CVE-2017-0022

Microsoft XML Core Services MSXML in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory, allowing attackers to test for...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2017-03591)

Microsoft Internet Explorer is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. Microsoft Internet Explorer suffers from a cz scripting engine memory corruption vulnerability. An attacker exploiting this vulnerabili...

Google Chrome memory misreference vulnerability (CNVD-2017-03345)

Google Chrome is a popular web browser. A memory misreference vulnerability exists in Google Chrome PDFium, which allows remote attackers to exploit the vulnerability to build malicious web pages that can be tricked into being parsed by the user, which can crash the application or execute arbitra...

CVE-2017-3840

CVE-2017-3840 is a open redirect vulnerability in the web interface of Cisco Secure Access Control System (ACS). An unauthenticated remote attacker could cause a user to be redirected to a malicious URL due to improper input validation of HTTP parameters. The issue affects Cisco ACS and is docume...

Google Chrome Omnibox Address Forgery Vulnerability (CNVD-2017-02098)

Google Chrome is a popular web browser. An address forgery vulnerability exists in Google Chrome Omnibox, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing and can deceive users...

Google Chrome V8 Heap Overflow Vulnerability

Google Chrome is a popular web browser. Google Chrome V8 suffers from a heap overflow vulnerability that allows remote attackers to build malicious WEB pages that can be exploited to trick users into parsing them, which can crash applications or execute arbitrary code...

Google Chrome blink ui forgery vulnerability

Google Chrome is a popular web browser. Google Chrome blink suffers from a ui forgery vulnerability that allows remote attackers to build malicious WEB pages that can be exploited to trick users into parsing, which can deceive them...

Google Chrome Blink Generic Cross-Site Scripting Vulnerability

Google Chrome is a popular web browser. A generic cross-site scripting vulnerability exists in Google Chrome Blink, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by a user and can be used to execute arbitrary code...

Suspicious Malvertising Redirection

Campaigns of malvertising, redirecting to malicious web pages, have been identified. Successful exploitation could result in remote code execution on the target system once the malicious page is loaded...

Apple Safari WebKit Memory Corruption Vulnerability (CNVD-2017-01634)

Apple Safari is a web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems.WebKit is a set of open source web browser engines developed by the KDE community. A memory corruption vulnerability exists in Apple Safari WebKit, which can be exploite...

CVE-2016-9371

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPor...

CVE-2016-6097

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by another user on the system...

CVE-2016-6097

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by another user on the system...

Information disclosure

IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system...

CVE-2016-5938

IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system...

CVE-2016-0217

CVE-2016-0217 is a stored cross-site scripting vulnerability in IBM Cognos Business Intelligence and IBM Cognos Analytics caused by improper validation of user input. A remote attacker could inject malicious script into a page viewed by an authenticated user, potentially stealing cookie-based cre...

CVE-2016-8981

IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system...

CVE-2016-3024

IBM Security Access Manager for Web allows web pages to be stored locally which can be read by another user on the system...

CVE-2016-3024

IBM Security Access Manager for Web allows web pages to be stored locally which can be read by another user on the system...

Vulnerability of browsers Internet Explorer and Microsoft Edge, allowing attackers to inject arbitrary Web or HTML code

The vulnerabilities of Internet Explorer and Microsoft Edge exist due to the lack of measures taken to protect the structure of web pages. Exploiting these vulnerabilities allows a malicious actor to inject arbitrary Web or HTML code using undefined vectors...