CVE-2006-6105

Format string vulnerability in the host chooser window gdmchooser in GNOME Foundation Display Manager gdm allows local users to execute arbitrary code via format string specifiers in a hostname, which are used in an error dialog...

Apple OS X SecurityAgent Restriction Bypass Vulnerability

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in Apple OS X versions prior to 10.11.1 where SecurityAgent fails to prevent synthetic...

Mac OS X < 10.11 Multiple Vulnerabilities

Binary data 8982.prm...

Udemy: Reflected XSS and/or malicious redirection via JWPlayer 6 configuration modification

1 Malicious attacker by visiting course page e.g. https://www.udemy.com/overview-of-big-data-hadoop/ and intercepting browser's generated requests can find one to the following URL:...

Mac OS X Info Disclosure

The vulnerability of the Login Window component in the Mac OS X operating system is related to errors in the settings for screen locking time. Exploiting this vulnerability can allow an intruder acting locally to gain access to protected information...

WinRAR SFX Remote Code Execution Vulnerability

WinRAR is a very popular compression/decompression tool. A remote code execution security vulnerability exists in WInRAR SFX v5.21, Text and Icon feature of the Text to display in SFX window module. A remote attacker exploiting this vulnerability with a zip archive with a malicious load can...

CVE-2015-5833

The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physically proximate attackers to obtain access by visiting an unattended workstation...

Design/Logic Flaw

The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physically proximate attackers to obtain access by visiting an unattended workstation...

CVE-2015-5833

The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physically proximate attackers to obtain access by visiting an unattended workstation...

CVE-2015-5833

CVE-2015-5833 affects Apple OS X pre-10.11: the Login Window component does not reliably lock the screen at the intended time, enabling physically proximate attackers to access an unattended workstation. The available documentation lists this as a local access risk but provides no explicit remedi...

CVE-2015-5833: Undefined Security Weakness

The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physically proximate attackers to obtain access by visiting an unattended workstation...

PT-2015-2268

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11 Description The issue is related to the Login Window component, which does not properly lock the screen at the intended time. This allows physically proximate attackers to gain access to an unattended...

Firefox Bypass Access Restrictions

The vulnerability of the js/src/proxy/Proxy.cpp component of the Firefox browser is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass access restrictions to window elements by using a specially crafted web page...

Firefox Content Replacement

The vulnerability of Firefox browsers is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to replace the window’s content using a specially crafted web page...

iOS Web Content Replacement

The vulnerability of the Safari browser on the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to replace the content of web pages by using the “open window” button on the website...

UBUNTU-CVE-2015-0852

Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a denial of service heap memory corruption via vectors related to the height and width of a window...

CVE-2015-0852

Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a denial of service heap memory corruption via vectors related to the height and width of a window...

CVE-2015-0852

Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a denial of service heap memory corruption via vectors related to the height and width of a window...

IconLover v5.4.5 - Stack Buffer Overflow Vulnerability

Document Title: =============== IconLover v5.4.5 - Stack Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1609 Release Date: ============= 2015-09-28 Vulnerability Laboratory ID VL-ID: ==================================== 160...

Mozilla Firefox js/src/proxy/Proxy.cpp Restriction Bypass Vulnerability

Mozilla Firefox is an open source web browser. The Mozilla Firefox js/src/proxy/Proxy.cpp file fails to properly handle the 'receiver' parameter. A remote attacker can exploit the vulnerability to bypass specific window access restrictions...