355 matches found
CVE-2017-15394
Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension...
CVE-2017-15394
Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension...
CVE-2017-15394
Removed by vendor...
November 14, 2017—KB4048953 (OS Build 14393.1884)
None None...
chromium-browser: url spoofing in extensions ui
Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension...
CVE-2017-15394
Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension...
NiuShop open source mall system \application\shop\controller\goods.php file reflective cross-site scripting vulnerabilities
NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a PHP open source e-commerce system . NiuShop open source mall system \application\shop\controller\goods.php file there is a reflective cross-site...
CVE-2017-7060
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. The issue involves the "Safari Printing" component. It allows remote attackers to cause a denial of service excessive print dialogs via a crafted web site...
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2017-629)
This update for java-170-openjdk fixes the following issues : - Update to 2.6.10 - OpenJDK 7u141 bsc1034849 - Security fixes - S8163520, CVE-2017-3509: Reuse cache entries - S8163528, CVE-2017-3511: Better library loading - S8165626, CVE-2017-3512: Improved window framing - S8167110, CVE-2017-351...
Apple iOS 10.3 Fixes Safari Flaw Used in JavaScript-based Ransomware Campaign
If you own an iPhone or iPad, it's possible you could see popup windows in a sort of endless cycle on your Safari browser, revealing your browser has been locked and asking you to pay a fee to unlock it. Just do not pay any ransom. A new ransomware campaign has been found exploiting a flaw in...
Android Dialog Denial of Service Vulnerability
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A denial of service vulnerability exists in the Android system dialog. The vulnerability is caused by the system-level Intent mechanism "android.intent.action.CLOSESYSTEMDIALOGS" in...
[SECURITY] Fedora 23 Update: kf5-kconfigwidgets-5.24.0-1.fc23
KConfigWidgets provides easy-to-use classes to create configuration dialogs , as well as a set of widgets which uses KConfig to store their settings...
The vulnerability of Google Chrome browser allows a malicious actor to compromise the confidentiality and integrity of protected information.
The vulnerability exists in the extensions/common/urlpattern.cc file in Google Chrome, due to the possibility of using the character "\0" in the names of extension nodes. Exploiting this vulnerability allows malicious actors to replace the permission request dialogs for extensions by using a...
Google Chrome suffers from an unspecified vulnerability (CNVD-2015-07969)
Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the 'Document::open' function in the WebKit/Source/core/dom/Document.cpp file in versions of Google Chrome prior to 47.0.2526.73, which stems from the program's failure to ensure tha...
Apple OS X and Apple Remote Desktop Authentication Vulnerability
Apple Remote Desktop is the United States Apple Apple company's set of dedicated to Mac OS X operating system remote desktop management system. The system supports software distribution, resource management and remote assistance. A security vulnerability exists in the Remote Desktop full-screen...
Open-Xchange Server and Open-Xchange AppSuite Front End Cross-Site Scripting Vulnerabilities
Open-Xchange Server is a semi-open source project mainly used for developing collaboration software; OX AppSuite is a set of Web cloud desktop environment. A cross-site scripting vulnerability exists in the dialogs for printing content in the Front End of Open-Xchange Server and OX AppSuite, whic...
OWASP ZAP 2.4.0 - Penetration Testing Tool for Testing Web Applications
ZAP is an OWASP Flagship project, and is currently the most active open source web application security tool. For a quick introduction to the new release see this video: Some of the most significant changes include: ‘Attack’ Mode A new ‘attack’ mode has been added that means that applications tha...
leadtools activex common dialogs 16.5 - Multiple Vulnerabilities
No description provided by source. LEADTOOLS ActiveX Common Dialogs 16.5 Multiple Remote Vulnerabilities Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital camera or capture card that h...
Microsoft Internet Explorer 5.0.1 Popup.show Mouse Event Hijacking Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10690/info A vulnerability exists in Microsoft Internet Explorer that may permit a malicious Web page to hijack mouse events. This could potentially be exploited to trick an unsuspecting user into performing unintended...
openSUSE Security Update : Opera (openSUSE-SU-2012:1122-1)
Opera was updated to 12.02 Fixed an issue where truncated dialogs may be used to trick users - full changelog available at: http://www.opera.com/docs/changelogs/unix/1202/ - fixes bnc778087 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...