Mozilla: Potentially exploitable crash due to 360 Total Security

A flaw was found in the 360 Total Security code in Firefox and Thunderbird. Memory corruption is possible in the accessibility engine that could lead to an exploit to run arbitrary code. This vulnerability could be exploited over a network connection and would affect confidentiality and integrity...

Design/Logic Flaw

In K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120; and K7 Ultimate Security 16.0.xxx through 16.0.0120, the module K7TSHlpr.dll improperly validates the administrative privileges of the user, allowing arbitrary registry writes in the K7AVOptn.dll...

CVE-2019-16897

In K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120; and K7 Ultimate Security 16.0.xxx through 16.0.0120, the module K7TSHlpr.dll improperly validates the administrative privileges of the user, allowing arbitrary registry writes in the K7AVOptn.dll...

Critical: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Mozilla: Potentially exploitable crash due to 360 Total Security

A flaw was found in the 360 Total Security code in Firefox and Thunderbird. Memory corruption is possible in the accessibility engine that could lead to an exploit to run arbitrary code. This vulnerability could be exploited over a network connection and would affect confidentiality and integrity...

Mozilla: Potentially exploitable crash due to 360 Total Security

A flaw was found in the 360 Total Security code in Firefox and Thunderbird. Memory corruption is possible in the accessibility engine that could lead to an exploit to run arbitrary code. This vulnerability could be exploited over a network connection and would affect confidentiality and integrity...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to denial of service DoS. It is potentially exploitable crash due to 360 Total Security...

RHEL 7 : firefox (RHSA-2019:3193)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3193 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

KLA11591 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Vulnerability related to document.domain can be exploited...

WordPress total-security plugin input validation error vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. total-security is a website security vulnerability scanning plugin used in it. An input validation error vulnerability exists in the...

WordPress total-security plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. total-security is a website security vulnerability scanning plugin used in it. A cross-site scripting vulnerability exists in the...

CVE-2016-10898

The total-security plugin before 3.4.1 for WordPress has XSS...

CVE-2016-10898

The total-security plugin before 3.4.1 for WordPress has XSS...

CVE-2016-10899

The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability...

Cross site scripting

The total-security plugin before 3.4.1 for WordPress has XSS...

Design/Logic Flaw

The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability...

CVE-2016-10898

The CVE-2016-10898 entry corresponds to a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin total-security. Multiple connected sources confirm the affected product is the Total Security WordPress plugin and indicate the issue exists in versions before 3.4.1. The Red Hat, CNVD, CVE ...

CVE-2016-10899

The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability...

CVE-2016-10899

The CVE-2016-10899 entry concerns the WordPress Total Security plugin prior to version 3.4.1, described as a settings-change vulnerability. Multiple connected sources (Red Hat, NVD, CNVD, WPVulnDB, CVE listing) converge on a vulnerability in the plugin’s settings handling that could allow unautho...

Information disclosure

Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpage for example, via clicking phishing link. Vulnerability has CVSS v3.0 base...