Google Chrome multiple vulnerabilities - July 10

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnjul10.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - July 10 Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...

CVE-2010-2652

Google Chrome before 5.0.375.99 does not correctly implement modal dialogs, enabling denial of service (application crash) via unspecified vectors. Connected sources confirm a set of related Chrome vulnerabilities (including modal-dialog handling) in the 5.0.375.99 timeframe and reference a patch...

CVE-2009-2652

CVE-2009-2652 affects Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_37 through snv_120. The vulnerability arises from the parsing of labeled packets, allowing remote attackers to cause a denial of service (panic). The entry documents an in-scope impact (availability) but provid...

CVE-2008-2652

Multiple SQL injection vulnerabilities in catalog.php in SMEWeb 1.4b and 1.4f allow remote attackers to execute arbitrary SQL commands via the 1 idp and 2 category parameters...

CVE-2008-2652

CVE-2008-2652: Multiple SQL injection vulnerabilities in SMEWeb 1.4b and 1.4f (catalog.php) allow remote attackers to execute arbitrary SQL commands via the idp and category parameters. Root cause: unsafe SQL handling in catalog.php leading to injection. Affected products: SMEWeb 1.4b/1.4f. Impac...

CVE-2008-2652

creationtimestamp| type| source ---|---|--- 2008-06-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5725...

CVE-2007-2652

Free-SA prior to 1.2.2 contains multiple unspecified vulnerabilities that allow remote code execution via unspecified vectors stemming from questionable usage of sprintf and vsprintf in files under reports/ (r_index.c, r_reports.c, r_topsites.c, r_topuser.c, r_typical.c, r_userdatetime.c, r_users...

CVE-2006-2652

CVE-2006-2652 is an XSS vulnerability affecting WikiNi 0.4.2 and earlier, allowing remote attackers to inject arbitrary HTML/script by editing a Wiki page to include the script. The connected documents confirm the product/version and the vulnerable behavior, but do not provide technical details b...

CVE-2004-2652

The CVE concerns Snort before 2.3.0, where DecodeTCPOptions in decode.c can crash a system (denial of service) when handling TCP/IP options printed in FAST/verbose mode. The root cause is a null dereference triggered by packets with invalid TCP/IP options. Multiple vendors and issue trackers (NVD...

CVE-2005-2652

CVE-2005-2652 affects Zorum 3.5. The vulnerability permits remote attackers to obtain the full installation path by directly requesting any of these pages: gorum/notification.php, user.php, attach.php, blacklist.php, zorum/forum.php, globalstat.php, gorum/trace.php, gorum/badwords.php, or gorum/f...

CVE-2004-2652

The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote attackers to cause a denial of service crash via packets with invalid TCP/IP options, which trigger a null dereference...