[SECURITY] [DSA 2920-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2920-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 03, 2014 http://www.debian.org/security/faq -...

DSA-2920-1 chromium-browser - security update

Bulletin has no description...

Debian Security Advisory DSA 2920-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2014-1730 A type confusion issue was discovered in the v8 javascript library. CVE-2014-1731 John Butler discovered a type confusion issue in the WebKit/Blink document object model implementation. CVE-2014-1732 Khalil...

Debian: Security Advisory (DSA-2920-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : chromium -- multiple vulnerabilities (7cf25a0c-d031-11e3-947b-00262d5ed8ee)

Google Chrome Releases reports belatedly : 9 security fixes in this release, including : - 354967 High CVE-2014-1730: Type confusion in V8. Credit to Anonymous. - 349903 High CVE-2014-1731: Type confusion in DOM. Credit to John Butler. - 359802 High CVE-2014-1736: Integer overflow in V8. Credit t...

Google Chrome < 34.0.1847.131 (Windows) Multiple Vulnerabilities

Binary data 8242.pasl...

CVE-2014-1733

CVE-2014-1733 is a compiler bug in Seccomp-BPF that could allow a sandbox bypass in Chromium/Google Chrome. Public sources flag the issue as part of a set of vulnerabilities in Chromium, with patches deemed necessary across multiple distributions. The initial CVE description notes the sandbox byp...

Stable Channel Update

The Stable Channel has been updated to 34.0.1847.131 for Windows, Mac, and 34.0.1847.132 for Linux. This release also contains a Flash Player update, to version 13.0.0.206. Security Fixes and Rewards This update includes 9 security fixes. Below, we highlight fixes that were either contributed by...

Mozilla Firefox Javascript XBL Compilation Code Execution - Ver2 (CVE-2006-1733)

A code execution vulnerability has been reported in Mozilla Firefox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2013-1733

Cross-site request forgery CSRF vulnerability in processbug.cgi in Bugzilla 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that modify bugs via vectors involving a midair-collision token...

CVE-2013-1733

CVE-2013-1733 affects Bugzilla 4.4.x prior to 4.4.1. A CSRF flaw in process_bug.cgi enables remote attackers to hijack a user’s session to modify bugs via requests authenticated with a midair-collision token. CVSSv2 base score 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P). Remediation: upgrade to Bugzilla 4.4...

CVE-2013-2335

Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1733...

Code injection

Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1733...

CVE-2013-2335

Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1733...

Ubuntu: Security Advisory (USN-1733-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1733

CVE-2012-1733: Unspecified vulnerability in Oracle PeopleSoft Enterprise PeopleTools (PeopleSoft Products 8.50, 8.51, 8.52) allowing remote authenticated users to affect confidentiality via unknown CM-related vectors. Affects PeopleTools components within specified versions. The provided document...

CVE-2011-1733

HP OpenView Data Protector 6.00/6.10/6.11 Backup Client Service (OmniInet.exe) suffers a stack-based buffer overflow via malformed HPFGConfig messages, enabling remote code execution on Windows as SYSTEM. The flaw exists in the Backup Client Service (listening on port 5555) and results from insuf...

ZDI-11-149: HP Data Protector Backup Client Service HPFGConfig Remote Code Execution Vulnerability

ZDI-11-149: HP Data Protector Backup Client Service HPFGConfig Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-149 April 29, 2011 -- CVE ID: CVE-2011-1733 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products:...

CVE-2010-1733

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...

DEBIAN-CVE-2010-1733

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...