Debian DSA-3924-1 : varnish - security update

A denial of service vulnerability was discovered in Varnish, a state of the art, high-performance web accelerator. Specially crafted HTTP requests can cause the Varnish daemon to assert and restart, clearing the cache in the process. See https://varnish-cache.org/security/VSV00001.html for detail...

CVE-2016-3924

services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not validate EFFECTCMDSETPARAM and EFFECTCMDSETPARAMDEFERRED commands, which allows attackers to obtain sensitive information...

CVE-2016-3924

Technical details beyond the initial description are not provided in the connected documents. Public information about affected products, specific versions, root cause, or patch status is not available here. Monitor for updates and new disclosures.

CVE-2014-3885

Cross-site scripting XSS vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

Cross site scripting

Cross-site scripting XSS vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

Cross site scripting

Cross-site scripting XSS vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

CVE-2014-3884

Cross-site scripting XSS vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

openSUSE Security Update : chromium / v8 (openSUSE-2012-107)

Chromium update to version 18.0.1022 fixes several security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-107. The text description of this plugin is C SUSE LLC...

CVE-2014-3924

Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...

CVE-2014-3924

CVE-2014-3924 affects Webmin < 1.690 and Usermin

CVE-2012-3924

Cisco IOS SSL VPN DTLS implementation (15.1/15.2) contains a DoS by mis-handling certain outbound ACL configurations, enabling an authenticated remote user to crash the device via a PPPoA session (Bug ID CSCty97961). Exploitation involves SSL VPN traffic terminating over PPPoA; Cisco has released...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. VID 33d73d59-4677-11e1-88cd-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID 33d73d59-4677-11e1-88cd-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2011-3924

CVE-2011-3924 involves a use-after-free vulnerability in Google Chrome prior to 16.0.912.77, affecting DOM selections. The impact per the description is a possible denial of service or other unspecified effects. The provided connected documents do not add concrete technical details (affected comp...

CVE-2010-3924

CVE-2010-3924 describes an SQL injection vulnerability in Aimluck Aipo prior to version 5.1.0.1. The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, potentially exposing or altering data managed by Aipo. Affected product: Aimluck Aipo (groupware ...

CVE-2009-3924

The CVE-2009-3924 entry describes a buffer overflow in pbsv.dll used by Soldier of Fortune II (and possibly other apps) when Even Balance PunkBuster 1.728 or earlier is enabled. The underlying flaw allows remote attackers to crash the application server (denial of service) and potentially execute...

CVE-2008-3924

Content Management Made Easy (CMME) 1.12 exposes sensitive data under the web root via its Make a backup feature, allowing remote attackers to directly request backup/cmme_data.zip or backup/cmme_cmme.zip to discover account names and password hashes. Vector a reportedly also affects CMME 1.19. T...

CVE-2007-3924

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a -chrome argument to the...

CVE-2007-3924

CVE-2007-3924 describes an argument-injection vulnerability in Internet Explorer when Netscape is installed and certain URIs are registered. The issue arises from IE not properly delimiting the URL argument when invoking Netscape, allowing remote attackers to perform cross-browser scripting and e...

CVE-2006-3924

Dokeos 1.6.x is affected by CVE-2006-3924: multiple XSS vulnerabilities allowing remote script/HTML injection via unspecified vectors. Affected: Dokeos before 1.6.5 (component: web app, XSS in web pages). Root cause: cross-site scripting in the application, enabling partial integrity impact and p...

CVE-2005-3924

CVE-2005-3924 is a SQL injection vulnerability in Randshop, specifically in themes/kategorie/index.php. The issue allows remote attackers to execute arbitrary SQL commands through the kategorieid and katid parameters. NVD lists a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low co...