1331 matches found
Reflective Cross-site Scripting Vulnerability in S-CMS Enterprise Website Builder System
S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A reflective cross-site scripting vulnerability exists in S-CMS. Due to insufficient filtering of user input, the program allows attackers to construct malicious web pages and induce users to parse and...
The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to trigger service failures or execute arbitrary code.
The vulnerabilities of Internet Explorer and Microsoft Edge are caused by operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause a service failure memory corruption through a specially crafted web pag...
CVE-2016-5181
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks while the DOM was in an inconsistent state, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via crafted HTML pages...
CVE-2016-5185
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly allowed reentrance of FrameView::updateLifecyclePhasesInternal, which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages...
The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to trigger service failures or execute arbitrary code.
The vulnerabilities of Internet Explorer and Microsoft Edge are caused by operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause a service failure memory corruption through a specially crafted web pag...
Cisco Unified Communications Manager IM and Presence Service Information Disclosure Vulnerability
A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be...
[SECURITY] Fedora 23 Update: moin-1.9.9-1.fc23
MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...
[SECURITY] Fedora 24 Update: moin-1.9.9-1.fc24
MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...
Session fixation
IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by reading cached web pages from a different user's session...
Cross-site scripting vulnerability in Wordpress plugin 56com video upload page
WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Wordpress plugin 56com Video Upload. The program fails to filter user-supplied input, allowing an attacker to fra...
Microsoft Edge 11.0.10240.16384 - edgehtml CAttrArray::Destroy Use-After-Free
Microsoft Edge 11.0.10240.16384 - edgehtml CAttrArray::Destroy Use-After-Free Alternatively: Description When an element is created and style properties are added, these are stored in a CAttrArray object. A new CAttrArray is able to store up to 8 properties. If more properties need to be store...
Microsoft Browser Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Microsoft browser XSS filter is abused to leak sensitive page information. An attacker who successfully exploited the vulnerability could obtain sensitive information from certain web pages. To exploit the vulnerability, an attacker would ha...
chromium-browser: heap overflow in blink
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption via crafted HTML pages...
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2016-09651)
Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10. A security vulnerability in Microsoft Internet Explorer's scripting engine that fails to properly handle objects in memory allows remote attackers to exploit the vulnerability to build...
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CNVD-2016-09650)
Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. An information disclosure vulnerability exists in Microsoft Internet Explorer and Edge that...
The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.
The vulnerability of the libxslt component in Mac OS X and iOS operating systems arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure memory corruption by using a...
Microsoft Internet Explorer and Edge Elevation of Privilege Vulnerability
Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists in Microsoft Internet Explorer and Edge that fails to properly protect private namespaces, which...
Cisco Unified Intelligence Center (CUIC) Software Unauthenticated User Account Creation Vulnerability
A vulnerability in the jspringsecurityswitchuser function of Cisco Unified Intelligence Center CUIC Software could allow an unauthenticated, remote attacker to make certain changes to the system. The vulnerability is due to improper implementation of authorization controls when accessing certain...
[SECURITY] Fedora 23 Update: php-5.6.26-1.fc23
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
Mozilla Firefox and Firefox ESR 'nsRefreshDriver::Tick' function memory misreference vulnerability
Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability in the Mozilla Firefox and Firefox ESR 'nsRefreshDriver::Tick' function allows remote attackers to build malicious WEB pages that can be exploited to trick a...