Debian DSA-2785-1 : chromium-browser - several vulnerabilities

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2013-2906 Atte Kettunen of OUSPG discovered race conditions in Web Audio. - CVE-2013-2907 Boris Zbarsky discovered an out-of-bounds read in window.prototype. - CVE-2013-2908 Chamal de Silva discovered an address bar...

chromium: 30.0.1599.66 security and bugfix update (important)

Update to Chromium 30.0.1599.66: - Easier searching by image - A number of new apps/extension APIs - Lots of under the hood changes for stability and performance - Security fixes: + CVE-2013-2906: Races in Web Audio + CVE-2013-2907: Out of bounds read in Window.prototype object + CVE-2013-2908:...

Google Chrome Multiple Vulnerabilities-01 (Oct 2013) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2013-2907

The Window.prototype object implementation in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2013-2907

CVE-2013-2907 is an out-of-bounds read in the Window.prototype object reported for Chromium around the 30.x updates. Connected advisories show openSUSE and Debian patches that fix this issue as part of Chromium security updates (e.g., openSUSE-SU-2013:1556-1 and openSUSE openSUSE-2014-37/NASL ent...

CVE-2013-2907

Removed by vendor...

FreeBSD : chromium -- multiple vulnerabilities (e5414d0c-2ade-11e3-821d-00262d5ed8ee)

Google Chrome Releases reports : 50 security fixes in this release, including : - 223962270758271161284785284786 Medium CVE-2013-2906 : Races in Web Audio. Credit to Atte Kettunen of OUSPG. - 260667 Medium CVE-2013-2907: Out of bounds read in Window.prototype object. Credit to Boris Zbarsky. -...

Stable Channel Update

The Chrome team is excited to announce the promotion of Chrome 30 to the Stable channel for Windows, Mac, Linux and Chrome Frame. Chrome 30.0.1599.66 contains a number of fixes and improvements, including: Easier searching by image A number of new apps/extension APIs Lots of under the hood change...

CVE-2012-2709

CVE-2012-2709 is a duplicate of CVE-2012-2907. The connected records provide concrete details: an XSS vulnerability in the Aberdeen Drupal theme (aberdeen_breadcrumb in template.php) for Drupal 6.x-1.x, exploitable when the “Append the content title to the end of the breadcrumb” option is enabled...

CVE-2012-2907

The CVE-2012-2907 issue affects the Aberdeen theme for Drupal (versions 6.x-1.x prior to 6.x-1.11). The vulnerability arises in the aberdeen_breadcrumb function (template.php) when the option to append the content title to the breadcrumb is enabled, allowing remote attackers to inject arbitrary w...

SA-CONTRIB-2012-081 - Aberdeen - Cross Site Scripting

CVE: CVE-2012-2907. The Aberdeen theme provides a configurable breadcrumb which is commonly used as an additional navigation tool for users. The theme outputs the breadcrumb, but does not provide sufficient filtering to prevent a Cross site scripting XSS attack. This vulnerability is mitigated by...

CVE-2011-2907

TORQUE Resource Manager (Terascale Open-Source Resource and Queue Manager) versions 3.0.1 and earlier are vulnerable to a remote-auth bypass via a modified PBS_O_HOST passed to qsub, enabling submission of arbitrary jobs. This is a remote, unauthenticated issue with potential for privilege escala...

CVE-2011-2907

Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBSOHOST variable to the qsub program...

CVE-2010-2907

SQL injection vulnerability in the Huru Helpdesk comhuruhelpdesk component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid0 parameter in a detail action to index.php...

CVE-2010-2907

The CVE-2010-2907 entry maps to a SQL injection in the Huru Helpdesk Joomla! component (com_huruhelpdesk). The root cause is improper sanitization of user input for the cid[0] parameter used to build SQL queries in the detail action of index.php. This vulnerability, if exploitable, allows remote ...

CVE-2010-2907

SQL injection vulnerability in the Huru Helpdesk comhuruhelpdesk component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid0 parameter in a detail action to index.php...

CVE-2010-2907

creationtimestamp| type| source ---|---|--- 2010-07-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14449...

CVE-2009-2907

CVE-2009-2907 affects SpringSource Hyperic HQ-related products (Open Source 4.2.x and 4.1.x/4.0.x lines; Enterprise 4.0.x/4.1.x) and related components such as tc Server 6.x and AMS up to 2.0.0.SR4. Root cause: improper validation of user-supplied input leading to stored cross-site scripting via ...

CVE-2009-2907: SpringSource Hyperic HQ multiple XSS vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2009-2907: SpringSource Hyperic HQ multiple XSS vulnerabilities Severity: Moderate Vendor: SpringSource Versions Affected: SpringSource Hyperic HQ 4.2 pre-release versions SpringSource Hyperic HQ 4.1.0 to 4.1.2 SpringSource Hyperic HQ 4.0.0 to 4.0...

SpringSource Hyperic HQ Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2009-2907: SpringSource Hyperic HQ multiple XSS vulnerabilities Severity: Moderate Vendor: SpringSource Versions Affected: SpringSource Hyperic HQ 4.2 pre-release versions SpringSource Hyperic HQ 4.1.0 to 4.1.2 SpringSource Hyperic HQ 4.0.0 to 4.0...