10918 matches found
Firefox 47 Fixes 13 Vulnerabilities, Removes Click-To-Activate Plugin Whitelist
Mozilla fixed 13 security issues, including two critical vulnerabilities that could have led to spoofing and clickjacking, among other issues, when it updated Firefox to the latest build, Firefox 47, this week. One of the issues, a buffer overflow, could have resulted in a potentially exploitable...
FreeBSD : NSS -- multiple vulnerabilities (32166082-53fa-41fa-b081-207e7a989a0a)
Mozilla Foundation reports : Mozilla has updated the version of Network Security Services NSS library used in Firefox to NSS 3.23. This addresses four moderate rated networking security issues reported by Mozilla engineers Tyson Smith and Jed Davis. %NASLMINLEVEL 70300 C Tenable Network Security,...
QQ browser privacy disclosure report-vulnerability warning-the black bar safety net
0x00 description QQ browser is Tencent development of a web browser, for Android, Windows, Mac and iOS and other platforms. Compared to the built-in browser, QQ browser provides richer functionality, for example, increase the tag window, and integrating the chat platform, etc. In the report a...
firefox: multiple issues
CVE-2016-2815 arbitrary code execution Mozilla developers and community members reported several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with...
VMSA-2016-0008:VMware vRealize Log Insight addresses HIGH and MEDIUM security issues
VMSA-2016-0008 VMware vRealize Log Insight addresses important and moderate security issues. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0008 VMware Security Advisory Synopsis: VMware vRealize Log Insight addresses important and moderate security issues. VMware Securi...
Amazon Linux AMI : php56 (ALAS-2016-706)
The following security-related issues were resolved : Out-of-bounds read in imagescale CVE-2013-7456 Integer underflow causing arbitrary null write in fread/gzread CVE-2016-5096 Integer overflow in phphtmlentities CVE-2016-5094 Integer overflow in phpfilterfullspecialchars CVE-2016-5095...
Якитория - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Якитория published at the 'play' market has multiple vulnerabilities...
[slackware-security] ntp
New ntp packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/ntp-4.2.8p8-i486-1slack14.1.txz: Upgraded. This release patches one high and four low severity security issues:...
Zoho OpManager Cross Site Request Forgery / Cross Site Scripting
Reported these 27/08/2015 these were eventually fixed in version 12 because the entire application is based on emberjs now. There are no CVEs for these issues assigned nor is there any acknowledgement of the issues in any patches. Therefore only version 12 fixes these. Multiple stored and reflect...
Medium: php55
Issue Overview: The following security-related issues were resolved: Out-of-bounds read in imagescale CVE-2013-7456 Integer underflow causing arbitrary null write in fread/gzread CVE-2016-5096 The pharmakedirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3...
Moxa Discontinuing Vulnerable Line of ICS Devices
A vulnerability that exists in embedded computers manufactured by Moxa could allow remote authenticated users to overwrite firmware, in turn rendering the devices unusable. Moxa, a Taiwan-based networking company, announced recently that instead of patching the line of products affected by the...
openSUSE Security Update : openssh (openSUSE-2016-668)
This update for OpenSSH fixes three security issues. These security issues were fixed : - CVE-2016-3115: Sanitise input for xauth1 bsc970632 - CVE-2016-1908: Prevent X11 SECURITY circumvention when forwarding X11 connections bsc962313 - CVE-2015-8325: Ignore PAM environment when using login...
chromium: multiple issues
CVE-2016-1672: Cross-origin bypass in extension bindings. Credit to Mariusz Mlynski. - CVE-2016-1673: Cross-origin bypass in Blink. Credit to Mariusz Mlynski. - CVE-2016-1674: Cross-origin bypass in extensions. Credit to Mariusz Mlynski. - CVE-2016-1675: Cross-origin bypass in Blink. Credit to...
[slackware-security] libxml2
New libxml2 packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/libxml2-2.9.4-i486-1slack14.1.txz: Upgraded. This release fixes bugs and security issues: Heap-based buffer underreads due to...
Updated openvpn packages fix security vulnerabilities
Updated openvpn packages fix security vulnerabilities: The openvpn package has been updated to version 2.3.11, which fixes several bugs and possible security issues. See the upstream ChangeLog for details...
SUSE-SU-2016:1374-1 Security update for MozillaFirefox
This update to MozillaFirefox 38.8.0 ESR fixes the following security issues bsc977333: - CVE-2016-2805: Miscellaneous memory safety hazards - MFSA 2016-39 bsc977374 - CVE-2016-2807: Miscellaneous memory safety hazards - MFSA 2016-39 bsc977376 - CVE-2016-2808: Write to invalid HashMap entry throu...
SUSE SLES10 Security Update : openssl (SUSE-SU-2016:1360-1)
This update for OpenSSL fixes the following security issues : CVE-2016-2105: EVPEncodeUpdate overflow bsc977614 CVE-2016-2106: EVPEncryptUpdate overflow bsc977615 CVE-2016-2108: Memory corruption in the ASN.1 encoder bsc977617 CVE-2016-2109: ASN.1 BIO excessive memory allocation bsc976942...
DLA-472-2 icedove - regression update
Bulletin has no description...
SUSE: Security Advisory for xen (SUSE-SU-2016:1318-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...