29884 matches found
Bidirectional Content Redirection does not work properly with Lingering Session
Repro Steps: 1. Start Internet Explorer on your client machine 2. Type an URL that match with "Allowed URLs to be redirected to VDA" to the address field 3. The local browser is closed automatically when hitting the enter key 4. The published application is started and the redirected URL is opene...
Internet Explorer Memory Object Handling Code Execution
The vulnerability of the Internet Explorer browser is related to errors in the memory object handling mechanisms. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with privileges of the current user, through a specially crafted web page...
Microsoft Edge Internet Explorer Redirect
The vulnerabilities of Microsoft Edge and Internet Explorer are related to errors in handling redirection requests. Exploiting these vulnerabilities can allow a remote attacker to redirect users to a malicious website using a specially crafted web page...
Security Bulletin: Public disclosed vulnerability from Spring Framework affects IBM Spectrum LSF Explorer
Summary Public disclosed vulnerability from Spring Framework affects IBM Spectrum LSF Explorer Vulnerability Details CVE-ID:CVE-2018-15756 Description: Pivotal Spring Framework is vulnerable to a denial of service, caused by improper handling of range request by the ResourceHttpRequestHandler. By...
Multiple Cross-Site Scripting Vulnerabilities in Ericsson Active Library Explorer
Ericsson Active Library Explorer is server-based software that allows users to browse Ericsson document libraries and documents using a standard Web browser. Ericsson Active Library Explorer has multiple cross-site scripting vulnerabilities. Due to the program failing to adequately filter...
Microsoft Internet Explorer Memory Corruption - VER0 (CVE-2018-8631)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
February 21, 2019—KB4491101 (OS Build 10240.18135)
February 21, 2019—KB4491101 OS Build 10240.18135 Applies To Windows 10 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addresses an issue that may prevent Internet Explorer from loading...
February 19, 2019—KB4487021 (OS Build 16299.1004)
February 19, 2019—KB4487021 OS Build 16299.1004 Applies To Windows 10, version 1709, all editions Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Updates time zone information for Chile...
February 19, 2019—KB4487029 (OS Build 17134.619)
February 19, 2019—KB4487029 OS Build 17134.619 Applies To Windows 10, version 1803, all editions Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Enables media content to play e-learning...
February 19, 2019—KB4486565 (Preview of Monthly Rollup)
February 19, 2019—KB4486565 Preview of Monthly Rollup Applies To Windows 7 Service Pack 1 Windows Server 2008 R2 Service Pack 1 Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4486563 released February 12, 2019 and also includes these new...
Design/Logic Flaw
The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a Man-in-the-middle attacker on the local network because HTTPS is not used, and an attacker's web site is displayed in a WebView with no information about the URL...
CVE-2019-8345
The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a Man-in-the-middle attacker on the local network because HTTPS is not used, and an attacker's web site is displayed in a WebView with no information about the URL...
CVE-2019-8345
The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a Man-in-the-middle attacker on the local network because HTTPS is not used, and an attacker's web site is displayed in a WebView with no information about the URL...
CVE-2019-8345
CVE-2019-8345 affects ES File Explorer File Manager for Android (version 4.1.9.7.4). The Help feature loads content over HTTP, enabling session hijacking by a local-network MITM attacker, who could display an attacker-controlled site in a WebView without URL information. No exploit details or pat...
CVE-2019-8345: Cleartext Transmission of Sensitive Information
The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a Man-in-the-middle attacker on the local network because HTTPS is not used, and an attacker's web site is displayed in a WebView with no information about the URL...
PT-2019-18978
Name of the Vulnerable Software and Affected Versions ES File Explorer File Manager application version 4.1.9.7.4 Description The issue allows session hijacking by a Man-in-the-middle attacker on the local network. This is because the application does not use HTTPS, and an attacker's website is...
flash-plugin: Information Disclosure vulnerability (APSB19-06)
Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead t...
Microsoft Internet Explorer and Microsoft Edge Input Validation Vulnerability
Microsoft Edge and Internet Explorer IE are both products of Microsoft Corporation, U.S.A. Edge is a web browser that is the default browser that comes with the Windows 10 operating system.Internet Explorer is a web browser that is the default browser that comes with the Windows Internet Explorer...
Microsoft Windows OLE Obfuscated Automation Array Remote Code Execution (CVE-2014-6332)
A new obfuscation technique of remote code execution vulnerability has been reported in Microsoft Windows Object Linking and Embedding OLE. The vulnerability is due to an improper access to memory objects by Internet Explorer. A remote attacker can exploit this issue by enticing target users to...
Adobe Flash Player Microsoft Edge and Internet Explorer Security Update (APSB19-06) - Windows
Adobe Flash Player within Microsoft Edge or Internet Explorer is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...