87 matches found
Google Chrome Multiple Vulnerabilities-01 (Sep 2015) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
CVE-2015-1294
CVE-2015-1294 is a use-after-free in the Skia graphics library (SkMatrix::invertNonIdentity in core/SkMatrix.cpp) used by Google Chrome. The vulnerability allows remote attackers to cause a denial of service or potentially other impact by triggering matrix elements that yield an infinite result d...
chromium -- multiple vulnerabilities
Google Chrome Releases reports: 29 security fixes in this release, including: 516377 High CVE-2015-1291: Cross-origin bypass in DOM. Credit to anonymous. 522791 High CVE-2015-1292: Cross-origin bypass in ServiceWorker. Credit to Mariusz Mlynski. 524074 High CVE-2015-1293: Cross-origin bypass in...
OracleVM 2.1 : kernel (OVMSA-2008-2005)
The remote OracleVM system is missing necessary patches to address critical security updates : - fix utrace deadengine ops race - fix ptraceattach leak - CVE-2007-5093: kernel PWC driver DoS - CVE-2007-6282: IPSec ESP kernel panics - CVE-2007-6712: kernel: infinite loop in highres timers kernel...
CVE-2014-1294
CVE-2014-1294 affects WebKit as used in Apple iOS prior to 7.1 and Apple TV prior to 6.1. A crafted website can trigger remote code execution or a denial of service through memory corruption, causing an application crash. This entry is related to other CVEs in the same family (e.g., CVE-2014-1289...
Apple TV < 6.1 Multiple Vulnerabilities
According to its banner, the remote Apple TV 2nd generation or later device is prior to 6.1. It is, therefore, reportedly affected by multiple vulnerabilities, the most serious issues of which could result in arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"; if...
Oracle Linux 5 : kernel (ELSA-2008-0612)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0612 advisory. - tty add NULL pointer checks Aristeu Rozanski 453425 453154 CVE-2008-2812 - net sctp: make sure sctpaddr does not overflow David S. Miller 452482 4524...
Microsoft Windows Kernel本地权限提升漏洞(CVE-2013-1294)(MS13-031)
BUGTRAQ ID: 58862 CVECAN ID: CVE-2013-1294 Microsoft Windows是微软公司推出的一系列操作系统。 如果 Windows 内核不正确地处理内存中的对象，则存在一个特权提升漏洞。成功利用此漏洞的攻击者可以获得更高的特权和读取任意多次内核内存。 0 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2003 Microsoft Windows 8 Microsoft Windows 7...
Microsoft Windows Kernel Privilege Elevation Vulnerabilities (2813170)
This host is missing an important security update according to Microsoft Bulletin MS13-031. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2013-1294
The CVE-2013-1294 entry describes a kernel race-condition vulnerability in the Windows family (XP SP2/3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8, Server 2012, Windows RT) where improper handling of in-memory objects can be abused by a crafted local application to ...
RHEL 5 : httpd (RHSA-2011:1294)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1294 advisory. - httpd: multiple ranges DoS CVE-2011-3192 Note that Nessus has not tested for this issue but has instead relied only on the application's...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6113)
This Linux kernel update for SUSE Linux Enterprise 10 Service Pack 2 fixes various bugs and several security issues. The following security issues were fixed: CVE-2009-0675: The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel permits SKFPCLRSTATS requests only when the...
CVE-2012-1294
CVE-2012-1294 corresponds to a SQL injection in CONTIMEX Impulsio CMS, exploitable via the id parameter to index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, with a CVSS2 base score of 7.5 (HIGH) and network attack vector with low complexity. The provided docu...
Adbay SQL Injection
Exploit Title: Adbay SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://www.adbay.com/ Date : 17.02.2012 Platform : Php Demo Site : http://www.natronaschools.org/story.php?id=91&story=1294 SQL Virüslerden Önce Akýl Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir Ba...
CVE-2012-1294
creationtimestamp| type| source ---|---|--- 2012-02-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36830...
Ubuntu: Security Advisory (USN-1294-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: Red Hat Security Advisory: httpd security update
Updated httpd packages that fix one security issue are now available for Red Hat Enterprise Linux 5.3 Long Life, 5.6 Extended Update Support, and 6.0 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scori...
Google Chrome multiple vulnerabilities - March 11 (Windows)
The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnmar11win.nasl 7024 2017-08-30 11:51:43Z teissa $ Google Chrome multiple vulnerabilities - March 11 Windows Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...
CVE-2011-1294
The CVE-2011-1294 entry corresponds to Google Chrome before version 10.0.648.204, where improper handling of CSS token sequences could cause a denial of service and possibly other impact via a stale pointer. Public records (NVD/OpenVAS entries) corroborate Chrome-related vulnerabilities in Mar 20...
