fixes the following issues: These security issues were fixed: - CVE-2017-7039: An issue was fixed that allowed remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2017:2933-1)

This update for webkit2gtk3 to version 2.18.0 fixes the following issues: These security issues were fixed : - CVE-2017-7039: An issue was fixed that allowed remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted website...

Fedora 24 : webkitgtk4 (2017-9d572cc64a)

This update addresses the following vulnerabilities : - CVE-2017-7018, CVE-2017-7030, CVE-2017-7034, CVE-2017-7037, CVE-2017-7039, CVE-2017-7046, CVE-2017-7048, CVE-2017-7055, CVE-2017-7056, CVE-2017-7061, CVE-2017-7064 Additional fixes : - Fix rendering of spin buttons with GTK+ = 3.20 when the...

Fedora 25 : webkitgtk4 (2017-73d6a0dfbb)

This update addresses the following vulnerabilities : - CVE-2017-7018, CVE-2017-7030, CVE-2017-7034, CVE-2017-7037, CVE-2017-7039, CVE-2017-7046, CVE-2017-7048, CVE-2017-7055, CVE-2017-7056, CVE-2017-7061, CVE-2017-7064 Additional fixes : - Fix rendering of spin buttons with GTK+ = 3.20 when the...

iTunes < 12.6.2 Multiple Vulnerabilities

Binary data 700168.prm...

Apple iTunes < 12.6.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.6.2. It is, therefore, affected by multiple vulnerabilities : - Multiple out-of-bounds read errors exist in the libxml2 component due to improper handling of specially crafted XML documents. An unauthenticated, remote...

Apple iOS < 10.3.3 Multiple Vulnerabilities

Binary data appleios1033check.nbin...

macOS : Apple Safari < 10.1.2 Multiple Vulnerabilities

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 10.1.2. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the WebKit component due to improper handling of SVG filters. An unauthenticated, remote...

CVE-2017-7034

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote...

CVE-2017-7034

CVE-2017-7034 concerns WebKit/WebKitGTK+ components used in Apple platforms and WebKitGTK+ on Linux. The issue is described as memory corruption during processing of maliciously crafted web content, enabling arbitrary code execution on affected systems and potentially memory corruption leading to...

CVE-2017-7034

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote...

About the security content of iCloud for Windows 6.2.2

About the security content of iCloud for Windows 6.2.2 This document describes the security content of iCloud for Windows 6.2.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

CVE-2016-7034

CVE-2016-7034 concerns the dashbuilder component of Red Hat JBoss BPM Suite 6.x, where CSRF tokens generated during an active session are included in query strings. The underlying issue allows bypassing CSRF protections or performing CSRF attacks using old tokens. Red Hat advisories RHSA-2017:055...

APPLE-SA-2015-10-15-1 Keynote 6.6, Pages 5.6, Numbers 3.6, and iWork for iOS 2.6

APPLE-SA-2015-10-15-1 Keynote 6.6, Pages 5.6, Numbers 3.6, and iWork for iOS 2.6 Keynote 6.6, Pages 5.6, Numbers 3.6, and iWork for iOS 2.6 are now available which address the following: Keynote, Pages, and Numbers Available for: OS X Yosemite v10.10.4 or later, iOS 8.4 or later Impact: Opening a...

CVE-2015-7034

The CVE-2015-7034 entry applies to Apple iWork / Pages prior to versions: iOS iWork (2.6) and Pages (5.6) where parsing a crafted Pages document can trigger memory corruption, allowing remote code execution or a denial of service (application crash). The connected documents corroborate a memory‑c...

CVE-2014-7034

CVE-2014-7034 affects the Android application of The Senator Inn & Spa (package com.conduit.app_cc06e8e9659c4cf7b361ad0b7717f3a4.app) version 1.2.2.160. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and...

CVE-2013-7034

LiveZilla is vulnerable to PHP Object Injection through the setCookieValue() function in _lib/functions.global.inc.php. The issue allows an attacker to inject a serialized PHP object via a cookie, enabling remote code execution. This vulnerability affects LiveZilla up to version 5.1.2.0 and is fi...