IBM WebSphere Portal 8.0.0.1 CF11 Multiple XSS

The version of IBM WebSphere Portal on the remote host is affected by multiple cross-site scripting XSS vulnerabilities : - An XSS vulnerability exists in the Web Content Manager user interface. CVE-2014-0828 - An XSS vulnerability exists in the Social Rendering feature of the IBM Connections...

CVE-2014-0828

Cross-site scripting XSS vulnerability in the WCM Web Content Manager UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF11 allows remote attackers to inject arbitrary web script or HTML via unspecified...

CVE-2014-0828

CVE-2014-0828 is an XSS in IBM WebSphere Portal's Web Content Manager UI affecting WebSphere Portal 6.1.0.x (up to 6.1.0.6 CF27), 6.1.5.x (up to 6.1.5.3 CF27), 7.0.0.x (up to 7.0.0.2 CF27), and 8.0.0.x before 8.0.0.1 CF11. The root cause is insufficient input filtering in the WCM UI/Social Render...

CVE-2014-0828

Cross-site scripting XSS vulnerability in the WCM Web Content Manager UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF11 allows remote attackers to inject arbitrary web script or HTML via unspecified...

IBM WebSphere Portal Web Content Manager UI 跨站脚本漏洞

CVE ID:CVE-2014-0828 IBM WebSphere Portal提供了一个组合应用程序或业务mashup框架，并且提供了一种高级工具来构造灵活的，基于SOA的解决方案。 由于某些关于社会渲染功能的输入在返回用户前没有正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 0 IBM WebSphere Portal 6.x IBM WebSphere Portal 7.x IBM WebSphere Portal 8.x IBM WebSphere Portal 8.0.0.1 CF11版本以修复此漏洞，建议用户下载使用：...

SeaMonkey < 2.25 Multiple Vulnerabilities

Binary data 8172.prm...

Ubuntu 12.04 LTS / 12.10 / 13.10 : thunderbird vulnerabilities (USN-2151-1)

Benoit Jacob, Olli Pettay, Jan Varga, Jan de Mooij, Jesse Ruderman, Dan Gohman and Christoph Diehl discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit these to cause...

MGASA-2014-0137 Updated nss, firefox and thunderbird packages fix security vulnerabilities

In the NSS library before version 3.16, in a wildcard certificate, the wildcard character was embedded within the U-label of an internationalized domain name, which is not in accordance with RFC 6125 CVE-2014-1492. Several flaws were found in the processing of malformed web content. A web page...

Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64 (20140318)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2014-1493, CVE-2014-1510, CVE-2014-1511, CVE-2014-1512,...

RHEL 5 / 6 : thunderbird (RHSA-2014:0316)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2014:0316 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed web content. A we...

CentOS 5 / 6 : thunderbird (CESA-2014:0316)

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

RedHat Update for thunderbird RHSA-2014:0316-01

Check for the Version of thunderbird OpenVAS Vulnerability Test RedHat Update for thunderbird RHSA-2014:0316-01 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Oracle Linux 5 / 6 : thunderbird (ELSA-2014-0316)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-0316 advisory. 24.4.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 24.4.0-1 - Update to 24.4.0 Tenable has...

Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20140319)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. CVE-2014-1493, CVE-2014-1510, CVE-2014-1511, CVE-2014-1512,...

thunderbird security update

CentOS Errata and Security Advisory CESA-2014:0316 An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring...

Important: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

Out of bounds read during WAV file decoding — Mozilla

Security researcher Atte Kettunen from OUSPG reported an out of bounds read during the decoding of WAV format audio files for playback. This could allow web content access to heap data as well as causing a crash...

Information disclosure through polygon rendering in MathML — Mozilla

Security researcher Tyson Smith and Jesse Schwartzentruber of the BlackBerry Security Automated Analysis Team used the Address Sanitizer tool while fuzzing to discover an out-of-bounds read during polygon rendering in MathML. This can allow web content to potentially read protected memory...

Privilege escalation using WebIDL-implemented APIs — Mozilla

Security researcher Mariusz Mlynski, via TippingPoint's Pwn2Own contest, reported that it is possible for untrusted web content to load a chrome-privileged page by getting JavaScript-implemented WebIDL to call window.open. A second bug allowed the bypassing of the popup-blocker without user...