CVE-2018-1246

Dell EMC Unity and UnityVSA are affected by CVE-2018-1246, a reflected cross-site scripting vulnerability in Unisphere. An unauthenticated remote attacker could entice a user to submit malicious HTML/JavaScript to Unisphere, which is then reflected back and executed by the user’s browser. The vul...

CVE-2018-1246

Dell EMC Unity and UnityVSA contains reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or Java Script code to Unisphere, which is then reflected back to the...

firefox security update

CentOS Errata and Security Advisory CESA-2018:2835 An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

WebKit Memory Misreference Vulnerability in Multiple Apple Products (CNVD-2018-20999)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems. iTunes for Windows is a media player and application for the Windows platform. WebKit is one of the web browser engine components...

CVE-2018-6052

The CVE-2018-6052 entry documents a vulnerability in Google Chrome (Blink) where the no-referrer policy policy was incompletely implemented, allowing a remote attacker to obtain referrer details from a page that believed it opted out. Affected software is Google Chrome (Blink component); impact i...

Mozilla Firefox < 62.0.2 Vulnerability (macOS)

The version of Mozilla Firefox installed on the remote macOS host is prior to 62.0.2. It is, therefore, affected by a vulnerability as noted in Mozilla Firefox stable channel update release notes for 2018/09/21. Please refer to the release notes for additional information. Note that Nessus has no...

WordPress FV Flowplayer 7.2.0.727 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Reflected XSS in FV Flowplayer Wordpress plugin ================================================================ Author: Janek Vind "waraxe" Date: 20. September 2018 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-107.html Target...

[SECURITY] Fedora 27 Update: chromium-69.0.3497.92-1.fc27

Chromium is an open-source web browser, powered by WebKit Blink...

Debian DSA-4297-1 : chromium-browser - security update

Two vulnerabilities have been discovered in the chromium web browser. Kevin Cheung discovered an error in the WebAssembly implementation and evil1m0 discovered a URL spoofing issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

[SECURITY] [DSA 4297-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4297-1 [email protected] https://www.debian.org/security/ Michael Gilbert September 19, 2018 https://www.debian.org/security/faq -...

[SECURITY] Fedora 27 Update: firefox-62.0-2.fc27

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

firefox security update

CentOS Errata and Security Advisory CESA-2018:2692 An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Mozilla Firefox Memory Corruption Vulnerability (CNVD-2018-21819)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox. A remote attacker can exploit the vulnerability to cause memory corruption or possibly execute arbitrary code...

Microsoft Internet Explorer CVE-2018-8470 Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions. This may lead to other attacks. Internet Explorer 11 is vulnerable. Technologies...

Microsoft Office SharePoint CVE-2018-8426 Cross Site Scripting Vulnerability

Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

Microsoft Edge CVE-2018-8425 Spoofing Vulnerability

Description Microsoft Edge is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft Edge...

[SECURITY] [DSA 4289-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4289-1 [email protected] https://www.debian.org/security/ Michael Gilbert September 07, 2018 https://www.debian.org/security/faq -...

[SECURITY] Fedora 28 Update: firefox-62.0-2.fc28

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Mozilla Firefox < 62 Multiple Critical Vulnerabilities (macOS)

The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 62. It is, therefore, affected by multiple critical and high severity vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid117291; scriptversion"1.8";...

Cisco Meeting Server Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the...