Security update for Chromium (important)

Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-1612: Bad cast in V8 boo963184 - CVE-2016-1613: Use-after-free in PDFium boo963185 - CVE-2016-1614: Information leak in Blink boo963186 - CVE-2016-1615: Origin confusion in...

CVE-2016-1612

Removed by vendor...

CVE-2016-1612

CVE-2016-1612 affects Google Chrome (V8) prior to version 48.0.2564.82. The issue is a logic error in LoadIC::UpdateCaches in ic/ic.cc where receiver compatibility is not ensured before casting an unspecified variable, enabling a remote attacker to cause a denial of service via crafted JavaScript...

KLA10745 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Multiple unspecified vulnerabilities at HarfBuzz and V8 c...

Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 48 to the stable channel for Windows, Mac and Linux. Chrome 48.0.2564.82 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new...

Symantec Endpoint Protection Manager secars.dll Buffer Overflow (CVE-2013-1612)

A buffer overflow vulnerability exists in Symantec Endpoint Protection Manager SEPM. The vulnerability is caused by insufficient boundary check while processing external input. By supplying a crafted HTTP request to the vulnerable server, a remote unauthenticated attacker can possibly exploit thi...

Symantec Endpoint Protection Manager 12.1.x - SEH Overflow POC

No description provided by source. Exploit-DB mirror: http://www.exploit-db.com/sploits/33056-sepm-secars-poc-v0.3.tar.gz !/usr/bin/perl -w Exploit Title: Symantec Endpoint Protection Manager 12.1.x - SEH Overflow POC Date: 31 January 2013 Exploit Author: [email protected] a.k.a...

Symantec Endpoint Protection Manager 12.1.x - Overflow (SEH) (PoC)

Symantec Endpoint Protection Manager 12.1.x - Overflow SEH PoC Exploit-DB Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/33056-sepm-secars-poc-v0.3.tar.gz !/usr/bin/perl -w Exploit Title: Symantec Endpoint Protection Manager 12.1.x - SEH Overflow POC...

Symantec Endpoint Protection Manager 12.1.x - Overflow (SEH) (PoC)

Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33056-sepm-secars-poc-v0.3.tar.gz !/usr/bin/perl -w Exploit Title: Symantec Endpoint Protection Manager 12.1.x - SEH Overflow POC Date: 31 January 2013 Exploit Author: [email protected] a.k.a...

Best Software SalesLogix Authentication Bypass - Ver2 (CVE-2004-1612)

An authentication bypass vulnerability has been reported in Saleslogix Corporation Saleslogix. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...

Reflected cross-site scripting (XSS) vulnerability in Mediatrix Web Management Interface login page

Advisory ID: hag201476 Product: Mediatrix Web Management Interface Vendor: Media5 Corporation Vulnerable Versions: Mediatrix 4402 Device with Firmware Dgw 1.1.13.186 and probably prior Tested Version: Mediatrix 4402 Device with Firmware Dgw 1.1.13.186 Advisory Publication: January 23, 2014 Vendor...

Mediatrix 4402 digital gateway web interface contains a cross-site scripting (XSS) vulnerability

Overview Mediatrix's web management interface for the 4402 digital gateway device with firmware version Dgw 1.1.13.186, and possibly earlier versions, contains a cross-site scripting XSS vulnerability. CWE-79 Description CWE-79: Improper Neutralization of Input During Web Page Generation...

CVE-2014-1612

CVE-2014-1612 affects Media5 Mediatrix 4402 Web Management Interface (login.esp). The vulnerability is a reflected cross-site scripting (XSS) in the username parameter on the login page, allowing remote attackers to inject scripts. Affected firmware includes Dgw 1.1.13.186 and earlier. Exploitati...

CVE-2013-1612

CVE-2013-1612 affects Symantec Endpoint Protection Manager (SEPM) 12.1.x (prior to 12.1.3) and SPC Small Business Edition 12.0.x . The underlying issue is a buffer overflow in the secars.dll component of the SEPM management console, caused by insufficient boundary checks when processing external ...

CVE-2012-5202

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1612...

Code injection

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1612...

CVE-2012-5202

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1612...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : libgssglue vulnerability (USN-1612-1)

It was discovered that libgssglue incorrectly handled the GSSAPIMECHCONF environment variable when running a privileged binary. A local attacker could exploit this to gain root privileges. CVE-2011-2709. Note that Tenable Network Security has extracted the preceding description block directly fro...

CVE-2012-1612

Cross-site scripting XSS vulnerability in the update manager in Joomla! 2.5.x before 2.5.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1612

CVE-2012-1612 affects Joomla! 2.5.x up to 2.5.3, with a Cross-site Scripting (XSS) vulnerability in the update manager. Remote attackers could inject arbitrary web script or HTML via unspecified vectors, leading to potential session hijack, defacement, or credential harvesting within affected ins...