Mozilla: Miscellaneous memory safety hazards (rv:31.4) (MFSA 2015-01)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary cod...

Vimeo: Vimeo.com - Reflected XSS Vulnerability

Hi. I want to report a Reflected xss vulnerability that I found in www.vimeo.com website and which can affect the safety of your users. This vulnerability allows an attacker to inject in web pages javascript content for sending malicious scripts to an unsuspecting user. This flaw can access any...

[SECURITY] Fedora 20 Update: links-2.8-4.fc20

Links is a web browser capable of running in either graphics or text mode. It provides a pull-down menu system, renders complex pages, has partial HTML 4.0 support including tables, frames and support for multiple character se ts and UTF-8, supports color and monochrome terminals and allows...

Internet Explorer Mouse Leave Event Handler Memory Corruption (MS10-018) - Ver2 (CVE-2010-0267)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To trigger this...

Adobe Shockwave Player <= 12.0.6.147 Memory Corruptions (APSB13-29) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is prior to or equal to 12.0.6.147. It is, therefore, affected by two memory corruption vulnerabilities. A remote attacker can exploit these issues by tricking a user into viewing a malicious Shockwave file, resulting in...

RHEL 6 : flash-plugin (RHSA-2014:1981)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2014:1981 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...

[SECURITY] Fedora 20 Update: mantis-1.2.17-4.fc20

Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis When t...

JVN#61181790: LinPHA vulnerable to cross-site scripting

LinPHA is a software to manage and host image files on the web. LinPHA contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use LinPHA LinPHA is no longer being developed or maintained, therefore it is recommended to...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Microsoft Internet Explorer XSS Filter CVE-2014-6365 Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security-bypass vulnerability that affects the XSS Filter. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. An attacker can exploit this issue to execute arbitrary script...

Microsoft Exchange Server Outlook Web Access CVE-2014-6326 Cross Site Scripting Vulnerability

Description Microsoft Exchange Server is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow...

Microsoft VBScript CVE-2014-6363 Remote Code Execution Vulnerability

Description Microsoft VBScript is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies...

[SECURITY] Fedora 19 Update: firefox-34.0-1.fc19

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 19 Update: kwebkitpart-1.3.4-5.fc19

KWebKitPart is a web browser component for KDE KPart based on QtWebKit. You can use it for example for browsing the web in Konqueror...

[SECURITY] Fedora 21 Update: firefox-34.0-1.fc21

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 20 Update: kwebkitpart-1.3.4-5.fc20

KWebKitPart is a web browser component for KDE KPart based on QtWebKit. You can use it for example for browsing the web in Konqueror...

[SECURITY] Fedora 20 Update: firefox-34.0-1.fc20

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Microsoft Internet Explorer CVE-2014-8967 Use After Free Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts may result in a denial-of-service condition. Technologies...

CentOS 5 / 6 / 7 : firefox (CESA-2014:1919)

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

firefox security update

CentOS Errata and Security Advisory CESA-2014:1919 Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS bas...