1926 matches found
Google Chrome memory misreference vulnerability (CNVD-2015-03352)
Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in versions of Google Chrome prior to 43.0.2357.65. Allows remote attackers to launch a denial of service attack by exploiting the audio stop action...
Multiple Cross-Site Request Forgery Vulnerabilities in Landesk Management Suite
LANDESK Management Suite is a set of IT systems management solutions from the U.S. company LANDESK. A cross-site request forgery vulnerability exists in LANDESK Management Suite 9, which allows remote attackers to construct malicious URIs, trick users into parsing them, and perform malicious...
JVN#71903938: bBlog vulnerable to cross-site request forgery
bBlog is weblog software. bBlog contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Do not use bBlog bBlog is no longer being developed or maintained. It is recommended to stop using...
WebGate WinRDS WESPPlayback.WESPPlaybackCtrl.1 Control Stack Buffer Overflow Vulnerability
WebGate WinRDS is a set of high-definition IP camera and DVR storage management software from Webgate Korea. A stack buffer overflow vulnerability exists in the WESPPlayback.WESPPlaybackCtrl.1 control of WebGate WinRDS. A remote attacker can pass 'PrintSiteImage', 'PlaySiteAllChannel',...
CVE-2015-2094
Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via unspecified vectors to the 1 PrintSiteImage, 2 PlaySiteAllChannel, 3 StopSiteAllChannel, or 4 SaveSiteImage function...
JVN#98097877: "Omake BBS" of i-HTTPD vulnerable to cross-site scripting
i-HTTPD is a web server for Windows. i-HTTPD contains "Omake BBS". "Omake BBS" contains a flaw in processing input character string, which may result in a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use...
Windows Services Stop
If the Windows services got started manually by a VT then stop those services at the end of a scan. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Information disclosure
The Stop Headaches and Migraines aka com.StopHeadachesandMigraines application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7108
The CVE-2014-7108 entry concerns the Android app Stop Headaches and Migraines (com.StopHeadachesandMigraines) version 1.2, which does not verify X.509 certificates when establishing SSL connections. This misconfiguration enables man-in-the-middle attackers to spoof SSL servers and obtain sensitiv...
Information disclosure
The WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not properly recognize Stop Sharing actions for videos in IFRAME elements, which allows remote attackers to obtain sensitive informati...
chromium: multiple security fixes in Chrome 38.0.2125.101
The wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 38.0.2125.101, has an erroneous fallback outcome for wrapper-selection failures, which allows remote attackers to cause a denial of service via vectors that trigger stopping...
CVE-2014-1585
The WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not properly recognize Stop Sharing actions for videos in IFRAME elements, which allows remote attackers to obtain sensitive informati...
UBUNTU-CVE-2014-1585
The WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not properly recognize Stop Sharing actions for videos in IFRAME elements, which allows remote attackers to obtain sensitive informati...
CVE-2014-5931
The Stop & Shop SCAN IT! Mobile aka com.modivmedia.scanitss application 7.21.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Stop & Shop SCAN IT! Mobile aka com.modivmedia.scanitss application 7.21.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5931
The Stop & Shop SCAN IT! Mobile aka com.modivmedia.scanitss application 7.21.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5931
The CVE-2014-5931 issue affects the Stop & Shop SCAN IT! Mobile Android app (package com.modivmedia.scanitss) version 7.21.00. The root cause is that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive inform...
Siemens Simatic S7-1200 CPU START/STOP Module
No description provided by source...
Microsoft Internet Explorer 6.0 Href Title Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18820/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because of an error in processing an HTML 'href' tag with a very large title. An attacker can exploit this vulnerability to cause the...