CVE-2015-7033

CVE-2015-7033 affects Apple iWork suite: Keynote 6.6, Pages 5.6, Numbers 3.6, and iWork for iOS 2.6. Root cause is memory corruption due to parsing a maliciously crafted document, enabling remote arbitrary code execution or application crash. Apple’s advisory notes updates addressing the issue; r...

CVE-2015-7033

The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted document...

CVE-2015-7032

The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to obtain sensitive information via a crafted document...

CVE-2015-7034

The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Pages document...

CVE-2015-7034

The CVE-2015-7034 entry applies to Apple iWork / Pages prior to versions: iOS iWork (2.6) and Pages (5.6) where parsing a crafted Pages document can trigger memory corruption, allowing remote code execution or a denial of service (application crash). The connected documents corroborate a memory‑c...

CVE-2015-7032

CVE-2015-7032 affects Apple iWork suite: Keynote <6.6, Pages <5.6, Numbers <3.6, and iWork for iOS

Google Chrome V8 Denial of Service Vulnerability (CNVD-2015-06766)

Google Chrome is an open source WEB browser. Google V8 has a security vulnerability that allows remote attackers to exploit the vulnerability to build malicious WEB pages, trick users into parsing them, crash applications, and more...

Google Chrome suffers from an unspecified vulnerability (CNVD-2015-06765)

Google Chrome is an open source WEB browser. Google has multiple unspecified security vulnerabilities that allow remote attackers to exploit vulnerabilities to build malicious WEB pages, trick users into parsing them, crash applications, and more...

delta.com XSS vulnerability

Vulnerable URL: https://www.delta.com/contactus/pages/commentcomplaint/emailusAction?inputPage=/pages/commentcomplaint/index.jsp=/pages/commentcomplaint/success/index.jsp=/pages/commentcomplaint/error/index.jsp=MM/dd/yyyy=false=falseemail=subject=Delta%20Vacations=====prefix= Details: Description...

Apple Patches Keynote, Mozilla Patches Firefox

Apple on Thursday patched a handful of vulnerabilities in several iterations of its Keynote, Pages, Numbers and iWork productivity software. The most serious of the security flaws allow an attacker to execute code on a compromised OS X computer running Yosemite 10.10.4 or later, or iOS 8.4 or lat...

Apache Solr < 5.1 Multiple XSS

Binary data 8975.prm...

Apple Releases Security Updates for Keynote, Pages, and Numbers

Apple has released security updates for Keynote, Pages, and Numbers for OS and iOS to address multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: Keynote 6.6, Pages 5.6, and Numbers 3...

CVE-2015-7368

Revive Adserver before 3.2.2 is affected by CVE-2015-7368: it does not send proper Cache-Control headers for admin UI pages, allowing local users to access cached sensitive information after logout. Affected product/version: Revive Adserver prior to 3.2.2. Root cause: improper header handling lea...

Fedora 21 : 389-ds-base-1.3.3.13-1.fc21 (2015-15128)

389-ds-base-1.3.3.13-1.fc21 - release 1.3.3.13 - Ticket 48265 - Complex filter in a search request doen't work as expected. regression - Ticket 47981 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes - Ticket 48252 - db2index creates index entry from delete...

Oracle: Security Advisory (ELSA-2015-3014)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2015-0674)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the iOS operating system allows a hacker to replace the content of web pages.

The vulnerability of the Safari browser’s user interface on the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace a web page by changing its URL address...

WordPress Landing Pages 1.8.8-1.9.0 - Unauthenticated Remote Command Execution

The WordPress Landing Pages WordPress plugin was affected by an Unauthenticated Remote Command Execution security vulnerability...

SUSE SLED12 / SLES12 Security Update : coreutils (SUSE-SU-2015:1637-1)

This update for coreutils provides the following fixes : - Fix memory handling error with case insensitive sort using UTF-8. CVE-2015-4041, CVE-2015-4042 - Ensure 'df -a' shows all remote file system entries. - Only suppress remote mounts of separate exports with 'df --total'. - Document that 'df...

Mozilla Firefox 'SavedStacks' Class Denial of Service Vulnerability

Mozilla Firefox is an open source web browser. A security vulnerability in the Mozilla Firefox JavaScript implementation of the 'SavedStacks' class allows remote attackers to construct malicious WEB pages that can crash an application by tricking the user into parsing them...