Electron may insecurely load Node modules

Overview Electron fails to restrict the path for loading Node modules, which may lead to execution of arbitrary JavaScript. Electron is a software framework for developing cross-platformm desktop applications with web technologies, such as HTML, CSS, JavaScript with Chromium and Node.js. Electron...

Cisco AnyConnect Secure Mobility Client Search Path Handling Vulnerability

The Cisco AnyConnect Secure Mobility Client is a set of next-generation VPN clients. The client enables remote users to securely connect to Cisco ASA 5500 devices over SSL VPN. The 'CMainThread::launchDownloader' function in the vpndownloader.exe file of the Cisco AnyConnect Secure Mobility Clien...

qemu security update

CentOS Errata and Security Advisory CESA-2013:1100 Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...

Important: Red Hat Security Advisory: spice-vdagent-win security and bug fix update

An update for spice-vdagent-win that fixes one security issue and several bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

CentOS Update for xmlsec1 CESA-2011:0486 centos5 x86_64

Check for the Version of xmlsec1 OpenVAS Vulnerability Test CentOS Update for xmlsec1 CESA-2011:0486 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...