Adobe Flash Player integer overflow vulnerability (CNVD-2016-01626)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR. An integer overflow vulnerability exists in Adobe Flash Player, which could be exploited by remote attackers to construct a malicious web page that could...

Mozilla Firefox Conditional Competition Vulnerability

Firefox is an open source web browser. A competitive condition vulnerability exists in Mozilla Firefox that allows remote attackers to exploit the vulnerability to build malicious web pages that can be tricked into being parsed by the user, which can crash the application...

Mozilla Firefox Same-Origin Policy Bypass Vulnerability (CNVD-2016-01642)

Firefox is an open source web browser. A security vulnerability exists in Mozilla Firefox that allows remote attackers to exploit the vulnerability to build malicious web pages that can be tricked into parsing by users, which can bypass the same-origin policy to obtain sensitive information...

Mozilla Firefox and Firefox ESR Graphite 2 Denial of Service Vulnerability (CNVD-2016-01649)

Firefox is an open source Web browser ; Firefox ESR is an extended support version of Firefox.Graphite is a set of Python language , written using the Django framework for enterprise-class open source system monitoring tools . A security vulnerability exists in Mozilla Firefox and Firefox ESR...

Mozilla Firefox and Firefox ESR Graphite 2 code execution vulnerability (CNVD-2016-01591)

Firefox is an open source Web browser ; Firefox ESR is an extended support version of Firefox.Graphite is a set of Python language , written using the Django framework for enterprise-class open source system monitoring tools . A security vulnerability exists in Mozilla Firefox and Firefox ESR...

Mozilla Firefox and Firefox ESR Graphite 2 code execution vulnerability (CNVD-2016-01592)

Firefox is an open source Web browser ; Firefox ESR is an extended support version of Firefox.Graphite is a set of Python language , written using the Django framework for enterprise-class open source system monitoring tools . A security vulnerability exists in Mozilla Firefox and Firefox ESR...

Mozilla Firefox and Firefox ESR Arbitrary File Overwrite Vulnerability

Firefox is an open source Web browser ; Firefox ESR is an extended support version of Firefox.Graphite is a set of Python language , written using the Django framework for enterprise-class open source system monitoring tools . Mozilla Firefox and Firefox ESR have a security vulnerability in the...

Mozilla Firefox and Firefox ESR Graphite 2 code execution vulnerability (CNVD-2016-01597)

Firefox is an open source Web browser ; Firefox ESR is an extended support version of Firefox.Graphite is a set of Python language , written using the Django framework for enterprise-class open source system monitoring tools . A security vulnerability exists in Mozilla Firefox and Firefox ESR...

CVE-2016-2845

Removed by vendor...

[SECURITY] Fedora 23 Update: php-5.6.19-1.fc23

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Fedora 23 : php-horde-horde-5.2.8-1.fc23 / php-horde-imp-6.2.11-1.fc23 / php-horde-ingo-3.2.7-1.fc23 / etc (2015-46c331cb4e)

horde 5.2.8 mjr SECURITY: Protect against CSRF attacks on various admin pages. jan Don't apply access keys to checkbox and radiobox rows in the sidebar Bug 14103. jan Send correct MIME type for non-statically cached JavaScript files. mjr Added configuration support for version 2 of...

Fedora 23 : php-horde-horde-5.2.9-1.fc23 (2016-5d0e7f15ef)

horde 5.2.9 jan SECURITY: Fix XSS vulnerability in menu bar exposed by few applications Bug 14213. jan Add more detailed user DN settings to Kolab group configuration Request 11737. jan Fix returning to last page after problem reporting from AJAX pages Bug 12112. jan Fix custom database...

Fedora 22 : php-horde-horde-5.2.9-1.fc22 (2016-3d1183830b)

horde 5.2.9 jan SECURITY: Fix XSS vulnerability in menu bar exposed by few applications Bug 14213. jan Add more detailed user DN settings to Kolab group configuration Request 11737. jan Fix returning to last page after problem reporting from AJAX pages Bug 12112. jan Fix custom database...

WordPress Plugin Bulk Delete 5.5.3 - Privilege Escalation

''' Exploit Title: WordPress Bulk Delete Plugin Privilege Escalation Discovery Date: 2016-02-10 Exploit Author: Panagiotis Vagenas Author Link: https://twitter.com/panVagenas Vendor Homepage: http://bulkwp.com/ Software Link: https://wordpress.org/plugins/bulk-delete/ Version: 5.5.3 Tested on:...

OracleVM 3.2 : openssh (OVMSA-2016-0030)

The remote OracleVM system is missing necessary patches to address critical security updates : - change default value of MaxStartups - CVE-2010-5107 John Haxby - improve RNG seeding from /dev/random 681291,708056 - make ssh1's ConnectTimeout option apply to both the TCP connection and SSH banner...

[SECURITY] Fedora 23 Update: rubygem-actionview-4.2.3-3.fc23

Simple, battle-tested conventions and helpers for building web pages...

[SECURITY] Fedora 22 Update: rubygem-actionview-4.2.0-3.fc22

Simple, battle-tested conventions and helpers for building web pages...

DLA-435-1 tomcat6 - security update

Bulletin has no description...

The vulnerability of Google Chrome browser allows a perpetrator to obtain confidential information.

The vulnerability of the nacceleratedImageBufferSurfaceSurface class in the WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp file of the Blink component in Google Chrome browser is caused by incorrect initialization behavior. Exploiting this vulnerability could allow a remote...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-01245)

Google Chrome is a popular web browser. Google Chrome fails to properly process JPEG2000 images, allowing remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by users, which can crash applications or execute arbitrary code...