About the security content of Safari 10.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

UBUNTU-CVE-2017-12904

Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item that includes shell code in its title and/or URL...

[ASA-201708-15] newsbeuter: arbitrary code execution

Arch Linux Security Advisory ASA-201708-15 ========================================== Severity: High Date : 2017-08-20 CVE-ID : CVE-2017-12904 Package : newsbeuter Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-384 Summary ======= The package newsbeuter...

CVE-2017-12648

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...

CVE-2017-12648

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...

Cross site scripting

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...

CVE-2017-12648

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...

CVE-2017-12648

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...

CVE-2017-12648: Improper Neutralization of Input During Web Page Generation

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...

PT-2017-12627

Name of the Vulnerable Software and Affected Versions Liferay Portal versions prior to 7.0 CE GA4 Description A cross-site scripting XSS issue exists, allowing potential exploitation via a bookmark URL. Recommendations For versions prior to 7.0 CE GA4, update to version 7.0 CE GA4 or later to...

chromium-browser: inappropriate javascript execution on webui pages

Inappropriate implementation in Bookmarks in Google Chrome prior to 59 for iOS allowed a remote attacker who convinced the user to perform certain operations to run JavaScript on chrome:// pages via a crafted bookmark...

CVE-2017-5085

Inappropriate implementation in Bookmarks in Google Chrome prior to 59 for iOS allowed a remote attacker who convinced the user to perform certain operations to run JavaScript on chrome:// pages via a crafted bookmark...

CVE-2017-6557

CVE-2017-6557 concerns ArrayOS prior to AG 9.4.0.135 where the portal bookmark function, when enabled, yields a SQL injection vulnerability. The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. The affected product is ArrayOS; the described root c...

PT-2017-17155

Name of the Vulnerable Software and Affected Versions ArrayOS versions prior to 9.4.0.135 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is possible when the portal bookmark function is enabled. Recommendations For versions prior to 9.4.0.135, upda...

CVE-2017-6557: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ArrayOS before AG 9.4.0.135, when the portal bookmark function is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Apple iOS webkit bookmark forgery vulnerability

Apple iOS is an operating system for Apple smart devices. The creation of bookmarks in Webkit used by Apple iOS suffers from authentication forgery, which allows an attacker to construct malicious links and trick users into clicking on them, which could spoof bookmarks or execute arbitrary code...

CVE-2017-2378

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves bookmark creation in the "WebKit" component. It allows remote attackers to execute arbitrary code or spoof a bookmark by leveraging mishandling of links during...

CVE-2017-2378

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves bookmark creation in the "WebKit" component. It allows remote attackers to execute arbitrary code or spoof a bookmark by leveraging mishandling of links during...

UBUNTU-CVE-2017-2378

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves bookmark creation in the "WebKit" component. It allows remote attackers to execute arbitrary code or spoof a bookmark by leveraging mishandling of links during...

Code injection

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves bookmark creation in the "WebKit" component. It allows remote attackers to execute arbitrary code or spoof a bookmark by leveraging mishandling of links during...