MS13-052: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: July 9, 2013

MS13-052: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: July 9, 2013 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could...

MS13-052: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: July 9, 2013

MS13-052: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: July 9, 2013 View products that this article applies to. August 13, 2013 This security update has been re-released and contains updated files. We recommend that you apply this updated...

JVN#71538099: Olive Diary DX vulnerable to cross-site scripting

Olive Diary DX provided by Olive Design contains a cross-site scripting vulnerability CWE-79 due to a flaw in processing the page parameter. Impact An artbitrary script may be executed on the user's web browser. Solution Do not use Olive Diary DX Olive Diary DX is no longer being developed or...

JVN#60879379: Olive Blog vulnerable to cross-site scripting

Olive Blog provided by Olive Design contains a cross-site scripting vulnerability CWE-79 due to a flaw in processing the search parameter. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use Olive Blog Olive Blog is no longer being developed or maintained. It...

Firefox Beta — Web Browser - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Firefox Beta — Web Browser published at the 'play' market has multiple vulnerabilities...

w3m denial of service vulnerability (CNVD-2016-13127)

w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-33. A remote attacker can exploit this vulnerability to cause a denial of service segmentation error and crash with the help of specially crafted HTML pages...

CentOS 5 / 6 / 7 : firefox (CESA-2016:2946)

An update for firefox is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

[SECURITY] Fedora 23 Update: firefox-50.1.0-1.fc23

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 24 Update: chromium-55.0.2883.87-1.fc24

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 25 Update: firefox-50.1.0-1.fc25

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 25 Update: chromium-55.0.2883.87-1.fc25

Chromium is an open-source web browser, powered by WebKit Blink...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2016-12797)

Apple Safari, iCloud for Windows, iTunes, iOS, and tvOS are products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems; iTunes is a suite of media player applications. WebKit is an open source web browser engine developed b...

Critical: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Debian: Security Advisory (DSA-3734-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2016-9633

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service infinite loop and resource consumption via a crafted HTML page...

DEBIAN-CVE-2016-9631

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

DEBIAN-CVE-2016-9625

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page...

DEBIAN-CVE-2016-9439

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page...

DEBIAN-CVE-2016-9424

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m doesn't properly validate the value of tag attribute, which allows remote attackers to cause a denial of service heap buffer overflow crash and possibly execute arbitrary code via a crafted HTML page...

PT-2016-7747 · W3M +2 · W3M +2

Name of the Vulnerable Software and Affected Versions: w3m versions prior to 0.5.3-31 Description: An issue in the w3m fork allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted HTML page. This is due to a buffer overflow in the formUpdateBuffer...