IPython: User-assisted execution of arbitrary code

Background IPython is an advanced interactive shell for Python. Description IPython does not properly check the MIME type of a file. Impact A remote attacker could entice a user to open a specially crafted text file using IPython, possibly resulting in execution of arbitrary JavaScript with the...

Sql injection

A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary code via a JAR file...

CVE-2014-8873

A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary code via a JAR file...

CVE-2014-8873

A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary code via a JAR file...

CVE-2014-8873

CVE-2014-8873 affects Debian OpenJDK 7 (package openjdk-7, buggy 7u79-2.5.5-1~deb8u1). The root cause is a MIME-type registration for a .desktop file added to /etc/mailcap via mime-support, enabling remote code execution of a JAR. Impact is remote code execution with potential full system comprom...

CVE-2014-8873

A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary code via a JAR file...

CVE-2014-8873: Improper Input Validation

A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary code via a JAR file...

[SECURITY] Fedora 22 Update: nss-3.20.1-1.0.fc22

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

CVE-2015-5884

The Mail Drop feature in Mail in Apple OS X before 10.11 mishandles encryption parameters for attachments, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during transmission of an S/MIME e-mail message with a large attachment...

Information disclosure

The Mail Drop feature in Mail in Apple OS X before 10.11 mishandles encryption parameters for attachments, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during transmission of an S/MIME e-mail message with a large attachment...

CVE-2015-5884

CVE-2015-5884 affects Apple OS X Mail’s Mail Drop feature prior to 10.11. The issue is that encryption parameters for attachments in S/MIME mail are mishandled, enabling a remote attacker who can observe traffic to obtain sensitive data when large attachments are transmitted. Affected product/are...

CVE-2015-5884

The Mail Drop feature in Mail in Apple OS X before 10.11 mishandles encryption parameters for attachments, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during transmission of an S/MIME e-mail message with a large attachment...

PT-2015-2284

Name of the Vulnerable Software and Affected Versions Mail component in Mac OS X versions prior to 10.11 Description The issue is related to the Mail Drop feature in the Mail component, which mishandles encryption parameters for attachments. This makes it easier for attackers to obtain sensitive...

CVE-2015-5884: Exposure of Sensitive Information to an Unauthorized Actor

The Mail Drop feature in Mail in Apple OS X before 10.11 mishandles encryption parameters for attachments, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during transmission of an S/MIME e-mail message with a large attachment...

Open-Xchange (OX) App Suite XHTML File HTML Injection Vulnerability

Open-Xchange OX App Suite is prone to a cross-site scripting XSS vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

CVE-2015-7337

The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types...

Design/Logic Flaw

The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types...

CVE-2015-7337

The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types...

PYSEC-2015-27

The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types...

PYSEC-2015-27

The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types...