Apple iOS Webkit Memory Corruption Vulnerability (CNVD-2015-06177)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Webkit used by Apple iOS, which allows attackers to construct malicious web pages that can be tricked into being parsed by users, which can crash the applicatio...

Apple iOS Safari User Interface Forgery Vulnerability (CNVD-2015-06199)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS Safari, which allows attackers to exploit a vulnerability to build malicious web pages that can be tricked into parsing, which can spoof the user interface...

Apple iOS Webkit Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A vulnerability in Apple iOS Webkit's handling of the Content-Disposition header that contains type attachments allows attackers to construct malicious web pages that can be parsed by tricking the user in...

Google Chrome has multiple unspecified vulnerabilities (CNVD-2015-05858)

Google Chrome is a WEB-based browser. Google Chrome has multiple unspecified vulnerabilities that allow remote attackers to construct malicious WEB pages and trick users into parsing them, which can crash applications or execute arbitrary code...

Google Chrome decompose() denial of service vulnerability

Google Chrome is a WEB-based browser. The decompose function in platform/transforms/TransformationMatrix.cpp in Google Chrome Blink does not validate that the matrix inversion was successful, allowing remote attackers to construct malicious WEB pages and trick users into parsing them, which can...

Google Chrome GPU processing implements memory misreference vulnerability

Google Chrome is an open source WEB browser. A memory misreference vulnerability in the Google Chrome GPU processing implementation allows attackers to construct malicious WEB pages that can be tricked into being parsed by the user, which can crash the application or execute arbitrary code...

Google Chrome skia memory corruption vulnerability

Google Chrome is an open source WEB browser. A memory corruption vulnerability in SkPictureShader.cpp in Google Chrome Skia allows attackers to construct malicious WEB pages that can be parsed by the user and can execute arbitrary code...

Adobe Flash Player and AIR Memory Corruption Vulnerability (CNVD-2015-04558)

Adobe Flash Player is a player that parses SWF content. Adobe AIR is a technology developed for the integration of web and desktop applications, which allows you to control cloud-based programs on the web without having to go through a browser. Adobe Flash Player and AIR are implemented with a...

devel/ipython -- CSRF possible remote execution vulnerability

Kyle Kelley reports: Summary: POST requests exposed via the IPython REST API are vulnerable to cross-site request forgery CSRF. Web pages on different domains can make non-AJAX POST requests to known IPython URLs, and IPython will honor them. The user's browser will automatically send IPython...

Microsoft Windows Media Player Remote Code Execution Vulnerability

Microsoft Windows Media Player is a free media player. A security vulnerability in Microsoft Windows Media Player's handling of specially crafted DataObjects allows remote attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute...

Microsoft Internet Explorer Elevation of Privilege Vulnerability

Microsoft Internet Explorer is a popular WEB browser. Microsoft Internet Explorer has an unspecified security vulnerability that allows remote attackers to construct malicious WEB pages that can be parsed by users with elevated privileges...

Apple Safari Remote URI Spoofing Vulnerability

Apple Safari is a web browser developed by Apple, Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in Apple Safari that allows attackers to conduct phishing attacks by exploiting the vulnerability to construct malicious WEB...

CVE-2015-0757

The web framework in Cisco Identity Services Engine ISE 1.21.901 and 1.30.722 does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140...

[SECURITY] Fedora 22 Update: php-5.6.9-1.fc22

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Google Chrome < 43.0.2357.65 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 43.0.2357.65. It is, therefore, affected by multiple vulnerabilities as referenced in the 201505stable-channel-update19 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attacke...

SUSE SLED11 Security Update : acroread (SUSE-SU-2013:1967-1)

Adobe has discontinued the support of Adobe Reader for Linux in June 2013. Newer security problems and bugs are no longer fixed. As the Adobe Reader is binary only software and we cannot provide a replacement, SUSE declares the acroread package of Adobe Reader as being out of support and...

Adobe Flash Player Authentication Bypass Arbitrary Data Write Vulnerability (CNVD-2015-03209)

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. A vulnerability exists in Adobe Flash Player/AIR's handling of swf content, which can ...

Adobe Flash Player suffers from an unspecified memory corruption vulnerability (CNVD-2015-03156)

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. A memory corruption vulnerability exists in Adobe Flash Player/AIR's handling of swf...

Adobe Flash Player suffers from an unspecified memory corruption vulnerability (CNVD-2015-03154)

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. A memory corruption vulnerability exists in Adobe Flash Player/AIR's handling of swf...

Samsung iPOLiS Device Manager ReadConfigValue vulnerability

Added: 04/27/2015 CVE: CVE-2015-0555 OSVDB: 118668 Background Samsung iPOLiS Device Manager is software for managing network devices. It comes with an ActiveX control called XnsSdkDeviceIpInstaller.ocx. Problem A buffer overflow vulnerability in the ReadConfigValue and WriteConfigValue methods in...