Ubuntu 15.10 : linux-raspi2 vulnerability (USN-2858-3)

Nathan Williams discovered that overlayfs in the Linux kernel incorrectly handled setattr operations. A local unprivileged attacker could use this to create files with administrative permission attributes and execute arbitrary code with elevated privileges. Note that Tenable Network Security has...

Ubuntu 14.04 LTS : Linux kernel (Wily HWE) vulnerability (USN-2858-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2858-2 advisory. Nathan Williams discovered that overlayfs in the Linux kernel incorrectly handled setattr operations. A local unprivileged attacker could use this to create files...

CVE-2015-2858

The CVE-2015-2858 issue affects the Datalex airline booking software (pre-2015-09-03) and stems from an authorization-check bypass in how the application processes the profileId parameter. By modifying profileId in POST requests to ValidateFormAction.do or ProfileConfirmEditAddressAction.do, an a...

Synology Photo Station multiple Cross-Site Scripting vulnerabilities

------------------------------------------------------------------------ Synology Photo Station multiple Cross-Site Scripting vulnerabilities ------------------------------------------------------------------------ Han Sahin, May 2015...

CVE-2014-2858

Directory traversal vulnerability in the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 allows remote attackers to obtain sensitive information via unspecified vectors related to a "configured block." NOTE: this issue was SPLIT from CVE-2014-0053 per ADT2 due to...

CVE-2014-2858

Directory traversal vulnerability in the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 allows remote attackers to obtain sensitive information via unspecified vectors related to a "configured block." NOTE: this issue was SPLIT from CVE-2014-0053 per ADT2 due to...

CVE-2014-2858

CVE-2014-2858 describes a directory traversal in the Grails Resources plugin (version 1.0.0 up to 1.2.5) for Grails 2.0.0–2.3.6. The issue allows remote attackers to obtain sensitive information via unspecified vectors related to a configured block (directory traversal bypass). Root cause: improp...

Debian: Security Advisory (DSA-2858-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2706-1] chromium-browser security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2706-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano June 10, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2706-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2706-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano June 10, 2013 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-2706-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2858

Use-after-free vulnerability in the HTML5 Audio implementation in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

Google Chrome < 27.0.1453.110 Multiple Vulnerabilities

Binary data 801017.prm...

CVE-2013-2858

Removed by vendor...

CVE-2013-2858

The CVE-2013-2858 entry concerns a use-after-free in the HTML5 Audio implementation of Chromium/Open Chrome before 27.0.1453.110. This vulnerability could allow a remote attacker to cause a denial of service or potentially other unspecified impact via unknown vectors. Affected products include Ch...

Gentoo Security Advisory GLSA 201208-03 (chromium)

The remote host is missing updates announced in advisory GLSA 201208-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Google Chrome Multiple Vulnerabilities - August 12 (Linux)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnaug12lin.nasl 5963 2017-04-18 09:02:14Z teissa $ Google Chrome Multiple Vulnerabilities - August 12 Linux Authors: Madhuri D Copyright: Copyright c 2012...

CVE-2012-2858

Buffer overflow in the WebP decoder in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted WebP image...

CVE-2012-2858

CVE-2012-2858 is a Chrome/WebP decoder buffer overflow vulnerability. A crafted WebP image could trigger remote denial of service (and possible other impact). Affected: Google Chrome prior to 21.0.1180.57 on Mac/Linux and prior to 21.0.1180.60 on Windows/Chrome Frame. Remediation (per GLSA): upgr...

Stable Channel Release

The Chrome team is excited to announce the release of Chrome 21 to the Stable Channel. 21.0.1180.57for Mac and Linux. 21.0.1180.60 for Windowsand Chrome Frame. Chrome 21 contains a number of new features including a new API forhigh-quality video and audio communication.More detailed updates are...