APPLE-SA-2013-05-16-1 iTunes 11.0.3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-05-16-1 iTunes 11.0.3 iTunes 11.0.3 is now available and addresses the following: iTunes Available for: Mac OS X v10.6.8 or later, Windows 7, Vista, XP SP2 or later Impact: An attacker in a privileged network position may manipulate HTTP...

Fedora 18 : webkitgtk-1.10.2-1.fc18 / webkitgtk3-1.10.2-1.fc18 (2012-20125)

What's new in WebKitGTK+ 1.10.2? ================================ - WebCore has been split in a few more convenience libtool libraries, which should fix problems with linking in some architectures and with make's command line length limit. - WebKit2 introspection files will also be built if...

APPLE-SA-2012-11-01-2 Safari 6.0.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-11-01-2 Safari 6.0.2 Safari 6.0.2 is now available and addresses the following: WebKit Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.2 Impact: Visiting a maliciously crafted website may lead to an...

Mac OS X : Apple Safari < 6.0.2 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is earlier than 6.0.2. It is, therefore, potentially affected by several issues : - A time-of-check-to-time-of-use issue in the handling of JavaScript array in WebKit could lead to arbitrary, remote code execution. CVE-2012-3748 - ...

Google Chrome Multiple Vulnerabilities-02 Oct12 (Windows)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln02oct12win.nasl 5999 2017-04-21 09:02:32Z teissa $ Google Chrome Multiple Vulnerabilities-02 Oct12 Windows Authors: Antu Sanadi Copyright: Copyright c 2012...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-5112

Use-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before 22.0.1229.94, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-5112

Use-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before 22.0.1229.94, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-5112

CVE-2012-5112 is a use-after-free vulnerability in WebKit’s SVG implementation used by Google Chrome up to version 22.0.1229.94. The Nessus and related advisories confirm that the vulnerability arises in WebKit and could allow remote code execution via unspecified vectors when processing SVG in a...

CVE-2012-5112

Removed by vendor...

Stable Channel Update for Chrome OS

The Stable channel has been updated to 21.0.1180.92 Platform version: 2465.211.0 for Chrome OS Chromebooks Acer AC700, Samsung Series 5, Samsung Series 5 550 and Cr-48, and Samsung Chromebox Series 3. Machines will be receiving updates over the next several days. This build contains security and...

CVE-2011-5112

SQL injection vulnerability in Alameda comalameda component before 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the storeid parameter to index.php...

CVE-2011-5112

CVE-2011-5112 describes an SQL injection in the Joomla! extension Alameda (com_alameda) before 1.0.1, enabling remote attackers to execute arbitrary SQL commands via the storeid parameter to index.php. Affected: Alameda component (

CVE-2009-5112

CVE-2009-5112 affects WebGlimpse (version 2.18.7 and earlier). The issue allows remote attackers to disclose the installation path via a crafted request to wgarcmin.cgi. The description provided does not include exploit specifics beyond this disclosure vector. No patched version or remediation de...

CVE-2009-5112

creationtimestamp| type| source ---|---|--- 2012-03-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36976...

CVE-2006-5112

creationtimestamp| type| source ---|---|--- 2010-07-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16808 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/navicopagetoverflow.rb 2025-02-06 03:13:38+00:00|...

CVE-2008-5112

The CVE describes an LDAP authentication behavior in Microsoft Windows 2000 SP4 and Server 2003 SP1/SP2, where the Active Directory LDAP server responds differently to failed binds based on whether the user exists and is allowed to login. This enables remote attackers to enumerate valid usernames...

CVE-2008-5112

creationtimestamp| type| source ---|---|--- 2008-11-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32586...

Authentication flaw

report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive information web server logs via certain modified query parameters, as demonstrated using the profile, rid, prefs, n, vid, bd, ed, dt, and gtype parameters, a different vulnerability than CVE-2007-511...

CVE-2007-5112

CVE-2007-5112 is an XSS vulnerability in Google Urchin 5 (versions up to 5.7.03 and earlier) affecting the session.cgi (login page). The weakness allows remote attackers to inject arbitrary script/HTML via the query string, as described in the NVD entry. The impact noted includes potential creden...