39 matches found
CVE-2018-8125
CVE-2018-8279 is a remote code execution vulnerability affecting Microsoft Edge (and ChakraCore) due to improper memory object handling in Edge. The root cause is memory corruption from unsafe access to memory objects, enabling arbitrary code execution in the context of the current user. CIRCL re...
Microsoft Edge Memory Corruption (CVE-2017-11888; CVE-2018-8125)
A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is in the way that Microsoft browser javascript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the conte...
CVE-2017-8125
The UMA product with software V200R001 and V300R001 has a cross-site scripting XSS vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks...
CVE-2017-8125
CVE-2017-8125 affects Huawei UMA product (software V200R001 and V300R001). It is a cross-site scripting (XSS) vulnerability caused by insufficient input validation in the UMA component, enabling an attacker to craft malicious links/scripts to perform XSS. CVSS v3.0 base score 6.1 (NETWORK/LOW com...
Fedora 22 : php-symfony-2.7.7-2.fc22 / php-twig-1.23.1-2.fc22 (2015-0b89738311)
Twig 1.23.1 2015-11-05 fixed some exception messages which triggered PHP warnings fixed BC on TwigTestNodeTestCase Twig 1.23.0 2015-10-29 - deprecated the possibility to override an extension by registering another one with the same name deprecated TwigExtensionInterface::getGlobals added...
Fedora 23 : php-symfony-2.7.7-2.fc23 / php-twig-1.23.1-2.fc23 (2015-0efcb5fbc5)
Twig 1.23.1 2015-11-05 fixed some exception messages which triggered PHP warnings fixed BC on TwigTestNodeTestCase Twig 1.23.0 2015-10-29 - deprecated the possibility to override an extension by registering another one with the same name deprecated TwigExtensionInterface::getGlobals added...
CVE-2015-8125
Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecified impact via a timing attack involving the 1 Symfony/Component/Security/Http/RememberMe/PersistentTokenBasedRememberMeServices or 2...
UBUNTU-CVE-2015-8125
Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecified impact via a timing attack involving the 1 Symfony/Component/Security/Http/RememberMe/PersistentTokenBasedRememberMeServices or 2...
CVE-2015-8125
CVE-2015-8125 affects Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7. It describes a potential remote timing-attack vulnerability in the Symfony Security Remember-Me service (PersistentTokenBasedRememberMeServices), the DigestAuthenticationListener, and the legacy CSRF i...
Fedora Update for php-symfony FEDORA-2015-0
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 3402-1] symfony security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3402-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2015 https://www.debian.org/security/faq -...
DSA-3402-1 symfony - security update
Bulletin has no description...
CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service
More info at https://symfony.com/cve-2015-8125...
CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service
More info at https://symfony.com/cve-2015-8125...
CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service
More info at https://symfony.com/cve-2015-8125...
CVE-2014-8125
CVE-2014-8125 is an XXE vulnerability in Drools and jBPM that, before version 6.2.0, allows remote attackers to read arbitrary files via a crafted BPMN2 file. Affected: Drools/jBPM runtimes; root cause: XML External Entity processing in BPMN2 handling. Impact per sources: potential file disclosur...
CVE-2014-8125
XML external entity XXE vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file...
CVE-2008-4295
CVE-2008-4295 affects Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125. The vulnerability arises when handling the first Bluetooth connection attempt to a peer with a long name, enabling a remote attacker to cause a denial of service (device reboot) by configuring a long HCI name and...
