Updated iceape packages fix security vulnerabilities

Updated iceape packages include security fixes from upstream Seamonkey and Firefox: Multiple flaws were found in the way Iceape 2.48 processes various types of web content, where loading a web page containing malicious content could cause Iceape to crash, execute arbitrary code, or disclose...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2017:2589-1)

This update for MozillaFirefox to ESR 52.3 fixes several issues. These security issues were fixed : - CVE-2017-7807 Domain hijacking through AppCache fallback bsc1052829 - CVE-2017-7791 Spoofing following page navigation with data: protocol and modal alerts bsc1052829 - CVE-2017-7792 Buffer...

SUSE-SU-2017:2589-1 Security update for MozillaFirefox

This update for MozillaFirefox to ESR 52.3 fixes several issues. These security issues were fixed: - CVE-2017-7807 Domain hijacking through AppCache fallback bsc1052829 - CVE-2017-7791 Spoofing following page navigation with data: protocol and modal alerts bsc1052829 - CVE-2017-7792 Buffer overfl...

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2017:2302-1)

Mozilla Firefox was updated to the ESR 52.3 release bsc1052829 Following security issues were fixed : - MFSA 2017-19/CVE-2017-7807: Domain hijacking through AppCache fallback - MFSA 2017-19/CVE-2017-7791: Spoofing following page navigation with data: protocol and modal alerts - MFSA...

openSUSE: Security Advisory for MozillaThunderbird (openSUSE-SU-2017:2209-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

KLA11090 Multiple vulnerabilities in Mozilla Thunderbird

Multiple serious vulnerabilities have been found in Thunderbird. Malicious users can exploit these vulnerabilities to cause a denial of service, bypass security restrictions execute arbitrary code, obtain sensitive information and spoof user interface. Below is a complete list of vulnerabilities:...

Mozilla Firefox < 55 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 55. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable application crashes. C Tenable Network Security, Inc. include'compat.inc'; if...

CVE-2016-7782

CVE-2016-7782 is an SQL injection vulnerability in Exponent CMS 2.3.9 and earlier, exploitable via the src parameter in framework/core/models/expConfig.php. The connected sources indicate that $this-&gt;location_data can be controlled/injected, enabling time-based SQL injection and arbitrary SQL ...

Exponent CMS 2.3.9 SQL Injection Vulnerability

Exploit for php platform in category web applications Exponent CMS 2.3.9 SQL Injection Vulnerability Disclose 10 cve in Exponent CMS CVE-2016-7780 In the line 42 of cron/findhelp.php , $GET'version' can be controlled and injected. It is possible to time-based blind SQL Inject by the param of...

CVE-2015-7782

CVE-2015-7782 concerns Frame high-speed chat from Let’s PHP!, with a cross-site scripting (XSS) vulnerability (CWE-79) exploitable via unspecified vectors in versions prior to 2015-09-22. Public details show the issue and that the recommended remediation is to update to the latest version accordi...

CVE-2014-7782

CVE-2014-7782 affects the Android application “Macedonia Hacienda Hotel” (package appinventor.ai_orolimpio999.HotelMacedonia), version 1.0. The issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive inf...