IBM WebSphere Portal Unspecified Information Disclosure (PI17768)

The version of IBM WebSphere Portal on the remote host is affected by an unspecified information disclosure vulnerability which allows a remote attacker to gain access to sensitive information. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid79217; scriptversion"1.4";...

Joomla Component com_brightweblinks SQL Injection (CVE-2008-3083)

An SQL injection vulnerability has been reported in Joomla Com BrightweblinksJoomla Com Brightweblinks. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

IBM WebSphere Portal 8.0.0.x < 8.0.0.1 CF14 Multiple Vulnerabilities

The version of IBM WebSphere Portal installed on the remote host is affected by multiple vulnerabilities : - An unspecified information disclosure vulnerability exists which allows a remote attacker to gain access to sensitive information. CVE-2014-3083 - An information disclosure vulnerability...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2014-3083)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3083 advisory. - ALSA: control: Don't access controls outside of protected regions Lars-Peter Clausen Orabug: 19817787 CVE-2014-4653 CVE-2014-4654 CVE-2014-4655 -...

CVE-2013-3083

CVE-2013-3083 is a CSRF flaw in Belkin F5D8236-4 v2 (cgi-bin/system_setting.exe) that lets remote attackers hijack administrator authentication to open the remote management interface on arbitrary ports via remote_mgmt_enabled and remote_mgmt_port. Impact per provided docs: authentication hijack;...

CVE-2014-3083

CVE-2014-3083 concerns IBM WebSphere Application Server information disclosure via failure to restrict access to resources within web applications. Connected IBM bulletins show affected products/versions and explicit fixes: for WAS 7.x, remediation requires Fix Pack 35 (7.0.0.35) or later; for WA...

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0656-1)

Chromium update to 21.0.1145 - Fixed several issues around audio not playing with videos - Crash Fixes - Improvements to trackpad on Cr-48 - Security Fixes bnc762481 - CVE-2011-3083: Browser crash with video + FTP - CVE-2011-3084: Load links from internal pages in their own process. -...

CVE-2013-3083

creationtimestamp| type| source ---|---|--- 2013-04-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38495...

SuSE Update for update openSUSE-SU-2012:0656-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201206561.nasl 8273 2018-01-03 06:29:19Z teissa $ SuSE Update for update openSUSE-SU-2012:0656-1 update Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...

openSUSE: Security Advisory for update (openSUSE-SU-2012:0656-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : pidgin on SL3.x, SL4.x, SL5.x i386/x86_64

An invalid pointer dereference bug was found in the way the Pidgin OSCAR protocol implementation processed lists of contacts. A remote attacker could send a specially crafted contact list to a user running Pidgin, causing Pidgin to crash. CVE-2009-3615 A NULL pointer dereference flaw was found in...

Scientific Linux Security Update : pidgin on SL4.x, SL5.x i386/x86_64

CVE-2009-3026 pidgin: ignores SSL/TLS requirements with old jabber servers CVE-2009-2703 Pidgin: NULL pointer dereference by handling IRC topics DoS CVE-2009-3083 Pidgin: NULL pointer dereference by processing incomplete MSN SLP invite DoS CVE-2009-3085 Pidgin: NULL pointer dereference by...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Google Chrome Multiple Vulnerabilities - May 12 (Mac OS X)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnmay12macosx.nasl 5963 2017-04-18 09:02:14Z teissa $ Google Chrome Multiple Vulnerabilities - May 12 Mac OS X Authors: Madhuri D Copyright: Copyright c 2012...

Google Chrome Multiple Vulnerabilities (May 2012) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3083

browser/profiles/profileimpliodata.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted web page...

CVE-2011-3083

browser/profiles/profileimpliodata.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted web page...

CVE-2011-3083

CVE-2011-3083 affects Google Chrome prior to 19.0.1084.46, with the vulnerability stemming from the handling of a malformed ftp URL in the SRC attribute of a VIDEO element in profile_impl_io_data.cc. This can trigger a NULL pointer dereference and cause the browser to crash via a crafted page, i....

SuSE 10 Security Update : pidgin (ZYPP Patch Number 6709)

This update of pidgin fixes the following issues : - Allowed to send confidential data unencrypted even if SSL was chosen by user. CVE-2009-3026: CVSS v2 Base Score: 5.0 - Remote denial of service in yahoo IM plug-in. CVE-2009-3025: CVSS v2 Base Score: 4.3 - Remote denial of service in MSN plug-i...

SuSE 10 Security Update : pidgin (ZYPP Patch Number 6710)

This update of pidgin fixes the following issues : - Allowed to send confidential data unencrypted even if SSL was chosen by user. CVE-2009-3026: CVSS v2 Base Score: 5.0 - Remote denial of service in yahoo IM plug-in. CVE-2009-3025: CVSS v2 Base Score: 4.3 - Remote denial of service in MSN plug-i...