CVE-2017-7325

Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open...

Race condition

Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page...

CVE-2017-7326

Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page...

CVE-2017-7327

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll...

Memory corruption

Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open...

Design/Logic Flaw

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll...

CVE-2017-7326

Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page...

CVE-2017-7327

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll...

CVE-2017-7325

Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open...

CVE-2017-7326

CVE-2017-7326 describes a race condition in Yandex Browser for Android prior to version 17.4.0.16 that could allow memory corruption via a crafted HTML page. The vulnerability affects Yandex Browser for Android; root cause is a race condition leading to memory corruption. Remediation per connecte...

CVE-2017-7327

Vulnerability summary (CVE-2017-7327) : Yandex Browser installer for Desktop prior to 17.4.1 is affected by a DLL hijacking issue caused by untrusted search paths for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll, or profapi.dll. The issue can allow loading of arbitrary DLLs and crashing the ...

CVE-2017-7327

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll...

CVE-2017-7326

Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page...

CVE-2017-7325

The CVE-2017-7325 vulnerability affects Yandex Browser prior to version 16.9.0, where an attacker could spoof the address bar via window.open. The issue is documented in multiple sources (NVD/CNVD) as a browser-level flaw with the described vector and impact. A fix is available in version 16.9.0 ...

CVE-2017-15966

The Zh YandexMap aka comzhyandexmap component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php...

Yandex.Metrics - Moderately critical - Cross site scripting - SA-CONTRIB-2017-078

The Yandex.Metrics module allows you to look for key indicators of your site effectiveness. The module doesn't sufficiently let users know a setting page should not be given to untrusted users. This vulnerability is mitigated by the fact that an attacker must have a role with the permission...

ZH Yandex Map, 6.1.1.0, SQL Injection

ZH Yandex Map, 6.1.1.0 and previous versions, SQL Injection Resolution: update to 6.2.0.0 Update notice: http://zhuk.cc/2017/10/05/zh-yandexmap-security-update/...

yandex.fotoclick.ru XSS vulnerability

Vulnerable URL: http://yandex.fotoclick.ru/ru/275/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check yandex.fotoclick.ru SSL...

yandex.fotoclick.ru XSS vulnerability

Vulnerable URL: http://yandex.fotoclick.ru/ru/286/check/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check yandex.fotoclick.ru S...

Yandex.Metro - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Yandex.Metro published at the 'play' market has multiple vulnerabilities...