Moderate: Red Hat Security Advisory: Red Hat Ceph Storage 3.0 security and bug fix update

An update for ceph is now available for Red Hat Ceph Storage 3.0 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Mozilla Firefox <= 1.5.0.7/ 2.0 (createRange) Remote DoS Exploit

No description provided by source. !-- ------------------------------------------------- Gotfault Security - Advisory 05 - 27/10/06 ------------------------------------------------- Software : Firefox Homepage : http://www.mozilla.com/ Vulnerable : 1.5.0.7 and below, 2.0 Risk : Moderate Impact :...

Cisco Adaptive Security Appliance Software and Firewall Services Module Software Time-Range Object Access List Bypass Vulnerability

A vulnerability in the implementation of the time-range object could allow an unauthenticated, remote attacker to bypass access lists that are using the time-range option. The vulnerability is due to improper implementation of the code for the time-range object, when the periodic command is used...

Apple Safari WebKit Range Object Remote Code Execution (CVE-2011-0115)

A Remote attacker can exploit this vulnerability by enticing an unsuspecting target user to open a maliciously crafted web page. Successful exploitation of this vulnerability may enable an attacker to execute code in an affected system in the security context of the logged in user. A remote code...

Mozilla Firefox Range脚本对象拒绝服务漏洞

Firefox是一款开放源码的WEB浏览器。 Firefox的Range对象中存在空指针引用问题，成功利用这个漏洞的攻击者可以导致浏览器崩溃。 可以使用selectNode方式初始化Range对象选择将要注入Range中的节点，也可以使用createContextualFragment方式创建文档碎片，如下所示： var tagString = "divI am a div node/div"; var range = document.createRange; range.selectNodedocument.getElementsByTagName"div".item0; var...

CVE-2006-5633

Firefox 1.5.0.7 and 2.0, and Seamonkey 1.1b, allows remote attackers to cause a denial of service crash by creating a range object using createRange, calling selectNode on a DocType node DOCUMENTTYPENODE, then calling createContextualFragment on the range, which triggers a null dereference. NOTE:...

CVE-2002-0861: Undefined Security Weakness

Microsoft Office Web Components OWC 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the 1 Copy method of the Cell object or 2 the Paste method of the Range object...