Navigator - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Navigator published at the 'play' market has multiple vulnerabilities...

IDM Smart Navigator - SD-card access, Unsafe deleting, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application IDM Smart Navigator published at the 'play' market has multiple vulnerabilities...

design-navigator.ru Open Redirect vulnerability

Vulnerable URL: http://www.design-navigator.ru/bitrix/rk.php?goto=https://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 15374156 Google Pagerank| 3 VIP...

The vulnerability of the Firefox browser allows a perpetrator to gain access to protected information from the process’ memory.

The vulnerability of the TCP Socket API implementation in Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to protected information from the process’s memory by reading data in network packets due to...

CVE-2015-1888

Cross-site scripting XSS vulnerability in IBM Content Navigator 2.0.2 before 2.0.2-ICN-FP007 and 2.0.3 before 2.0.3-ICN-FP003, as used in Content Manager, FileNet Content Manager, Content Foundation, Content Manager OnDemand, and other products, allows remote authenticated users to inject arbitra...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Content Navigator 2.0.2 before 2.0.2-ICN-FP007 and 2.0.3 before 2.0.3-ICN-FP003, as used in Content Manager, FileNet Content Manager, Content Foundation, Content Manager OnDemand, and other products, allows remote authenticated users to inject arbitra...

CVE-2015-1888

CVE-2015-1888 describes an XSS vulnerability in IBM Content Navigator (affected version(s) 2.0.3 and 2.0.2 prior to FPs) used with IBM Content Manager, FileNet Content Manager, Content Foundation, and Content Manager OnDemand. The root cause is improper validation of user-supplied input, which al...

CVE-2015-1888

Cross-site scripting XSS vulnerability in IBM Content Navigator 2.0.2 before 2.0.2-ICN-FP007 and 2.0.3 before 2.0.3-ICN-FP003, as used in Content Manager, FileNet Content Manager, Content Foundation, Content Manager OnDemand, and other products, allows remote authenticated users to inject arbitra...

PT-2015-5487

Name of the Vulnerable Software and Affected Versions IBM Content Navigator versions 2.0.2 before 2.0.2-ICN-FP007 IBM Content Navigator versions 2.0.3 before 2.0.3-ICN-FP003 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via a...

CVE-2015-1888: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Content Navigator 2.0.2 before 2.0.2-ICN-FP007 and 2.0.3 before 2.0.3-ICN-FP003, as used in Content Manager, FileNet Content Manager, Content Foundation, Content Manager OnDemand, and other products, allows remote authenticated users to inject arbitra...

IBM Content Navigator Cross-Site Scripting Vulnerability (CNVD-2015-06294)

IBM Content Navigator is a Web client that supports searching and processing documents stored in content servers around the world from a Web browser. A cross-site scripting vulnerability exists in IBM Content Navigator, which allows remote attackers to exploit the vulnerability to inject maliciou...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions.

The vulnerability of the NavigatorServiceWorker::serviceWorker function in the Blink component of Google Chrome is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions when using...

Google Chrome Blink Same-Origin Policy Bypass Vulnerability (CNVD-2015-05805)

Google Chrome is a WEB-based browser. A vulnerability in the modules/serviceworkers/NavigatorServiceWorker.cpp NavigatorServiceWorker::serviceWorker function in Google Chrome Blink allows remote attackers to construct a malicious WEB page that can trick the user to parse it, which can bypass the...

UBUNTU-CVE-2015-1292

The NavigatorServiceWorker::serviceWorker function in modules/serviceworkers/NavigatorServiceWorker.cpp in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy by accessing a Service Worker...

charitynavigator.org XSS vulnerability

Vulnerable URL: http://www.charitynavigator.org/index.cfm?bay=search.results=x"%3e%3cscript%3ealert'XSSPOSED'%3c%2fscript%3e Details: Description| Value ---|--- Patched:| Yes, at 13.10.2015 Latest check for patch:| 13.10.2015 18:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

charitynavigator.org XSS vulnerability

Vulnerable URL: http://www.charitynavigator.org/index.cfm?keywordlist=x" Details: Description| Value ---|--- Patched:| Yes, at 13.10.2015 Latest check for patch:| 13.10.2015 18:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 30261 Google Pagerank| 7 VIP websi...

Advanced JQL Search does not Respect User email visibility Hidden

h4. Problem The advanced JQL autocomplete functionality is still showing email addresses, ignoring the User email visibility option. Basic mode does not show emails See screenshots h4. Steps to Reproduce Set User email visibility to Hidden JIRA Administration System General Configuration Edit Use...

USN-2552-1 thunderbird vulnerabilities

Olli Pettay and Boris Zbarsky discovered an issue during anchor navigations in some circumstances. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to bypass same-origin policy restrictions. CVE-2015-0801 Christoph...

Multiple Mozilla Products navigator.sendBeacon Cross-Site Request Forgery Vulnerability

Mozilla Firefox, Firefox ESR and Thunderbird are all developed by the Mozilla Foundation.Firefox is an open source web browser, Firefox ESR is an extended support version of Firefox.Thunderbird is a standalone email client from the Mozilla Thunderbird is a separate email client from Mozilla...

UBUNTU-CVE-2015-0807

The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and...