375 matches found
CVE-2016-1443
The virtual network stack on Cisco AMP Threat Grid Appliance devices before 2.1.1 allows remote attackers to bypass a sandbox protection mechanism, and consequently obtain sensitive interprocess information or modify interprocess data, via a crafted malware sample...
CVE-2016-1443
CVE-2016-1443 affects Cisco AMP Threat Grid Appliance before 2.1.1. The vulnerability lies in the virtual network stack, allowing an unauthenticated remote attacker to bypass sandboxing via a crafted malware sample and to obtain or modify interprocess data. Cisco’s advisory confirms exploitation ...
PT-2016-4792
Name of the Vulnerable Software and Affected Versions Cisco AMP Threat Grid Appliance versions prior to 2.1.1 Description The issue allows remote attackers to bypass a sandbox protection mechanism, and consequently obtain sensitive interprocess information or modify interprocess data, via a craft...
CVE-2016-0363
The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 6.0.16.25, 6 R1 before SR8 FP25 6.1.8.25, 7 before SR9 FP40 7.0.9.40, 7 R1 before SR3 FP40 7.1.3.40, and 8 before SR3 8.0.3.0 uses the invoke method of the java.lang.reflect.Method class in an...
Design/Logic Flaw
The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 6.0.16.25, 6 R1 before SR8 FP25 6.1.8.25, 7 before SR9 FP40 7.0.9.40, 7 R1 before SR3 FP40 7.1.3.40, and 8 before SR3 8.0.3.0 uses the invoke method of the java.lang.reflect.Method class in an...
CVE-2016-0363
The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 6.0.16.25, 6 R1 before SR8 FP25 6.1.8.25, 7 before SR9 FP40 7.0.9.40, 7 R1 before SR3 FP40 7.1.3.40, and 8 before SR3 8.0.3.0 uses the invoke method of the java.lang.reflect.Method class in an...
CVE-2016-0376
The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 6.0.16.25, 6 R1 before SR8 FP25 6.1.8.25, 7 before SR9 FP40 7.0.9.40, 7 R1 before SR3 FP40 7.1.3.40, and 8 before SR3 8.0.3.0 does not properly deserialize classes in an AccessController...
Ubuntu 14.04 LTS : Oxide vulnerability (USN-2905-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2905-1 advisory. A security issue was discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypas...
Ubuntu: Security Advisory (USN-2905-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2905-1: Oxide vulnerability
A security issue was discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same-origin restrictions or a sandbox protection mechanism. CVE-2016-1629...
Google Chrome Security Restriction Bypass Vulnerability
Google Chrome is a web browsing tool developed by Google. A security vulnerability exists in Google Chrome versions prior to 48.0.2564.116. A remote attacker can exploit this vulnerability to bypass the Blink same-origin policy and the sandbox protection mechanism...
CVE-2016-1629
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors...
Design/Logic Flaw
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors...
CVE-2016-1629
Google Chrome before 48.0.2564.116 is affected by CVE-2016-1629, a vulnerability in the Blink/Same Origin Policy and sandbox where a remote attacker could bypass SOP and escape the sandbox via unspecified vectors. The issue is mitigated by upgrading to Chrome 48.0.2564.116 or later (as reflected ...
CVE-2016-1629
Removed by vendor...
CVE-2016-1629: Undefined Security Weakness
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors...
CVE-2016-1629
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors...
PT-2016-1287
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.116 Description The issue is related to the Blink engine in Google Chrome, which has an access control flaw. This flaw can be exploited by a remote attacker to bypass the Same Origin Policy and a sandb...
Google Chrome Security Bypass Vulnerability (Feb 2016) - Linux
Google Chrome is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...
Google Chrome Security Bypass Vulnerability (Feb 2016) - Mac OS X
Google Chrome is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...