CVE-2017-5391

Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation. This vulnerability affects Firefox 51...

TYPO3 CMS 2.0.3 Cross Site Scripting Vulnerability

TYPO3 CMS versions 2.0.3 and below suffer from a cross site scripting vulnerability. title: Cross Site Scripting XSS product: Recommend Page extension for TYPO3 CMS pbrecommendpage vulnerable version: =2.0.3 fixed version: - CVE number: - impact: Medium homepage: https://typo3.org/ found:...

MS14-009: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: February 11, 2014

MS14-009: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: February 11, 2014 View products that this article applies to. Introduction This update resolves vulnerabilities that could allow elevation of privilege if a user goes to a specially...

CentOS Update for thunderbird CESA-2016:2973 centos5

Check the version of thunderbird SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882619";...

RedHat Update for thunderbird RHSA-2016:2973-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

thunderbird security update

CentOS Errata and Security Advisory CESA-2016:2973 An update for thunderbird is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

Multiple Apple Products ICU Component Arbitrary Code Execution Vulnerability

Apple iOS, watchOS, macOS, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; watchOS is a smartwatch operating system; ICU is a Unicode-enabled, software internationalization, globalization C/C++ and Java library. A security vulnerability exists in...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2016-12800)

Apple Safari, iCloud for Windows, iTunes, iOS, and tvOS are products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems; iTunes is a suite of media player applications. WebKit is an open source web browser engine developed b...

RHEL 5 / 6 / 7 : thunderbird (RHSA-2016:2973)

The remote Redhat Enterprise Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2016:2973 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 45.6.0. Security Fixes:...

CentOS 5 / 6 / 7 : thunderbird (CESA-2016:2973)

An update for thunderbird is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

U.S. Dept Of Defense: XSS vulnerability on a DoD website

A cross-site scripting vulnerability was found on a Department of Defense website which may trick a web user into executing a malicious script, potentially revealing a user's web session information or modify web content. @swissky was able to demonstrate this vulnerability by crafting a specially...

Multiple Apple Products WebKit Component Arbitrary Code Execution Vulnerability

Apple Safari, iCloud for Windows, iTunes, iOS, and tvOS are products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems; iTunes is a suite of media player applications. WebKit is an open source web browser engine developed b...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2016-12781)

Apple Safari, iCloud for Windows, iTunes, iOS, and tvOS are products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems; iTunes is a suite of media player applications. WebKit is an open source web browser engine developed b...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2016-12785)

Apple Safari, iCloud for Windows, iTunes, iOS, and tvOS are products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems; iTunes is a suite of media player applications. WebKit is an open source web browser engine developed b...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2016-12792)

Apple Safari, iCloud for Windows, iTunes, iOS, and tvOS are products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems; iTunes is a suite of media player applications. WebKit is an open source web browser engine developed b...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2016-12788)

Apple Safari, iCloud for Windows, iTunes, iOS, and tvOS are products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems; iTunes is a suite of media player applications. WebKit is an open source web browser engine developed b...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2016-12787)

Apple Safari, iCloud for Windows, iTunes, iOS, and tvOS are products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems; iTunes is a suite of media player applications. WebKit is an open source web browser engine developed b...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2016-12795)

Apple Safari, iCloud for Windows, iTunes, iOS, and tvOS are products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems; iTunes is a suite of media player applications. WebKit is an open source web browser engine developed b...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2016-12794)

Apple Safari, iCloud for Windows, iTunes, iOS, and tvOS are products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems; iTunes is a suite of media player applications. WebKit is an open source web browser engine developed b...