USN-2757-1: Oxide vulnerabilities

Two security issues were discovered in Blink and V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to bypass same-origin restrictions. CVE-2015-1303, CVE-2015-1304...

Google Chrome < 45.0.2454.101 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 45.0.2454.101. It is, therefore, affected by multiple vulnerabilities as referenced in the 201509stable-channel-update24 advisory. - object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not...

RHEL 6 : chromium-browser (RHSA-2015:1841)

Updated chromium-browser packages that fix two security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Google Chrome < 45.0.2454.101 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 45.0.2454.101. It is, therefore, affected by multiple vulnerabilities as referenced in the 201509stable-channel-update24 advisory. - object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does no...

Important: Red Hat Security Advisory: chromium-browser security update

Updated chromium-browser packages that fix two security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

chromium: cross-origin bypass

CVE-2015-1303: Cross-origin bypass in DOM. Credit to Mariusz Mlynski. - CVE-2015-1304: Cross-origin bypass in V8. Credit to Mariusz Mlynski...

FreeBSD : chromium -- multiple vulnerabilities (0e425bb7-64f2-11e5-b2fd-00262d5ed8ee)

Google Chrome Releases reports : Two vulnerabilities were fixed in this release : - 530301 High CVE-2015-1303: Cross-origin bypass in DOM. Credit to Mariusz Mlynski. - 531891 High CVE-2015-1304: Cross-origin bypass in V8. Credit to Mariusz Mlynski. %NASLMINLEVEL 70300 C Tenable Network Security,...

Stable Channel Update

The stable channel has been updated to 45.0.2454.101 for Windows, Mac, and Linux. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. The following bugs from external security researchers were fixed in this...

WebKitGTK+ Security Advisory WSA-2015-0001

------------------------------------------------------------------------ WebKitGTK+ Security Advisory WSA-2015-0001 ------------------------------------------------------------------------ Date reported : January 26, 2015 Advisory ID : WSA-2015-0001 Advisory URL :...

CVE-2012-1303

CVE-2012-1303 describes multiple cross-site scripting (XSS) vulnerabilities in amCharts Flash 1. The issue allows remote attackers to inject arbitrary script/HTML via parameters to several Flash components: data_file or settings_file to ampie.swf; message in chart_data to amcolumn.swf, amline.swf...

Apple TV < 6.1.1 Multiple Vulnerabilities

Binary data 8274.prm...

CVE-2014-1303

CVE-2014-1303 describes a heap-based buffer overflow in Apple Safari 7.0.2 that allows remote code execution and sandbox bypass via unspecified vectors, demonstrated by Liang Chen at CanSecWest 2014 (Pwn2Own). Public documents in the connected set reference the vulnerability as part of WebKit/Web...

Oracle Linux 3 / 4 : seamonkey (ELSA-2009-0437)

From Red Hat Security Advisory 2009:0437 : Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

Microsoft Internet Explorer释放后重用远程代码执行漏洞(CVE-2013-1303)（MS13-028）

BUGTRAQ ID: 58850 CVECAN ID: CVE-2013-1303 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 6, 7, 8, 9, 10访问内存中已被删除的对象时存在远程执行代码漏洞。攻击者可以在当前用户的上下文中执行任意代码，如果执行失败将会导致拒绝服务。 0 Microsoft Internet Explorer 6 - 10 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 将 Internet 和本地 Intranet...

Microsoft Internet Explorer Multiple Use After Free Vulnerabilities (2817183)

This host is missing a critical security update according to Microsoft Bulletin MS13-028. OpenVAS Vulnerability Test $Id: secpodms13-028.nasl 6093 2017-05-10 09:03:18Z teissa $ Microsoft Internet Explorer Multiple Use After Free Vulnerabilities 2817183 Authors: Thanga Prakash S Copyright: Copyrig...

CVE-2013-1303

CVE-2013-1303 corresponds to a Use-After-Free vulnerability in Microsoft Internet Explorer 6–10. The issue allows remote code execution when a crafted web site triggers access to a deleted object (via mshtml), as described in multiple sources referring to IE use-after-free vulnerabilities and MS1...

RHEL 5 : thunderbird (RHSA-2009:1126)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2009:1126 advisory. - Firefox 2 and 3 Layout engine crash CVE-2009-1303 - Firefox 2 and 3 JavaScript engine crash CVE-2009-1305 - Firefox jar: scheme ignores th...

Scientific Linux Security Update : thunderbird on SL4.x, SL5.x i386/x86_64

Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user running Thunderbird. CVE-2009-1392, CVE-2009-1303, CVE-2009-1305, CVE-2009-1833,...

Ubuntu Update for linux-mvl-dove USN-1303-1

Ubuntu Update for Linux kernel vulnerabilities USN-1303-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13031.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-mvl-dove USN-1303-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.n...

Important: Red Hat Security Advisory: jbossws-common security update

An updated jbossws-common package that fixes one security issue is now available for JBoss Enterprise Web Platform 5.1.1 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CV...