CVE-2016-5705

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 server-privileges certificate data fields on the user privileges page, 2 an "invalid JSON" error messa...

Multiple XSS vulnerabilities

PMASA-2016-21 Announcement-ID: PMASA-2016-21 Date: 2016-06-23 Summary Multiple XSS vulnerabilities Description An XSS vulnerability was discovered on the user privileges page. An XSS vulnerability was discovered in the error console. An XSS vulnerability was discovered in the central columns...

firefox security update

45.2.0-1.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 45.2.0-1 - Update to 45.2.0 ESR 45.1.1-2 - Added fix for mozbz1270046 - new Samba auth response...

CVE-2016-2100

Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read, modify, or delete private bookmarks by leveraging the 1 editbookmarks or 2 destroybookmarks permission...

CVE-2016-2100

Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read, modify, or delete private bookmarks by leveraging the 1 editbookmarks or 2 destroybookmarks permission...

Code injection

Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read, modify, or delete private bookmarks by leveraging the 1 editbookmarks or 2 destroybookmarks permission...

CVE-2016-2100

Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read, modify, or delete private bookmarks by leveraging the 1 editbookmarks or 2 destroybookmarks permission...

CVE-2016-2100

Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 is vulnerable to an access control flaw: remote authenticated users with edit_bookmarks or destroy_bookmarks permissions can read, modify, or delete private bookmarks. The root cause is improper authorization on bookmark objects. No fix version i...

[SECURITY] Fedora 23 Update: owncloud-8.2.4-1.fc23

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

[SECURITY] Fedora 22 Update: owncloud-8.2.4-1.fc22

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

Foreman Bookmark Access Security Bypass Vulnerability

Foreman is a set of lifecycle management tools for use in physical and virtual servers. An error in Foreman's handling of bookmarks associated with the Administer - Bookmarks feature can be exploited by a remote attacker to bypass security restrictions and gain access to other users' restricted...

Addressbar spoofing through stored data url shortcuts on Firefox for Android — Mozilla

Security researcher Muneaki Nishimura reported an issue with displayed URLs and bookmarks on Firefox for Android. If a data: URL is opened from a stored shortcut on the homescreen or from a BOOKMARK intent from another installed Android application, the addressbar continues to show the data: url...

[SECURITY] Fedora 23 Update: owncloud-8.0.10-1.fc23

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

The vulnerability of the Mac OS X operating system, which allows a hacker to bypass the sandbox protection mechanism

The vulnerability of the File Bookmark component in the Mac OS X operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to bypass the sandbox protection mechanisms by assigning a special catalog name to...

libreoffice: Bookmarks in DOC documents are insufficiently checked causing memory corruption

It was discovered that LibreOffice did not properly sanity check bookmark indexes. By tricking a user into opening a specially crafted document, an attacker could possibly use this flaw to execute arbitrary code with the privileges of the user opening the file...

LibreOffice DOC Bookmarks Denial of Service Vulnerability (Nov 2015) - Mac OS X

LibreOffice is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LibreOffice DOC Bookmarks Denial of Service Vulnerability (Nov 2015) - Windows

LibreOffice is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[SECURITY] Fedora 21 Update: owncloud-8.0.9-1.fc21

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

LibreOffice and Apache OpenOffice Memory Corruption Vulnerability

LibreOffice and Apache OpenOffice are both open source office software suites. The suite contains text documents, spreadsheets, presentations, drawings, databases and other software. The former by the Document Foundation The Document Foundation, TDF development; the latter by the United States...

KLA10700 Code execution vulnerability in LibreOffice

Lack of bookmarks restrictions was found in LibreOffice & OpenOffice. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DOC file. Technical details To exploit this...