7451 matches found
Chromium: Multiple vulnerabilities
Background Chromium is an open-source web browser project. Description Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers referenced below for details. Impact A remote attacker may be able to cause a Denial of Service condition, gain privileges via a...
RHEL 6 : chromium-browser (RHSA-2015:0163)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:0163 advisory. Chromium is an open-source web browser, powered by WebKit Blink. Several flaws were found in the processing of malformed web content. A web...
Microsoft Internet Explorer Cross-Domain Information Disclosure Vulnerability (CNVD-2015-01088)
Microsoft Internet Explorer is a popular WEB browser. Microsoft Internet Explorer suffers from a cross-domain information disclosure vulnerability that can be exploited by an attacker to view the contents of a browser window from another domain or a secure zone to obtain sensitive information...
Microsoft Internet Explorer CVE-2015-0070 Cross Domain Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability. An attacker can exploit this issue to view content from a browser window in another domain or security zone. This may allow the attacker to obtain sensitive information or aid in further...
JVN#96155055: PerlTreeBBS vulnerable to cross-site scripting
PerlTreeBBS from Homepage Decorator is a tree-structured bulletin board software. PerlTreeBBS contains a persistent cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according ...
RHEL 6 : flash-plugin (RHSA-2015:0140)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:0140 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...
The popular game "heroes Union" and then exposed vulnerabilities: hackers can access player accounts to steal credits and coins-vulnerability warning-the black bar safety net
Famous foreign community Reddit recently broke the popular game "heroes Union" （LOL）one of the exploit programs exploit, the attacker can access the player account via a Web browser to open the in-game store for credits or gold transactions. Vulnerability description Initially this vulnerability ...
Enter: CSRF token leakage
Hi, I have noticed that when the account verification fails here : https://wallet.robocoin.com/verify/ due to an error, the CSRF token is being leaked via GET method like : https://wallet.robocoin.com/verify/id?csrf=b8ede20d-0c0b-4e16-9d05-6ad2ed8b72c4 So the authenticity token is being stored in...
[SECURITY] Fedora 21 Update: firefox-35.0.1-3.fc21
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
RHEL 5 / 6 : flash-plugin (RHSA-2015:0094)
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...
Important: Red Hat Security Advisory: chromium-browser security update
Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...
Google Chrome Denial of Service Vulnerability (CNVD-2015-00668)
Google Chrome is the United States Google Google company developed a Web browser. Google V8 is one of the open source JavaScript engine. The SimplifiedLowering::DoLoadBuffer function in the Google V8 compiler/simplified-lowering.cc in versions of Google Chrome prior to 40.0.2214.91 fails to selec...
CentOS Update for firefox CESA-2015:0046 centos6
Check the version of firefox SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882096";...
CentOS Update for firefox CESA-2015:0046 centos5
Check the version of firefox SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882091";...
UBUNTU-CVE-2014-7936
Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/locationbar/zoombubbleview.cc in the Views implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted docume...
MegaChat — Kim Dotcom launches end-to-end encrypted Video Calling Service
Are you worried about your privacy? Its Obvious because of a Hacker or the government could be snooping in your emails, voice or video calls. The Famous Internet entrepreneur Kim Dotcom, who introduced legendary Megaupload and Mega file sharing services to the World, has now released its latest...
Mozilla Firefox/SeaMonkey Web Audio Denial of Service Vulnerability
Firefox/SeaMonkey is a web browser and newsgroup client released by Mozilla. A denial of service vulnerability exists in Mozilla Firefox/SeaMonkey, which can be exploited by an attacker to crash the application, cause a denial of service or launch further attacks to obtain sensitive information...
CentOS 5 / 6 / 7 : firefox / xulrunner (CESA-2015:0046)
Updated firefox packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...