Debian DSA-2788-1 : iceweasel - several vulnerabilities

Multiple security issues have been found in iceweasel, Debian's version of the Mozilla Firefox web browser: multiple memory safety errors, and other implementation errors may lead to the execution of arbitrary code. The iceweasel version in the oldstable distribution squeeze is no longer supporte...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2013:1476 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVS...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

Debian Security Advisory DSA 2785-1 (chromium-browser - several vulnerabilities)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2013-2906 Atte Kettunen of OUSPG discovered race conditions in Web Audio. CVE-2013-2907 Boris Zbarsky discovered an out-of-bounds read in window.prototype. CVE-2013-2908 Chamal de Silva discovered an address bar spoofin...

Opera < 17 Multiple Vulnerabilities

The version of Opera installed on the remote host is a version prior to version 17. It is, therefore, reportedly affected by multiple unspecified vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70532; scriptversion"1.4";...

[SECURITY] Fedora 18 Update: elinks-0.12-0.33.pre6.fc18

Elinks is a text-based Web browser. Elinks does not display any images, but it does support frames, tables and most other HTML tags. Elinks' advantage over graphical browsers is its speed--Elinks starts and exits quickly and swiftly displays Web pages...

[SECURITY] Fedora 19 Update: elinks-0.12-0.35.pre6.fc19

Elinks is a text-based Web browser. Elinks does not display any images, but it does support frames, tables and most other HTML tags. Elinks' advantage over graphical browsers is its speed--Elinks starts and exits quickly and swiftly displays Web pages...

[SECURITY] Fedora 19 Update: elinks-0.12-0.35.pre6.fc19

Elinks is a text-based Web browser. Elinks does not display any images, but it does support frames, tables and most other HTML tags. Elinks' advantage over graphical browsers is its speed--Elinks starts and exits quickly and swiftly displays Web pages...

[SECURITY] Fedora 18 Update: elinks-0.12-0.33.pre6.fc18

Elinks is a text-based Web browser. Elinks does not display any images, but it does support frames, tables and most other HTML tags. Elinks' advantage over graphical browsers is its speed--Elinks starts and exits quickly and swiftly displays Web pages...

[SECURITY] Fedora 20 Update: elinks-0.12-0.36.pre6.fc20

Elinks is a text-based Web browser. Elinks does not display any images, but it does support frames, tables and most other HTML tags. Elinks' advantage over graphical browsers is its speed--Elinks starts and exits quickly and swiftly displays Web pages...

Authentication flaw

The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user's web browser either 1 before or 2 after authentication...

CVE-2013-0579

IBM Infosphere Optim Data Growth for Oracle E-Business Suite (versions 6.0–9.1) contains CVE-2013-0579 in the Optim E-Business Console. The vulnerability allows an attacker who has access to a legitimate user’s browser (before or after authentication) to impersonate that user, potentially exposin...

CVE-2013-0579

The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user's web browser either 1 before or 2 after authentication...

Microsoft SharePoint CVE-2013-3895 Clickjacking Vulnerability

Description Microsoft SharePoint is prone to a clickjacking vulnerability. An attacker may leverage this issue to compromise the affected application or obtain sensitive information. Other attacks are also possible. Technologies Affected Microsoft Office SharePoint Server 2007 SP3 32-bit Microsof...

Fedora Update for icedtea-web FEDORA-2013-17016

Check for the Version of icedtea-web OpenVAS Vulnerability Test Fedora Update for icedtea-web FEDORA-2013-17016 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Debian Security Advisory DSA 2768-1 (icedtea-web - heap-based buffer overflow)

A heap-based buffer overflow vulnerability was found in icedtea-web, a web browser plugin for running applets written in the Java programming language. If a user were tricked into opening a malicious website, an attacker could cause the plugin to crash or possibly execute arbitrary code as the us...

ZeroShell 2.0 RC3 Command Injection / Cross Site Scripting

ZeroShell version 2.0 RC3 suffers from command injection and cross site scripting vulnerabilities. ----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- ZeroShell 2.0 RC3 ------------------------- Affected vendors: ------------------------...

DSA-2768-1 icedtea-web - heap-based buffer overflow

Bulletin has no description...

Fedora Update for firefox FEDORA-2013-17047

Check for the Version of firefox OpenVAS Vulnerability Test Fedora Update for firefox FEDORA-2013-17047 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

ZeroShell 2.0 RC3 Command Injection / Cross Site Scripting

----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- ZeroShell 2.0 RC3 ------------------------- Affected vendors: ------------------------- ZeroShell http://www.zeroshell.org/download/ ------------------------- Product description:...