190 matches found
RTL Televizija (+widget) - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application RTL Televizija +widget published at the 'play' market has multiple vulnerabilities...
RTL Televizija - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application RTL Televizija published at the 'play' market has multiple vulnerabilities...
RTL INSIDE - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application RTL INSIDE published at the 'play' market has multiple vulnerabilities...
rtl.de XSS vulnerability
Vulnerable URL: http://www.rtl.de/themen/thema/block-b-unter-arrest-t8571.html?" Details: Description| Value ---|--- Patched:| Yes, at 19.02.2016 Latest check for patch:| 19.02.2016 01:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5745 Google Pagerank| 6 VI...
rtl.de XSS vulnerability
Vulnerable URL: http://www.rtl.de/videos/die-einen-sind-heiss-wie-frittenfett-die-anderen-haben-angst-412505.html?'alert'XSSPOSED'...
Updated gcc packages fix security vulnerability and other bugs
Updated gcc packages fix the following security issue: Multiple integer overflow issues were found in libgfortran, the run-time support library for the Fortran compiler. These could possibly be used to crash a Fortran application or cause it to execute arbitrary code. CVE-2014-5044 They also fix...
UBUNTU-CVE-2014-1723
The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers IRIs, which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left RTL Unicode text...
CVE-2014-1723
The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers IRIs, which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left RTL Unicode text...
CVE-2014-1723
CVE-2014-1723 corresponds to a vulnerability in Google Chrome prior to version 34.0.1847.116 where the UnescapeURLWithOffsetsImpl function in net/base/escape.cc failed to correctly handle bidirectional IRIs, enabling remote attackers to spoof URLs via crafted RTL Unicode text. Public fixes are re...
CVE-2014-1723: Improper Input Validation
The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers IRIs, which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left RTL Unicode text...
SuSE 11.2 Security Update : LibreOffice (SAT Patch Number 6804)
LibreOffice was updated to SUSE 3.5 bugfix release 13 based on upstream 3.5.6-rc2 which fixes a lot of bugs. The following bugs have been fixed : - polygon fill rule. bnc759172 - open XML in Writer. bnc777181 - undo in text objects fdo36138 - broken numbering level. bnc760019 - better MathML...
Toko Lite CMS 1.5.2 - HTTP Response Splitting / Cross-Site Scripting
source: https://www.securityfocus.com/bid/49673/info Toko LiteCMS is prone to an HTTP-response-splitting vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script cod...
RTL TV Website - Persistent Service Vulnerabilities
Document Title: =============== RTL TV Website - Persistent Service Vulnerabilities Release Date: ============= 2011-08-27 Vulnerability Laboratory ID VL-ID: ==================================== 257 Product & Service Introduction: =============================== RTL Television formerly RTL plus i...
RTL TV Website - Persistent Service Vulnerabilities
Document Title: =============== RTL TV Website - Persistent Service Vulnerabilities Release Date: ============= 2011-08-27 Vulnerability Laboratory ID VL-ID: ==================================== 257 Product & Service Introduction: =============================== RTL Television formerly RTL plus i...
Joomla! Component QuickFAQ 1.0.3 - Blind SQL Injection
Joomla! Component QuickFAQ 1.0.3 - Blind SQL Injection ----------------------------------------------------------------------------------------- Joomla Component comquickfaq BSQL-i Vulnerability ----------------------------------------------------------------------------------------- +Title Jooml...
Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : thunderbird vulnerabilities (USN-915-1)
Several flaws were discovered in the JavaScript engine of Thunderbird. If a user had JavaScript enabled and were tricked into viewing malicious web content, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program...
mozilla -- multiple vulnerabilities
Mozilla Project reports: MFSA 2010-07 Fixes for potentially exploitable crashes ported to the legacy branch MFSA 2010-06 Scriptable plugin execution in SeaMonkey mail MFSA 2009-68 NTLM reflection vulnerability MFSA 2009-62 Download filename spoofing with RTL override MFSA 2009-59 Heap buffer...
CVE-2010-0049
Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via HTML elements with right-to-left RTL text directionality...
Design/Logic Flaw
Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via HTML elements with right-to-left RTL text directionality...
CVE-2010-0049
Technical details for CVE-2010-0049 are not publicly provided in the supplied Connected documents. The entries reference the vulnerability and related WebKit fixes broadly, but do not specify affected versions, root cause, exploit details, or mitigations. Monitor for updates.