CVE-2015-7071

The File Bookmark component in Apple OS X before 10.11.2 allows attackers to bypass a sandbox protection mechanism for app scoped bookmarks via a crafted pathname...

Mac OS X Multiple Vulnerabilities (Security Updates 2015-005 / 2015-008)

The remote host is running a version of Mac OS X 10.9.5 or 10.10.5 that is missing Security Update 2015-005 or 2015-008. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression -...

PT-2015-2866

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.2 Description The issue is related to the File Bookmark component in Mac OS X, which has inadequate access control restrictions for certain features. This allows a remote attacker to bypass the sandbox...

CVE-2015-7071: Undefined Security Weakness

The File Bookmark component in Apple OS X before 10.11.2 allows attackers to bypass a sandbox protection mechanism for app scoped bookmarks via a crafted pathname...

Mac OS X 10.11.x < 10.11.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.2. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression - Configuration Profiles - CoreGraphics - CoreMedi...

Apache OpenOffice < 4.1.2 Multiple Vulnerabilities

The version of Apache OpenOffice installed on the remote host is a version prior to 4.1.2. It is, therefore, affected by the following vulnerabilities : - An overflow condition exists in the Hangul Word Processor HWP filter due to improper validation of user-supplied input. A remote attacker can...

DEBIAN-CVE-2015-5214

LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via an index to a non-existent bookmark in a DOC file...

OpenOffice 4.1.1 -- multiple vulnerabilities

The Apache OpenOffice Project reports: A vulnerability in OpenOffice settings of OpenDocument Format files and templates allows silent access to files that are readable from an user account, over-riding the user's default configuration settings. Once these files are imported into a...

UBUNTU-CVE-2015-5214

LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service memory corruption and application crash or execute arbitrary code via an index to a non-existent bookmark in a DOC file...

openSUSE Security Update : MozillaFirefox (openSUSE-2015-678)

MozillaFirefox was updated to version 41.0.2 to fix one security issue. This security issue was fixed : - CVE-2015-7184: Cross-origin restriction bypass using Fetch bsc950686. These non-security issues were fixed : - Fix a startup crash related to Yandex toolbar and Adblock Plus bmo1209124 - Fix...

Security update for MozillaFirefox (important)

MozillaFirefox was updated to version 41.0.2 to fix one security issue. This security issue was fixed: - CVE-2015-7184: Cross-origin restriction bypass using Fetch bsc950686. These non-security issues were fixed: Fix a startup crash related to Yandex toolbar and Adblock Plus bmo1209124 Fix...

CVE-2015-6987

The File Bookmark component in Apple OS X before 10.11.1 allows local users to cause a denial of service application crash via crafted bookmark metadata in a folder...

Design/Logic Flaw

The File Bookmark component in Apple OS X before 10.11.1 allows local users to cause a denial of service application crash via crafted bookmark metadata in a folder...

CVE-2015-6987

CVE-2015-6987 affects Apple OS X before 10.11.1, in the File Bookmark component. The issue is an input/metadata validation vulnerability in parsing bookmark metadata, which can cause a local user to crash the application (denial of service). Connected documents corroborate this description, inclu...

CVE-2015-6987

The File Bookmark component in Apple OS X before 10.11.1 allows local users to cause a denial of service application crash via crafted bookmark metadata in a folder...

PT-2015-7439

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.1 Description The issue allows local users to cause a denial of service, resulting in an application crash, by utilizing crafted bookmark metadata in a folder. Recommendations For Apple OS X versions prior to...

CVE-2015-6987: Improper Input Validation

The File Bookmark component in Apple OS X before 10.11.1 allows local users to cause a denial of service application crash via crafted bookmark metadata in a folder...

USN-2743-4 firefox regression

USN-2743-1 fixed vulnerabilities in Firefox. After upgrading, some users reported problems with bookmark creation and crashes in some circumstances. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Andrew Osmond, Olli Pettay, Andrew Sutherland, Christi...

Multiple Cross-Site Scripting Vulnerabilities in Ignite Realtime Openfire

Ignite Realtime Openfire formerly known as Wildfire is the IgniteRealtime community of a Java development and based on XMPP formerly known as Jabber, Instant Messaging Protocol cross-platform open-source real-time collaboration RTC server , it can build a high-efficiency instant messaging servers...

Dell SonicWALL Secure Remote Access (SRA) Appliance - Cross-Site Request Forgery

Dell SonicWALL Secure Remote Access SRA Appliance - Cross-Site Request Forgery Exploit Title: Dell SonicWALL Secure Remote Access SRA Appliance Cross-Site Request Forgery Date: 04/28/2015 Exploit Author: Veit Hailperin Vendor Homepage: www.dell.com Version: Dell SonicWALL SRA 7.5 prior to...