CVE-2017-5101

CVE-2017-5101 concerns Google Chrome’s Omnibox content spoofing vulnerability. The public description specifies an inappropriate Omnibox implementation that allows a remote attacker to spoof the Omnibox contents via a crafted HTML page on Chrome versions before 60.0.3112.78 (Linux, Windows, Mac)....

Fedora 26 : chromium (2017-f79ae2b96f)

Chromium 60. Security fix for CVE-2017-5091, CVE-2017-5092, CVE-2017-5093, CVE-2017-5094, CVE-2017-5095, CVE-2017-5096, CVE-2017-5097, CVE-2017-5098, CVE-2017-5099, CVE-2017-5100, CVE-2017-5101, CVE-2017-5102, CVE-2017-5103, CVE-2017-5104, CVE-2017-7000, CVE-2017-5105, CVE-2017-5106, CVE-2017-510...

Debian: Security Advisory (DSA-3926-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome < 60.0.3112.78 Multiple Vulnerabilities

Binary data 700171.pasl...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

[ASA-201707-29] chromium: multiple issues

Arch Linux Security Advisory ASA-201707-29 ========================================== Severity: Critical Date : 2017-07-27 CVE-ID : CVE-2017-5091 CVE-2017-5092 CVE-2017-5093 CVE-2017-5094 CVE-2017-5095 CVE-2017-5097 CVE-2017-5098 CVE-2017-5099 CVE-2017-5100 CVE-2017-5101 CVE-2017-5102 CVE-2017-51...

CVE-2017-5101

Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page...

CVE-2016-5101

CVE-2016-5101 affects Opera Mail for Windows; an unspecified vulnerability in Opera Mail before 2016-02-16 allows user-assisted remote attackers to execute arbitrary code via a crafted email message. Related sources (CNVD-2016-04464, KLA10834) describe arbitrary code execution for Opera Mail and ...

CVE-2016-5101

Unspecified vulnerability in Opera Mail before 2016-02-16 on Windows allows user-assisted remote attackers to execute arbitrary code via a crafted e-mail message...

KLA10834 Arbitrary code execution vulnerability in Opera Mail

An unspecified vulnerability was found in Opera Mail. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed e-mail message. Original advisories Opera advisory Related products Opera-Mail CVE list...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via...

CVE-2015-5095

CVE-2015-5095 is a use-after-free vulnerability in Adobe Reader and Acrobat (Windows/macOS) affecting Adobe Reader/Acrobat 10.x before 10.1.15, 11.x before 11.0.12, and DC Classic before 2015.006.30060 / DC Continuous before 2015.008.20082. It allows attackers to execute arbitrary code via unspec...

CVE-2015-5101

Technical details for CVE-2015-5101 are not publicly available in the provided Connected documents. The Initial description notes a use-after-free in Adobe Reader/Acrobat with unspecified vectors. No vendor/versions or fixes are provided here. Monitor for updates.

CVE-2014-5101

CVE-2014-5101 affects WeBid 1.1.1 with multiple XSS vulnerabilities (and LDAP injection per some sources). The issues allow remote attackers to inject arbitrary scripts/HTML via parameters in register.php (TPL_name, TPL_nick, TPL_email, TPL_year, TPL_address, TPL_city, TPL_prov, TPL_zip, TPL_phon...

TYPO3 Multiple Vulnerabilities (Dec 2010)

TYPO3 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; ifdescription...

Joomla JE Poll组件不明细节参数SQL注入漏洞

BUGTRAQ ID: 51229 CVECAN ID: CVE-2012-5101 Joomla!是一款开放源码的内容管理系统（CMS）。Joomla! JE Poll是Jommla 1.5、Joomla 1.6的一个组件、模块和插件，可将投票结果显示为动画。 Joomla JE Poll 1.1之前版本存在SQL注入漏洞，成功利用此漏洞可允许攻击者控制应用、访问或修改数据。 0 Joomla! JE Poll 1.0 厂商补丁： Joomla! ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.joomla.org/...

CVE-2012-5101

The affected software is Joomla! JE Poll component (before version 1.1). It has an SQL injection vulnerability that can allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The root cause is a flaw in JE Poll prior to 1.1 that enables injection and data access/modific...

Monstra 1.2.1 Cross Site Scripting

Monstra 1.2.1 Multiple HTML Injection Vulnerabilities input type="hidden" name="menu...

CVE-2011-5101

The CVE-2011-5101 entry concerns the Rumor technology in McAfee SaaS Endpoint Protection (pre-5.2.4). The available documents specify that this component allows remote attackers to relay email messages via unspecified vectors, demonstrated by relaying spam. The exact affected versions are McAfee ...

CVE-2010-5101

Directory traversal vulnerability in the TypoScript setup in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated administrators to read arbitrary files via unspecified vectors related to the "file inclusion functionality."...