11705 matches found
The vulnerability of the Internet Explorer browser, which allows a violator to trigger a service failure or execute arbitrary code
The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption by using a specially crafted web page...
The vulnerability of the Firefox browser, which allows a hacker to obtain information about the last visited pages
The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain information about the last visited pages by using the Resource Timing API interface’s calls...
Microsoft Internet Explorer CACPCache Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...
Mozilla Firefox and Firefox ESR Memory Corruption Vulnerability (CNVD-2016-06148)
Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. An unspecified memory corruption vulnerability exists in Mozilla Firefox and Firefox, which allows remote attackers to build malicious web pages that can be tricked into parsing and can be used t...
Mozilla Firefox and Firefox ESR 'nsDisplayList::HitTest' function arbitrary code execution vulnerability
Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. The 'nsDisplayList::HitTest' function in Mozilla Firefox and Firefox fails to properly handle rendering display transitions, allowing remote attackers to exploit the vulnerability to build...
Mozilla Firefox Local File Access Vulnerability
Mozilla Firefox is an open source web browser; Mozilla Firefox fails to properly restrict drag-and-drop operations on file: URIs, allowing remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing to access local files...
Mozilla Firefox Password Acquisition Vulnerability
Mozilla Firefox is an open source web browser; Mozilla Firefox fails to properly handle type changes in a session, allowing remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing and discovering plaintext passwords...
Mozilla Firefox Forgery Attack Vulnerability
Mozilla Firefox is an open source web browser; Mozilla Firefox fails to properly set the LINKABLE and URISAFEFORUNTRUSTEDCONTENT flags for about: URLs used by error pages, allowing remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by users...
CVE-2016-5268
Mozilla Firefox before 48.0 does not properly set the LINKABLE and URISAFEFORUNTRUSTEDCONTENT flags of about: URLs that are used for error pages, which makes it easier for remote attackers to conduct spoofing attacks via a crafted URL, as demonstrated by misleading text after an about:neterror?d=...
DEBIAN-CVE-2016-5250
Mozilla Firefox before 48.0, Firefox ESR 45.4 and Thunderbird 45.4 allow remote attackers to obtain sensitive information about the previously retrieved page via Resource Timing API calls...
CVE-2016-5268
Mozilla Firefox before 48.0 does not properly set the LINKABLE and URISAFEFORUNTRUSTEDCONTENT flags of about: URLs that are used for error pages, which makes it easier for remote attackers to conduct spoofing attacks via a crafted URL, as demonstrated by misleading text after an about:neterror?d=...
CVE-2016-5268
Mozilla Firefox before 48.0 does not properly set the LINKABLE and URISAFEFORUNTRUSTEDCONTENT flags of about: URLs that are used for error pages, which makes it easier for remote attackers to conduct spoofing attacks via a crafted URL, as demonstrated by misleading text after an about:neterror?d=...
Service worker meeting notes
On July 28th-29th we met up in the Mozilla offices in Toronto to discuss the core service worker spec. I'll try and cover the headlines here. Before I get stuck in to the meaty bits of the meeting, our intent here is to do what's best for developers and the future of the web, so if you disagree...
WordPress Landing Pages Plugin <= 1.8.7 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Upgrade the plugin...
WordPress Landing Pages Plugin <= 1.2.1 - SQL Injection
This plugin is prone to a module.redirect-ab-testing.php permalinkname parameter SQL injection vulnerability. Solution Update the plugin...
Mozilla Firefox Falsifies Location Bar Information Vulnerability
Mozilla Firefox is an open source web browser; A security vulnerability in Mozilla Firefox's handling of characters in the multimedia type of data: URL allows remote attackers to construct malicious WEB pages that can be tricked into parsing to spoof location bar information...
WordPress Landing Pages 2.2.4 Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting in WordPress Landing Pages Plugin ------------------------------------------------------------------------ Burak Kelebek, July 2016 -----------------------------------------------------------------------...
WordPress Landing Pages <= 2.2.4 - Reflected Cross-Site Scripting (XSS)
The WordPress Landing Pages WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...
Typesettercms v5.0.1 - (Delete Files) CSRF Vulnerability
Document Title: =============== Typesettercms v5.0.1 - Delete Files CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1889 Release Date: ============= 2016-08-03 Vulnerability Laboratory ID VL-ID: ==================================== 188...