1900 matches found
Serendipity 2.0.2 Cross Site Scripting
Date: 28/10/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: Stored XSS Tested on: Windows 8.1 Product: Serendipity Version: 2.0.2 Description: Application is vulnerable to Stored XSS attack. There is a XSS issue in version 2.0.2. and the vulnerable parameters are "Blog name" and...
meteorama.fr XSS vulnerability
Vulnerable URL: http://www.meteorama.fr/s?l=%22/%3E%3Csvg/onload=alert%28%22XSSPOSED%22%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 62505 Google Pagerank| 5 VIP website...
CVE-2015-7007
Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors...
Design/Logic Flaw
Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors...
CVE-2015-7007
CVE-2015-7007 affects Apple OS X Script Editor prior to 10.11.1. The vulnerability allows remote attackers to bypass the intended user confirmation for AppleScript execution via unspecified vectors, enabling arbitrary AppleScript execution without user approval. Impact, per sources, is partial co...
electrolux.com.co XSS vulnerability
Vulnerable URL: http://www.electrolux.com.co/Global-pages/Search-Result-page1/?query=%27|alert%28%27XSSPOSED%27%29|%27 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
br.blouinartinfo.com XSS vulnerability
Vulnerable URL: http://br.blouinartinfo.com/blouinsearch?query=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E=1 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
clubphilateliquemaconnais.com XSS vulnerability
Vulnerable URL: http://www.clubphilateliquemaconnais.com/search/site/?q=%3C/title%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:45 GMT Vulnerability type:| XSS Vulnerability status:|...
CVE-2015-5780
The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, which has unspecified impact and attack vectors...
Design/Logic Flaw
The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, which has unspecified impact and attack vectors...
CVE-2015-5780
The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, which has unspecified impact and attack vectors...
Android Security Restriction Bypass Vulnerability
Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. A security restriction bypass vulnerability exists in Android versions prior to 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, which allows ...
Threat Outbreak Alert RuleID18354: Email Messages Distributing Malicious Software on September 30, 2015
Medium Alert ID: 41299 First Published: 2015 October 2 13:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18354 may contain the following files: Name |...
CVE-2015-3858
The checkDestination function in internal/telephony/SMSDispatcher.java in Android before 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, which allows attackers to bypass an intended user-confirmation requirement for SMS short-code messaging via a crafted application...
Authorization
The checkDestination function in internal/telephony/SMSDispatcher.java in Android before 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, which allows attackers to bypass an intended user-confirmation requirement for SMS short-code messaging via a crafted application...
Gentoo Security Advisory GLSA 201309-19
Gentoo Linux Local Security Checks GLSA 201309-19 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
The vulnerability of Firefox and Firefox ESR browsers allows a hacker to bypass the user’s confirmation process when installing updates.
The vulnerability of the Firefox and Firefox ESR extension installation subsystem is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the user’s confirmation process during the installation of updates, by using specially crafted data...
Threat Outbreak Alert RuleID17838: Email Messages Distributing Malicious Software on August 2, 2016
Medium Alert ID: 40911 First Published: 2015 September 9 16:05 GMT Last Updated: 2016 August 3 12:52 GMT Version: 27 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17838...
Checkmarx CxQL 7.1.5 Sandbox Bypass Vulnerability
Exploit for php platform in category web applications Checkmarx CxQL Sandbox bypass CVE-2014-8778 Vendor: Checkmarx - www.checkmarx.com Product: CxSuite Version affected: 7.1.5 and prior Credit: Huy-Ngoc DAU @ngocdh of Deloitte Conseil, France ================================ Introduction...
Mozilla Firefox Multiple Vulnerabilities (mfsa2015-94) - Windows
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...