Mozilla Firefox and Firefox ESR Graphite 2 Denial of Service Vulnerability (CNVD-2016-01649)

Firefox is an open source Web browser ; Firefox ESR is an extended support version of Firefox.Graphite is a set of Python language , written using the Django framework for enterprise-class open source system monitoring tools . A security vulnerability exists in Mozilla Firefox and Firefox ESR...

CVE-2016-2845

Removed by vendor...

[SECURITY] Fedora 23 Update: php-5.6.19-1.fc23

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

[SECURITY] Fedora 23 Update: rubygem-actionview-4.2.3-3.fc23

Simple, battle-tested conventions and helpers for building web pages...

[SECURITY] Fedora 22 Update: rubygem-actionview-4.2.0-3.fc22

Simple, battle-tested conventions and helpers for building web pages...

The vulnerability of Google Chrome browser allows a perpetrator to obtain confidential information.

The vulnerability of the nacceleratedImageBufferSurfaceSurface class in the WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp file of the Blink component in Google Chrome browser is caused by incorrect initialization behavior. Exploiting this vulnerability could allow a remote...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-01245)

Google Chrome is a popular web browser. Google Chrome fails to properly process JPEG2000 images, allowing remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by users, which can crash applications or execute arbitrary code...

[SECURITY] Fedora 23 Update: php-5.6.18-1.fc23

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Cisco Spark Representational State Transfer Interface Unauthorized Access Vulnerability

A vulnerability in the Representational State Transfer REST interface of Cisco Spark could allow an unauthenticated, remote attacker to make changes to an affected system system. The vulnerability is due to improper implementation of authorization controls when accessing certain web pages of the...

LEADTOOLS ActiveX control DLL Load Arbitrary Code Execution Vulnerability

LEADTOOLS ActiveX control is an ActiveX control. A security vulnerability exists in LEADTOOLS ActiveX control that allows remote attackers to construct malicious web pages that can be tricked into parsing, leading to arbitrary code execution...

Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to trigger service failures or execute arbitrary code.

The vulnerabilities of Microsoft Edge and Internet Explorer are caused by buffer overflow attacks. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to trigger service failures or execute arbitrary code.

The vulnerabilities of Microsoft Edge and Internet Explorer are caused by buffer overflow attacks. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

Google Chrome Omnibox Security Bypass Vulnerability

Google Chrome is a web browser. Google V8 is one of the open source JavaScript engines. A security vulnerability in Google Chrome's Omnibox implementation allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing and falsifying the origin o...

Microsoft Internet Explorer Security Mechanism Bypass Vulnerability (CNVD-2016-00287)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A security vulnerability exists in Microsoft Internet Explorer that could be exploited by remote attackers to construct malicious Web pages that could be tricked into parsin...

Microsoft Edge Arbitrary Code Execution Vulnerability

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security vulnerability in Microsoft Edge's Chakra JavaScript engine allows a remote attacker to build special WEB pages that can be tricked into parsing by user...

AccessDiver 4.301 - Buffer Overflow

AccessDiver 4.301 - Buffer Overflow + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ACCESSDIVER-BUFFER-OVERFLOW.txt Vendor: ============== M. Jean Fages www.accessdiver.com circa 1998-2006 Product: =============================...

AccessDiver 4.301 - Buffer Overflow

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ACCESSDIVER-BUFFER-OVERFLOW.txt Vendor: ============== M. Jean Fages www.accessdiver.com circa 1998-2006 Product: ============================= AccessDiver V4.301 build 5888 AccessDiver is...

Apple OS X OpenGL Memory Corruption Arbitrary Code Execution Vulnerability (CNVD-2015-08150)

Apple OS X is an operating system developed by Apple Inc. Apple OS X handles OpenGL with a memory corruption vulnerability that allows attackers to construct special WEB pages that can be tricked into loading by the user, which can crash the application or execute arbitrary code...

Apple OS X OpenGL Memory Corruption Arbitrary Code Execution Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X handles OpenGL with a memory corruption vulnerability that allows attackers to construct special WEB pages that can be tricked into loading by the user, which can crash the application or execute arbitrary code...

CVE-2015-6395

Cisco Prime Service Catalog 10.0, 10.0R2, 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188...