1392 matches found
Security Bulletin: Vulnerabilities in OpenSSL affect IBM PureApplication System (CVE-2014-3513, CVE-2014-3567, CVE-2014-3568)
Summary OpenSSL vulnerabilities along with SSL 3 Fallback protection TLSFALLBACKSCSV were disclosed on October 15, 2014 by the OpenSSL Project. OpenSSL is used by IBM PureApplication System. IBM PureApplication System has addressed the applicable CVEs and included the SSL 3.0 Fallback protection...
print.asapfast.com XSS vulnerability
Open Bug Bounty ID: OBB-630772 Description| Value ---|--- Affected Website:| print.asapfast.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Microsoft Windows: Network security: Allow LocalSystem NULL session fallback
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnseclocalsysnullfallback.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Network security: Allow LocalSystem NULL session fallback Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...
CVE-2017-7807
A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...
Design/Logic Flaw
A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...
CVE-2017-7807
CVE-2017-7807 describes a domain URL hijack via AppCache fallback, resolved by requiring fallback files to be inside the manifest directory. Affected products include Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox
CVE-2017-7807
A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...
CVE-2017-6930
In Drupal versions 8.4.x versions before 8.4.5 when using node access controls with a multilingual site, Drupal marks the untranslated version of a node as the default fallback for access queries. This fallback is used for languages that do not yet have a translated version of the created node...
FreeBSD : drupal -- Drupal Core - Multiple Vulnerabilities (57580fcc-1a61-11e8-97e0-00e04c1ea73d)
Drupal Security Team reports : CVE-2017-6926: Comment reply form allows access to restricted content CVE-2017-6927: JavaScript cross-site scripting prevention is incomplete CVE-2017-6928: Private file access bypass - Moderately Critical CVE-2017-6929: jQuery vulnerability with untrusted domains -...
Drupal Core Multiple Vulnerabilities (SA-CORE-2018-001) - Linux
Drupal is prone to multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
drupal -- Drupal Core - Multiple Vulnerabilities
Drupal Security Team reports: CVE-2017-6926: Comment reply form allows access to restricted content CVE-2017-6927: JavaScript cross-site scripting prevention is incomplete CVE-2017-6928: Private file access bypass - Moderately Critical CVE-2017-6929: jQuery vulnerability with untrusted domains -...
Language fallback can be incorrect on multilingual sites with node access restrictions.
More info at https://www.drupal.org/SA-CORE-2018-001...
The vulnerability of the AppCache mechanism in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to perform domain substitution.
The vulnerability of the AppCache mechanism in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to defects in the Application Cache system’s functionality. Exploiting this vulnerability allows a malicious actor to replace domains using the “FALLBACK”...
Fedora 26 : wordpress (2018-19c693fd9a)
Upstream announcement : WordPress 4.9.2 is now available. This is a security and maintenance release for all versions since WordPress 3.7. We strongly encourage you to update your sites immediately. An XSS vulnerability was discovered in the Flash fallback files in MediaElement, a library that is...
WordPress MediaElement Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL servers to set up a personal blog site . MediaElement is used in one of the HTML5 player . A cross-site scripting vulnerability exists in the Flash...
Fall back from TCP to UDP fails / displays SSL Error when Disconnecting and Reconnecting session via NetScaler
If HDX Adaptive Transport Policy set to Preferred on DDC and when attempting to connect to an Application or Desktop using Citrix Receiver for Windows 4.10 or Citrix Receiver for Mac 12.8 or Citrix Receiver for iOS 7.5 and above, you may encounter below issues: Session will get disconnect if...
CVE-2018-5776
WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...
UBUNTU-CVE-2018-5776
WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...
