CVE-2016-1242

CVE-2016-1242 affects Tryton: file_open allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or other vectors. Affected versions include Tryton 3.2.16/3.2.17? (presents as 3.2.17), 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, a...

Debian Security Advisory DSA 3656-1 (tryton-server - security update)

Two vulnerabilities have been discovered in the server for the Tryton application platform, which may result in information disclosure of password hashes or file contents. OpenVAS Vulnerability Test $Id: deb3656.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3656-1 usi...

[SECURITY] [DSA 3656-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3656-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 30, 2016 https://www.debian.org/security/faq -...

Debian DSA-3238-1 : chromium-browser - security update

Several vulnerabilities were discovered in the chromium web browser. - CVE-2015-1235 A Same Origin Policy bypass issue was discovered in the HTML parser. - CVE-2015-1236 Amitay Dobo discovered a Same Origin Policy bypass in the Web Audio API. - CVE-2015-1237 Khalil Zhani discovered a use-after-fr...

FreeBSD : chromium -- multiple vulnerabilities (b57f690e-ecc9-11e4-876c-00262d5ed8ee)

Google Chrome Releases reports : 45 new security fixes, including : - 456518 High CVE-2015-1235: Cross-origin-bypass in HTML parser. Credit to anonymous. - 313939 Medium CVE-2015-1236: Cross-origin-bypass in Blink. Credit to Amitay Dobo. - 461191 High CVE-2015-1237: Use-after-free in IPC. Credit ...

[SECURITY] [DSA 3238-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3238-1 [email protected] http://www.debian.org/security/ Michael Gilbert April 26, 2015 http://www.debian.org/security/faq -...

CVE-2015-1242

CVE-2015-1242 describes a type-confusion vulnerability in Google V8’s ReduceTransitionElementsKind (hydrogen-check-elimination.cc) exploited via crafted JavaScript, affecting Google Chrome before 42.0.2311.90. It is triggered by the check-elimination optimization and can lead to denial of service...

CVE-2015-1242

The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that leverages "type...

RHEL 6 : chromium-browser (RHSA-2015:0816)

Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Apple iTunes Multiple Vulnerabilities (HT6001) - Windows

Apple iTunes is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes";...

APPLE-SA-2014-01-22-1 iTunes 11.1.4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-01-22-1 iTunes 11.1.4 iTunes 11.1.4 is now available and addresses the following: iTunes Available for: Mac OS X v10.6.8 or later, Windows 8, Windows 7, Vista, XP SP2 or later Impact: An attacker with a privileged network position may...

CVE-2014-1242

CVE-2014-1242 : Apple iTunes before 11.1.4 retrieves the iTunes Tutorials window over HTTP, enabling a man‑in‑the‑middle attacker with privileged network position to spoof the window contents by controlling the client–server data stream. Impact is limited to content injection in the Tutorials win...

Apple iTunes < 11.1.4 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 11.1.4. It is, therefore, affected by multiple vulnerabilities : - The included versions of the WebKit, libxml, and libxslt components in iTunes contain several errors that can lead to memory corruption and arbitrary code executio...

CVE-2013-1242

CVE-2013-1242 affects Cisco Unified Presence (CUP) web framework on the server. The vulnerability is a memory leak caused by improper handling of memory allocation when the system is flooded with malformed TCP packets, enabling an unauthenticated remote attacker to cause memory exhaustion and a D...

CentOS Update for firefox CESA-2011:1242 centos4 x86_64

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2011:1242 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2012-1242

CVE-2012-1242 affects multiple JustSystems products (Ichitaro 2006–2011 family, Ichitaro Government 2006–2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School/JUST Jump 4/JUST Frontier, oreplug). The underlying issue is an insecure DLL search path that can cause the application to lo...

CentOS Update for firefox CESA-2011:1242 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-1242

CVE-2011-1242 is a Win32k.sys use-after-free local privilege-escalation vulnerability. Affected: Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2/R2 SP1, and Windows 7 SP1. Cause: incorrect management of kernel-mode driver objects in win32k.sys leading to use-after-free...

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-1242) Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel due to a use-after-free condition. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete...

Microsoft Windows Kernel CsDdeInitialize Code Execution (MS11-034; CVE-2011-1242)

The Windows kernel is the core of the operating system. It provides system-level services such as device management and memory management, allocates processor time to processes, and manages error handling. An elevation of privilege vulnerability has been reported in the Windows kernel. The...