Cisco Headend Digital Broadband Delivery System Cross-Site Request Forgery Vulnerability

A vulnerability in Cisco Headend Digital Broadband Delivery could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attacks on the affected device. The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker...

JVN#51176150: ZenPhoto20 vulnerable to cross-site scripting

ZenPhoto20 is a content management system CMS. ZenPhoto20 contains a cross-site scripting vulnerability CWE-79 due to a flaw in processing encoded user-supplied input. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version...

JVN#68452022: Zenphoto vulnerable to cross-site scripting

Zenphoto is a content management system CMS. Zenphoto contains a cross-site scripting vulnerability CWE-79 due to a flaw in processing encoded user-supplied input. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version...

[SECURITY] Fedora 22 Update: firefox-38.0-4.fc22

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

RHEL 6 : chromium-browser (RHSA-2015:1023)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1023 advisory. Chromium is an open-source web browser, powered by WebKit Blink. Several flaws were found in the processing of malformed web content. A web...

Cisco Prime Central for HCS Multiple Cross-Site Request Forgery Vulnerabilities

Multiple cross-site request forgery CSRF vulnerabilities in the Cisco Prime Central for HCS PC4HCS application could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerabilities are due to a lack of CSRF protections by an affected device. An attacker could exploit...

Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability

A vulnerability in Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on the affected device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability...

[SECURITY] Fedora 20 Update: firefox-38.0-4.fc20

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Cisco Unified Customer Voice Portal Cross-Site Request Forgery Vulnerability

A vulnerability in Cisco Unified Customer Voice Portal CVP could allow an unauthenticated, remote attacker to conduct cross-site request forgery CSRF attacks. The vulnerability is due to insufficient CSRF protections on an affected system. An attacker could exploit this vulnerability by persuadin...

[SECURITY] Fedora 21 Update: firefox-38.0-4.fc21

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

firefox security update

CentOS Errata and Security Advisory CESA-2015:0988 Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS bas...

RHEL 5 / 6 : flash-plugin (RHSA-2015:1005)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1005 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

[SECURITY] Fedora 20 Update: firefox-37.0.2-1.fc20

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Opera Web Browser Detection

Binary data 8765.prm...

[SECURITY] [DSA 3242-1] chromium-browser security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3242-1 [email protected] http://www.debian.org/security/ Michael Gilbert April 30, 2015 http://www.debian.org/security/faq -...

Debian DSA-3248-1 : libphp-snoopy - security update

It was discovered that missing input saniting in Snoopy, a PHP class that simulates a web browser may result in the execution of arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Debian Security Advisory DSA 3248-1 (libphp-snoopy - security update)

It was discovered that missing input saniting in Snoopy, a PHP class that simulates a web browser may result in the execution of arbitrary commands. OpenVAS Vulnerability Test $Id: deb3248.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3248-1 using nvtgen 1.0 Script...

[SECURITY] [DSA 3242-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3242-1 [email protected] http://www.debian.org/security/ Michael Gilbert April 30, 2015 http://www.debian.org/security/faq -...

RHEL 6 : chromium-browser (RHSA-2015:0921)

Updated chromium-browser packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give...