Microsoft Edge CVE-2017-8639 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...

[SECURITY] Fedora 24 Update: php-5.6.31-1.fc24

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

[SECURITY] Fedora 25 Update: php-7.0.21-1.fc25

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

CVE-2016-5893

IBM Sterling B2B Integrator Standard Edition 5.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 115336...

Code injection

IBM Sterling B2B Integrator Standard Edition 5.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 115336...

CVE-2016-5893

IBM Sterling B2B Integrator Standard Edition 5.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 115336...

IBM Sterling B2B Integrator Local Information Disclosure Vulnerability (CNVD-2017-11332)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A security vulnerability exists in IBM Sterling B2B Integrato...

OpenVPN Access Server CRLF Injection Vulnerability

OpenVPN is a software package from the American company OpenVPN for creating encrypted tunnels for virtual private networks VPNs that use the OpenSSL library to encrypt data and control information.OpenVPN Access Server is a commercial paid version of OpenVPN. OpenVPN Access Server suffers from a...

CVE-2017-7909

A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access...

The vulnerability of Safari browser and iOS operating system allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...

Apple iOS webkit memory corruption vulnerability (CNVD-2017-05608)

Apple iOS is an operating system for Apple smart devices. A memory corruption vulnerability exists in Webkit used by Apple iOS, which allows attackers to exploit the vulnerability to build malicious web pages that can be clicked on by users, which can crash the application or execute arbitrary co...

Nagios Cross-Site Scripting Vulnerability

Nagios is a free and open source computer software application for monitoring systems, networks and infrastructure. Nagios suffers from a cross-site scripting vulnerability. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Google Chrome ANGLE Memory Misreference Vulnerability

Google Chrome is a popular web browser. A memory misreference vulnerability exists in Google Chrome ANGLE, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by the user, which can crash the application or execute arbitrary cod...

Google Chrome PDFium memory misreference vulnerability (CNVD-2017-04436)

Google Chrome is a popular web browser. A memory misreference vulnerability exists in Google Chrome PDFium, which allows remote attackers to exploit the vulnerability to build malicious web pages that can be tricked into being parsed by the user, which can crash the application or execute arbitra...

CVE-2017-0022

Microsoft XML Core Services MSXML in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory, allowing attackers to test for...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2017-03591)

Microsoft Internet Explorer is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. Microsoft Internet Explorer suffers from a cz scripting engine memory corruption vulnerability. An attacker exploiting this vulnerabili...

Google Chrome memory misreference vulnerability (CNVD-2017-03345)

Google Chrome is a popular web browser. A memory misreference vulnerability exists in Google Chrome PDFium, which allows remote attackers to exploit the vulnerability to build malicious web pages that can be tricked into being parsed by the user, which can crash the application or execute arbitra...

CVE-2017-3840

CVE-2017-3840 is a open redirect vulnerability in the web interface of Cisco Secure Access Control System (ACS). An unauthenticated remote attacker could cause a user to be redirected to a malicious URL due to improper input validation of HTTP parameters. The issue affects Cisco ACS and is docume...

Google Chrome Blink Generic Cross-Site Scripting Vulnerability

Google Chrome is a popular web browser. A generic cross-site scripting vulnerability exists in Google Chrome Blink, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by a user and can be used to execute arbitrary code...

Google Chrome V8 Heap Overflow Vulnerability

Google Chrome is a popular web browser. Google Chrome V8 suffers from a heap overflow vulnerability that allows remote attackers to build malicious WEB pages that can be exploited to trick users into parsing them, which can crash applications or execute arbitrary code...