Opera Cache History Information Disclosure Vulnerability (Linux)

The host is installed with Opera and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gboperacachehistoryinfodiscvulnlin.nasl 5999 2017-04-21 09:02:32Z teissa $ Opera Cache History Information Disclosure Vulnerability Linux Authors: Rachana Shetty Copyright:...

FreeBSD : mutt-devel -- failure to check SMTP TLS server certificate (49314321-7fd4-11e1-9582-001b2134ef46)

Dave B reports on Full Disclosure : It seems that mutt fails to check the validity of a SMTP servers certificate during a TLS connection. ... This means that an attacker could potentially MITM a mutt user connecting to their SMTP server even when the user has forced a TLS connection. %NASLMINLEVE...

Liferay XSL Command Execution

Exploit for windows platform in category remote exploits $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Novell ZENworks Configuration Management Preboot Service Opcode 6c Vulnerability

Added: 04/06/2012 CVE: CVE-2011-3176 BID: 52659 OSVDB: 80231 Background Novell ZENworks Configuration Management is an IT desktop computer management suite that provides the ability to install, configure and administer desktop computers from a centralized location. The product is based on a...

SuSE 10 Security Update : libxslt (ZYPP Patch Number 8019)

libxslt was prone to an out-of-bounds read flaw when parsing certain patterns CVE-2011-3970. This could have lead to a denial of service and is fixed with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 11.2 Security Update : PHP5 (SAT Patch Number 5958)

This update of PHP5 fixes multiple security flaws : - missing checks of return values could allow remote attackers to cause a denial of service NULL pointer dereference. CVE-2011-4153 - specially crafted XSLT stylesheets could allow remote attackers to create arbitrary files with arbitrary conten...

FreeBSD : chromium -- multiple vulnerabilities (057130e6-7f61-11e1-8a43-00262d5ed8ee)

Google Chrome Releases reports : 106577 Medium CVE-2011-3066: Out-of-bounds read in Skia clipping. Credit to miaubiz. 117583 Medium CVE-2011-3067: Cross-origin iframe replacement. Credit to Sergey Glazunov. 117698 High CVE-2011-3068: Use-after-free in run-in handling. Credit to miaubiz. 117728 Hi...

USN-1418-1: GnuTLS vulnerabilities

Alban Crequy discovered that the GnuTLS library incorrectly checked array bounds when copying TLS session data. A remote attacker could crash a client application, leading to a denial of service, as the client application prepared for TLS session resumption. CVE-2011-4128 Matthew Hall discovered...

CVE-2011-3067

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements...

CVE-2011-3070

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Google V8 bindings...

CVE-2011-3072

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to pop-up windows...

CVE-2011-3070

CVE-2011-3070 is a use-after-free in Google Chrome prior to 18.0.1025.151 involving the V8 bindings, with impact stated as remote denial of service or possibly other effects. The connected documents corroborate the CVE across Chrome/OpenVAS entries; however, no concrete exploit details or patched...

CVE-2011-3067

Technical details for CVE-2011-3067 are not publicly provided in the connected documents. Please monitor for updates; available sources mention Chrome/SOP issue in general terms but do not specify affected components, versions, or fixes in these materials.

CVE-2011-3074

Technical details about CVE-2011-3074 are not publicly available in the provided connected documents. The supplied sources do not specify affected products, versions, impact, or fixes for this CVE.

CVE-2011-3077

CVE-2011-3077 is a Google Chrome vulnerability described in multiple sources as a use-after-free in the script bindings, leading to possible denial of service or other impact. The cited description specifies Chrome versions older than 18.0.1025.151 are affected, with vectors related to a read-aft...

CVE-2011-3069

Technical details for CVE-2011-3069 are not publicly available in the provided documents; monitor for updates.

CVE-2011-3066

Vulnerability context (CVE-2011-3066) : In Google Chrome, Skia-based rendering used for clip operations contains a clipping bug that may trigger an out-of-bounds read, leading to a denial of service. Affected product is Chrome before version 18.0.1025.151 (and related Chromium builds). The issue ...

CVE-2011-3068

Technical details for CVE-2011-3068 are not available in the provided connected documents. The initial description mentions a use-after-free in Chrome's CSS engine but no further specifics are supplied.

CVE-2011-3075

CVE-2011-3075 describes a use-after-free in Google Chrome prior to 18.0.1025.151, exploitable remotely via style-application commands to cause a denial of service or possibly other impact. The vulnerability affects the Chrome rendering/style handling and is mitigated by upgrading to version 18.0....

CVE-2011-3072

CVE-2011-3072 affects Google Chrome prior to 18.0.1025.151, where remote attackers could bypass the Same Origin Policy via popup-related vectors. The issue is part of a set of Chromium/Chrome vulnerabilities; impact includes partial confidentiality, integrity, and availability. Remediation: updat...