RedHat Update for firefox RHSA-2016:1551-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 5 / 6 / 7 : firefox (CESA-2016:1551)

An update for firefox is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

RHEL 5 / 6 / 7 : firefox (RHSA-2016:1551)

An update for firefox is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2016-2838

Heap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via directional content in an SVG document...

Ubuntu: Security Advisory (USN-2838-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS : foomatic-filters vulnerability (USN-2838-2)

Adam Chester discovered that the foomatic-filters foomatic-rip filter incorrectly stripped shell escape characters. A remote attacker could possibly use this issue to execute arbitrary code as the lp user. Note that Tenable Network Security has extracted the preceding description block directly...

Ubuntu 14.04 LTS : cups-filters vulnerability (USN-2838-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2838-1 advisory. Adam Chester discovered that the cups-filters foomatic-rip filter incorrectly stripped shell escape characters. A remote attacker could possibly use this issue to...

CVE-2015-2838

CVE-2015-2838 affects Citrix NetScaler Nitro API prior to 10.5 build 52.3nc. The vulnerability arises from CSRF that lets an attacker craft requests via the file_name JSON field in params/xen_hotfix/0 to nitro/v1/config/xen_hotfix, enabling shell metacharacters to execute commands as nsroot. This...

KLA10536 Multiple vulnerabilities in Citrix NetScaler

Multiple serious vulnerabilities have been found in Citrix NetScaler. Malicious users can exploit these vulnerabilities to execute or inject arbitrary code and conduct XSS attack. Below is a complete list of vulnerabilities 1. XSS vulnerability can be exploited remotely via a specially designed...

CVE-2014-2838

CVE-2014-2838 affects the WordPress plugin GD Star Rating (v19.22). The vulnerability set includes CSRF that can hijack administrator authentication, enabling requests that conduct (1) SQL injection via the s parameter on the gd-star-rating-stats page to wp-admin/admin.php and (2) cross-site scri...

openSUSE Security Update : chromium (openSUSE-SU-2013:1194-1)

Update to 30.0.1553 - Bug and stability fixes - Includes security update for v8 bnc821601 - CVE-2013-2838 Denial of service out-of-bounds read via unspecified vectors - Add the flag --disable-gpu-sandbox to prevent crashes and/or slowness. The GPU Sandbox is a new sandbox introduces in M28 and is...

openSUSE Security Update : chromium (openSUSE-SU-2013:1200-1)

Update to 30.0.1553 - Bug and stability fixes - Includes security update for v8 bnc821601 - CVE-2013-2838 Denial of service out-of-bounds read via unspecified vectors - Add the flag --disable-gpu-sandbox to prevent crashes and/or slowness. The GPU Sandbox is a new sandbox introduces in M28 and is...

Debian Security Advisory DSA 2838-1 (libxfont - buffer overflow)

It was discovered that a buffer overflow in the processing of Glyph Bitmap Distribution fonts BDF could result in the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2838.nasl 6715 2017-07-13 09:57:40Z teissa $ Auto-generated from advisory DSA 2838-1 using nvtgen 1.0 Script versio...

Debian DSA-2695-1 : chromium-browser - several issues

Several vulnerabilities have been discovered in the Chromium web browser. Multiple use-after-free, out-of-bounds read, memory safety, and cross-site scripting issues were discovered and corrected. - CVE-2013-2837 Use-after-free vulnerability in the SVG implementation allows remote attackers to...

[SECURITY] [DSA 2695-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2695-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 29, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2695-1 (chromium-browser - several issues)

Several vulnerabilities have been discovered in the Chromium web browser. Multiple use-after-free, out-of-bounds read, memory safety, and cross-site scripting issues were discovered and corrected. CVE-2013-2837 Use-after-free vulnerability in the SVG implementation allows remote attackers to caus...

DSA-2695-1 chromium-browser - several

Bulletin has no description...

Debian: Security Advisory (DSA-2695-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2838

Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2013-2838

CVE-2013-2838 affects Chromium/Google Chrome’s V8 engine prior to 27.0.1453.93, enabling a remote attacker to cause a denial of service via an out-of-bounds read with unspecified vectors. Public reports in connected docs confirm the issue as part of a set of Chrome/Chromium vulnerabilities and sh...