Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Date published : 2018-09-25 http://www.securityfocus.com/bid/102797 https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html
Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain autofill data with insufficient user gestures via a crafted HTML page. Date published : 2018-09-25 http://www.securityfocus.com/bid/102797 https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html
Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user data via a crafted HTML page. Date published : 2018-09-25 http://www.securityfocus.com/bid/102797 https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html
Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension. Date published : 2018-09-25 http://www.securityfocus.com/bid/102797 https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html
Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Date published : 2018-09-25 http://www.securityfocus.com/bid/102797 https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html
Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted Chrome Extension. Date published : 2018-09-25 http://www.securityfocus.com/bid/102797 https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html
Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted HTML page. Date published : 2018-09-25 http://www.securityfocus.com/bid/102797 https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html
Use after free in PDFium in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Date published : 2018-09-25 http://www.securityfocus.com/bid/102797 https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html
IBM DataPower Gateway 7.1.0.0 – 7.1.0.23, 7.2.0.0 – 7.2.0.21, 7.5.0.0 – 7.5.0.16, 7.5.1.0 – 7.5.1.15, 7.5.2.0 – 7.5.2.15, and 7.6.0.0 – 7.6.0.8 as well as IBM DataPower Gateway CD 7.7.0.0 – 7.7.1.2 are vulnerable...
IBM DataPower Gateway 7.1.0.0 – 7.1.0.23, 7.2.0.0 – 7.2.0.21, 7.5.0.0 – 7.5.0.16, 7.5.1.0 – 7.5.1.15, 7.5.2.0 – 7.5.2.15, and 7.6.0.0 – 7.6.0.8 as well as IBM DataPower Gateway CD 7.7.0.0 – 7.7.1.2 echoing of...
IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...
IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to...
Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability. Successful exploitation could lead to information disclosure. Date published : 2018-09-25 http://www.securityfocus.com/bid/105315 https://helpx.adobe.com/security/products/flash-player/apsb18-31.html
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution. Date published :...