[SECURITY] [DLA 1314-1] simplesamlphp security update

Package : simplesamlphp Version : 1.9.2-1+deb7u4 CVE ID : CVE-2018-7711 Cure53 discovered that in SimpleSAMLphp, in rare circumstances an invalid signature on the SAML 2.0 HTTP Redirect binding could be considered valid. Additionally this update fixes a regression introduced in DLA-1298 by the...

CVE-2018-1298

CVE-2018-1298 describes a Denial of Service in Apache Qpid Broker-J 7.0.0 related to authentication of AMQP connections. The issue occurs when using PLAIN or XOAUTH2 SASL mechanisms during SASL negotiation, where unauthenticated attackers may crash the broker. Affected scope includes AMQP protoco...

Microsoft Edge Chakra - Uninitialized Arguments (2)

void Parser::ParseFncFormalsParseNodePtr pnodeFnc, ParseNodePtr pnodeParentFnc, ushort flags ... if IsES6DestructuringEnabled && IsPossiblePatternStart ... // Instead of passing the STFormal all the way on many methods, it seems it is better to change the symbol type afterward. for ParseNodePtr...

CVE-2013-1298

CVE-2013-1298 entry is rejected and not used; this CVE ID does not represent an active vulnerability.

CVE-2002-1298

CVE-2002-1298 entry is rejected and not used; it does not represent an active vulnerability.

CVE-2013-1298

...

CVE-2002-1298

...

CVE-2017-1298

CVE-2017-1298 is a rejected duplicate of CVE-2016-8106.

CVE-2017-1298

...

CVE-2016-1298

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified Contact Center Express 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033...

CVE-2016-1298

CVE-2016-1298 affects Cisco Unified Contact Center Express (UCCE) up to 11.0(1). The issue is a lack of input validation in the HTTP web-based management interface that handles permalinks, enabling remote attackers to perform cross-site scripting (XSS) by crafting a malicious permalink. This requ...

RHEL 6 : chromium-browser (RHSA-2015:1712)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1712 advisory. Chromium is an open-source web browser, powered by WebKit Blink. Several flaws were found in the processing of malformed web content. A web...

Google Chrome Multiple Vulnerabilities-01 (Sep 2015) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2015-1298

CVE-2015-1298 affects Google Chrome/Chromium prior to 45.0.2454.85. The vulnerability stems from RuntimeEventRouter::OnExtensionUninstalled not validating that setUninstallURL matches a site URL, allowing a user-assisted attacker to trigger access to an arbitrary URL via a crafted extension that ...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 29 security fixes in this release, including: 516377 High CVE-2015-1291: Cross-origin bypass in DOM. Credit to anonymous. 522791 High CVE-2015-1292: Cross-origin bypass in ServiceWorker. Credit to Mariusz Mlynski. 524074 High CVE-2015-1293: Cross-origin bypass in...

WebKitGTK+ Security Advisory WSA-2015-0001

------------------------------------------------------------------------ WebKitGTK+ Security Advisory WSA-2015-0001 ------------------------------------------------------------------------ Date reported : January 26, 2015 Advisory ID : WSA-2015-0001 Advisory URL :...

SmarterTools Smarter Track 6-10 - Information Disclosure

Document Title: =============== SmarterTools Smarter Track 6-10 - Information Disclosure References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1298 Tracking ID: 088-1B879F0C-0A22 Release Date: ============= 2014-09-22 Vulnerability Laboratory ID VL-ID:...

Apple TV < 6.1.1 Multiple Vulnerabilities

Binary data 8274.prm...

Apple Safari Multiple Memory Corruption Vulnerabilities-02 (Apr 2014) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

CVE-2014-1298

CVE-2014-1298 is a WebKit vulnerability affecting the WebKit component used by Apple Safari versions prior to 6.1.3 and 7.x prior to 7.0.3. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to a memory corruption/similar vulnerabi...