Google Chrome Extension Script Injection Vulnerability (CNVD-2016-07203)

Google Chrome is a web browser developed by the American company Google Google. A script injection vulnerability exists in versions of Google Chrome Extensions prior to 53.0.2785.89. An attacker can exploit this vulnerability to execute arbitrary code in the browser context...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-07210)

Google Chrome is a web browser developed by the American company Google Google. An arbitrary code execution vulnerability exists in versions of Google Chrome Extensions prior to 53.0.2785.89. An attacker can exploit this vulnerability to execute arbitrary code in the context of the browser, bypas...

TYPO3 MMC directmail subscription extension information disclosure vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the TYPO3 Association in Switzerland.MMC directmail subscription is one of the email subscription extension plug-ins. An information disclosure vulnerability exists in TYPO3 MMC directmail subscription...

The vulnerability of PHP software allows a malicious attacker to compromise the integrity and accessibility of protected information.

The vulnerability exists in the GD context component of PHP, due to the presence of the sequence %00 in path names. Exploiting this vulnerability allows malicious actors to overwrite arbitrary files using specially crafted input data that triggers the functions imagegd, imagegd2, imagegif,...

CVE-2016-1700

Removed by vendor...

Google Chrome Information Disclosure Vulnerability (CNVD-2016-03814)

Google Chrome is a popular web browser. An information disclosure vulnerability exists in the Google Chrome extension, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by users and can be used to obtain sensitive information...

chromium-browser: cross-origin bypass in extensions

The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

EUVD-2016-5073

The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as demonstrated by mishandling of \0 characters by the pharanalyzepath function in ext/phar/phar.c...

Google Chrome Extensions Subsystem Bypasses Security Restrictions Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chrome versions prior to 50.0.2661.75. A remote attacker can exploit the vulnerability to access sensitive information with the help of a malicious extension...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the extensions/renderer/renderframeobservernatives.cc function in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure the use of resources after they are...

UBUNTU-CVE-2016-1622

The Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object.defineProperty method to override intended extension behavior, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code...

PHP 'ext/standard/string.c' Arbitrary Code Execution Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. An...

TYPO3 http:BL Blocking Extension SQL Injection Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. http:BL Blocking is one of the http binding extension plugin . A SQL injection vulnerability exists in TYPO3 http:BL Blocking extension version 1.1.7 and earlier. An attacker cou...

Cross-Site Request Forgery in extension "Typo3 Quixplorer" (t3quixplorer)

It has been discovered that the extension "Typo3 Quixplorer" t3quixplorer is susceptible to Cross-Site Request Forgery. Release Date: September 30, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.7.2 and belo...

PHP libmagick 'libmagic/softmagic.c' denial of service vulnerability (CNVD-2015-03965)

PHP is a general-purpose scripting language. A security vulnerability in the handling of constructed files by the PHP Fileinfo extension allows remote attackers to exploit the vulnerability to crash the PHP process, resulting in a denial of service...

PHP 'do_soap_call' Sensitive Information Disclosure Vulnerability

PHP is a general-purpose programming language. The 'dosoapcall' function in PHP's ext/soap/soap.c file does not verify that the uri attribute is a string, allowing remote attackers to provide serialized data with the int data type to obtain sensitive information...

PHP calendar extension integer overflow vulnerability

PHP is a popular programming language. Multiple integer overflow vulnerabilities in the PHP calendar extension allow remote attackers to cause a denial of service attack by passing a specially crafted year value to the GregorianToSdn or JulianToSdn functions...

CVE-2014-8098

The GLX extension in XFree86 4.0, X.Org X Window System aka X11 or X X11R6.7, and X.Org Server aka xserver and xorg-server before 1.16.3 allows remote authenticated users to cause a denial of service out-of-bounds read or write or possibly execute arbitrary code via a crafted length or index valu...

CVE-2014-3172

Removed by vendor...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : firefox regression (USN-1548-2)

USN-1548-1 fixed vulnerabilities in Firefox. The new package caused a regression in Private Browsing which could leak sites visited to the browser cache. This update fixes the problem. Gary Kwong, Christian Holler, Jesse Ruderman, Steve Fink, Bob Clary, Andrew Sutherland, Jason Smith, John...