Important: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Microsoft Access CVE-2018-0799 Cross Site Scripting Vulnerability

Description Microsoft Access is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow...

Meltdown and Spectre

Cisco Talos is aware of three new vulnerabilities impacting Intel, AMD, Qualcomm and ARM processors used by almost all computers. We are investigating these issues and although we have not observed exploitation of these vulnerabilities in the wild, that does not mean that it has not occurred. We...

[SECURITY] Fedora 27 Update: firefox-57.0.4-1.fc27

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Gespage 7.4.8 Cross Site Scripting

CVE-2017-7998 Gespage stored cross-site-scripting XSS vulnerability Description Gespage is web solution providing a printer portal. Official Website: http://www.gespage.com/ The web application does not properly filter several parameters sent by users, allowing XSS code injection. These...

USN-3516-1 firefox vulnerabilities

It was discovered that speculative execution performed by modern CPUs could leak information through a timing side-channel attack, and that this could be exploited in web browser JavaScript engines. If a user were tricked in to opening a specially crafted website, an attacker could potentially...

Mozilla Firefox < 57.0.4 Speculative Execution Side-Channel Attack Vulnerability (Spectre) (macOS)

The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 57.0.4. It is, therefore, vulnerable to a speculative execution side-channel attack. Code from a malicious web page could read data from other web sites or private data from the browser itself. C Tenable...

Ubuntu: Security Advisory (USN-3516-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS : WebKitGTK+ vulnerabilities (USN-3514-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3514-1 advisory. A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, ...

Huge Flaws Affect Nearly Every Modern Device; Patch Could Hit CPU Performance

UPDATE: Researchers have finally disclosed complete technical details of two kernel side-channel attacks, Meltdown and Spectre—which affect not only Intel but also systems and devices running AMD, ARM processors—allowing attackers to steal sensitive data from the system memory. The first week of...

[SECURITY] Fedora 26 Update: chromium-63.0.3239.108-1.fc26

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 27 Update: chromium-63.0.3239.108-1.fc27

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 26 Update: lynx-2.8.9-0.20.dev16.fc26

Lynx is a text-based Web browser. Lynx does not display any images, but it does support frames, tables, and most other HTML tags. One advantage Lynx has over graphical browsers is speed; Lynx starts and exits quickly and swiftly displays web pages...

[SECURITY] Fedora 26 Update: shellinabox-2.20-5.fc26

Shell In A Box implements a web server that can export arbitrary command li ne tools to a web based terminal emulator. This emulator is accessible to any JavaScript and CSS enabled web browser and does not require any additional browser plugins...

Opera 50 Beta Version to Come with Cryptocurrency Mining Blocker

By Waqas Opera browser developers have good news for web users annoyed This is a post from HackRead.com Read the original post: Opera 50 Beta Version to Come with Cryptocurrency Mining Blocker...

Python 'Lib/webbrowser.py' Remote Command Execution Vulnerability

Python is an object-oriented, straightforward computer programming language. A remote command execution vulnerability exists in Python 'Lib/webbrowser.py', which allows remote attackers to exploit the vulnerability to construct malicious URIs and inject arbitrary code...

CVE-2017-17516

CVE-2017-17516 affects Reddit Terminal Viewer (RTV) 1.19.0. The vulnerability lies in scripts/inspect_webbrowser.py, which does not validate strings before launching the program specified by the BROWSER environment variable. This may allow remote attackers to perform argument-injection attacks vi...

Mozilla Firefox < 57.0.2

The version of Firefox installed on the remote Windows host is prior to 57.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2017-29 advisory. - A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebG...

Microsoft Exchange Server CVE-2017-11932 Spoofing Vulnerability

Description Microsoft Exchange Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. The following versions are affected:...

Google Chrome < 63.0.3239.84 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 63.0.3239.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 201712stable-channel-update-for-desktop advisory. - Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84...