Google Chrome < 45.0.2454.101 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 45.0.2454.101. It is, therefore, affected by multiple vulnerabilities as referenced in the 201509stable-channel-update24 advisory. - object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not...

Important: Red Hat Security Advisory: chromium-browser security update

Updated chromium-browser packages that fix two security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

FreeBSD : chromium -- multiple vulnerabilities (0e425bb7-64f2-11e5-b2fd-00262d5ed8ee)

Google Chrome Releases reports : Two vulnerabilities were fixed in this release : - 530301 High CVE-2015-1303: Cross-origin bypass in DOM. Credit to Mariusz Mlynski. - 531891 High CVE-2015-1304: Cross-origin bypass in V8. Credit to Mariusz Mlynski. %NASLMINLEVEL 70300 C Tenable Network Security,...

chromium: cross-origin bypass

CVE-2015-1303: Cross-origin bypass in DOM. Credit to Mariusz Mlynski. - CVE-2015-1304: Cross-origin bypass in V8. Credit to Mariusz Mlynski...

Stable Channel Update

The stable channel has been updated to 45.0.2454.101 for Windows, Mac, and Linux. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. The following bugs from external security researchers were fixed in this...

Apple TV < 6.1.1 Multiple Vulnerabilities

Binary data 8274.prm...

Apple Safari Multiple Memory Corruption Vulnerabilities-02 (Apr 2014) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

CVE-2014-1304

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1...

CVE-2014-1304

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1...

CVE-2014-1304

CVE-2014-1304 affects WebKit as used in Apple Safari before 6.1.3 and 7.x before 7.0.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site; it is described as a WebKit-specific issue and...

Microsoft Internet Explorer释放后重用远程代码执行漏洞(CVE-2013-1304)（MS13-028）

BUGTRAQ ID: 58851 CVECAN ID: CVE-2013-1304 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 6, 7, 8, 9, 10访问内存中已被删除的对象的方式中存在远程执行代码漏洞。攻击者利用该漏洞可以在当前用户的上下文中执行任意代码，如果执行失败将会导致拒绝服务。 0 Microsoft Internet Explorer 6 - 10 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 将 Internet 和本地 Intran...

Microsoft Internet Explorer Multiple Use After Free Vulnerabilities (2817183)

This host is missing a critical security update according to Microsoft Bulletin MS13-028. OpenVAS Vulnerability Test $Id: secpodms13-028.nasl 6093 2017-05-10 09:03:18Z teissa $ Microsoft Internet Explorer Multiple Use After Free Vulnerabilities 2817183 Authors: Thanga Prakash S Copyright: Copyrig...

CVE-2013-1304

This CVE family concerns Microsoft Internet Explorer 6–10 with a Use-After-Free vulnerability that allows remote code execution when a crafted site triggers access to a deleted object. The related entries (CVE-2013-1303, CVE-2013-1338) describe the same class of issue affecting IE and share the l...

RedHat Update for kernel RHSA-2012:1304-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for kernel CESA-2012:1304 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu Update for linux-ti-omap4 USN-1304-1

Ubuntu Update for Linux kernel vulnerabilities USN-1304-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13041.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-ti-omap4 USN-1304-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.n...

CentOS Update for firefox CESA-2009:0436 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for firefox CESA-2009:0436 centos4 i386

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2009:0436 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2011-1304

Google Chrome 11.0.696.57 patch (April 2011) fixed multiple vulnerabilities, including CVE-2011-1304: a pop-up blocker bypass via plug-ins. The issue affected Chrome before 11.0.696.57 and could be exploited remotely through plug-in interactions, potentially bypassing the pop-up blocker. The patc...

CVE-2010-1304

Joomla! User Status (com_userstatus) component 1.21.16 contains a directory traversal (local file inclusion) in userstatus.php. An unauthenticated remote attacker can read arbitrary files by supplying a .. in the controller parameter to index.php. Impact is exposure of sensitive files; remediatio...