CVE-2016-2864

Summary: CVE-2016-2864 is a cross-site scripting (XSS) vulnerability affecting multiple IBM Jazz-based products (CLM, RQM, RTC, RDNG, RELM, Rhapsody DM, RSA DM) with affected versions ranging from CLM 3.0.1.6 to 6.0.x. The root cause is improper validation of user-supplied input, allowing remote ...

Ubuntu 14.04 LTS : NSS vulnerability (USN-2864-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2864-1 advisory. Karthikeyan Bhargavan and Gaetan Leurent discovered that NSS incorrectly allowed MD5 to be used for TLS 1.2 connections. If a remote attacker were able to perform...

hyatt.com XSS vulnerability

Vulnerable URL: http://www.hyatt.com/ws/typeahead-json-latin?citylimit=2=501=3=515=3=508==496"=jQuery172093841264693383391446414273511=P=full=12=2+x&=1446414354203 Details: Description| Value ---|--- Patched:| Yes, at 31.08.2016 Latest check for patch:| 31.08.2016 09:48 GMT Vulnerability type:| X...

CVE-2015-2864

Retrospect and Retrospect Client suffer from weak password hashing (CVE-2015-2864). Prior to updates, password hashes could collide, enabling a remote attacker with network access to bypass authentication and access backup files. Affected versions include Windows clients before 10.0.2.119, macOS ...

flaticon.com XSS vulnerability

Vulnerable URL: http://www.flaticon.com/authors/sergiu-bagrin?xss'-alert/XSSposed/-'1=1 Details: Description| Value ---|--- Patched:| Yes, at 04.07.2016 Latest check for patch:| 04.07.2016 08:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2864 Google Pageran...

Retrospect Backup Client uses weak password hashing

Overview Retrospect Backup Client is a client to a network-based backup utility. This client stores passwords in a hashed format that is weak and susceptible to collision, allowing an attacker to generate a password hash collision and gain access to the target's backup files. Description CWE-916:...

CA Antivirus Engine CAB Buffer Overflow

No description provided by source. $Id: cacab.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

openSUSE Security Update : Mesa (openSUSE-SU-2012:1120-1)

Mesa was updated to fix a buffer overrun in glsl shaders : - Uglsl-linker-Avoid-buffer-over-run-in-parceloutunif.p atch - Avoid buffer over-run in parceloutuniformstorage::visitfield When too may uniforms are used, the error will be caught in checkresources src/glsl/linker.cpp. CVE-2012-2864,...

CVE-2014-2864

CVE-2014-2864 affects PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3. The vulnerability is a directory traversal via a filename parameter, allowing remote attackers to cause an unspecified impact. Documents consistently describe the issue but do not provide concrete exploitation details, ...

GLSA-201404-06 : Mesa: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201404-06 Mesa: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mesa. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with...

Fedora Update for libvirt FEDORA-2014-2864

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2864-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Multiple Vulnerabilities-01 June13 (Linux)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln01jun13lin.nasl 6086 2017-05-09 09:03:30Z teissa $ Google Chrome Multiple Vulnerabilities-01 June13 Linux Authors: Arun Kallavi Copyright: Copyright c 2013...

CVE-2013-2864

CVE-2013-2864 affects Google Chrome prior to version 27.0.1453.110, with the PDF functionality being the vector. The issue can cause a denial of service via an invalid free operation and may have unspecified other impact. The NVD assigns a CVSSv2 base score of 7.5 (HIGH) with network attack vecto...

Google Chrome < 27.0.1453.110 Multiple Vulnerabilities

Binary data 801017.prm...

Mandriva Linux Security Advisory : mesa (MDVSA-2013:103)

Updated mesa packages fix security vulnerability : The glsl shaders are vulnerable to a buffer overrun in parceloutuniformstorage::visitfield. When too many uniforms are used, the error will now be caught in checkresources src/glsl/linker.cpp CVE-2012-2864. Additionally, Mesa has been updated to...

[USN-1623-1] Mesa vulnerability

========================================================================== Ubuntu Security Notice USN-1623-1 November 05, 2012 mesa vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Google Chrome OS 远程代码执行漏洞

BUGTRAQ ID: 55135 CVE ID: CVE-2012-2864 Chrome OS是一款Google正式宣布处于开发中的基于PC的操作系统。 Google Chrome OS 21.0.1183.0之前版本在实现上存在远程代码执行漏洞，攻击者可利用此漏洞在系统中执行任意代码或造成拒绝服务。 0 Google Chrome OS 0.9.130.14 Beta 厂商补丁： Google ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.google.com...

CVE-2012-2864

Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, allows remote attackers to execute arbitrary code via unspecified vectors that trigger an "array overflow."...

CVE-2012-2864

CVE-2012-2864 affects Mesa, the graphics library used in affected Chrome/Chromebook deployments. A buffer/array overrun in GLSL shader handling (glsl linker) can occur when there are too many uniforms, enabling remote code execution in some environments or causing denial of service according to m...