1326 matches found
[SECURITY] Fedora 23 Update: moin-1.9.9-1.fc23
MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...
[SECURITY] Fedora 24 Update: moin-1.9.9-1.fc24
MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...
Session fixation
IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by reading cached web pages from a different user's session...
Cross-site scripting vulnerability in Wordpress plugin 56com video upload page
WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Wordpress plugin 56com Video Upload. The program fails to filter user-supplied input, allowing an attacker to fra...
Microsoft Edge 11.0.10240.16384 - edgehtml CAttrArray::Destroy Use-After-Free
Microsoft Edge 11.0.10240.16384 - edgehtml CAttrArray::Destroy Use-After-Free Alternatively: Description When an element is created and style properties are added, these are stored in a CAttrArray object. A new CAttrArray is able to store up to 8 properties. If more properties need to be store...
Microsoft Browser Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Microsoft browser XSS filter is abused to leak sensitive page information. An attacker who successfully exploited the vulnerability could obtain sensitive information from certain web pages. To exploit the vulnerability, an attacker would ha...
chromium-browser: heap overflow in blink
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption via crafted HTML pages...
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2016-09651)
Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10. A security vulnerability in Microsoft Internet Explorer's scripting engine that fails to properly handle objects in memory allows remote attackers to exploit the vulnerability to build...
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CNVD-2016-09650)
Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. An information disclosure vulnerability exists in Microsoft Internet Explorer and Edge that...
The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.
The vulnerability of the libxslt component in Mac OS X and iOS operating systems arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure memory corruption by using a...
Microsoft Internet Explorer and Edge Elevation of Privilege Vulnerability
Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists in Microsoft Internet Explorer and Edge that fails to properly protect private namespaces, which...
Cisco Unified Intelligence Center (CUIC) Software Unauthenticated User Account Creation Vulnerability
A vulnerability in the jspringsecurityswitchuser function of Cisco Unified Intelligence Center CUIC Software could allow an unauthenticated, remote attacker to make certain changes to the system. The vulnerability is due to improper implementation of authorization controls when accessing certain...
[SECURITY] Fedora 23 Update: php-5.6.26-1.fc23
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
Mozilla Firefox and Firefox ESR 'nsRefreshDriver::Tick' function memory misreference vulnerability
Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability in the Mozilla Firefox and Firefox ESR 'nsRefreshDriver::Tick' function allows remote attackers to build malicious WEB pages that can be exploited to trick a...
[SECURITY] Fedora 24 Update: moin-1.9.8-1.fc24
MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...
Google Chrome < 53.0.2785.113 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 53.0.2785.113. It is, therefore, affected by multiple vulnerabilities as referenced in the 201609stable-channel-update-for-desktop13 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113...
Google Chrome < 53.0.2785.113 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 53.0.2785.113. It is, therefore, affected by multiple vulnerabilities as referenced in the 201609stable-channel-update-for-desktop13 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113...
Fortinet FortiWAN Information Disclosure Vulnerability (CNVD-2016-07347)
Fortinet FortiWAN is a WAN link load balancing product developed by Fortinet. An information disclosure vulnerability exists in Fortinet FortiWAN. An attacker can exploit this vulnerability by accessing the URL /script/cfgshow.php page to obtain a backup file of the device configuration, or by...
[SECURITY] Fedora 24 Update: rubygem-actionview-4.2.5.2-3.fc24
Simple, battle-tested conventions and helpers for building web pages...
Vulnerability of browsers Internet Explorer and Microsoft Edge, allowing a perpetrator to execute arbitrary code
The vulnerabilities of Internet Explorer and Microsoft Edge are caused by buffer overflows. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code through a specially crafted web page...