64 matches found
Fedora Update for cups-filters FEDORA-2015-3036
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 3036-1 (mediawiki - security update)
It was discovered that MediaWiki, a wiki engine, did not sufficiently filter CSS in uploaded SVG files, allowing for cross site scripting. OpenVAS Vulnerability Test $Id: deb3036.nasl 8972 2018-02-28 07:02:10Z cfischer $ Auto-generated from advisory DSA 3036-1 using nvtgen 1.0 Script version: 1.0...
Debian DSA-3036-1 : mediawiki - security update
It was discovered that MediaWiki, a wiki engine, did not sufficiently filter CSS in uploaded SVG files, allowing for cross site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...
openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0374-1)
Changes in chromium : - Update to 19.0.1066 - Fixed Chrome install/update resets Google search preferences Issue: 105390 - Don't trigger accelerated compositing on 3D CSS when using swiftshader Issue: 116401 - Fixed a GPU crash Issue: 116096 - More fixes for Back button frequently hangs Issue:...
CVE-2014-3036
The CVE-2014-3036 entry concerns IBM API Management 3.0.0.0. It describes an unspecified vulnerability where, when basic authentication is used for APIs, remote attackers could bypass topology-access restrictions and obtain sensitive information via unknown vectors. The available sources (NVD and...
CVE-2013-3036
IBM Rational Requirements Composer prior to 4.0.4 is affected by an open redirect vulnerability. Remote authenticated users can construct a URL that redirects victims to arbitrary external sites, enabling phishing via crafted links. Documents consistently describe the issue as an open redirect wi...
Gentoo Security Advisory GLSA 201203-19 (chromium)
The remote host is missing updates announced in advisory GLSA 201203-19. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
Gentoo Security Advisory GLSA 201203-19 (chromium)
The remote host is missing updates announced in advisory GLSA 201203-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Google Chrome Multiple Denial of Service Vulnerabilities - March12 (Mac OS X)
The host is installed with Google Chrome and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultdosvulnmar12macosx.nasl 6521 2017-07-04 14:51:10Z cfischer $ Google Chrome Multiple Denial of Service Vulnerabilities - March12 Mac OS X Authors:...
Google Chrome Multiple Denial of Service Vulnerabilities - March12 (Windows)
The host is installed with Google Chrome and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultdosvulnmar12win.nasl 6022 2017-04-25 12:51:04Z teissa $ Google Chrome Multiple Denial of Service Vulnerabilities - March12 Windows Authors: Rachan...
FreeBSD : chromium -- multiple vulnerabilities (99aef698-66ed-11e1-8288-00262d5ed8ee)
Google Chrome Releases reports : 105867 High CVE-2011-3031: Use-after-free in v8 element wrapper. Credit to Chamal de Silva. 108037 High CVE-2011-3032: Use-after-free in SVG value handling. Credit to Arthur Gerkis. 108406 115471 High CVE-2011-3033: Buffer overflow in the Skia drawing library...
CVE-2011-3036
CVE-2011-3036 affects Google Chrome prior to 17.0.963.65, where a bad cast during line box handling could allow a remote attacker to cause a denial of service (and possibly other impact) via a crafted document. Root cause: bad cast in line box handling. Remediation: update Chrome to 17.0.963.65 o...
Google Chrome < 17.0.963.65 Multiple Vulnerabilities
Binary data 800899.prm...
CVE-2010-3036
CiscoWorks Common Services web server module contains multiple buffer overflows in the Cisco-developed authentication code, enabling remote, unauthenticated code execution with system administrator privileges via sessions on TCP ports 443 or 1741. Affected: CiscoWorks Common Services prior to ver...
CVE-2009-3036
Summary of CVE-2009-3036: Symantec IM Manager Console is affected by a cross-site scripting (XSS) vulnerability in the management console. The issue allows an attacker to inject arbitrary HTML/script into a user’s browser when authenticated to the console, due to improper input handling. Affected...
Symantec IM Manager Local-Access Cross-site Scripting
SUMMARY Symantecs IM Manager management console is susceptible to a cross-site scripting issue. AFFECTED PRODUCTS Product | Version | Solutions ---|---|--- Symantec IM Manager | 8.3 and 8.4 | Upgrade to 8.4.13 Note: Customers running 8.3 versions of Symantec IM Manager should upgrade to the lates...
Fedora Update for pdns-recursor FEDORA-2008-3036
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for pdns-recursor FEDORA-2008-3036
Check for the Version of pdns-recursor OpenVAS Vulnerability Test Fedora Update for pdns-recursor FEDORA-2008-3036 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CVE-2008-3036
CVE-2008-3036 affects CMS little 0.0.1 via a directory traversal in index.php. The template parameter’s .. path allows remote attackers to include and execute arbitrary local files, and possibly remote files. Documented impact is remote code execution through file inclusion. Root cause: insuffici...
CVE-2007-3036
CVE-2007-3036 describes a local privilege-escalation vulnerability in Windows Services for UNIX (WSF) 3.0 and 3.5 and in the Subsystem for UNIX-based Applications on Windows 2000/XP/Server 2003/Vista. The underlying issue is improper handling of setuid binary files which may allow a local, authen...