Debian DLA-730-1 : firefox-esr security update

Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation errors may lead to the execution of arbitrary code or bypass of the same-origin policy. A man-in-the-middle attack in the addon update mechanism ha...

Critical: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

w3m Denial of Service Vulnerability

w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker can exploit this vulnerability to cause a denial of service crash...

w3m heap buffer overflow vulnerability

w3m is an open source text-based Web browser . A heap buffer overflow vulnerability exists in the 'addMultirowsForm' function in versions of w3m prior to 0.5.3-31. An attacker can exploit this vulnerability to cause a denial of service...

w3m arbitrary code execution vulnerability (CNVD-2016-11717)

w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service...

Multiple buffer overflow vulnerabilities in w3m (CNVD-2016-11658)

w3m is an open source text-based Web browser . Multiple buffer overflow vulnerabilities exist in versions prior to w3m 0.5.3-33. An attacker can exploit this vulnerability to execute arbitrary code in the context of an affected program, and a failed attack will result in a denial of service...

w3m heap buffer overflow vulnerability (CNVD-2016-11709)

w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service...

w3m arbitrary code execution vulnerability (CNVD-2016-11723)

w3m is an open source text-based Web browser . An arbitrary code execution vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

w3m arbitrary code execution vulnerability (CNVD-2016-11715)

w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service...

w3m arbitrary code execution vulnerability (CNVD-2016-11680)

w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service...

w3m arbitrary code execution vulnerability (CNVD-2016-11682)

w3m is an open source text-based Web browser . An arbitrary code execution vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

IBM INotes and Domino Cross-site Scripting Vulnerability (Nov 2016)

IBM Domino is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:lotusdomino";...

JVN#05493467: Simple keitai chat vulnerable to cross-site scripting

Simple keitai chat provided by LEMON-S PHP contains reflected and stored cross-site scripting vulnerabilities CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use Simple keitai chat Simple keitai chat is no longer being developed or maintained. It is...

GLSA-201611-16 : Chromium: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201611-16 Chromium: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the Chromium web browser. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...

Microsoft Internet Explorer 8 8 MSHTML SRunPointer::SpanQualifier/RunType Out-Of-Bounds Read

Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the sixteenth entry in that series. Unfortunately I won't be able to publish everything within one month at the current rate, so I may continue to publish these throug...

[SECURITY] Fedora 23 Update: firefox-50.0-1.fc23

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 25 Update: firefox-50.0-1.fc25

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 25 Update: firefox-49.0.2-1.fc25

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 25 Update: chromium-54.0.2840.90-3.fc25

Chromium is an open-source web browser, powered by WebKit Blink...

firefox security update

CentOS Errata and Security Advisory CESA-2016:2780 An update for firefox is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability...