Debian Security Advisory DSA 2939-1 (chromium-browser - security update)

Several vulnerabilities were discovered in the chromium web browser. CVE-2014-1743 cloudfuzzer discovered a use-after-free issue in the Blink/Webkit document object model implementation. CVE-2014-1744 Aaron Staple discovered an integer overflow issue in audio input handling. CVE-2014-1745 Atte...

Debian: Security Advisory (DSA-2939-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Better Security, 'Progressive Encryption' in Silent Text 2.0

Silent Circle has released a new version of its private text messaging and secure file transfer service for Android and iOS mobile devices. Silent Text 2.0 includes a number of security and user-interface upgrades. The company claims this version eliminates a keying delay issue that existed in...

KLA10007 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome 34.0.1847.137 and earlier. Malicious can use these vulnerabilities to cause denial of service, spoof UI or possibly other impact. Below is a complete list of vulnerabilities 1. use-after-free in StyleElement::removedFromDocument...

KLA10014 Multiple SUI vulnerabilities in Opera

Multiple low severity vulnerabilities have been found in Opera versions 21 and earlier. Malicious users can exploit these vulnerabilities to spoof user interface. Vectors related to the address bar can be exploited to fool some users via user interface spoofing. Original advisories Opera blog...

Improving the URL bar

iOS has hidden the pathname of URLs for some time now, but recently Chrome Canary introduced something similar behind a flag. I'm not involved in the development of Chrome experiment at all, but I've got more than 140 characters worth of opinion on it… We have a real security problem I recently...

McAfee VirusScan Enterprise for Linux User Interface Detection

Binary data mcafeevseldetecthttp.nbin...

KLA10121 SUI vulnerability in Mozilla Firefox

Unspecified vulnerability was found in the Mozilla Firefox. By exploiting this vulnerability malicious users can spoof the address bar. This vulnerability can be exploited remotely at a point related to DOM events via a specially designed JS. Original advisories MFSA Related products...

CVE-2014-2454

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via unknown vectors related to User Interface...

CVE-2014-2455

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to User Interface...

CVE-2014-2453

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to User Interface...

Design/Logic Flaw

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to User Interface...

Design/Logic Flaw

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via unknown vectors related to User Interface...

CVE-2014-2455

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to User Interface...

CVE-2014-2453

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to User Interface...

CVE-2014-2454

CVE-2014-2454 is an unspecified vulnerability in the Hyperion Common Admin component of Oracle Hyperion 11.1.2.2/11.1.2.3. The available documents identify that remote attackers could affect confidentiality via unknown vectors related to the User Interface. The NVD entry provides a Network attack...

CVE-2014-2453

CVE-2014-2453 concerns an unspecified vulnerability in the Hyperion Common Admin component of Oracle Hyperion 11.1.2.2 and 11.1.2.3 that could allow remote attackers to affect integrity via unknown vectors related to the User Interface. The available connected sources confirm the affected product...

CVE-2014-2455

Technical details for CVE-2014-2455 are not publicly available in the provided documents. Monitor for updates from official advisories; no specific affected product versions, root cause, or remediation are disclosed here.

CVE-2014-2454

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via unknown vectors related to User Interface...

Fortinet FortiOS User Interface Default Credentials

The remote Fortinet FortiOS user interface uses a known set of default credentials. Knowing these, an attacker with access to the service can gain administrative access to the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...