The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, watchOS, Safari browser, multimedia player iTunes, and iCloud service arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, watchOS, Safari browser, multimedia player iTunes, and iCloud service arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious...

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, watchOS, Safari browser, multimedia player iTunes, and iCloud service arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, watchOS, Safari browser, multimedia player iTunes, and iCloud service arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious...

Vulnerabilities of operating systems such as openSUSE Leap, Mac OS X, iOS, tvOS, watchOS, the browser Safari, the multimedia player iTunes, and the iCloud service can be exploited when operations occur outside of the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerabilities of the operating systems openSUSE Leap, Mac OS X, iOS, tvOS, watchOS, the browser Safari, the multimedia player iTunes, and the iCloud service are due to operations that go beyond the buffer limits in memory. Exploiting these vulnerabilities allows a malicious actor to execute...

MS13-003: Vulnerabilities in System Center Operations Manager could allow elevation of privilege: March 12, 2013

Resolves vulnerabilities in Microsoft System Center Operations Manager that could allow elevation of privilege if a user visits an affected website by way of a specially crafted URL.INTRODUCTIONMicrosoft has released security bulletin MS13-003. To view the complete security bulletin, visit the...

Google Chrome Type Obfuscation Vulnerability (CNVD-2020-26224)

Google Chrome is a web browser of Google Google, U.S. V8 is one of the open source JavaScript engine. Google Chrome suffers from a type confusion vulnerability. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service with the help of a specially crafted...

Microsoft Guidance on Scripting Engine Memory Corruption Vulnerability

Important Microsoft has completed the investigation into a public report of this vulnerability. We have issued CVE-2020-0674 - Scripting Engine Memory Corruption Vulnerability to address this vulnerability. For more information about this issue, including download links for an available security...

USN-4241-1 thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, conduct cross-site scripting XSS attacks, or execute arbitrary code...

Mozilla Firefox and Mozilla Firefox ESR Buffer Overflow Vulnerability (CNVD-2020-01177)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A buffer overflow vulnerability exists in Mozilla Firefox versions prior to 72 a...

The vulnerability of the Cisco Unified Communications Domain Manager’s web interface allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the Cisco Unified Communications Domain Manager’s web interface is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack using a specially crafted website...

Multiple Mozilla Products Resource Management Error Vulnerability (CNVD-2020-12679)

Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...

IBM Security Identity Manager Arbitrary Code Execution Vulnerability

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

CVE-2019-4561

IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

Google Chrome audio component resource management error vulnerability

Google Chrome is a web browser from Google, Inc. audio is an audio component of Google Chrome. A resource management error vulnerability exists in audio in versions of Google Chrome prior to 78.0.3904.87, which can be exploited by an attacker to execute code on a system with the help of a special...

Apple iTunes Memory Corruption Vulnerability (CNVD-2019-36612)

Apple iTunes for Windows is a Windows-based media player application from Apple.WebKit is one of the components of the Web browser engine. A security vulnerability exists in the WebKit component of Apple iTunes for Windows prior to version 12.10.1. The vulnerability can be exploited by an attacke...

Google Chrome Information Disclosure Vulnerability (CNVD-2019-36922)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 77.0.3865.120. The vulnerability can be exploited by an attacker to obtain sensitive information with the help of a specially crafted website...

PT-2019-4082 · Microsoft · Browsers +2

Name of the Vulnerable Software and Affected Versions: Microsoft Browsers affected versions not specified Description: A spoofing issue exists due to improper parsing of HTTP content by Microsoft Browsers. This could allow a remote attacker to exploit the issue by crafting special HTTP queries,...

Google Chrome Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 77.0.3865.75. A remote attacker can exploit the vulnerability with the help of a specially crafted website to bypass site isolation security protections...

Google Chrome Full Screen Notification Spoofing Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 77.0.3865.75. A remote attacker can exploit this vulnerability to conduct spoofing attacks with the help of a specially crafted website...