RHEL 6 : chromium-browser (RHSA-2015:1712)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1712 advisory. Chromium is an open-source web browser, powered by WebKit Blink. Several flaws were found in the processing of malformed web content. A web...

[USN-2735-1] Oxide vulnerabilities

========================================================================== Ubuntu Security Notice USN-2735-1 September 08, 2015 oxide-qt vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...

Ubuntu: Security Advisory (USN-2735-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Multiple Vulnerabilities-01 (Sep 2015) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2015-1301

CVE-2015-1301 affects Google Chrome/Chromium before version 45.0.2454.85. Multiple vulnerabilities were fixed during internal auditing and fuzzing, with the Chrome 45 stable channel update delivering the fix (Chrome 45.0.2454.85). Public advisories note fixes across components (e.g., DOM, Service...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 29 security fixes in this release, including: 516377 High CVE-2015-1291: Cross-origin bypass in DOM. Credit to anonymous. 522791 High CVE-2015-1292: Cross-origin bypass in ServiceWorker. Credit to Mariusz Mlynski. 524074 High CVE-2015-1293: Cross-origin bypass in...

IBM Tivoli Storage Manager FastBack Server Opcode 1301 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1301. By sending a crafted packet on TCP...

Avira Service - Unvalidated CSRF Token Account Hijacking

Document Title: =============== Avira Service - Unvalidated CSRF Token Account Hijacking References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1301 View: https://www.youtube.com/watch?v=lJR8Hv5JnOI Release Date: ============= 2014-08-28 Vulnerability Laboratory ID VL-ID:...

Apple Safari Multiple Memory Corruption Vulnerabilities-02 (Apr 2014) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

CVE-2014-1301

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1...

CVE-2014-1301

CVE-2014-1301 affects WebKit as used in Apple Safari before 6.1.3 and Safari 7.x before 7.0.3. The vulnerability enables remote attackers to trigger memory corruption via a crafted web site, resulting in arbitrary code execution or a denial of service (application crash). The issue is part of a f...

Fedora Update for granatier FEDORA-2013-13499

Check for the Version of granatier OpenVAS Vulnerability Test Fedora Update for granatier FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for ksquares FEDORA-2013-10182

Check for the Version of ksquares OpenVAS Vulnerability Test Fedora Update for ksquares FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Microsoft Visio XML外部实体解析信息泄露漏洞(CVE-2013-1301)(MS13-044)

BUGTRAQ ID: 59765 CVECAN ID: CVE-2013-1301 Microsoft Visio是Windows操作系统下运行的流程图软件，它现在是Microsoft Office软件的一个部分。 Microsoft Visio分析包含外部实体的特制 XML 文件中存在一个信息泄露漏洞，攻击者可利用此漏洞访问敏感信息。 0 Microsoft Visio 2010 Microsoft Visio 2007 Microsoft Visio 2003 临时解决方法： 不要打开从不受信任来源或从受信任来源意外收到的 Office 文件 厂商补丁： Microsoft...

CVE-2013-1301

CVE-2013-1301 concerns Microsoft Visio information disclosure via XML External Entities (XXE). The vulnerability arises when Visio processes XML documents containing external entity declarations, allowing a remote attacker to read arbitrary files. Affected products include Visio 2003 SP3, Visio 2...

MS13-044: Vulnerability in Microsoft Visio Could Allow Information Disclosure (2834692)

The remote host contains a version of Microsoft Visio that is affected by an information disclosure vulnerability due to a flaw in the way Visio parses specially crafted XML files containing external entities. By tricking a user into opening a specially crafted file with Visio, a remote attacker...

Microsoft Visio SVG File Information Disclosure (MS13-044) - High Confidence (CVE-2013-1301)

An information disclosure vulnerability has been reported in Microsoft Visio. The vulnerability is caused when Microsoft Visio improperly handles XML external entities that are resolved within other XML external entity declarations. An attacker who successfully exploited this vulnerability could...

Fedora Update for kernel FEDORA-2013-3909

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-3909 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[MATTA-2012-001] CVE-2012-1301; 0day; Open Proxy vulnerability in Umbraco 4.7

We don't release 0days... except when vendors show no interest in fixing their their bugs. http://umbraco.com/umbraco/dashboard/FeedProxy.aspx?url=http://en.wikipedia.org/wiki/Openproxy Have fun. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Matta Consulting - Matta Advisory...

Google Chrome 'GPU process' Multiple Code Execution Vulnerabilities (Windows)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromegpumultcodeexecvulnwin.nasl 7044 2017-09-01 11:50:59Z teissa $ Google Chrome 'GPU process' Multiple Code Execution Vulnerabilities Windows Authors: Madhuri D Copyright:...