642 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the Backend component in TYPO3 6.2.x before 6.2.19 allows remote attackers to inject arbitrary web script or HTML via the module parameter when creating a bookmark...
CVE-2016-4056
TYPO3 Backend component (TYPO3 6.2.x before 6.2.19) is affected by a Cross-site scripting (XSS) vulnerability. An attacker can inject arbitrary script/HTML via the module parameter when creating a bookmark, enabling script execution in an authenticated user’s browser. The issue stems from insuffi...
CVE-2016-5191
Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via crafted HTML pages, as demonstrated by an interpretation confli...
Input validation
Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via crafted HTML pages, as demonstrated by an interpretation confli...
OPENSUSE-SU-2017:0563-1 Security update for Chromium
This update to Chromium 55.0.2883.75 fixes the following vulnerabilities: - CVE-2016-9651: Private property access in V8 - CVE-2016-5208: Universal XSS in Blink - CVE-2016-5207: Universal XSS in Blink - CVE-2016-5206: Same-origin bypass in PDFium - CVE-2016-5205: Universal XSS in Blink -...
Security update for Chromium (important)
This update to Chromium 55.0.2883.75 fixes the following vulnerabilities: - CVE-2016-9651: Private property access in V8 - CVE-2016-5208: Universal XSS in Blink - CVE-2016-5207: Universal XSS in Blink - CVE-2016-5206: Same-origin bypass in PDFium - CVE-2016-5205: Universal XSS in Blink -...
UBUNTU-CVE-2016-9070
A maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged chrome window and engage in limited JavaScript operations violating cross-origin protections. This vulnerability affects Firefox 50...
Apple OS X File Bookmark Denial of Service Vulnerability
Apple OS X is a specialized operating system developed by Apple for Mac computers.File Bookmark is one of the file bookmarking components. A denial of service vulnerability exists in the File Bookmark component of Apple OS X versions prior to 10.12, which can be exploited to cause a denial of...
CVE-2016-4717
The File Bookmark component in Apple OS X before 10.12 mishandles scoped-bookmark file descriptors, which allows attackers to cause a denial of service via a crafted app...
CVE-2016-4717
The File Bookmark component in Apple OS X before 10.12 mishandles scoped-bookmark file descriptors, which allows attackers to cause a denial of service via a crafted app...
CVE-2016-4717
The File Bookmark component in Apple OS X before 10.12 mishandles scoped-bookmark file descriptors, which allows attackers to cause a denial of service via a crafted app...
CVE-2016-4717
CVE-2016-4717 affects Apple macOS OS X File Bookmark component. The vulnerability arises because scoped-bookmark file descriptors are mishandled, which can allow a crafted application to cause a denial-of-service in pre-10.12 OS X. The Apple security content for macOS Sierra 10.12 notes the issue...
macOS < 10.12 Multiple Vulnerabilities
The remote host is running a version of Mac OS X that is prior to 10.10.5, 10.11.x prior to 10.11.6, or is not macOS 10.12. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - Apple HSSPI Support - AppleEFIRuntime - AppleMobileFileIntegri...
Flag - Moderately Critical - Access Bypass - SA-CONTRIB-2016-050
Flag enables users to mark content with any number of admin-defined flags, such as 'bookmarks' or 'spam'. Flag Bookmark is a submodule within Flag, which provides a 'bookmarks' flag, and default views to list bookmarked content. The provided view that lists each user's bookmarked content as a tab...
FortiManager (Series) - Persistent Bookmark Vulnerability
Document Title: =============== FortiManager Series - Persistent Bookmark Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1685 Fortinet PSIRT ID: 1624461 Bulletin:...
net2ftp 1.0 Cross Site Scripting
Summary Subject: net2ftp XSS in "command" and "urlwithpw" parameters Versions vulnerable: ALL Tested on latest, version 1.0 Category: 0-day Impact: Medium Description of the product net2ftp is a web based FTP client http://www.net2ftp.com/index.php . It can be used as a standalone version and als...
FortiManager (Series) - Persistent Bookmark Vulnerability
Document Title: =============== FortiManager Series - Persistent Bookmark Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1685 Fortinet PSIRT ID: 1624461 Bulletin:...
foreman: Unprivileged user can access private bookmarks of other users
It was found that access to private bookmarks of users is not properly restricted in Foreman. This could allow an attacker to view the search terms used in these bookmarks which should be private...
DEBIAN-CVE-2016-5705
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 server-privileges certificate data fields on the user privileges page, 2 an "invalid JSON" error messa...