Important: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: tomcat6 security update

An update for tomcat6 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Google Chrome memory misreference vulnerability (CNVD-2017-33590)

Google Chrome for Linux, Windows, Mac and Android is a web browser based on Linux, Windows, Mac and Android platforms developed by Google, Inc.IndexedDB is one of the built-in databases. A memory misreference vulnerability exists in IndexedDB in Google Chrome on Linux, Android, Windows and Mac...

Google Chrome Cross-Origin Content Download Vulnerability

Google Chrome for Android is a web browser based on the Android platform developed by Google USA. A security vulnerability exists in Google Chrome for Android. A remote attacker can exploit the vulnerability to download cross-origin content with the help of specially crafted HTML pages...

Google Chrome memory misreference vulnerability (CNVD-2017-33589)

Google Chrome for Windows is a Windows-based Web browser developed by Google.PPAPI Plugins is one of the plugins for displaying Flash animations. A memory misreference vulnerability exists in the PPAPI Plugin in Google Chrome for Windows, which stems from the program failing to adequately validat...

Google Chrome memory misreference vulnerability (CNVD-2017-33602)

Google Chrome for Linux, Windows, Mac and Android is a web browser based on Linux, Windows, Mac and Android platforms developed by Google Google.V8 is one of the open source JavaScript engine. A memory misreference vulnerability exists in V8 in Google Chrome for Mac, Windows, Linux and Android...

CVE-2017-5118

Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP restrictions to javascript scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page...

UBUNTU-CVE-2017-5085

Inappropriate implementation in Bookmarks in Google Chrome prior to 59 for iOS allowed a remote attacker who convinced the user to perform certain operations to run JavaScript on chrome:// pages via a crafted bookmark...

Unspecified Vulnerability in Oracle Learner Pages Subcomponent

Oracle iLearning is an enterprise-class learning management system LMS from Oracle Corporation. The system provides functionality for managing, delivering, and tracking online training in a classroom-based environment. learner Pages subcomponent is one of the learner pages subsystem. An unspecifi...

Redmine cross-site scripting vulnerability (CNVD-2017-31961)

Redmine is a set of open source Web-based project management and defect tracking tools . The tool provides project management , issue tracking and role-based access control and other features . A cross-site scripting vulnerability exists in the Textile and Markdown text formatting and project hom...

WordPress Landing Pages Plugin Arbitrary Code Execution Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WordPress Landing Pages is one of the landing page plugin. A security vulnerability exists in versions of the...

The vulnerability of the alloc_heap_pages function in Xen hypervisors allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the allocheappages function in Xen hypervisors arises due to insufficient checking of parameters. Exploiting this vulnerability allows a local attacker to execute arbitrary code or cause a service failure by exceeding memory limits, using the NUMA parameter for memory...

Mosaik - Moderately critical - Cross-site scripting - SA-CONTRIB-2017-080

The Mosaik module enables you to create pages or complex blocks in Drupal with the logic of a real mosaic and its pieces. The module doesn't sufficiently sanitize the titles of fieldsets on its administration pages or the titles of blocks that it creates. This vulnerability is mitigated by the fa...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Paid Memberships Pro PMPro plugin before 1.8.4.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 s parameter to membershiplevels.php, 2 memberslist.php, or 3 orders.php in adminpages/ or the 4 edit...

Code injection

The Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary code via the url parameter...

CVE-2015-5227

The Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary code via the url parameter...

CVE-2015-5227

The Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary code via the url parameter...

CVE-2015-5227

The CVE refers to WordPress Landing Pages plugin prior to 1.9.2, where remote code execution is possible via the url parameter. Affected versions are

CVE-2016-10515

In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages...

naturalhealthyellowpages.com XSS vulnerability

Vulnerable URL: http://www.naturalhealthyellowpages.com/cgi-bin/search1.cgi Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8755294 VIP website status:| No Coordinated Disclosure...