87 matches found
CVE-2013-2920
CVE-2013-2920 : Out-of-bounds read in URL parsing in Chromium/Google Chrome prior to versions around 30.0.1599.x. The issue is evidenced in the Chrome 30 development/Stable lineage, with advisories noting the fix in updates such as 30.0.1599.66 and subsequent Chromium builds. Connected documents ...
FreeBSD : chromium -- multiple vulnerabilities (e5414d0c-2ade-11e3-821d-00262d5ed8ee)
Google Chrome Releases reports : 50 security fixes in this release, including : - 223962270758271161284785284786 Medium CVE-2013-2906 : Races in Web Audio. Credit to Atte Kettunen of OUSPG. - 260667 Medium CVE-2013-2907: Out of bounds read in Window.prototype object. Credit to Boris Zbarsky. -...
Stable Channel Update
The Chrome team is excited to announce the promotion of Chrome 30 to the Stable channel for Windows, Mac, Linux and Chrome Frame. Chrome 30.0.1599.66 contains a number of fixes and improvements, including: Easier searching by image A number of new apps/extension APIs Lots of under the hood change...
CVE-2012-2920
The CVE-2012-2920 entry involves a Cross-site Scripting (XSS) vulnerability in the WordPress User Photo plugin, specifically in the userphoto_options_page function of user-photo.php prior to version 0.9.5.2. The issue allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to...
Moderate: Red Hat Security Advisory: Red Hat Network Satellite server security and enhancement update
Updated packages that fix several security issues and add one enhancement are now available for Red Hat Network Satellite 5.4.1 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CV...
CVE-2010-2920
Joomla! Foobla Suggestions component com_foobla_suggestions 1.5.1.2 is affected by a Local File Inclusion directory traversal vulnerability. The issue allows remote attackers to read arbitrary files via directory traversal sequences in the index.php controller parameter, enabling potential exposu...
CVE-2010-2920
creationtimestamp| type| source ---|---|--- 2010-04-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12120...
SLES9: Security update for clamav
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: clamav For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5009158 within the SuSE...
CVE-2009-2920
Multiple cross-site scripting XSS vulnerabilities in Elvin 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 component and 2 priority parameters to buglist.php; and the 3 Username 4 E-mail, 5 Pass, and 6 Confirm pass fields to createaccount.php...
CVE-2009-2920
Multiple cross-site scripting XSS vulnerabilities in Elvin 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 component and 2 priority parameters to buglist.php; and the 3 Username 4 E-mail, 5 Pass, and 6 Confirm pass fields to createaccount.php...
CVE-2009-2920
CVE-2009-2920 affects Elvin 1.2.2 with multiple Cross-Site Scripting (XSS) flaws. The vulnerabilities allow remote attackers to inject arbitrary scripts via parameters to buglist.php (component, priority) and to createaccount.php (Username, E-mail, Pass, Confirm pass). Attack vector is network-ba...
CVE-2009-2920
creationtimestamp| type| source ---|---|--- 2009-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9342...
Gentoo Security Advisory GLSA 200509-13 (clamav)
The remote host is missing updates announced in advisory GLSA 200509-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD Ports: clamav
The remote host is missing an update to the system as announced in the referenced advisory. VID 271498a9-2cd4-11da-a263-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-2920
The CVE-2008-2920 entry concerns EZTechhelp EZCMS 1.2 and earlier where admin/filemanager/ (the File Manager) does not require authentication. This root cause enables remote attackers to create, modify, read, and delete files. Public references confirm the vulnerability and its exposure, with the...
CVE-2008-2920
admin/filemanager/ aka the File Manager in EZTechhelp EZCMS 1.2 and earlier does not require authentication, which allows remote attackers to create, modify, read, and delete files...
CVE-2008-2920
creationtimestamp| type| source ---|---|--- 2008-06-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5819...
Debian Security Advisory DSA 824-1 (clamav)
The remote host is missing an update to clamav announced via advisory DSA 824-1. Two vulnerabilities have been discovered in Clam AntiVirus, the antivirus scanner for Unix, designed for integration with mail servers to perform attachment scanning. The following problems were identified:...
Debian: Security Advisory (DSA-824-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...