UBUNTU-CVE-2016-10208

The ext4fillsuper function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service out-of-bounds read and system crash via a crafted ext4 image...

[SECURITY] Fedora 24 Update: kernel-4.9.6-100.fc24

The kernel meta package...

[SECURITY] Fedora 25 Update: kernel-4.9.6-200.fc25

The kernel meta package...

puertogaitan-meta.gov.co XSS vulnerability

Open Bug Bounty ID: OBB-204087 Description| Value ---|--- Affected Website:| puertogaitan-meta.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-10097

XML External Entity XXE Vulnerability in /SSOPOST/metaAlias/%realm%/idpv2 in OpenAM - Access Management 10.1.0 allows remote attackers to read arbitrary files via the SAMLRequest parameter...

PT-2016-6370

Name of the Vulnerable Software and Affected Versions VMware Identity Manager versions prior to 2.7.1 vRealize Automation versions prior to 7.2.0 Description The issue allows remote attackers to read sensitive files, specifically /SAAS/WEB-INF and /SAAS/META-INF files, via unspecified vectors...

[SECURITY] Fedora 24 Update: kernel-4.8.15-200.fc24

The kernel meta package...

[SECURITY] Fedora 25 Update: kernel-4.8.15-300.fc25

The kernel meta package...

[SECURITY] Fedora 24 Update: kernel-4.8.14-200.fc24

The kernel meta package...

[SECURITY] Fedora 23 Update: kernel-4.8.13-100.fc23

The kernel meta package...

[SECURITY] Fedora 25 Update: kernel-4.8.13-300.fc25

The kernel meta package...

[SECURITY] Fedora 24 Update: kernel-4.8.12-200.fc24

The kernel meta package...

Cross-Site Scripting (XSS)

django-meta is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary javascript due to the lack of escaping values before rendering...

Firefox - SVG cross domain cookie vulnerability （CVE-2016-9078）

Original link: http://insert-script.blogspot.jp/2016/12/firefox-svg-cross-domain-cookie.html Author: the Alex Inführ Translation: Holic know Chong Yu 404 Safety laboratory , this article has additions and changes Note: the vulnerability only affects Firefox 49 and 50 version, details see the...

[SECURITY] Fedora 24 Update: kernel-4.8.11-200.fc24

The kernel meta package...

BlueZ read-across-the-border vulnerability (CNVD-2016-11953)

BlueZ is an official Bluetooth stack for Linux. A security vulnerability exists in the 'lemetaevdump' function in the tools/parser/hci.c source file of BlueZ version 5.42. An attacker can exploit this vulnerability to read data across boundaries...

UBUNTU-CVE-2016-9803

In BlueZ 5.42, an out-of-bounds read was observed in "lemetaevdump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' which is used to read correct element from 'evlemetastr' array is overflowed...

[SECURITY] Fedora 24 Update: kernel-4.8.8-200.fc24

The kernel meta package...

[SECURITY] Fedora 24 Update: kernel-4.8.7-200.fc24

The kernel meta package...

VK.com: Stored XSS в личных сообщениях

Lack of data filtration, which leads to stored XSS in instant messenger service. Stored XSS in personal messages. The vulnerability exists due to the lack of filtering data which is taken from the META tags for demonstration preview of the site...