KLA10745 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Multiple unspecified vulnerabilities at HarfBuzz and V8 c...

Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 48 to the stable channel for Windows, Mac and Linux. Chrome 48.0.2564.82 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new...

WordPress Image Metadata Cruncher Plugin Cross Site Request Forgery (CVE-2015-1614)

A cross-site request forgery CSRF vulnerability has been reported in WordPress Image Metadata Cruncher Plugin. An attacker could exploit this vulnerability by convincing the user to follow a malicious link or visit an attacker controlled website...

CVE-2015-1614

Multiple cross-site request forgery CSRF vulnerabilities in the Image Metadata Cruncher plugin for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 imagemetadatacruncheralt or 2...

CVE-2015-1614

CVE-2015-1614 pertains to the WordPress Image Metadata Cruncher plugin, which is reported to contain CSRF vulnerabilities that allow remote attackers to hijack an administrator’s authentication and trigger stored XSS via the plugin’s image_metadata_cruncher[alt], image_metadata_cruncher[caption],...

RobTex Viking Server 1.0.6 Build 355 Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1614/info A number of unchecked buffers exists in Robotex Viking Server. This enables a malicious user to either crash the application or execute arbitrary code, depending on the data supplied. / Robotex Viking Server...

CVE-2013-1614

The CVE-2013-1614 vulnerability affects Symantec Security Information Manager (SSIM) Appliance management console (Java Console) on versions 4.7.x and 4.8.x prior to 4.8.1. The issue is multiple cross-site scripting (XSS) vulnerabilities that could allow remote attackers to inject arbitrary scrip...

CVE-2012-5204

CVE-2012-5204 affects HP Intelligent Management Center (iMC) and related ANM modules. The connected documentation confirms a directory traversal in the IctDownloadServlet that enables an unauthenticated attacker to retrieve arbitrary files with SYSTEM privileges, leading to information disclosure...

Ubuntu: Security Advisory (USN-1614-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS / 12.10 : ruby1.9.1 vulnerabilities (USN-1614-1)

Tyler Hicks and Shugo Maeda discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. An attacker could use this flaw to bypass intended access restrictions. USN-1602-1 fixed these vulnerabilities in other Ubuntu releases. This update provides the...

CVE-2012-1614

Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via 1 a direct request to plugins/visiblehookpoints/index.php, an invalid 2 page or 3 cat parameter to thumbnails.php, an invalid 4 page parameter to usermgr.php, or an invalid 5 newerthan or 6 oldertha...

CVE-2012-1614

Coppermine Photo Gallery before 1.5.20 is affected by an information-disclosure flaw that allows remote attackers to reveal the installation path through error messages triggered by crafted requests. The specific vectors include direct requests to plugins/visiblehookpoints/index.php with invalid ...

FreeBSD Ports: coppermine

The remote host is missing an update to the system as announced in the referenced advisory. VID 6dd5e45c-f084-11e1-8d0f-406186f3d89d OpenVAS Vulnerability Test $ Description: Auto generated from VID 6dd5e45c-f084-11e1-8d0f-406186f3d89d Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2012-1614

creationtimestamp| type| source ---|---|--- 2012-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18680...

Moodle Multiple Vulnerabilities

This host is running Moodle and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmoodlemultvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Moodle Multiple Vulnerabilities Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This...

openSUSE Security Update : moodle (openSUSE-SU-2010:0212-1)

Moodle version 1.9.8 fixes several security issues including cross-site-scripting XSS and SQL injection bugs CVE-2010-1613, CVE-2010-1614, CVE-2010-1615, CVE-2010-1616, CVE-2010-1617 CVE-2010-1618, CVE-2010-1619. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

CVE-2010-1614

Multiple cross-site scripting XSS vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the Login-As feature or 2 when the global search feature is enabled, unspecified global search forms in the...

CVE-2010-1614

CVE-2010-1614 affects Moodle 1.8.x < 1.8.12 and 1.9.x

CVE-2009-1614

Multiple cross-site scripting XSS vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the msg parameter aka the message in an article comment or 2 the searchterm parameter aka the search post form. NOTE: some of these details are obtained from thi...

CVE-2009-1614

CVE-2009-1614 refers to multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4, allowing remote attackers to inject arbitrary web script or HTML via the msg parameter (article comment message) or the searchterm parameter (search form). The vulnerability details come from multiple s...