Multiple Vulnerabilities in Google Chrome and Chrome OS

Google Chrome and Chrome OS are both products of Google Inc. Google Chrome is a Web browser.Google Chrome OS is a fast, lightweight, open source Web-based operating system. Multiple vulnerabilities exist in Google Chrome versions prior to 57.0.2987.133 and Chrome OS versions prior to 57.0.2987.13...

UBUNTU-CVE-2013-7454

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via nested forbidden strings...

LibVNCServer heap buffer overflow vulnerability (CNVD-2017-00065)

LibVNCServer is cross-platform C library. A heap buffer overflow vulnerability exists in versions of LibVNCServer prior to 0.9.11 that can be exploited by an attacker to execute arbitrary code within the context of an application. Failure to exploit could result in a denial of service condition...

w3m denial of service vulnerability (CNVD-2016-13127)

w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-33. A remote attacker can exploit this vulnerability to cause a denial of service segmentation error and crash with the help of specially crafted HTML pages...

Pivotal Greenplum Arbitrary Command Injection Vulnerability

Pivotal Greenplum is the U.S. Pivotal Software's set of open source parallel data warehouse , it provides a petabyte-scale data volume of fast query and analysis and other functions . A security vulnerability exists in Pivotal Greenplum versions prior to 4.3.10.0. An attacker can exploit the...

Moxa SoftCMS Input Validation Vulnerability

Moxa SoftCMS is a set of centralized management software for large-scale surveillance systems developed by Moxa. The software supports real-time video surveillance, video playback and event management. An input validation vulnerability exists in versions of Moxa SoftCMS prior to 1.6. An attacker...

CVE-2016-8278

Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote attackers to cause a denial of service device restart via an unspecified URL...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-07215)

Google Chrome is a web browser developed by the American company Google Google. An arbitrary code execution vulnerability exists in versions of Google Chrome prior to 53.0.2785.89. An attacker can exploit this vulnerability to execute arbitrary code in the context of the browser, bypass security...

NetApp OnCommand System Manager Denial of Service Vulnerability

NetApp OnCommand System Manager is a suite of storage management tools from NetApp, USA. The tool supports simplifying, controlling, and automating the setup and ongoing management of NetApp storage systems. A denial of service vulnerability exists in versions of NetApp OnCommand System Manager...

INSIDE Secure MatrixSSL Information Disclosure Vulnerability

INSIDE Secure MatrixSSL is an embedded, open source SSLv3 stack from INSIDE Secure, France, designed for small applications and devices. An information disclosure vulnerability exists in versions of INSIDE Secure MatrixSSL prior to 3.8.3. An attacker could exploit this vulnerability to conduct a...

IBM TRIRIGA Application Platform Unauthorized Access Vulnerability

IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. An unauthorized access vulnerability exists in versions of IBM TRIRIGA Application Platform prior to 3.3.2, which could be exploited by an attacker to obtain sensiti...

Cisco Prime Collaboration Deployment SQL Injection Vulnerability

Cisco Prime Collaboration Deployment is a suite of software for managing Unified Communications UC applications from the U.S. company Cisco Cisco. A SQL injection vulnerability exists in Cisco Prime Collaboration Deployment using software versions prior to 11.5.1. A remote attacker could exploit...

PT-2016-5366 · Apache · Apache Qpid Java

Name of the Vulnerable Software and Affected Versions: Apache Qpid Java versions prior to 6.0.3 Description: The issue allows remote attackers to cause a denial of service, leading to broker termination, via a crafted authentication attempt. This occurs when the broker is configured to allow...

Google Chrome < 50.0.2661.94 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 50.0.2661.94. It is, therefore, affected by multiple vulnerabilities as referenced in the 201604stable-channel-update28 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers...

DotCMS Workflow Screen SQL Injection Vulnerability

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A SQL injection vulnerability exists in Workflow Screen in DotCMS versions prior to 3.3.2. A remote attacker ca...

WordPress WP Favorite Posts Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.WP Favorite Posts is one of the post collection plugin. A cross-site scripting vulnerability exists in WordPress WP...

chromium-browser: same-origin bypass in DOM

The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to FrameLoader.cpp,...

Google Chrome Instant Feature Security Restriction Bypass Vulnerability

Google Chrome is a web browsing tool developed by Google. A security vulnerability exists in versions prior to Google Chrome 48.0.2564.109 due to the Chrome Instant feature not ensuring that NTP navigation targets are in the most frequently viewed or suggested list. A remote attacker can exploit...

Ruby colorscore gem arbitrary code execution vulnerability

Ruby is a cross-platform, object-oriented, dynamically-typed programming language developed by Japanese software developer Yukihiro Matsumoto. colorscore gem is one of the libraries used to distinguish colors. A security vulnerability exists in the 'initialize' method of the Histogram class in th...

UBUNTU-CVE-2015-6768

The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6770...