UBUNTU-CVE-2017-18343

DISPUTED The debug handler in Symfony before v2.7.33, 2.8.x before v2.8.26, 3.x before v3.2.13, and 3.3.x before v3.3.6 has XSS via an array key during exception pretty printing in ExceptionHandler.php, as demonstrated by a /debugbar/open?op=get URI. NOTE: the vendor's position is that this is no...

MetInfo Cross-Site Scripting Vulnerability (CNVD-2018-14100)

MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A cross-site scripting vulnerability exists in MetInfo version 6.0.0. A remote attacker can inject arbitrary script or HTML by modifying the name of the navigation bar on the homepag...

CVE-2018-14419

CVE-2018-14419 affects MetInfo 6.0.0, a PHP/MySQL CMS, where an XSS vulnerability is triggered by modifying the navigation bar name on the home page. The CVSS scores indicate a Network attack vector with low (v2) to medium (v3) impact and user interaction not required on v2 but UI interaction on ...

CVE-2018-14419

MetInfo 6.0.0 allows XSS via a modified name of the navigation bar on the home page...

CVE-2018-14082

PHP Scripts Mall JOB SITE aka Job Portal 3.0.1 has Cross-site Scripting XSS via the search bar...

CVE-2018-14082

CVE-2018-14082 affects the PHP Scripts Mall JOB SITE (aka Job Portal) 3.0.1 and is described as a Cross‑site Scripting (XSS) vulnerability exploitable via the search bar. Connected sources (ExploitDB/NVD) indicate public PoCs/exploits for a stored XSS vector via the search field. The documents do...

The vulnerability of the Mozilla Firefox browser lies in the insufficient checking of URI addresses during their “paste” into the browser’s address bar from the current page. This allows attackers to carry out phishing attacks.

The vulnerability of the Mozilla Firefox browser is related to insufficient verification of the URI address when it is “dropped” into the browser’s address bar from the content of the current page. Exploiting this vulnerability allows a remote attacker to carry out phishing attacks...

The vulnerability of Firefox browser, related to incorrect display of characters in the address bar, allows a hacker to replace the URI address.

The vulnerability of Firefox browsers is related to the incorrect display of Tibetan characters when using certain fonts in OS X’s address bar. Exploiting this vulnerability allows a remote attacker to replace URI addresses...

WordPress Easy Magazine Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . Easy Magazine is used in one of the open source website magazine embedded plug-ins . A cross-site scripting...

Apple Mac OS X Security Updates (HT208937)-02

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

About the security content of Safari 11.1.2

About the security content of Safari 11.1.2 This document describes the security content of Safari 11.1.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

About the security content of watchOS 4.3.2

About the security content of watchOS 4.3.2 This document describes the security content of watchOS 4.3.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

About the security content of tvOS 11.4.1

About the security content of tvOS 11.4.1 This document describes the security content of tvOS 11.4.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2018-7635

Whale Browser before 1.0.41.8 displays no URL information but only a title of a web page on the browser's address bar when visiting a blank page, which allows an attacker to display a malicious web page with a fake domain name...

Brave Software: URL spoofing using protocol handlers

Summary: Navigation to protocol handler changes URL in the address bar e.g. ssh://google.com in the address bar is standard behavior. Browsers change URL in the address bar to about:blank if a parent window tries to access the opened page with protocol handler URL. This behavior prevents URL...

RHEL 7 : Virtualization Manager (RHSA-2018:2071)

An update for org.ovirt.engine-root is now available for Red Hat Virtualization Manager 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 6 : firefox (RHSA-2018:2112)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:2112 advisory. - Mozilla: address bar username and password spoofing in reader mode CVE-2017-7762 - Mozilla: Media recorder segmentation fault when track...

Mozilla: address bar username and password spoofing in reader mode

When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox 54...

Moderate: Red Hat Security Advisory: Red Hat Virtualization Manager security, bug fix, and enhancement update

An update for org.ovirt.engine-root is now available for Red Hat Virtualization Manager 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Microsoft Windows 10: Address bar drop-down list suggestions (Edge)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winedgeaddressbardropdown.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Allow Address bar drop-down list suggestions Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.ne...