CVE-2014-4427

CVE-2014-4427 affects Apple OS X prior to 10.10, where App Sandbox could be bypassed via the accessibility API. Root cause: a sandbox mechanism weakness allowing a sandboxed app to misuse accessibility without user knowledge. Impact: sandbox protection bypass for affected apps. Remediation: Apple...

CVE-2014-4427

App Sandbox in Apple OS X before 10.10 allows attackers to bypass a sandbox protection mechanism via the accessibility API...

Default configuration

The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set FEATURESECUREPROCESSING, which allows remote authenticated users to execute arbitrary Java code via a crafted XSL document...

CVE-2014-7296

CVE-2014-7296 affects SpagoBI 5.0.0: the accessibility engine’s default config does not enable FEATURE_SECURE_PROCESSING, allowing remote authenticated users to execute arbitrary Java code through a crafted XSL document. Impact is code execution with partial confidentiality/integrity/availability...

CVE-2014-7296

The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set FEATURESECUREPROCESSING, which allows remote authenticated users to execute arbitrary Java code via a crafted XSL document...

Stable Channel Update for Chrome OS

The Stable channel has been updated to 38.0.2125.101 Platform version: 6158.49.0, 6158.56.0 for all Chrome OS devices except Chromeboxes. This build contains a number of bug fixes, security updates and feature enhancements. Systems will be receiving updates over the next several days. Here is a...

[SECURITY] Fedora 20 Update: kmousetool-4.14.1-1.fc20

A program for people whom it hurts to click the mouse...

[SECURITY] Fedora 20 Update: kaccessible-4.14.1-1.fc20

Provides accessibility services like focus tracking and a screen reader...

CVE-2014-4368

The Accessibility subsystem in Apple iOS before 8 allows attackers to interfere with screen locking via vectors related to AssistiveTouch events...

Design/Logic Flaw

The Accessibility subsystem in Apple iOS before 8 allows attackers to interfere with screen locking via vectors related to AssistiveTouch events...

CVE-2014-4368

The CVE-2014-4368 entry concerns Apple iOS prior to version 8, where a logic issue in the Accessibility subsystem affecting AssistiveTouch event handling could interfere with screen locking. In practical terms, this means that under certain AssistiveTouch-related sequences, the device may fail to...

CVE-2014-4368

The Accessibility subsystem in Apple iOS before 8 allows attackers to interfere with screen locking via vectors related to AssistiveTouch events...

Apple iOS < 8 Multiple Vulnerabilities

Binary data appleios80check.nbin...

Update for Microsoft Silverlight (KB2977218)

This update to Silverlight improves security, reliability, accessibility support, startup performance, enhances line-of-business support and includes several fixes to better support rich internet applications. This update is backward compatible with web applications built using previous versions ...

Yahoo to Release End-to-End Encryption for Email Users

LAS VEGAS–Yahoo plans to enable end-to-end encryption for all of its Mail users next year. The company is working with Google on the project and the encryption will be mostly transparent for users, making it as simple as possible to use. Alex Stamos, CISO at Yahoo, said that the project has been ...

Facebook's Internet.Org App Offers Free Internet in Zambia

Earlier this month, the founder of the Social Networking giant highlighted the future of universal Internet access, the dream that Facebook founder Mark Zuckerberg wants to fulfil, in an effort to make Internet access available to everyone across the world just like a service as essential as of 9...

[SECURITY] Fedora 20 Update: cinnamon-control-center-2.2.10-1.fc20.1

This package contains configuration utilities for the Cinnamon desktop, whi ch allow to configure accessibility options, desktop fonts, keyboard and mouse properties, sound setup, desktop theme and background, user interface properties, screen resolution, and other settings...

[SECURITY] Fedora 20 Update: control-center-3.10.3-2.fc20

This package contains configuration utilities for the GNOME desktop, which allow to configure accessibility options, desktop fonts, keyboard and mouse properties, sound setup, desktop theme and background, user interface properties, screen resolution, and other settings...

Apple iOS < 8.0 Multiple Vulnerabilities

Binary data 8393.prm...

atutor 2.0.2 - Multiple Vulnerabilities

No description provided by source. ATutor 2.0.2 Multiple Remote Vulnerabilities SQLi/XSS/PD Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 2.0.2 build r10589 Summary: ATutor is an Open Source Web-based Learning Content Management System LCMS...