7448 matches found
Oracle Java SE CVE-2019-2999 Remote Security Vulnerability
Description Oracle Java SE is prone to a remote security vulnerability. The vulnerability can be exploited over Multiple protocols. This issue affects the 'Javadoc' component. This vulnerability affects the following supported versions: Java SE: 7u231, 8u221, 11.0.4, 13 Technologies Affected Orac...
[SECURITY] Fedora 30 Update: firefox-69.0.3-1.fc30
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Fedora Update for firefox FEDORA-2019-be4b40654f
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-17070
The liquid-speech-balloon aka LIQUID SPEECH BALLOON plugin before 1.0.7 for WordPress allows XSS with Internet Explorer...
[SECURITY] Fedora 30 Update: chromium-77.0.3865.90-2.fc30
Chromium is an open-source web browser, powered by WebKit Blink...
Microsoft SharePoint Server CVE-2019-1328 Spoofing Vulnerability
Description Microsoft SharePoint Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft...
Microsoft Office SharePoint CVE-2019-1070 Cross Site Scripting Vulnerability
Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
PT-2019-4082 · Microsoft · Browsers +2
Name of the Vulnerable Software and Affected Versions: Microsoft Browsers affected versions not specified Description: A spoofing issue exists due to improper parsing of HTTP content by Microsoft Browsers. This could allow a remote attacker to exploit the issue by crafting special HTTP queries,...
Microsoft Edge and Internet Explorer CVE-2019-1357 Spoofing Vulnerability
Description Microsoft Edge and Internet Explorer are prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected...
Bootstrap 3 Typeahead CVE-2019-10215 Cross Site Scripting Vulnerabilitiy
Description Bootstrap 3 Typeahead is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...
Fedora Update for chromium FEDORA-2019-c47099eb44
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious Package
bmap is a malicious package. The malicious code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=...
Multiple Cisco Products CVE-2019-12695 Cross Site Scripting Vulnerability
Description Multiple Cisco Products are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected device. This...
Multiple Cisco Unified Communications Products CVE-2019-12707 Cross Site Scripting Vulnerability
Description Multiple Cisco Unified Communications Products are prone to a cross-site scripting vulnerability because they fail to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affecte...
ZmartZone 'mod_auth_openidc' Module Open Redirection Vulnerability
Description ZmartZone modauthopenidc Module is prone to an open-redirection vulnerability. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this...
[SECURITY] Fedora 29 Update: chromium-77.0.3865.90-2.fc29
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 31 Update: chromium-77.0.3865.90-2.fc31
Chromium is an open-source web browser, powered by WebKit Blink...
Security update for webkit2gtk3 (important)
openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2019:2207-1 Rating: important References: 1148931 Cross-References: CVE-2019-8595 CVE-2019-8607 CVE-2019-8615 CVE-2019-8644 CVE-2019-8649 CVE-2019-8658 CVE-2019-8666 CVE-2019-8669 CVE-2019-8671 CVE-2019-8672...
1-Click iPhone and Android Exploits Target Tibetan Users via WhatsApp
A team of Canadian cybersecurity researchers has uncovered a sophisticated and targeted mobile hacking campaign that is targeting high-profile members of various Tibetan groups with one-click exploits for iOS and Android devices. Dubbed Poison Carp by University of Toronto's Citizen Lab, the...