EUVD-2012-1426

Malware in sbrugna...

Security Bulletin: Vulnerabilities in libxml2 may affect IBM Storage Archive

Summary A series of security vulnerabilities in libxml2 could compromise users' environments, the vulnerabilities might cause: buffer overflows, use-after-free, or memory leaks. These vulnerabilities could allow remote attackers to execute arbitrary code, cause denial of service, or crash...

Linux Distros Unpatched Vulnerability : CVE-2018-5873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the nsgetpath function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free...

firefox: thunderbird: Cross-origin access to JSON contents through multipart responses

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the issue as follows: An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the resource://devtools origin. This could allow them to access cross-origin JSON content. This...

Mozilla: Attacker-induced prompt for extension installation

By holding a reference to the eval function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious...