CVE-2021-1617

creationtimestamp| type| source ---|---|--- 2021-07-22 20:36:55+00:00| seen| https://t.me/cibsecurity/26412...

CVE-2021-1617

Cisco Intersight Virtual Appliance (CVE-2021-1617) suffers from path traversal and command-injection vulnerabilities due to insufficient input validation in the web-based management interface. An authenticated remote attacker could use crafted input to read/write arbitrary files or execute comman...

Amazon Linux 2 : qemu (ALAS-2021-1617)

The version of qemu installed on the remote host is prior to 3.1.0-8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1617 advisory. An out-of-bound write access flaw was found in the way QEMU loads ROM contents at boot time. This flaw occurs in the romcopy...

Juniper JSA11000

The version of Junos OS installed on the remote host is prior to 17.4R2-S9, 18.1R3-S9, 18.2X75-D12, 18.2R3, or 18.3R3. It is, therefore, affected by a vulnerability as referenced in the JSA11000 advisory. Note that Nessus has not tested for this issue but has instead relied only on the...

wegoviaggio.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1159400 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2020-1617

CVE-2020-1617 affects Junos OS on non-AFI/AFT platforms. An improper memory initialization in the packet forwarding architecture can be triggered when a genuine packet is inspected by sFlow through a specific firewall policer, causing a reboot and, after reboot, a core file and another reboot on ...

CVE-2014-1617

CVE-2014-1617 affects Microsys PROMOTIC 8.2.13. A buffer overflow in the ActiveX control Start routine can cause denial of service. All available sources describe the vulnerability as a vulnerability in the PROMOTIC ActiveX component, but the provided documents do not specify exact exploit vector...

CVE-2016-5137

CVE-2016-5137 affects Chrome/Blink CSPSource::schemeMatches in Blink’s CSP implementation prior to 52.0.2743.82, where http:80 on https:443 and ws:80 on wss:443 policies are not applied, enabling a remote attacker to infer whether an HSTS site was visited via CSP reports. Debian security advisori...

Ubuntu: Security Advisory (USN-2877-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2877-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2877-1 advisory. A bad cast was discovered in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a...

Security update for Chromium (important)

Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-1612: Bad cast in V8 boo963184 - CVE-2016-1613: Use-after-free in PDFium boo963185 - CVE-2016-1614: Information leak in Blink boo963186 - CVE-2016-1615: Origin confusion in...

USN-2877-1: Oxide vulnerabilities

A bad cast was discovered in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash or execute arbitrary code with the privileges of the sandboxed render process. CVE-2016-1612 An issue was...

[SECURITY] [DSA 3456-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3456-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 27, 2016 https://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: chromium-browser security update

Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

Debian Security Advisory DSA 3456-1 (chromium-browser - security update)

Several vulnerabilities were discovered in the chromium web browser. CVE-2015-6792 An issue was found in the handling of MIDI files. CVE-2016-1612 cloudfuzzer discovered a logic error related to receiver compatibility in the v8 javascript library. CVE-2016-1613 A use-after-free issue was discover...

Security update for Chromium (important)

Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-1612: Bad cast in V8 boo963184 - CVE-2016-1613: Use-after-free in PDFium boo963185 - CVE-2016-1614: Information leak in Blink boo963186 - CVE-2016-1615: Origin confusion in...

KLA10745 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Multiple unspecified vulnerabilities at HarfBuzz and V8 c...

Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 48 to the stable channel for Windows, Mac and Linux. Chrome 48.0.2564.82 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new...

McAfee ePO DLPe Extension < 9.3.400 Multiple Vulnerabilities (SB10098)

The remote McAfee ePO server has a vulnerable version of McAfee Data Loss Protection Endpoint DLPe extension installed that is affected by multiple vulnerabilities : - An unspecified SQL injection vulnerability exists due to improper sanitization of user-supplied input. This allows an...

CVE-2015-1617

CVE-2015-1617 concerns a cross-site scripting (XSS) vulnerability in the McAfee Data Loss Prevention Endpoint (DLPe) ePO extension . The issue affects versions earlier than 9.3.400 and allows a remote, authenticated user to inject arbitrary web script or HTML via unspecified vectors. The impact i...