114 matches found
USN-3275-1 openjdk-8 vulnerabilities
It was discovered that OpenJDK improperly re-used cached NTLM connections in some situations. A remote attacker could possibly use this to cause a Java application to perform actions with the credentials of a different user. CVE-2017-3509 It was discovered that an untrusted library search path fl...
sos security and bug fix update
3.2-28.0.1.2 - Add vendor, vendor URL info for Oracle Linux orabug 17656507 [email protected] - Direct traceroute to linux.oracle.com John Haxby orabug 11713272 [email protected] - Check oraclelinux-release instead of redhat-release to get OS version John Haxby bug 11681869 [email protected] -...
Apple Fixes Cookie Access Vulnerability in Safari on Billions of Devices
When Apple pushed out its most recent round of patches last week it fixed a cookie vulnerability that existed in all versions of Safari, including those that run on iOS, OS X, and Windows. According to researchers who dug it up, the number of affected devices may total one billion. The issue –...
Safari Cross-Domain Hijacking
OVERVIEW ========== The 4/8/2015 security updates from Apple included a patch for a Safari cross-domain vulnerability. An attacker could create web content which, when viewed by a target user, bypasses some of the normal cross-domain restrictions to access or modify HTTP cookies belonging to any...
CVE-2015-1126
WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not properly handle the userinfo field in FTP URLs, which allows remote attackers to trigger incorrect resource access via unspecified vectors...
CVE-2015-1126
WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not properly handle the userinfo field in FTP URLs, which allows remote attackers to trigger incorrect resource access via unspecified vectors...
CVE-2011-3083
browser/profiles/profileimpliodata.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted web page...
CVE-2011-3083
browser/profiles/profileimpliodata.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted web page...
CVE-2011-3083
Removed by vendor...
CVE-2011-3083: Improper Restriction of Operations within the Bounds of a Memory Buffer
browser/profiles/profileimpliodata.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted web page...
urllib2): Improper management of ftp:// and file:// URL schemes (Issue #11662)
The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service resource consumption via a crafted URL, as...
CVE-2011-1469: Undefined Security Weakness
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service application crash by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper...
CVE-2011-1469
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service application crash by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper...
Mandriva Update for squid MDKSA-2007:026 (squid)
Check for the Version of squid OpenVAS Vulnerability Test Mandriva Update for squid MDKSA-2007:026 squid Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Firefox Web Browser FTP Client XSS Vulnerability (Linux)
The host is installed with Mozilla Firefox browser and is prone to Cross Site Scripting XSS Vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxftpclntxssvulnlin.nasl 6539 2017-07-05 12:02:14Z cfischer $ Firefox Web Browser FTP Client XSS Vulnerability Linux Authors: Chandan S Copyright:...
CVE-2008-4724
Multiple cross-site scripting XSS vulnerabilities in Google Chrome 0.2.149.30 allow remote attackers to inject arbitrary web script or HTML via an ftp:// URL for an HTML document within a 1 JPG, 2 PDF, or 3 TXT file. NOTE: the provenance of this information is unknown; the details are obtained...
CVE-2008-4723
Multiple cross-site scripting XSS vulnerabilities in Mozilla Firefox 3.0.1 through 3.0.3 allow remote attackers to inject arbitrary web script or HTML via an ftp:// URL for an HTML document within a 1 JPG, 2 PDF, or 3 TXT file. NOTE: the provenance of this information is unknown; the details are...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Google Chrome 0.2.149.30 allow remote attackers to inject arbitrary web script or HTML via an ftp:// URL for an HTML document within a 1 JPG, 2 PDF, or 3 TXT file. NOTE: the provenance of this information is unknown; the details are obtained...
CVE-2008-4724
Multiple cross-site scripting XSS vulnerabilities in Google Chrome 0.2.149.30 allow remote attackers to inject arbitrary web script or HTML via an ftp:// URL for an HTML document within a 1 JPG, 2 PDF, or 3 TXT file. NOTE: the provenance of this information is unknown; the details are obtained...