CVE-2016-1616

CVE-2016-1616 in Google Chrome/Chromium prior to 48.0.2564.82: The CustomButton::AcceleratorPressed function in ui/views/controls/button/custom_button.cc allows remote attackers to spoof URLs via vectors involving an unfocused custom button. Impact is remote URL spoofing; likelihood and severity ...

Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 48 to the stable channel for Windows, Mac and Linux. Chrome 48.0.2564.82 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new...

KLA10745 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Multiple unspecified vulnerabilities at HarfBuzz and V8 c...

McAfee ePO DLPe Extension < 9.3.400 Multiple Vulnerabilities (SB10098)

The remote McAfee ePO server has a vulnerable version of McAfee Data Loss Protection Endpoint DLPe extension installed that is affected by multiple vulnerabilities : - An unspecified SQL injection vulnerability exists due to improper sanitization of user-supplied input. This allows an...

CVE-2015-1616

SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-1616

CVE-2015-1616 affects McAfee Data Loss Prevention Endpoint (DLPe) with the ePO extension prior to 9.3.400. The issue is a SQL injection vulnerability identified as being due to improper input sanitization, allowing remote authenticated ePO users to execute arbitrary SQL commands via unspecified v...

KLA10485 Multiple vulnerabilities in McAfee Data Loss Prevention Endpoint

Multiple serious vulnerabilities have been found in McAfee DLPE. Malicious users can exploit these vulnerabilities to obtain sensitive information, inject or execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed URL and other unspecified vectors related ...

Siemens CP 1604 and CP 1616 Improper Access Control

Overview This advisory provides mitigation details for a vulnerability that impacts the Siemens CP 1604 and CP 1616 communication modules. Siemens has identified a vulnerability in the debugging interface of the CP 1604 and CP 1616 communications modules. Independent researchers Christopher...

CVE-2013-1616

The management console on the Symantec Web Gateway SWG appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injecting a command into an application script...

CVE-2013-1616

CVE-2013-1616 affects the Symantec Web Gateway (SWG) before 5.1.1. Multiple vulnerabilities exist, including an OS command injection that can be executed via authenticated inputs in scripts such as nameConfig.php and networkConfig.php, enabling commands with the Apache user privileges. Additional...

SEC Consult SA-20130726-0 :: Multiple vulnerabilities - Surveillance via Symantec Web Gateway

SEC Consult Vulnerability Lab Security Advisory 20130726-0 ======================================================================= title: Multiple vulnerabilities - Surveillance via Symantec Web Gateway product: Symantec Web Gateway vulnerable version: = 5.1.0. fixed version: 5.1.1 CVE number:...

Symantec Web Gateway 5.1.0 - Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================================================= title: Multiple vulnerabilities - Surveillance via Symantec Web Gateway product: Symantec Web Gateway vulnerable version: = 5.1.0. fixed version: 5.1.1 CVE number:...

CVE-2013-1616

creationtimestamp| type| source ---|---|--- 2013-07-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27136...

Design/Logic Flaw

The debugging feature on the Siemens CP 1604 and CP 1616 interface cards with firmware before 2.5.2 allows remote attackers to execute arbitrary code via a crafted packet to UDP port 17185...

CVE-2013-0659

The debugging feature on the Siemens CP 1604 and CP 1616 interface cards with firmware before 2.5.2 allows remote attackers to execute arbitrary code via a crafted packet to UDP port 17185...

CVE-2013-0659

Affected software/hardware: Siemens CP 1604 and CP 1616 interface cards (CP 1604/1604 Microbox package and onboard SIMANTIC IPCs) with firmware prior to 2.5.2. Vulnerability details: Debugging interface is enabled by default; sending a crafted UDP packet to port 17185 can allow remote code execut...

CVE-2012-1616

Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted ICC profile file...

CVE-2012-1616

CVE-2012-1616 is a use-after-free in icclib &lt; 2.13, used by Argyll CMS

Fedora Update for argyllcms FEDORA-2012-6529

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 15 : gitolite-1.5.8-3.fc15 (2011-1616)

Dylan Alex Simon discovered and reported a directory traversal flaw in the way Gitolite restricted access to admin defined commands 'ADC'. An authenticated attacker could execute arbitrary code with privileges of Gitolite server user using specially crafted command name. The flaw does not affect...