Mozilla多个产品更新文件权限设置漏洞

CVE ID:CVE-2014-1496 Mozilla Firefox/Thunderbird/SeaMonkey是Mozilla所发布的WEB浏览器和邮件/新闻组客户端。 Mozilla多个产品在升级过程中把文件展开后没有设置这些文件为只读属性，允许攻击者利用漏洞在升级过程中修改或替换这些文件。 0 Mozilla Firefox 27 Mozilla Firefox ESR 24.3 Mozilla Thunderbird 24.3 Mozilla Seamonkey 2.24 Mozilla Firefox 28，Firefox ESR 24.4，Thunderbird...

Google Chrome目录遍历漏洞

Bugtraq ID:66249 CVE ID:CVE-2014-1715 Google Chrome是一款流行的WEB浏览器。 Google Chrome存在目录遍历漏洞，允许远程攻击者利用漏洞构建恶意WEB页，诱使用户解析。 0 Google Chrome Google Chrome 33.0.1750.152和33.0.1750.154已经修复该漏洞，建议用户下载更新： http://www.google.com/chrome...

Google Chrome ScopedClipboardWriter::WritePickledData任意代码执行漏洞

Bugtraq ID:66252 CVE ID:CVE-2014-1714 Google Chrome是一款流行的WEB浏览器。 Google Chrome中ScopedClipboardWriter::WritePickledData函数ui/base/clipboard/scopedclipboardwriter.cc没有正确校验部分格式值漏洞，允许远程攻击者利用漏洞构建恶意WEB页，诱使用户解析，可使应用程序崩溃或执行任意代码。 0 Google Chrome Chrome 33.0.1750.152和33.0.1750.154已经修复该漏洞，建议用户下载更新：...

RedHat Update for firefox RHSA-2014:0310-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for firefox CESA-2014:0310 centos5

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2014:0310 centos5 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

RedHat Update for firefox RHSA-2014:0310-01

Check for the Version of firefox OpenVAS Vulnerability Test RedHat Update for firefox RHSA-2014:0310-01 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for firefox CESA-2014:0310 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

firefox security update

CentOS Errata and Security Advisory CESA-2014:0310 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVS...

RHEL 6 : firefox (RHSA-2014:0310)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2014:0310 advisory. Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found ...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

Mozilla Firefox越界内存破坏漏洞

Bugtraq ID:66240 Mozilla Firefox是一款流行的WEB浏览器。 Mozilla Firefox存在一个未明越界内存破坏漏洞，允许远程攻击者利用漏洞构建恶意WEB页，诱使用户解析，可使应用程序崩溃或执行任意代码。 0 Mozilla Firefox 目前没有详细解决方案提供： http://www.mozilla.org...

Google Chrome释放后使用任意代码执行漏洞

Bugtraq ID：66243 CVE ID：CVE-2014-1713 Google Chrome是一款流行的WEB浏览器。 Google Chrome存在释放后使用漏洞，允许远程攻击者利用漏洞构建恶意WEB页，诱使用户解析，可使应用程序崩溃或执行任意代码。 0 Google Chrome 目前没有详细解决方案提供： http://www.google.com/chrome...

Microsoft Internet Explorer多个安全漏洞

Bugtraq ID:66244 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer存在多个未明安全漏洞，允许远程攻击者利用漏洞构建恶意WEB页，诱使用户解析，可使应用程序崩溃或执行任意代码。 0 Microsoft Internet Explorer 目前没有详细解决方案提供： http://www.microsoft.com...

Apple Safari未明堆缓冲区溢出漏洞

Bugtraq ID:66242 Apple Safari是一款流行的WEB浏览器。 Apple Safari存在一个基于堆的缓冲区溢出漏洞，允许远程攻击者利用漏洞构建恶意WEB页，诱使用户解析，可使应用程序崩溃或执行任意代码。 0 Apple Safari 目前没有详细解决方案提供： http://www.apple.com...

Mozilla Firefox未明权限提升漏洞

BUGTRAQ ID: 66206 Firefox是一款非常流行的开源WEB浏览器。 Mozilla Firefox在实现上存在不明细节权限提升漏洞，目前影响未知。 0 Mozilla Firefox 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mozilla.org/security/...

Mozilla Firefox未明安全限制绕过漏洞

BUGTRAQ ID: 66207 Firefox是一款非常流行的开源WEB浏览器。 Mozilla Firefox在实现上存在不明细节安全限制绕过漏洞，目前影响未知。 0 Mozilla Firefox 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mozilla.org/security/...

RHEL 5 / 6 : flash-plugin (RHSA-2014:0289)

An updated Adobe Flash Player package that fixes two security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

[ImageCacheViewer] View images in the cache of your Web browser

ImageCacheViewer is a simple tool that scans the cache of your Web browser Internet Explorer, Firefox, or Chrome, and lists the images displayed in the Web sites that you recently visited. For every cached image file, the following information is displayed: URL of the image, Web browser that was...

Apache Cordova文件传输不安全默认值漏洞

BUGTRAQ ID: 65967 CVECAN ID: CVE-2014-0072 Cordova InAppBrowser是在您使用window.open呼叫时应用内显示的Web浏览器。 Cordova 2.6.0-2.9.0版本内的Cordova File-Transfer iOS插件、Cordova File-Transfer iOS单机版插件org.apache.cordova.file-transfer0.1.0 - 0.4.1版本中，trustAllHosts的默认值在iOS上设置为true，在实现上存在远程安全漏洞，目前细节未知。 0 Apache Group Cordo...

Opera < 20 Multiple Vulnerabilities

The version of Opera installed on the remote host is a version prior to version 20. It is, therefore, reportedly affected by multiple unspecified vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72884; scriptversion"1.10";...