CVE-2014-1584: Undefined Security Weakness

The Public Key Pinning PKP implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to...

PT-2014-4236

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 33.0 Description The issue concerns the Public Key Pinning PKP implementation, which fails to perform pinning checks when encountering an unspecified issuer-verification error. This makes it easier for remote...

UBUNTU-CVE-2014-3170

extensions/common/urlpattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a '\0' character in a host name, which allows remote attackers to spoof the extension permission dialog by relying on truncation after this character...

CVE-2014-3170: Undefined Security Weakness

extensions/common/urlpattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a '\0' character in a host name, which allows remote attackers to spoof the extension permission dialog by relying on truncation after this character...

PT-2014-1375

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 37.0.2062.94 Description The issue exists due to the possibility of using the '0' character in host names, which allows remote attackers to spoof the extension permission dialog by relying on truncation after th...

Updated kdelibs4 packages fix security vulnerability and various bugs

This update fixes a security vulnerability in the polkit authentication backend of kdelibs CVE-2014-5033 mga13792, and fixes some additional issues: - duplicate targets in PythonMacros.cmake reviewboard kde 111371, - kded4 leak sockets in NetworkInterface::isWireless bko324954, - media type...

SCOM console crashes when opening widget personalization dialog

Challenge When opening the Personalization dialog for any State View widget, the widget appears empty, and the Operations Manager Console crashes Cause There is a specific new widget declaration which can cause issues while loading other widgets. Solution Download Veeam Widget Library MP 7.0.0.18...

openSUSE Security Update : openSUSE-2014- (openSUSE-2014--1)

MozillaFirefox was updated to version 31 to fix various security issues and bugs : - MFSA 2014-56/CVE-2014-1547/CVE-2014-1548 Miscellaneous memory safety hazards - MFSA 2014-57/CVE-2014-1549 bmo1020205 Buffer overflow during Web Audio buffering for playback - MFSA 2014-58/CVE-2014-1550 bmo1020411...

CVE-2014-3548

Multiple cross-site scripting XSS vulnerabilities in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger an AJAX exception dialog...

CVE-2014-3548

Multiple cross-site scripting XSS vulnerabilities in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger an AJAX exception dialog...

PT-2014-5386

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.3.11 Moodle versions 2.4.x before 2.4.11 Moodle versions 2.5.x before 2.5.7 Moodle versions 2.6.x before 2.6.4 Moodle versions 2.7.x before 2.7.1 Description The issue allows remote attackers to inject arbitrary web...

CVE-2014-3548: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger an AJAX exception dialog...

Firefox 31 Patches 11 Security Flaws

Mozilla has released a new version of Firefox, which includes patches for 11 security vulnerabilities. Three of the bugs fixed in Firefox 31 are critical, including a use-after-free vulnerability and a handful of memory safety issues. There are actually several separate use-after-free...

PT-2014-5996

Name of the Vulnerable Software and Affected Versions WP Consultant plugin version 1.0 and earlier Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the dialog id parameter in the admin/admin show dialogs.php...

Microsoft Internet Explorer 5 Dialog Same Origin Policy Bypass Variant Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5561/info Microsoft Internet Explorer includes support for dialog windows through script calls to the two functions showModalDialog and showModelessDialog. These functions accept a URL location for the dialog content, and...

KingSoft Web Shield <= 1.1.0.62 XSS/Code Execution Vulnerability

No description provided by source. KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version = 1.1.0.62 Background: KingSoft Web Shield is a popular anti-malwebsites production of KingSoft Inc. around China. Details: When the KSWebShield detects a malwebsite, it send...

Opera 6.0/7.0 Username URI Warning Dialog Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6811/info The Opera browser for Win32 and possibly other systems is prone to a remotely exploitable buffer overflow condition. For security purposes, Opera will display a warning any time a user of the client visits a lin...

Apple iPhone <= 2.2.1 Call Approval Dialog Security Bypass Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and...

Microsoft Internet Explorer 5.5/6.0 Spoofable File Extensions Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3597/info It is possible for a malicious webmaster, hosting files on an website, to spoof file extensions for users of Internet Explorer. For example, an .exe file can be made to look like a .txt or other seemingly harmle...

Zone Labs Zone Alarm 6.0 Advance Program Control Bypass Weakness

No description provided by source. source: http://www.securityfocus.com/bid/15347/info Zone Labs Zone Alarm is prone to a weakness that permits the bypassing of the Advanced Program Control protection. Reports indicate that applications can create a modal dialog box displaying HTML, which can the...