Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2015-04903)

Google Chrome is an open source WEB browser. Google Chrome's automatic open list handling suffers from a security vulnerability that allows attackers to build malicious WEB pages, trick users into parsing them, and allow executable files to be executed immediately after download...

Unspecified vulnerability in Oracle MySQL client component

Oracle MySQL Server is a relational and popular database. A security vulnerability exists in the client subcomponent of Oracle MySQL Server, which can be exploited by remote attackers to construct a malicious WEB page and trick users into parsing it, which can impact system availability...

EMC Documentum CenterStage Cross-Site Scripting Vulnerability

EMC Documentum CenterStage is a document management service. A cross-site scripting vulnerability in EMC Documentum CenterStage allows remote attackers to construct malicious URIs, trick users into parsing them, and perform malicious actions in the context of the target user...

Cisco TelePresence MCU 4500 Device Cross-Site Request Forgery Vulnerability

The Cisco TelePresence MCU 4500 is a multimedia conferencing bridge product. A cross-site request forgery vulnerability exists in the Cisco TelePresence MCU 4500 device, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in...

Drupal Node Template Module Cross-Site Request Forgery Vulnerability

Drupal is a free and open source content management system developed in PHP.Node Template is a module that uses the structure and data of nodes as a template. A cross-site request forgery vulnerability exists in the Drupal Node Template module that allows a remote attacker to construct a maliciou...

CVE-2015-4369

Cross-site scripting XSS vulnerability in the Trick Question module before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer Trick Question" permission to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Trick Question module before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer Trick Question" permission to inject arbitrary web script or HTML via unspecified vectors...

Ektron Cross-Site Request Forgery Vulnerability

Ektron is an enterprise-level Web content management system. A cross-site request forgery vulnerability exists in Ektron that allows remote attackers to construct malicious URIs and trick users into parsing them, which can perform malicious actions in the context of the target user...

Drupal Invoice Module Cross-Site Request Forgery Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site request forgery vulnerability exists in Drupal Invoice, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform malicious actions...

Drupal Decisions Module Cross-Site Request Forgery Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site request forgery vulnerability exists in Drupal Decisions, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform malicious actions...

Unspecified Buffer Overflow Arbitrary Code Execution Vulnerability in Adobe Reader/Acrobat

Adobe Reader/Acrobat are popular applications for processing PDF files. A buffer overflow vulnerability exists in Adobe Reader/Acrobat's handling of particular PDF files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing them, whi...

Shopify: Content Spoofing

Hi, Content Spoofing almost all in the myshopify admin account. Content Spoofing an attack technique used to trick a user into thinking that fake web site content is legitimate data. https://YOURSHOP.myshopify.com/admin?error=CONTENT SPOOFING...

Google Chrome Denial of Service Vulnerability (CNVD-2015-02653)

Google Chrome is a web browser developed by the American company Google Google. Google Chrome versions prior to 42.0.2311.90 fail to ask the user before changing CONTENTSETTINGSTYPEFULLSCREEN and CONTENTSETTINGSTYPEMOUSELOCK, which could allow a remote attacker to construct an HTML document with ...

MikroTik RouterOS Cross-Site Request Forgery Vulnerability

MikroTik RouterOS is an operating system for routers. MikroTik RouterOS suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions, such as changing passwords, in the context of...

Drupal Trick Question module cross-site scripting vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Trick Question is one of the CAPTCHA type spam defense modules. A cross-site scripting vulnerability exists in the Drupal Trick Question module. The vulnerability is due to the program...

Fat Free CRM Cross-Site Request Forgery Vulnerability

Fat Free CRM is a customer application management. Fat Free CRM suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform malicious actions...

[SECURITY] [DSA 3161-1] dbus security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3161-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 11, 2015 http://www.debian.org/security/faq -...

Unspecified Type Obfuscation Vulnerability in Adobe Flash Player

Adobe Flash Player is a Flash file handling program. An unspecified type obfuscation vulnerability exists in Adobe Flash Player, which allows attackers to construct malicious SWF files that can be tricked into parsing by a user, which can then be used in an application context to execute arbitrar...

Pigz directory traversal vulnerability

pigz is a compression processing tool. A directory traversal vulnerability exists in pigz that allows remote attackers to construct malicious files and trick users into parsing them, which can overwrite system directory files...

Unspecified Vulnerability in Adobe Flash Player and AIR

Adobe Flash Player is a Flash file handling program.Adobe Air is a cross-OS runtime library from Adobe. An unspecified vulnerability exists in Adobe Flash Player/AIR that allows attackers to construct malicious SWF files, trick users into parsing them, and execute arbitrary code in the context of...