CVE-2018-8569: Undefined Security Weakness

A remote code execution vulnerability exists in the Yammer desktop application due to the loading of arbitrary content, aka "Yammer Desktop Application Remote Code Execution Vulnerability." This affects Yammer Desktop App...

(Pwn2Own) Huawei App Market Whitelist Bypass Privilege Escalation Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Huawei App Market. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

The vulnerability of the `browser identity.launchWebAuthFlow` function in Mozilla Firefox’s WebExtensions extensions allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the browser identity.launchWebAuthFlow function in Mozilla Firefox’s WebExtensions extensions is related to the improper loading of content via HTTPS. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2018-5113

The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properly enforced. This can potentially allow privileged pages to be loaded by the extension. This vulnerability affects Firefox 58...

CVE-2017-7141

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Mail" component. It allows remote attackers to bypass an intended off value of the "Load remote content in messages" setting, and consequently discover an e-mail recipient's IP address, via ...

Apple macOS High Sierra Mail Information Disclosure Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Mail component is one of the email components. A security vulnerability exists in the Mail component of Apple macOS High Sierra versions prior to 10.13, which stems from the program failing to disable t...

PT-2017-1870

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A security issue exists in Microsoft Edge due to the Edge Content Security Policy CSP failing to properly validate certain specially crafted documents. This could allow an attacker to...

iOS 8.1.2 Mail.app Injection - Load remote content without user interaction

This exploit allows an attacker to load remote website inside iOS's native Mail.app without any user interaction other than opening the HTML e-mail message containing the payload. Example: After opening the malicious message: http://i.imgur.com/GPMqdOv.jpg iPhone http://i.imgur.com/zJ7W24N.jpg iP...

Debian: Security Advisory (DSA-2553-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2553-1 (iceweasel - several vulnerabilities)

Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian. The reported vulnerabilities could lead to the execution of arbitrary code or the bypass of...

CVE-2013-0095

Outlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2 allows remote attackers to trigger access to a remote URL and consequently confirm the rendering of an HTML e-mail message by including unspecified HTML5 elements and leveraging the installation of a WebK...

CVE-2013-0095

Outlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2 allows remote attackers to trigger access to a remote URL and consequently confirm the rendering of an HTML e-mail message by including unspecified HTML5 elements and leveraging the installation of a WebK...

Debian Security Advisory DSA 2556-1 (icedove)

The remote host is missing an update to icedove announced via advisory DSA 2556-1. OpenVAS Vulnerability Test $Id: deb25561.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2556-1 icedove Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2556-1 : icedove - several vulnerabilities

Several vulnerabilities were discovered in Icedove, Debian's version of the Mozilla Thunderbird mail and news client. This includes several instances of use-after-free and buffer overflow issues. The reported vulnerabilities could lead to the execution of arbitrary code, and additionally to the...

DSA-2556-1 icedove - several

Bulletin has no description...

Debian Security Advisory DSA 2554-1 (iceape)

The remote host is missing an update to iceape announced via advisory DSA 2554-1. OpenVAS Vulnerability Test $Id: deb25541.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2554-1 iceape Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2554-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2554-1 : iceape - several vulnerabilities

Several vulnerabilities have been discovered in Iceape, an internet suite based on SeaMonkey. The reported vulnerabilities could lead to the execution of arbitrary code or the bypass of content-loading restrictions via the location object. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

DSA-2554-1 iceape - several

Bulletin has no description...

Debian DSA-2553-1 : iceweasel - several vulnerabilities

Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian. The reported vulnerabilities could lead to the execution of arbitrary code or the bypass of...