Important: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Cisco Unified Intelligence Center (CUIC) Software Unauthenticated User Account Creation Vulnerability

A vulnerability in the jspringsecurityswitchuser function of Cisco Unified Intelligence Center CUIC Software could allow an unauthenticated, remote attacker to make certain changes to the system. The vulnerability is due to improper implementation of authorization controls when accessing certain...

Apache Tomcat on Debian-Based Distros - Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits ============================================= - Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - CVE-2016-1240 - Release date: 30.09.2016 - Revision: 1 - Severity: High...

CVE-2016-5061

Multiple cross-site scripting XSS vulnerabilities in the web server in Aternity before 9.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTPAgent, 2 MacAgent, 3 getExternalURL, or 4 retrieveTrustedUrl page...

baserCMS vulnerable to cross-site scripting

Overview baserCMS provided by baserCMS User Group is an opensource content management system. baserCMS contains a stored cross-site scripting vulnerability. Masamu Asato of National Institute of Technology, Okinawa College reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...

baserCMS plugin Blog vulnerable to cross-site scripting

Overview baserCMS provided by baserCMS User Group is an opensource content management system. baserCMS and bundled plugin Blog contain a stored cross-site scripting vulnerability. Isao Takaesu of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with...

[SECURITY] Fedora 23 Update: php-5.6.26-1.fc23

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Mozilla Firefox 'mozilla::a11y::HyperTextAccessible::GetChildOffset' function code execution vulnerability

Mozilla Firefox is an open source web browser. A security vulnerability in the Mozilla Firefox 'mozilla::a11y::HyperTextAccessible::GetChildOffset' function allows remote attackers to build malicious web pages that can be exploited to trick users into parsing them, which can crash the application...

Mozilla Firefox Sensitive Information Disclosure Vulnerability (CNVD-2016-08177)

Mozilla Firefox is an open source web browser. Mozilla Firefox fails to properly restrict the 'scheme' parameter in web icon requests, allowing remote attackers to exploit the vulnerability to build malicious web pages that can be parsed by users, which can be used to obtain sensitive information...

Mozilla Firefox 'mozilla::gfx::FilterSupport::ComputeSourceNeededRegions' Function Buffer Overflow Vulnerability

Mozilla Firefox is an open source web browser. A buffer overflow vulnerability in the Mozilla Firefox 'mozilla::gfx::FilterSupport::ComputeSourceNeededRegions' function allows remote attackers to build malicious web pages that can be exploited to trick a user into parsing them, which can crash th...

Unspecified Code Execution Vulnerability in Mozilla Firefox and Firefox ESR Browser Engines

Mozilla FirefoxFirefox is an open source web browser; Firefox ESR is an extended support version of Firefox. An unspecified security vulnerability in the browser engines of Mozilla Firefox and Firefox ESR allows remote attackers to exploit the vulnerability to build malicious web pages that can b...

Unspecified Man-in-the-Middle Code Vulnerability in Mozilla Firefox and Firefox ESR

Mozilla FirefoxFirefox is an open source web browser; Firefox ESR is an extended support version of Firefox. An unspecified security vulnerability exists in Mozilla Firefox and Firefox ESR, which allows remote attackers to exploit the vulnerability to construct malicious web pages that can be...

Mozilla Firefox and Firefox ESR 'nsRefreshDriver::Tick' function memory misreference vulnerability

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability in the Mozilla Firefox and Firefox ESR 'nsRefreshDriver::Tick' function allows remote attackers to build malicious WEB pages that can be exploited to trick a...

The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to trigger service failures or execute arbitrary code.

The vulnerabilities of Internet Explorer and Microsoft Edge are caused by operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause a service failure memory corruption through a specially crafted web pag...

Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to trigger service failures or execute arbitrary code.

The vulnerabilities of Microsoft Edge and Internet Explorer are related to code errors. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

Cross-site scripting vulnerability in wordpress plugin wp-menu-creator

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin wp-menu-creator due to a failure to...

Cross-site scripting vulnerability in Wordpress plugin dp-maintenance-mode-lite

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin dp-maintenance-mode-lite due to a lack of...

Cross-site scripting vulnerability in wordpress plugin sns-image-gallery

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin sns-image-gallery due to a failure to...

[SECURITY] Fedora 24 Update: moin-1.9.8-1.fc24

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

AVer Information EH6108H+ hybrid DVR VU authentication bypass vulnerability

The AVer Information EH6108H+ hybrid DVR VU is a hard disk recorder DVR product from Round Show AVer Information. An authentication bypass vulnerability exists in the AVer Information EH6108H+ hybrid DVR VU. By guessing the web interface/setup page handle parameter, an unauthenticated attacker ma...