Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to trigger service failures or execute arbitrary code.

The vulnerabilities of Microsoft Edge and Internet Explorer are caused by buffer overflow attacks. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

Microsoft Internet Explorer CACPCache Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

Mozilla Firefox Local File Access Vulnerability

Mozilla Firefox is an open source web browser; Mozilla Firefox fails to properly restrict drag-and-drop operations on file: URIs, allowing remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing to access local files...

Mozilla Firefox Falsifies Location Bar Information Vulnerability

Mozilla Firefox is an open source web browser; A security vulnerability in Mozilla Firefox's handling of characters in the multimedia type of data: URL allows remote attackers to construct malicious WEB pages that can be tricked into parsing to spoof location bar information...

Apple iOS Spoofing Vulnerability

Apple iOS is an operating system developed for mobile devices. A security vulnerability exists in Safari on Apple iOS that can be exploited by remote attackers to construct malicious web pages that trick users into parsing a spoofed display URL...

spacewalk-java: Multiple XSS flaws

A stored cross-site scripting XSS flaw was found in the way spacewalk-java displayed group names. An attacker can embed HTML and Javascript in the values for group names in Satellite, allowing them to inject malicious content into the web page that is then displayed when viewing the snapshot data...

The vulnerability of the cgiPutts function on the CUPS printing server allows a hacker to inject any JavaScript or HTML code into the generated web interfaces.

The vulnerability in the cgiPutts function cgi-bin/template.c of the CUPS printing server is related to insufficient protection of the web page structure. Exploiting this vulnerability allows an attacker to inject arbitrary JavaScript or HTML code into the web pages generated by the system throug...

[SECURITY] Fedora 23 Update: php-5.6.23-1.fc23

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2016-04193)

Microsoft Edge is a browser that comes with win10. A memory corruption vulnerability exists in the way the Chakra JavaScript engine used by Microsoft Edge is rendered, allowing remote attackers to exploit the vulnerability to build special WEB pages that users are tricked into parsing, which can...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

Unspecified Vulnerability in Google Chrome ServiceWorker

Google Chrome is a popular web browser. An unspecified vulnerability exists in Google Chrome ServiceWorker, which allows remote attackers to exploit the vulnerability to build malicious WEB pages and trick users into parsing them for attacks...

Google Chrome V8 heap buffer overflow vulnerability (CNVD-2016-03805)

Google Chrome is a popular web browser. A heap buffer overflow vulnerability exists in Google Chrome V8, which allows remote attackers to exploit the vulnerability to construct a malicious WEB page that can be tricked into parsing by users, which can crash the application or execute arbitrary cod...

Microsoft Internet Explorer AcquireLineBoxBuilderForLayout Null Array Base Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

[SECURITY] Fedora 24 Update: php-5.6.21-1.fc24

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Google Chrome Blink Memory Misreference Vulnerability (CNVD-2016-02814)

Google Chrome is a popular web browser. A memory misreference vulnerability exists in the V8 bundle of Google Chrome Blink, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into being parsed by the user, crashing the application or...

CVE-2016-2300

Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors...

CVE-2016-2300

Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors...

Authentication flaw

Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors...

CVE-2016-2300

CVE-2016-2300 affects Ecava IntegraXor prior to Version 5.0, build 4522. The vulnerability is an authentication bypass that allows remote attackers to access unspecified web pages via unknown vectors. The vulnerability is remote-exploitable and is among multiple issues identified for IntegraXor

The vulnerability of the Firefox browser, which allows a hacker to replace web pages

The vulnerability of Firefox browsers is related to errors in processing the "" character in URI data. Exploiting this vulnerability can allow a remote attacker to replace web pages...