116 matches found
CVE-2013-1666
Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro...
CVE-2013-1666
Affected product: Foswiki versions before 1.1.8. The vulnerability is in the MAKETEXT macro, enabling code injection that can lead to arbitrary code execution on the server (per the Foswiki advisory). Attack surface includes crafting MAKETEXT macro invocations on wiki pages when localization is e...
CVE-2019-1666
CVE-2019-1666 is a vulnerability in the Graphite service of Cisco HyperFlex software where an unauthenticated, remote attacker could retrieve statistics data due to insufficient authentication controls. Affected versions are prior to 3.5(2a). The impact is data exposure from the Graphite service;...
CVE-2019-1666 Cisco HyperFlex Unauthenticated Statistics Retrieval Vulnerability
A vulnerability in the Graphite service of Cisco HyperFlex software could allow an unauthenticated, remote attacker to retrieve data from the Graphite service. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by sending crafted request...
CVE-2018-1666
CVE-2018-1666 affects IBM DataPower/DataPower Gateway UI message rendering. A authenticated user could inject arbitrary messages displayed in the UI. Affected products/versions include IBM DataPower Gateway 2018.4.1.0, 7.6.0.0–7.6.0.11, 7.5.2.0–7.5.2.18, 7.5.1.0–7.5.1.18, 7.5.0.0–7.5.0.19, and 7....
Security Bulletin: IBM DataPower Gateway is affected by a message injection vulnerability (CVE-2018-1666)
Summary IBM DataPower Gateway has addressed the following vulnerability: CVE-2018-1666 Vulnerability Details CVEID: CVE-2018-1666 DESCRIPTION: IBM WebSphere DataPower Appliances could allow an authenticated user to inject arbitrary messages that would be displayed on the UI. CVSS Base Score: 4.3...
Security Bulletin: IBM Security Key Lifecycle Manager is affected by XML External Entity Injection (XXE) attack (CVE-2017-1666)
Summary IBM Security Key Lifecycle Manager is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. Vulnerability Details CVEID: CVE-2017-1666 DESCRIPTION:...
CVE-2017-1666
IBM Security Key Lifecycle Manager (formerly Tivoli Key Lifecycle Manager) versions 2.5–2.5.0.8, 2.6–2.6.0.3, and 2.7–2.7.0.2 are affected by a XML External Entity (XXE) vulnerability when processing XML data. The root cause is an XXE flaw in XML processing, allowing a remote attacker to potentia...
openSUSE Security Update : Chromium (openSUSE-2016-756)
Chromium was updated to 51.0.2704.103 to fix three vulnerabilities : - CVE-2016-1704: Various fixes from internal audits, fuzzing and other initiatives shared identifier boo985397 Includes vulnerability fixes from 50.0.2661.102 boo979859 : - CVE-2016-1667: Same origin bypass in DOM - CVE-2016-166...
openSUSE: Security Advisory for Chromium (openSUSE-SU-2016:1655-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for Chromium (important)
Chromium was updated to 51.0.2704.103 to fix three vulnerabilities: - CVE-2016-1704: Various fixes from internal audits, fuzzing and other initiatives shared identifier boo985397 Includes vulnerability fixes from 50.0.2661.102 boo979859: - CVE-2016-1667: Same origin bypass in DOM - CVE-2016-1668:...
USN-2960-1: Oxide vulnerabilities
An out of bounds write was discovered in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code. CVE-2016-1660 It was discovered that Blink assumes that a frame...
CVE-2016-1666
CVE-2016-1666 affects Google Chrome/Chromium up to version 50.0.2661.94. The issue is listed among multiple Chrome vulnerabilities; the linked Debian advisory and Chrome release notes attribute it to broad fixes from internal audits, fuzzing, and related initiatives. The initial CVE summary state...
Mageia: Security Advisory (MGASA-2016-0160)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for Chromium (openSUSE-SU-2016:1208-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for Chromium (important)
Chromium was updated to 50.0.2661.94 to fix a number of vulnerabilities boo977830: - CVE-2016-1660: Out-of-bounds write in Blink - CVE-2016-1661: Memory corruption in cross-process frames - CVE-2016-1662: Use-after-free in extensions - CVE-2016-1663: Use-after-free in BlinkâÂÂs V8 bindings -...
RHEL 6 : chromium-browser (RHSA-2016:0707)
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
Important: Red Hat Security Advisory: chromium-browser security update
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
[SECURITY] [DSA 3564-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3564-1 [email protected] https://www.debian.org/security/ Michael Gilbert May 02, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3564-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3564-1 [email protected] https://www.debian.org/security/ Michael Gilbert May 02, 2016 https://www.debian.org/security/faq -...