2123 matches found
Apple Releases Security Update for macOS High Sierra
Apple has released a supplemental security update to address vulnerabilities in macOS High Sierra 10.13. An attacker could exploit these vulnerabilities to obtain sensitive information. US-CERT encourages users and administrators to review the Apple security page for macOS High Sierra 10.13 and...
Stable Channel Updates for Chrome OS
The Stable channel has been updated to 61.0.3163.113 Platform version: 9765.76.0 for most Chrome OS devices . This build contains a number of bug fixes, security updates, and feature enhancements. Systems will be receiving updates over the next several days. Some highlights of these changes are:...
Cisco Releases Security Updates
Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to cause a denial-of-service condition. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the...
siegburg.de XSS vulnerability
Vulnerable URL: http://www.siegburg.de/stadt/feedback/index.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 866450 VIP website status:| No Coordinated Disclosure Timeline:...
Dnsmasq Contains Multiple Vulnerabilities
Dnsmasq versions 2.77 and prior contain multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review VUL Note VU973527 for more information and update to dnsmasq...
Apple Releases Security Update for iOS
Apple has released iOS 11.0.2 to address vulnerabilities in previous versions of iOS. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review the Apple security page for iOS 11.0.2 and...
Mozilla Releases Security Updates
Mozilla has released security updates to address multiple vulnerabilities in Firefox ESR 52.4 and Firefox 56. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the Mozilla Security Advisories...
Android Lockscreen Patterns Less Secure Than PINs
An academic study set out to prove whether it’s better to protect your Android phone with a PIN or a swipe pattern. The answer is PIN. At least when it comes to proximity attacks, namely someone lurking about trying to guess your PIN or unlock pattern. The study PDF, published Friday by researche...
Oracle Patches Apache Vulnerabilities
Oracle has released security updates to address Apache Struts 2 vulnerabilities found across multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the Oracle Security Alert and...
Stored Cross-Site Scripting Vulnerability in Mythical Doctor App
The Mythical Doctor app is a leading doctor-patient type tool in the field of mobile health, dedicated to helping you build an online communication service between you and your doctor, and providing you with medicines to your home. A stored cross-site scripting vulnerability exists in the...
Stored Cross-Site Scripting Vulnerability in Palm QC App
Palm Qingcheng app is a smartphone-based city travel information query software. A stored cross-site scripting vulnerability exists in the "Feedback" section of the app. An attacker can insert malicious js code into the page to obtain user cookies and other information, resulting in user hijackin...
hespelertennis.on.ca XSS vulnerability
Vulnerable URL: http://hespelertennis.on.ca/pages/feedback.php?msg="I don't remember my password or login id. Please send me my login information. Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...
XSS vulnerability in Orange Deer Bike app
Orange Deer Bike app is a bike sharing application. An XSS vulnerability exists in the "Feedback" section of the Orange Deer Bike app. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading to user hijacking...
Joomla! Releases Security Update
Joomla! has released version 3.8.0 of its Content Management System CMS software to address a vulnerability. A remote attacker could exploit this vulnerability to obtain access to sensitive information. US-CERT encourages users and administrators to review the Joomla! Security Release and apply t...
Moodle cross-site scripting vulnerability (CNVD-2017-27611)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A cross-site scripting vulnerability exists in the contact form on the 'non-respondent...
CVE-2017-12156
Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...
CVE-2017-12156
Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...
Design/Logic Flaw
Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...
