CVE-2017-7325

The CVE-2017-7325 vulnerability affects Yandex Browser prior to version 16.9.0, where an attacker could spoof the address bar via window.open. The issue is documented in multiple sources (NVD/CNVD) as a browser-level flaw with the described vector and impact. A fix is available in version 16.9.0 ...

CVE-2016-7325

...

CVE-2016-7325

CVE-2016-7325 is rejected and not used.

CVE-2014-7325

The CVE-2014-7325 entry concerns the Android app “Business Intelligence” (com.magzter.businessintelligence) version 3.0, which does not verify X.509 certificates when connecting to SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and exfiltrate sensitive informati...

Fedora 20 : thunderbird-24.6.0-1.fc20 (2014-7325)

See http://www.mozilla.org/en-US/thunderbird/24.6.0/releasenotes/ for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Debian DSA-2836-1 : devscripts - arbitrary code execution

Several vulnerabilities have been discovered in uscan, a tool to scan upstream sites for new releases of packages, which is part of the devscripts package. An attacker controlling a website from which uscan would attempt to download a source tarball could execute arbitrary code with the privilege...

Debian Security Advisory DSA 2836-1 (devscripts - arbitrary code execution)

Several vulnerabilities have been discovered in uscan, a tool to scan upstream sites for new releases of packages, which is part of the devscripts package. An attacker controlling a website from which uscan would attempt to download a source tarball could execute arbitrary code with the privilege...