chromium-browser: type confusion in blink

The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows remote attackers to cause a denial of service or possibly ha...

CVE-2016-5161

The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows remote attackers to cause a denial of service or possibly ha...

Adobe Flash - Transform.colorTranform Getter Infomation Leak

Adobe Flash - Transform.colorTranform Getter Infomation Leak Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=845 There is an info leak in the Transform.colorTranform getter. If the constructor for ColorTransform is overwritten with a getter using addProperty, this getter will...

Fixed in Apache Tomcat 9.0.0.M10

Low: Unrestricted Access to Global Resources CVE-2016-6797 The ResourceLinkFactory did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether...

Fixed in Apache Tomcat 8.5.5 and 8.0.37

Low: Unrestricted Access to Global Resources CVE-2016-6797 The ResourceLinkFactory did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether...

UBUNTU-CVE-2016-5161

The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows remote attackers to cause a denial of service or possibly ha...

kotnamur.be XSS vulnerability

Vulnerable URL: http://www.kotnamur.be/immobilier.asp?page=1004"=GrWdBtBK1eitW3CzBmt835PDobj2Bl6ZMa4KrgOp=recherche=ouibien=343=ALLOFF Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

Adobe Flash - Stage.align Setter Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=838 There is a use-after-free in the Stage.align property setter. When the setter is called, the parameter is converted to a string early, as a part of the new use-after-free prevention changes. This conversion can invoke script,...

On the Chrome V8 engine“BadKernel”vulnerability briefings-vulnerability warning-the black bar safety net

! Recently, the national information security vulnerabilities library CNNVD received 3 6 0 mobile Guard Alpha team on the Chrome V8 engine“BadKernel”vulnerability is the case of the message send. The vulnerability exists in the Chrome V8 engine of the previous versions, a remote attacker can use...

CVE-2016-5145: Undefined Security Weakness

Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code...

UBUNTU-CVE-2016-6491

Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service out-of-bounds read, memory leak, and crash via a crafted image...

culturalproperty.state.gov XSS vulnerability

Vulnerable URL: http://culturalproperty.state.gov/importrestrictions/pages/search.php?search=country:Bolivia%3Csvg%20onload=prompt%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 22:41 GMT Vulnerability type:| XSS...

The vulnerability of the ABB PCM600 control and configuration device allows a intruder to access information related to user account data.

The vulnerability of the ABB PCM600 control and configuration device lies in the way authentication information is stored in a database, in the form of hexadecimal ASCII values. Exploiting this vulnerability could allow an attacker, operating locally, to gain access to information about user...

Adobe Flash - LMZA Property Decoding Heap Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=790 Loading the attached image causes heap corruption due to LMZA property decoding. To reproduce the issue, load the attach file '6' using LoadImage.swf as follows: LoadImage.swf?img=6 The issue sometimes takes multiple refreshes ...

Adobe Flash - LMZA Property Decoding Heap Corruption

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=790 Loading the attached image causes heap corruption due to LMZA property decoding. To reproduce the issue, load the attach file '6' using LoadImage.swf as follows:...

The vulnerability of WebLogic Server’s software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability exists in Apache Commons BeanUtils, within the commons-beanutils library, due to the possibility of accessing class properties. Exploiting this vulnerability allows malicious actors to “control” the ClassLoader and execute arbitrary code using the class parameter. For example,...

The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the PropertyProvider::FindJustificationRange function in Mozilla Firefox allows malicious actors operating remotely to execute arbitrary code or cause a denial-of-service attack reading beyond the boundaries of the system...

Vulnerability of PHP software, allowing a malicious actor to compromise the accessibility of protected information

A vulnerability exists in the cdfreadpropertyinfo function of the Fileinfo component’s file in PHP, due to improper flow control. Exploitation of this vulnerability allows malicious actors to cause a service failure abnormal termination of the application by using specially crafted CDF files...

The vulnerability of Google Chrome’s browser allows a malicious actor to circumvent access restrictions.

The Google Chrome browser contains a vulnerability related to improper handling of internationalization metadata. Exploiting this vulnerability allows malicious actors to bypass access restrictions by using “type mixing” and viewing property information. The vulnerability is associated with the...

CVE-2016-1606

Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via 1 the NetworkName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, 2 the CPName property value to...