chromium -- multiple vulnerabilities

Google Chrome Releases reports: 29 security fixes in this release, including: 516377 High CVE-2015-1291: Cross-origin bypass in DOM. Credit to anonymous. 522791 High CVE-2015-1292: Cross-origin bypass in ServiceWorker. Credit to Mariusz Mlynski. 524074 High CVE-2015-1293: Cross-origin bypass in...

IBM Tivoli Storage Manager FastBack Server Opcode 1301 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1301. By sending a crafted packet on TCP...

Avira Service - Unvalidated CSRF Token Account Hijacking

Document Title: =============== Avira Service - Unvalidated CSRF Token Account Hijacking References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1301 View: https://www.youtube.com/watch?v=lJR8Hv5JnOI Release Date: ============= 2014-08-28 Vulnerability Laboratory ID VL-ID:...

Apple Safari Multiple Memory Corruption Vulnerabilities-02 (Apr 2014) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

CVE-2014-1301

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1...

CVE-2014-1301

CVE-2014-1301 affects WebKit as used in Apple Safari before 6.1.3 and Safari 7.x before 7.0.3. The vulnerability enables remote attackers to trigger memory corruption via a crafted web site, resulting in arbitrary code execution or a denial of service (application crash). The issue is part of a f...

Fedora Update for granatier FEDORA-2013-13499

Check for the Version of granatier OpenVAS Vulnerability Test Fedora Update for granatier FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for ksquares FEDORA-2013-10182

Check for the Version of ksquares OpenVAS Vulnerability Test Fedora Update for ksquares FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Microsoft Visio XML外部实体解析信息泄露漏洞(CVE-2013-1301)(MS13-044)

BUGTRAQ ID: 59765 CVECAN ID: CVE-2013-1301 Microsoft Visio是Windows操作系统下运行的流程图软件，它现在是Microsoft Office软件的一个部分。 Microsoft Visio分析包含外部实体的特制 XML 文件中存在一个信息泄露漏洞，攻击者可利用此漏洞访问敏感信息。 0 Microsoft Visio 2010 Microsoft Visio 2007 Microsoft Visio 2003 临时解决方法： 不要打开从不受信任来源或从受信任来源意外收到的 Office 文件 厂商补丁： Microsoft...

CVE-2013-1301

CVE-2013-1301 concerns Microsoft Visio information disclosure via XML External Entities (XXE). The vulnerability arises when Visio processes XML documents containing external entity declarations, allowing a remote attacker to read arbitrary files. Affected products include Visio 2003 SP3, Visio 2...

MS13-044: Vulnerability in Microsoft Visio Could Allow Information Disclosure (2834692)

The remote host contains a version of Microsoft Visio that is affected by an information disclosure vulnerability due to a flaw in the way Visio parses specially crafted XML files containing external entities. By tricking a user into opening a specially crafted file with Visio, a remote attacker...

Microsoft Visio SVG File Information Disclosure (MS13-044) - High Confidence (CVE-2013-1301)

An information disclosure vulnerability has been reported in Microsoft Visio. The vulnerability is caused when Microsoft Visio improperly handles XML external entities that are resolved within other XML external entity declarations. An attacker who successfully exploited this vulnerability could...

Fedora Update for kernel FEDORA-2013-3909

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-3909 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[MATTA-2012-001] CVE-2012-1301; 0day; Open Proxy vulnerability in Umbraco 4.7

We don't release 0days... except when vendors show no interest in fixing their their bugs. http://umbraco.com/umbraco/dashboard/FeedProxy.aspx?url=http://en.wikipedia.org/wiki/Openproxy Have fun. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Matta Consulting - Matta Advisory...

Google Chrome 'GPU process' Multiple Code Execution Vulnerabilities (Windows)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromegpumultcodeexecvulnwin.nasl 7044 2017-09-01 11:50:59Z teissa $ Google Chrome 'GPU process' Multiple Code Execution Vulnerabilities Windows Authors: Madhuri D Copyright:...

CVE-2011-1301

CVE-2011-1301 affects Google Chrome’s GPU process. The vulnerability is a use-after-free in the GPU process that allowed remote code execution via unknown vectors, on Chrome versions before 10.0.648.205. Affected platforms include Windows and Linux (as per OpenVAS entries), with multiple code-exe...

Google Chrome 10.0.648.205之前版本存在多个安全漏洞

Bugtraq ID: 47377 CVE ID：CVE-2011-1300,CVE-2011-1301,CVE-2011-1302 Google Chrome是一款流行的WEB浏览器。 Google Chrome存在多个安全漏洞允许攻击者以应用程序权限执行任意指令。 CVE-2011-1300： CNCVE ID：CNCVE-20111300 CNCVE-20111300 GPU进程存在一个三字节触发错误，可能导致任意代码执行，此漏洞仅影响windows平台。 CVE-2011-1301： CNCVE ID：CNCVE-20111300 CNCVE-20111300...

Stable Channel Update

The Chrome Stable channel has been updated to 10.0.648.205 for Windows, Mac, Linux and Chrome Frame. This release contains a new version of Adobe Flash which includes a fix for a security vulnerability, as well as the security fixes listed below. Security fixes and rewards: Please see the Chromiu...

Fedora Update for glibc FEDORA-2010-16308

Check for the Version of glibc OpenVAS Vulnerability Test Fedora Update for glibc FEDORA-2010-16308 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

CVE-2010-1301

Centreon 2.1.5 contains an SQL injection in main.php exploited via the host_id parameter. The OpenVAS entries confirm Centreon is prone to SQLi due to insufficient input sanitization, enabling remote attackers to execute arbitrary SQL commands and potentially compromise data. The affected compone...