CVE-2014-1731

core/html/HTMLSelectElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly check renderer state upon a focus event, which allows remote attackers to cause a denial of service or possibl...

Stable Channel Update

The Stable Channel has been updated to 34.0.1847.131 for Windows, Mac, and 34.0.1847.132 for Linux. This release also contains a Flash Player update, to version 13.0.0.206. Security Fixes and Rewards This update includes 9 security fixes. Below, we highlight fixes that were either contributed by...

Huawei Ethernet Switches Y.1731拒绝服务漏洞

Huawei Ethernet Switches存在拒绝服务漏洞。 该漏洞是由于处理某些Y.1731报文时造成的错误，可被黑客利用来导致设备通过特制的数据包重新载入。 0 Huawei S2300 Huawei S3300 Huawei S5300 Huawei S6300 Huawei S9300 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-329625.htm...

Security Advisory- Y.1731 Vulnerability on Some Huawei Switches

Y.1731 is an ITU-T recommendation for OAM features on Ethernet-based networks. Y.1731 provides connectivity detection, diagnosis, and performance monitoring for VLAN/VSI services on MANs. Some Huawei switches support Y.1731 and therefore, has the Y.1731 vulnerability in processing special packets...

Fedora 18 : firefox-24.0-1.fc18 / xulrunner-24.0-2.fc18 (2013-17047)

Upstream security update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...

Fedora 20 : firefox-24.0-1.fc20 / xulrunner-24.0-2.fc20 (2013-17074)

Upstream update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 19 : firefox-24.0-1.fc19 / xulrunner-24.0-2.fc19 (2013-16992)

Upstream security update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...

CVE-2013-1731

Mozilla Firefox for Android before 24.0 is affected by an untrusted search path vulnerability in the GL tracing functionality. An attacker could execute arbitrary code by placing a Trojan horse .so library in a world-writable directory that Firefox loads, enabling code execution. This CVE is corr...

Ubuntu 12.10 : cinder vulnerability (USN-1731-1)

Stuart Stent discovered that Cinder would allow XML entity processing. A remote unauthenticated attacker could exploit this using the Cinder API to cause a denial of service via resource exhaustion. CVE-2013-1664. Note that Tenable Network Security has extracted the preceding description block...

CVE-2012-1731

Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI...

CVE-2012-1731

Oracle Siebel CRM 8.1.1 and 8.2.2 contain a Web UI vulnerability (CVE-2012-1731) in the UI Framework/Web UI. The issue allows difficult-to-exploit, unauthenticated network access via HTTP that can lead to unauthorized updates/inserts/deletes, data exposure, and partial denial of service. The vuln...

CVE-2011-1731

HP OpenView Data Protector (Backup Client Service) is affected by a stack-based buffer overflow in OmniInet.exe (EXEC_INTEGUTIL message) that allows remote, unauthenticated code execution. Vulnerable products: HP Data Protector 6.00, 6.10, 6.11 (Windows). The flaw resides in insufficient bounds c...

CVE-2010-1731

Google Chrome on the HTC Hero allows remote attackers to cause a denial of service application crash via JavaScript that writes sequences in an infinite loop...

CVE-2010-1731

The CVE-2010-1731 issue affects Google Chrome on the HTC Hero, where JavaScript can trigger an infinite loop generating sequences, causing the browser to crash (DoS). This is supported by multiple linked records (NVD/Red Hat/Ubuntu/etc.). The documents do not provide a patched version or remedia...

CVE-2010-1731

Removed by vendor...

SuSE 11 Security Update : libpoppler (SAT Patch Number 1731)

This update of libpoppler4 fixes various security issues. - Fix multiple integer overflows in 'pdftops' filter that could be used by attackers to execute code. CVE-2009-0791 - Integer overflow in the createsurfacefromthumbnaildata function in glib/poppler-page.cc in Poppler 0.x allows remote...

Sql injection

SQL injection vulnerability in index.php in Mlffat 2.2 allows remote attackers to execute arbitrary SQL commands via a member cookie in an account editprofile action, a different vector than CVE-2009-1731...

CVE-2009-1731

The provided documents contain concrete details for CVE-2009-1731: MLFFAT 2.1 is affected, specifically the panel/index.php component. The vulnerability is an SQL injection caused by processing a base64-encoded supervisor cookie, enabling remote attackers to execute arbitrary SQL commands. Impact...

Debian: Security Advisory (DSA-1731-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1731-1 : ndiswrapper - buffer overflow

Anders Kaseorg discovered that ndiswrapper suffers from buffer overflows via specially crafted wireless network traffic, due to incorrectly handling long ESSIDs. This could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...