Google Chrome Multiple Vulnerabilities-02 (Mar 2014) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Multiple Vulnerabilities-02 (Mar 2014) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2014-1700

The CVE-2014-1700 issue is a Use-After-Free in Blink’s SpeechSynthesis.cpp used by Google Chrome prior to 33.0.1750.149, allowing a remote attacker to cause a Denial of Service or possibly other impact through improper handling of an utterance data structure. Affected product classes include Chro...

FreeBSD : www/chromium --multiple vulnerabilities (24cefa4b-a940-11e3-91f2-00262d5ed8ee)

Google Chrome Releases reports : 7 vulnerabilities fixed in this release, including : - 344881 High CVE-2014-1700: Use-after-free in speech. Credit to Chamal de Silva. - 342618 High CVE-2014-1701: UXSS in events. Credit to aidanhs. - 333058 High CVE-2014-1702: Use-after-free in web database. Cred...

Stable Channel Update

The Stable Channel has been updated to 33.0.1750.149 for Windows, Mac, and Linux. This release also contains a Flash Player update, to version 12.0.0.77. Security Fixes and Rewards This update includes 7 security fixes. Below, we highlight fixes that were either contributed by external researcher...

Google Chrome < 33.0.1750.149 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is a version prior to 33.0.1750.149. It is, therefore, affected by the following vulnerabilities : - Use-after-free errors exist related to 'speech' and 'web database' processing. CVE-2014-1700, CVE-2014-1702 - An input validation error...

CVE-2013-1700

CVE-2013-1700 affects Mozilla Firefox on Windows, where the Mozilla Maintenance Service fails to handle inability to launch the Mozilla Updater executable. This enables local privilege escalation via placing a Trojan horse executable at an arbitrary location. Affected component: Mozilla Maintenan...

Mozilla Firefox Multiple Vulnerabilities (Jun 2013) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox Multiple Vulnerabilities - June 13 (Windows)

The host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillafirefoxmultvulnjun13win.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Firefox Multiple Vulnerabilities - June 13 Windows Authors: Arun Kallavi Copyright: Copyright c...

HP ProCurve 1700 series switches vulnerable to cross-site request forgery

Overview ProCurve 1700 series switches provided by Hewlett-Packard contain a cross-site request forgery vulnerability. Darren Willis of Fourteenforty Research Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

[security bulletin] HPSBPV02855 SSRT100512 rev.1 - HP ProCurve 1700-8&#40;J9079A&#41; and 1700-24&#40;J9080A&#41; Switches, Cross Site Request Forgery &#40;CSRF&#41;

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03699981 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03699981 Version: 1 HPSBPV02855...

CVE-2012-5216

Cross-site request forgery CSRF vulnerability on HP ProCurve 1700-8 aka J9079A switches with software before VA.02.09 and 1700-24 aka J9080A switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Ubuntu: Security Advisory (USN-1700-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1700

Technical details for CVE-2012-1700 are not publicly provided in the supplied documents. Monitor for updates from Oracle/NVD; the connected items reference this CVE but do not reveal affected components, versions, impact, or remediation.

Novell iPrint Client 'printer-url' Multiple BOF Vulnerabilities - Windows

Novell iPrint Client is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ZDI-11-173: Novell iPrint nipplib.dll profile-time Remote Code Execution Vulnerability

ZDI-11-173: Novell iPrint nipplib.dll profile-time Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-173 June 6, 2011 -- CVE ID: CVE-2011-1700 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Novell -- Affected Products: Novell iPrint --...

CVE-2011-1700

Novell iPrint Client (nipplib.dll) has a heap-based buffer overflow in the profile-time parameter of the printer-url, affecting versions before 5.64. This vulnerability (CVE-2011-1700) allows remote code execution and is triggered by processing a crafted printer-url profile-time value, with explo...

Novell iPrint Client < 5.64 Multiple Vulnerabilities

Binary data 5942.prm...

Novell iPrint Client < 5.64 Multiple Vulnerabilities

The version of Novell iPrint Client installed on the remote host is prior to 5.64. It is, therefore, affected by one or more of the following vulnerabilities in the nipplib.dll component, as used by both types of browser plugins, that can allow for arbitrary code execution : - The uri parameter...

PHP Session Data Deserialization Arbitrary Code Execution Vulnerability

PHP is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescriptio...