7013 matches found
Mozilla SeaMonkey Code Execution
Mozilla SeaMonkey software contains a vulnerability related to errors in the implementation of the Web IDL technology. Exploiting this vulnerability allows malicious actors operating remotely to execute arbitrary JavaScript code with Chrome privileges, by using a fragment of IDL to trigger the...
Firefox Bypass Window Object Restrictions
The Mozilla Firefox browser contains a vulnerability related to incompatibility between JavaScript components. Exploiting this vulnerability allows malicious actors to bypass window object restrictions by utilizing incompatibility in the original method-implementations of various JavaScript engin...
Firefox ESR Code Execution
The Mozilla Firefox ESR browser contains a vulnerability related to errors in the implementation of the Web IDL technology. Exploiting this vulnerability allows malicious actors operating remotely to execute arbitrary JavaScript code with Chrome privileges, by using a fragment of IDL to trigger a...
Opera Code Execution
The Opera browser contains a vulnerability related to the use of double-clicking on pop-up windows. This allows a malicious individual to create a pop-up window. With the first click on the window, an additional form appears in the address bar, and with a second click on that form, arbitrary code...
Windows Privilege Escalation
The vulnerability that allows for increased privilege levels is related to the improper use of the Windows kernel mode driver’s window descriptors for objects in memory that belong to the thread. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated...
Google finally announces Android N's name and It's not Nutella
No, it's not Nutella. Google has finally announced the official name of the latest version of its Android mobile software, codenamed Android N: "Nougat." Yes, the next version of sugary snack-themed Android and the successor to Android Marshmallow will now be known as Android Nougat, the company...
ImageMagick security update
CentOS Errata and Security Advisory CESA-2016:1237 An update for ImageMagick is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...
UBUNTU-CVE-2016-2496
The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct tapjacking attacks and access arbitrary private-storage files by creating a partially overlapping window, aka internal bug 26677796...
CVE-2016-2496
The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct tapjacking attacks and access arbitrary private-storage files by creating a partially overlapping window, aka internal bug 26677796...
CVE-2016-2496: Improper Restriction of Rendered UI Layers or Frames
The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct tapjacking attacks and access arbitrary private-storage files by creating a partially overlapping window, aka internal bug 26677796...
Google Chrome DoS
The vulnerability of Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause a service failure memory corruption, or possibly have other effects through a specially crafted web page related to BindingSecurity.cpp and...
openssh: possible fallback from untrusted to trusted X11 forwarding
An access flaw was discovered in OpenSSH; the OpenSSH client did not correctly handle failures to generate authentication cookies for untrusted X11 forwarding. A malicious or compromised remote X application could possibly use this flaw to establish a trusted connection to the local X server, eve...
ImageMagick security update
CentOS Errata and Security Advisory CESA-2016:0726 An update for ImageMagick is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...
DEBIAN-CVE-2016-2070
The tcpcwndreduction function in net/ipv4/tcpinput.c in the Linux kernel before 4.3.5 allows remote attackers to cause a denial of service divide-by-zero error and system crash via crafted TCP traffic...
How to suppress the Add Account window in Citrix Receiver 4.4 or earlier for Windows
This article describes how to suppress the Add Account window in Citrix Receiver for Windows. Note : This article is applicable for Receiver 4.4and earlier. For Receiver for Windows 4.4.1000,Receiver 4.5and later, refer to CTX135438 -How to Suppress the Add Account Window in Citrix Receiver for...
CVE-2016-2204
The management console on Symantec Messaging Gateway SMG Appliance devices before 10.6.1 allows local users to obtain root-shell access via crafted terminal-window input...
Input validation
The management console on Symantec Messaging Gateway SMG Appliance devices before 10.6.1 allows local users to obtain root-shell access via crafted terminal-window input...
CVE-2016-2204
The management console on Symantec Messaging Gateway SMG Appliance devices before 10.6.1 allows local users to obtain root-shell access via crafted terminal-window input...
CVE-2016-2204: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The management console on Symantec Messaging Gateway SMG Appliance devices before 10.6.1 allows local users to obtain root-shell access via crafted terminal-window input...
