GStreamer Bad Plug-ins Integer Overflow Vulnerability

GStreamer is a set of frameworks for handling streaming media.Bad Plug-ins is a decoding component. An integer overflow vulnerability exists in GStreamer Bad Plug-ins. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

Denial of Service Vulnerability in Multiple NVIDIA Products

NVIDIA Quadro, NVS, and GeForce are all graphics card products from NVIDIA Corporation in the U.S. GFE GameStream and NVTray are among the components used to optimize graphics cards. A denial of service vulnerability exists in the GFE GameStream and NVTray plug-ins for NVIDIA Quadro, NVS, and...

MS16-099: Description of the security update for Outlook 2016: August 9, 2016

None None...

MS16-088: Description of the security update for Outlook 2016: July 12, 2016

None None...

MS16-088: Description of the security update for Excel 2016: July 12, 2016

None None...

MS16-088: Description of the security update for Excel 2013: July 12, 2016

MS16-088: Description of the security update for Excel 2013: July 12, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

The vulnerability of the Safari browser allows a hacker to circumvent existing restrictions on sending requests.

The vulnerability of the WebKit Plug-ins component of the Safari browser exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent existing restrictions on sending requests through a specially crafted website...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2016-03998)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 47.0. An attacker can exploit the vulnerability to disclose information about all plug-ins installed on the system...

openSUSE Security Update : gcc5 (openSUSE-2016-472)

The GNU Compiler Collection was updated to version 5.3.1, which brings several fixes and enhancements. The following security issue has been fixed : - Fix C++11 std::randomdevice short read issue that could lead to predictable randomness. CVE-2015-5276, bsc945842 The following non-security issues...

Ab Ins Kino - Kinoprogramm - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ab Ins Kino - Kinoprogramm published at the 'play' market has multiple vulnerabilities...

openSUSE Security Update : ppp (openSUSE-2015-827)

The ppp package was updated to fix one security issue. - CVE-2015-3310: Fixed buffer overflow in radius plug-ins rcmksid bnc927841. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Design/Logic Flaw

The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection aka 3xx status code to a plugin, which allows remote attackers to bypass intended request restrictions via a crafted web site...

CVE-2015-5828

The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection aka 3xx status code to a plugin, which allows remote attackers to bypass intended request restrictions via a crafted web site...

UBUNTU-CVE-2015-5828

The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection aka 3xx status code to a plugin, which allows remote attackers to bypass intended request restrictions via a crafted web site...

CVE-2015-5828

The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection aka 3xx status code to a plugin, which allows remote attackers to bypass intended request restrictions via a crafted web site...

Mac OS X : Apple Safari < 9.0 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is prior to 9.0. It is, therefore, affected by multiple vulnerabilities in the following components : - Safari - Safari Downloads - Safari Extensions - Safari Safe Browsing - WebKit - WebKit CSS - WebKit JavaScript Bindings - WebKi...

Kirby CMS multi-vulnerability analysis-vulnerability warning-the black bar safety net

Kirby CMS is an easy to use, easy to install and setup is very flexible CMS system, no database support, the use of file system storage. Support Markdown grammar, templates and plug-ins. Vulnerability details In Kirby CMS found two vulnerabilities: 1. By path traversal authentication bypass 2. Th...

[SECURITY] Fedora 20 Update: dovecot-2.2.16-2.fc20

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...

Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (20150305)

An information disclosure flaw was found in the way the 389 Directory Server stored information in the Changelog that is exposed via the 'cn=changelog' LDAP sub-tree. An unauthenticated user could in certain cases use this flaw to read data from the Changelog, which could include sensitive...

389 security update

CentOS Errata and Security Advisory CESA-2015:0416 Updated 389-ds-base packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common...