Google Chrome Extension Subsystem Homology Policy Bypass Vulnerability

Google Chrome is a web browsing tool developed by Google. In versions prior to Google Chrome 51.0.2704.79, the extension subsystem does not properly restrict bound access and a same-origin policy bypass vulnerability exists, which can be exploited by remote attackers to bypass the same-origin...

Google Chrome browsing_data_remover.cc Spoofing Vulnerability

Google Chrome is a web browsing tool developed by Google. Google Chrome versions prior to 51.0.2704.63, browser/browsingdata/browsingdataremover.cc removes HPKP within Cache Cleanup, a spoofing vulnerability exists, which can be exploited by remote attackers to spoof websites...

Google Chrome Blink Same-Origin Policy Bypass Vulnerability (CNVD-2016-03780)

Blink is the United States Google Google Inc. and Norway Opens Opera Software company jointly developed a set of browser layout engine rendering engine. An ink same-origin policy bypass vulnerability exists in Blink in versions of Google Chrome prior to 51.0.2704.63. A remote attacker can exploit...

Google Chrome Same Origin Policy Bypass Vulnerability (CNVD-2016-03783)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the extended bindings of Google Chrome versions prior to 51.0.2704.63. A remote attacker can exploit the vulnerability to bypass the same-origin policy...

Google Go untrustworthy search path vulnerability

Google Go is a programming language optimized for programming applications on multiprocessor systems by Google. An untrusted search path vulnerability exists in Google Go versions prior to 1.5.4 and 1.6.1 prior to 1.6.x for Windows platforms. A local attacker can exploit this vulnerability to gai...

Botan weak encryption vulnerability

Botan is a C++ library of cryptographic algorithms that supports AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. A weak cryptographic vulnerability in the Miller-Rabin prime test in Botan versions prior to 1.10.8 and 1.11.x prior to 1.11.9 stems from the program failing to properly use a single...

Linux kernel denial of service vulnerability (CNVD-2016-02789)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the 'acmprobe' function in the drivers/usb/class/cdc-acm.c file in Linux kernel versions prior to 4.5.1. The vulnerability can be...

Google Chrome V8 LoadBuffer Denial of Service Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. Google V8 is one of the open source JavaScript engine. A security vulnerability exists in Google Chrome versions prior to 50.0.2661.75 in Google V8. A remote attacker can exploit this vulnerability to cause a denial...

CVE-2016-1169

Cross-site scripting XSS vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

HP Support Assistant Security Bypass Vulnerability

HP Support Assistant is a suite of solutions from Hewlett-Packard HP in the United States that provides support and other features for PCs and printers. A security vulnerability exists in HP Support Assistant versions prior to 8.1.52.1. A remote attacker could exploit the vulnerability to bypass...

DEBIAN-CVE-2016-0747

The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service worker process resource consumption via vectors related to arbitrary name resolution...

Google Chrome URL Forgery Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the 'CustomButton::AcceleratorPressed' function in the ui/views/controls/button/custombutton.cc file in Google Chrome versions prior to 48.0.2564.82. ' function in the...

CVE-2016-0935

Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via a crafted ExtGState dictionary...

DEBIAN-CVE-2015-8607

The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string...

IPTables-Parse 'IPTables/Parse.pm' Insecure Temporary File Creation Vulnerability

IPTables-Parse is a Perl extension for parsing iptables and ip6tables firewall rules. An insecure temporary file creation vulnerability exists in IPTables-Parse versions prior to 1.6. A local attacker can exploit this vulnerability to perform a symbolic link attack to overwrite arbitrary files in...

DEBIAN-CVE-2015-8395

PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and...

PCRE 'match' Function Information Disclosure Vulnerability

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A security vulnerability exists in the 'match' function in the pcreexec.c file in versions of PCRE prior to 8.37, which stems from the...

SolarWinds DameWare Mini Remote Control Stack Buffer Overflow Vulnerability

SolarWinds DameWare Mini Remote Control is a suite of remote control software for laptops and servers that provides remote desktop access and screen sharing capabilities. A stack buffer overflow vulnerability exists in the URI handler in the DWRCC.exe file in versions prior to SolarWinds DameWare...

HTML-Scrubber module cross-site scripting vulnerability

HTML-Scrubber module is a Perl extension module that can clean up HTML. A cross-site scripting vulnerability exists in versions of HTML-Scrubber module prior to 0.15. This allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

ownCloud Desktop Client Man-in-the-Middle Attack Vulnerability

The ownCloud Desktop Client is a desktop client for connecting to OwnCloud servers. A man-in-the-middle attack vulnerability exists in versions of ownCloud Desktop Client prior to 2.0.1. An attacker can perform a man-in-the-middle attack by exploiting the server with a self-signed certificate...