Risk of BREACH attack due to refleŒÀ † † ‚H€p `…ñ €V †œZ ‚Fproper CSS declarations
MFSA-2014-83 Miscellaneous memory safety hazards (rv:34.0
/ rv:31.3)87
MFSA 2014-63 Use-after-free while when manipulating certificates in the trusted cache
MFSA 2014-62 Exploitable WebGL crash with Cesium JavaScript library
MFSA 2014-61 Use-after-free with FireOnStateChange event
MFSA 2014-60 Toolbar dialog customization event spoofing
MFSA 2014-59 Use-after-free in DirectWrite font han™€ † † ‚G €` ar€e †œZ ‚E/secunia.com/secunia_research/2007-47/advisory/">
Secunia Research has discovered two vulnerabilities in XMMS, which can be exploited by malicious people to compromise a user's system.
1) An integer unda stack-based buffer overflow
via specially crafted skin images containing manipulated header
Ÿ † † ‚H€v `ƒõ@€P †œZ ‚Fonally, we've adjusted security restrictions around file
uploads to mitigate the potential for cross-site scripting338
Multiple vulnerabilities have been discovered in Sympa archive management that allow to skip the scenario-baseÄà † † ‚Z€# N„¬ €5 †œZ ‚Xt/security/bulletins/apsb12-03.html">
These vulnerabilities could cause a crash and potentially allow
an attacker to take control of the affected systemcvename>CVE-2012-0751
Django project reports:
Some vulnerabilities have been reported in the ZABBIX PHP frontend, which can be exploited by malicious people to conduct cross-site request forgery attacks and malicious users to disclose sensitive information and compromise a vulnerable system.
öà † † i™ `‚í?€3 _…Øy› †œZ g from local resource2276When outputting plaintext Drupal strips potentially‰À † † ‚[€i M€p †œZ ‚Yi extension, this can lead to arbitrary code execution in the fastcgi application. For a detailed description of the bug see the external reference.
This bug was found by Mattias Bengtsson and Philip Olaussonurl>http://www.lighttpd.net/assets/2007/9/9/lighttpd_sa_2007_12.txt
The Secure Science Corporation reports that libtomcrypt is vulnerable to a weak signature scheme. This allows an attacker to create a valid random signature and use that to sign arbitrary messages without requiring the private key.