11705 matches found
Page Manager Search - Moderately Critical - Information disclosure - SA-CONTRIB-2016-032
This module enables you to make Panels pages and other pages managed by CTools' Page Manager submodule indexible and searchable through the standard Search module provided in Drupal core. The module doesn't block access to Page Manager pages which have been disabled. CVE identifiers issued ACVE...
Google Chrome PDFium Out-of-Bounds Read Vulnerability (CNVD-2016-03790)
Google Chrome is a popular web browser. Google Chrome PDFium suffers from an out-of-bounds read vulnerability, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by the user and can be used to obtain sensitive information...
Google Chrome PDFium Out-of-Bounds Read Vulnerability (CNVD-2016-03815)
Google Chrome is a popular web browser. Google Chrome PDFium suffers from an out-of-bounds read vulnerability, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by the user and can be used to obtain sensitive information...
Unspecified Vulnerability in Google Chrome ServiceWorker
Google Chrome is a popular web browser. An unspecified vulnerability exists in Google Chrome ServiceWorker, which allows remote attackers to exploit the vulnerability to build malicious WEB pages and trick users into parsing them for attacks...
Unspecified Vulnerability in Google Chrome HTTP Download of Software Removal Tool
Google Chrome is a popular web browser. An unspecified vulnerability in Google Chrome HTTP Download of Software Removal Tool allows remote attackers to exploit the vulnerability to build malicious web pages and trick users into parsing them for attack...
Google Chrome suffers from an unspecified vulnerability (CNVD-2016-03796)
Google Chrome is a popular web browser. Google Chrome has an unspecified security vulnerability that allows remote attackers to exploit the vulnerability to build malicious web pages and trick users into parsing them for attack...
Google Chrome V8 heap buffer overflow vulnerability (CNVD-2016-03805)
Google Chrome is a popular web browser. A heap buffer overflow vulnerability exists in Google Chrome V8, which allows remote attackers to exploit the vulnerability to construct a malicious WEB page that can be tricked into parsing by users, which can crash the application or execute arbitrary cod...
Google Chrome Information Disclosure Vulnerability (CNVD-2016-03814)
Google Chrome is a popular web browser. An information disclosure vulnerability exists in the Google Chrome extension, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by users and can be used to obtain sensitive information...
Google Chrome Libxslt Out-of-Bounds Access Vulnerability
Google Chrome is a popular web browser. An out-of-bounds access vulnerability in Google Chrome Libxslt allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by users, which can crash the application or execute arbitrary code...
Design/Logic Flaw
The web interface in Cisco Firepower Management Center 5.4.0 through 6.0.0.1 allows remote authenticated users to modify pages by placing crafted code in a parameter value, aka Bug ID CSCuy76517...
PT-2016-4770 · Cisco · Cisco Firepower Management Center
Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center versions 5.4.0 through 6.0.0.1 Description: The issue allows remote authenticated users to modify pages by placing crafted code in a parameter value. Recommendations: For versions 5.4.0 through 6.0.0.1,...
CVE-2016-4792
Pulse Connect Secure PCS 8.2 before 8.2r1 allows remote attackers to disclose sign in pages via unspecified vectors...
CVE-2016-4792
Pulse Connect Secure PCS 8.2 before 8.2r1 allows remote attackers to disclose sign in pages via unspecified vectors...
Code injection
Pulse Connect Secure PCS 8.2 before 8.2r1 allows remote attackers to disclose sign in pages via unspecified vectors...
PT-2016-6146 · Pulse · Pulse Connect Secure
Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure PCS versions 8.2 through 8.2r1 Description: The issue allows remote attackers to disclose sign in pages via unspecified vectors. Recommendations: For Pulse Connect Secure PCS versions 8.2 through 8.2r1, update to version...
The "Restrict to articles with labels" option doesn't restrict the customer portal from suggesting KB's other than those with the nominated Label
h3. Summary Currently we have the "Restrict to articles with labels", where you can specify the label for a request. When a customer is filling the summary for a request, SD will search the knowledge base for similar content from confluence pages with that label. However, the customer portal sear...
Facebook Pages Manager - Customized SSL, Hardcoded secrets, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Facebook Pages Manager published at the 'play' market has multiple vulnerabilities...
Security update for the Linux Kernel (important)
The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-2847: Limit the per-user amount of pages allocated in pipes bsc970948. - CVE-2016-3136: mctu232: add sanity checking in probe bnc970955. - CVE-2016-2188: iowarrio...
Debian DLA-475-1 : python-tornado security update
It was discovered that python-tornado, a Python web framework and asynchronous networking library, was susceptible for the BREACH attack. The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable. For Debian 7...