CVE-2011-2927

CVE-2011-2927 is an XSS vulnerability affecting Spacewalk 1.6 as used by Red Hat Network Satellite. The issue enables a remote attacker to inject scripts via Search form vectors in the RHN Satellite web interface. Connected sources (SUSE, Red Hat advisory RHSA-2011:1299, Veracode listing) confirm...

SuSE Update for chromium openSUSE-SU-2013:1776-1 (chromium)

Check for the Version of chromium OpenVAS Vulnerability Test $Id: gbsuse201317761.nasl 8448 2018-01-17 16:18:06Z teissa $ SuSE Update for chromium openSUSE-SU-2013:1776-1 chromium Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This...

openSUSE: Security Advisory for chromium (openSUSE-SU-2013:1776-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated chromium-browser-stable packages fix multiple vulnerabilities

Updated chromium-browser-stable packages fix security vulnerabilities: Atte Kettunen of OUSPG discover a use-after-free issue in Blink's XML HTTP request implementation CVE-2013-2925. cloudfuzzer discovered a use-after-free issue in the list indenting implementation CVE-2013-2926. cloudfuzzer...

Debian DSA-2785-1 : chromium-browser - several vulnerabilities

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2013-2906 Atte Kettunen of OUSPG discovered race conditions in Web Audio. - CVE-2013-2907 Boris Zbarsky discovered an out-of-bounds read in window.prototype. - CVE-2013-2908 Chamal de Silva discovered an address bar...

Google Chrome Multiple Vulnerabilities-02 (Oct 2013) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2013-2927

The CVE-2013-2927 issue is a use-after-free in Blink’s HTMLFormElement::prepareForSubmission (core/html/HTMLFormElement.cpp) as used by Google Chrome prior to 30.0.1599.101. The vulnerability can allow a remote attacker to cause a denial of service or potentially other impact via submission vecto...

FreeBSD : chromium -- multiple vulnerabilities (710cd5d5-35cb-11e3-85f9-00262d5ed8ee)

Google Chrome Releases reports : 5 security fixes in this release, including : - 292422 High CVE-2013-2925: Use after free in XHR. Credit to Atte Kettunen of OUSPG. - 294456 High CVE-2013-2926: Use after free in editing. Credit to cloudfuzzer. - 297478 High CVE-2013-2927: Use after free in forms...

Stable Channel Update

Chrome has been updated to 30.0.1599.101 for Windows, Mac, Linux and Chrome Frame. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library...

Scientific Linux Security Update : pidgin on SL 3.0.x , SL 4.x , SL 5.x

An integer overflow flaw was found in Pidgin's MSN protocol handler. If a user received a malicious MSN message, it was possible to execute arbitrary code with the permissions of the user running Pidgin. CVE-2008-2927 Note: the default Pidgin privacy setting only allows messages from users in the...

CVE-2012-2927

The CVE-2012-2927 vulnerability applies to Atlassian Jira with the TM Software Tempo Plugin. The Tempo Plugin versions affected are: 6.4.3.1 and earlier in the 6.5.x line prior to 6.5.0.2, and 7.x prior to 7.0.3. The issue is that the plugin does not properly restrict the capabilities of third‑pa...

Moderate: Red Hat Security Advisory: Red Hat Network Satellite server security and enhancement update

Updated packages that fix several security issues and add one enhancement are now available for Red Hat Network Satellite 5.4.1 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CV...

SuSE 10 Security Update : pidgin, gaim and finch (ZYPP Patch Number 5573)

specially crafted MSN SLP messages could cause an integer overflow in pidgin. Attackers could potentially exploit that to execute arbitrary code. CVE-2008-2927 - overly long file names in MSN file transfers could crash pidgin. CVE-2008-2955 - SSL certifcates were not verfied. Therefore piding...

IBM Tivoli Directory Server DIGEST-MD5 Denial of Service Vulnerability

IBM Tivoli Directory Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2927

The vulnerability CVE-2010-2927 affects IBM Tivoli Directory Server (ITDS) prior to 6.0.0.8-TIV-ITDS-IF0006. The issue lies in the slapi_printmessage function, which can be triggered by multiple incomplete DIGEST-MD5 connection attempts, leading to a denial of service (daemon crash). The availabl...

Debian DSA-1870-1 : pidgin - insufficient input validation

Federico Muttis discovered that libpurple, the shared library that adds support for various instant messaging networks to the pidgin IM client, is vulnerable to a heap-based buffer overflow. This issue exists because of an incomplete fix for CVE-2008-2927 and CVE-2009-1376. An attacker can exploi...

Mandriva Security Advisory MDVSA-2009:321 (pidgin)

The remote host is missing an update to pidgin announced via advisory MDVSA-2009:321. OpenVAS Vulnerability Test $Id: mdksa2009321.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:321 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Debian Security Advisory DSA 1870-1 (pidgin)

The remote host is missing an update to pidgin announced via advisory DSA 1870-1. OpenVAS Vulnerability Test $Id: deb18701.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1870-1 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

DSA-1870-1 pidgin - insufficient input sanitization

Bulletin has no description...

openSUSE Security Update : finch (finch-188)

specially crafted MSN SLP messages could cause an integer overflow in pidgin. Attackers could potentially exploit that to execute arbitrary code CVE-2008-2927. - overly long file names in MSN file transfers could crash pidgin CVE-2008-2955. - SSL certifcates were not verfied. Therefore piding...