11970 matches found
February 13, 2018—KB4074596 (OS Build 10240.17770)
None None...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 Endpoint Monitor, 2 Dialup List, or 3 Log&Report Display modules, or the...
CVE-2012-0941
Multiple cross-site scripting XSS vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 Endpoint Monitor, 2 Dialup List, or 3 Log&Report Display modules, or the...
CVE-2012-0941
Multiple cross-site scripting XSS vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 Endpoint Monitor, 2 Dialup List, or 3 Log&Report Display modules, or the...
DRUPAL-CONTRIB-2018-008
This module enables you to show referenced entities in tabs. The module doesn't sufficiently sanitize the body fields of the referenced entities when it prints them to the tabs. This vulnerability is mitigated by the fact that an attacker must have a role with the permission create/edit content o...
Updated php-smarty packages fix security vulnerability
Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch or display functions on custom resources that does not sanitize template nameCVE-2017-1000480...
January 31, 2018—KB4058258 (OS Build 16299.214)
None None...
xorg-x11-server denial of service vulnerability
The xorg-x11-server is an X Window System display server bundled with multiple vendor operating systems. A security vulnerability exists in the 'ProcEstablishConnection' function in versions of xorg-x11-server prior to 1.19.5, which stems from a lack of extra length detection in the program. An...
Mozilla Firefox for OS X Denial of Service Vulnerability
Mozilla Firefox for OS X is an open source web browser based on the OS X platform from the Mozilla Foundation in the U.S. Firefox ESR for OS X is an extended support version of Firefox based on the OS X platform. A security vulnerability exists in previous versions of Mozilla Firefox 58 for the O...
January 17, 2018—KB4057142 (OS Build 14393.2034)
None None...
NVIDIA Linux GPU Display Driver 384.x < 384.111 / 390.x < 390.12 Multiple Vulnerabilities (Meltdown)(Spectre)
The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid105776; scriptversion"1.14";...
NVIDIA Windows GPU Display Driver 384.x / 385.x / 386.x < 386.07 / 390.x < 390.65 Multiple Vulnerabilities (Meltdown)(Spectre)
The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid105777; scriptversion"1.14";...
CVE-2018-0819
Microsoft Office 2016 for Mac allows an attacker to send a specially crafted email attachment to a user in an attempt to launch a social engineering attack, such as phishing, due to how Outlook for Mac displays encoded email addresses, aka "Spoofing Vulnerability in Microsoft Office for Mac."...
Microsoft Office for MAC Spoofing Vulnerability
Microsoft Office 2016 for Mac is a Mac-based office software suite product developed by Microsoft Corporation USA. A spoofing vulnerability exists in Microsoft Office 2016 for Mac-based platforms that stems from the program's failure to properly handle the encryption and display of email addresse...
Mozilla: From address with encoded null character is cut off in message header display
It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed if preceded by a null character in the display string. This vulnerability affects Thunderbird 52.5.2...
Google Android Qualcomm Display elevation of privilege vulnerability
Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Display is a display component developed by Qualcomm. An elevation of privilege vulnerability exists in Qualcomm Display in Android. A remote attacker can exploit this...
Google Android LG Bootloader Component Elevation of Privilege Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.LG Bootloader is one of the bootloaders. A local boost vulnerability exists in DisplayFtmItem of LG Bootloader in Android, which stems from the program reading a string without...
UBUNTU-CVE-2017-1000480
Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch or display functions on custom resources that does not sanitize template name...