RHEL 7 : libvirt (RHSA-2018:1668)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1668 advisory. - hw: cpu: speculative store bypass CVE-2018-3639 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CVE-2017-1668

IBM Security Key Lifecycle Manager (formerly Tivoli Key Lifecycle Manager) is affected by CVE-2017-1668 due to an open redirect vulnerability that can be exploited by persuading a user to visit a crafted site, allowing URL spoofing and potential access to sensitive information. Affected versions:...

Chrome Universal XSS using iterables (CVE-2016-1668)

VULNERABILITY DETAILS From /thirdparty/WebKit/Source/bindings/core/v8/Iterable. h: void forEachForBinding... ... v8::LocalcreationContextscriptState-context-Global; v8::Local v8Callbackthe callback. v8Value. As; v8::Localv8ThisArgmethod performs a stable. v8Value; v8::Local args3; args2 =...

openSUSE Security Update : Chromium (openSUSE-2016-756)

Chromium was updated to 51.0.2704.103 to fix three vulnerabilities : - CVE-2016-1704: Various fixes from internal audits, fuzzing and other initiatives shared identifier boo985397 Includes vulnerability fixes from 50.0.2661.102 boo979859 : - CVE-2016-1667: Same origin bypass in DOM - CVE-2016-166...

openSUSE: Security Advisory for Chromium (openSUSE-SU-2016:1655-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for Chromium (important)

Chromium was updated to 51.0.2704.103 to fix three vulnerabilities: - CVE-2016-1704: Various fixes from internal audits, fuzzing and other initiatives shared identifier boo985397 Includes vulnerability fixes from 50.0.2661.102 boo979859: - CVE-2016-1667: Same origin bypass in DOM - CVE-2016-1668:...

Google Chrome < 50.0.2661.102 Multiple Vulnerabilities

Binary data 9371.pasl...

[SECURITY] [DSA 3590-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3590-1 [email protected] https://www.debian.org/security/ Michael Gilbert June 01, 2016 https://www.debian.org/security/faq -...

FreeBSD : chromium -- multiple vulnerabilities (4dfafa16-24ba-11e6-bd31-3065ec8fd3ec)

Google Chrome Releases reports : 5 security fixes in this release, including : - 605766 High CVE-2016-1667: Same origin bypass in DOM. Credit to Mariusz Mlynski. - 605910 High CVE-2016-1668: Same origin bypass in Blink V8 bindings. Credit to Mariusz Mlynski. - 606115 High CVE-2016-1669: Buffer...

USN-2960-1: Oxide vulnerabilities

An out of bounds write was discovered in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code. CVE-2016-1660 It was discovered that Blink assumes that a frame...

openSUSE Security Update : Chromium (openSUSE-2016-584)

Chromium was updated to 50.0.2661.102 to fix four vulnerabilities boo979859 : - CVE-2016-1667: Same origin bypass in DOM - CVE-2016-1668: Same origin bypass in Blink V8 bindings - CVE-2016-1669: Buffer overflow in V8 - CVE-2016-1670: Race condition in loader %NASLMINLEVEL 70300 C Tenable Network...

Security update for Chromium (important)

Chromium was updated to 50.0.2661.102 to fix four vulnerabilities boo979859: - CVE-2016-1667: Same origin bypass in DOM - CVE-2016-1668: Same origin bypass in Blink V8 bindings - CVE-2016-1669: Buffer overflow in V8 - CVE-2016-1670: Race condition in loader...

CVE-2016-1668

The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

CVE-2016-1668

CVE-2016-1668 concerns a cross-origin bypass in the V8 bindings to Blink/WebKit via the forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h. Affected software is Google Chrome prior to 50.0.2661.102, with the impact described as bypassing the Same Origin Policy through a craft...

CVE-2016-1668

creationtimestamp| type| source ---|---|--- 2016-05-14 20:24:03+00:00| seen| https://t.me/HackerOne/108...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2016-1668

The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 5 security fixes in this release, including: 605766 High CVE-2016-1667: Same origin bypass in DOM. Credit to Mariusz Mlynski. 605910 High CVE-2016-1668: Same origin bypass in Blink V8 bindings. Credit to Mariusz Mlynski. 606115 High CVE-2016-1669: Buffer overflow i...

CentOS Update for httpd CESA-2015:1668 centos6

Check the version of httpd SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882258";...

Oracle Linux 6 : httpd (ELSA-2015-1668)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1668 advisory. - fix regressions caused by fix for CVE-2015-3183 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...