UBUNTU-CVE-2017-5949

JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote attackers to cause a denial of service heap-based out-of-bounds write and application crash or possibly have unspecified other impact via crafted JavaScript code that triggers access to red-zone memory...

Out-of-bounds

JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service bitfield out-of-bounds read and application crash via crafted JavaScript code that is mishandled in the operatorString function, related to...

CVE-2017-5949

JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote attackers to cause a denial of service heap-based out-of-bounds write and application crash or possibly have unspecified other impact via crafted JavaScript code that triggers access to red-zone memory...

UBUNTU-CVE-2016-10222

runtime/JSONObject.cpp in JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service segmentation violation and application crash via crafted JavaScript code that triggers a "type confusion" in the JSON.stringify function...

CVE-2016-10226

Removed by vendor...

CVE-2017-5949

Removed by vendor...

CVE-2016-10226

JavaScriptCore in WebKit (Safari Technology Preview Release 18) is affected by CVE-2016-10226. The vulnerability arises from mishandling in operatorString, leading to a bitfield out-of-bounds read and an application crash, exposed via WebKit files: assembler/MacroAssemblerARM64.h, assembler/Macro...

Mapbox Dev Preview - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Mapbox Dev Preview published at the 'play' market has multiple vulnerabilities...

Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2017-04607)

Revive Adserver is an open source advertising management system from the Revive Adserver team. The system provides ad placement, ad space management, data statistics and other functions. A cross-site scripting vulnerability exists in the affiliate-preview.php file in www/admin in versions prior t...

Apple Safari - Out-of-Bounds Read when Calling Bound Function

Apple Safari - Out-of-Bounds Read when Calling Bound Function var ba; function s alert"in s"; ba = this; function g alert"in g"; return...

March 2017 Preview of the Quality Rollup for the .NET Framework 3.5.1, 4.5.2 and 4.6 on Windows 7 and Windows Server 2008 R2 SP1 (KB 3216523): March 21, 2017

March 2017 Preview of the Quality Rollup for the .NET Framework 3.5.1, 4.5.2 and 4.6 on Windows 7 and Windows Server 2008 R2 SP1 KB 3216523: March 21, 2017 Introduction The March 2017 Preview of the Monthly Quality Rollup for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1...

Mozilla Firefox MFSA Print Preview Spoofing Vulnerability

Mozilla Firefox is an open source web browser. A security vulnerability exists in Mozilla Firefox. If pop-up windows are enabled, a malicious website may spoof the contents of the print preview window, causing users to confuse the currently loaded site...

Windows Graphics Component Remote Code Execution Vulnerability

A remote code execution vulnerability exists due to the way the Windows Graphics Component handles objects in memory. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or creat...

MS17-014: Description of the security update for Word 2016: March 14, 2017

None None...

HackerOne: IE 11 Self-XSS on Jira Integration Preview Base Link

I wasn't sure if you would accept this report due to it being Self-XSS, but I figured it might be useful information because it breaks one of the flows used to validate URLs. Steps ==================== 1. Launch IE 11 2. Log into a HackerOne account that has admin on a program. 3. Go to the...

Mozilla Firefox Security Advisories (MFSA2017-05, MFSA2017-07) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

CVE-2017-5421

A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox 52 and Thunderbird 52...

UBUNTU-CVE-2017-5421

A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox 52 and Thunderbird 52...

LibreOffice Calc And Writer File Disclosure Vulnerability - Windows

LibreOffice is prone to arbitrary file disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Komodo Edit 9.2 / 9.3 Buffer Overflow

ActiveState komodoEdit9.2/9.3 preview browser buffer ''' go to preview browser preview with another file or url -payload- preview using In a komodo tab ''' Author: sultan albalawi video:https://www.facebook.com/pentest3/videos/vb.100012552940568/261386070956489/?type=2&theater Tested on:win7 from...