Fedora 24 : 1:chromium-native_client / chromium (2016-c671aae490)

Security fix for CVE-2016-5181, CVE-2016-5182, CVE-2016-5183, CVE-2016-5184, CVE-2016-5185, CVE-2016-5187, CVE-2016-5188, CVE-2016-5192, CVE-2016-5189, CVE-2016-5186, CVE-2016-5191, CVE-2016-5190, CVE-2016-5193, CVE-2016-5194 Security fix for CVE-2016-5198 Update to new stable, 54.0.2840.90. Note...

openSUSE Security Update : Chromium (openSUSE-2016-2597)

Chromium was updated to 54.0.2840.59 to fix security issues and bugs. The following security issues are fixed bnc1004465 : - CVE-2016-5181: Universal XSS in Blink - CVE-2016-5182: Heap overflow in Blink - CVE-2016-5183: Use after free in PDFium - CVE-2016-5184: Use after free in PDFium -...

[ASA-201610-15] chromium: multiple issues

Arch Linux Security Advisory ASA-201610-15 ========================================== Severity: Critical Date : 2016-10-23 CVE-ID : CVE-2016-5181 CVE-2016-5182 CVE-2016-5183 CVE-2016-5184 CVE-2016-5185 CVE-2016-5186 CVE-2016-5187 CVE-2016-5188 CVE-2016-5189 CVE-2016-5190 CVE-2016-5191 CVE-2016-51...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2014-5184

The CVE-2014-5184 entry concerns the WordPress StripShow plugin (version 2.5.2) and a vulnerability in the stripshow-storylines page. The underlying issue is an SQL injection in the story parameter used in an edit action to wp-admin/admin.php, which could allow remote authenticated administrators...

CVE-2013-5184

CVE-2013-5184 affects Apple Mac OS X kernels prior to 10.9. The issue is an improper error check when processing multicast Wi‑Fi packets, enabling remote attackers in an 802.11 network’s coverage area to trigger a denial of service (system crash). Public details in the provided documents are limi...

CVE-2012-5184

Documents Pro (Olive Toast Software Ltd) for iOS is affected by a Cross-site scripting (XSS) vulnerability in the file viewer prior to version 1.11.1. The issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors when the app is used through a web browser, potentiall...

CVE-2011-5184

HP Network Node Manager i 9.10 is affected by multiple cross-site scripting (XSS) vulnerabilities (CVE-2011-5184) triggered via various parameters (nnm/mibdiscover, nnm/protected/configurationpoll.jsp, nnm/protected/ping.jsp, nnm/protected/statuspoll.jsp, nnm/protected/traceroute.jsp, and nmm/val...

CVE-2010-5184

CVE-2010-5184 describes a race condition in ZoneAlarm Extreme Security 9.1.507.000 on Windows XP that allows local users to bypass kernel-mode hook handlers and run code that could evade signature-based detection, via certain user-space memory changes during hook-handler execution (KHOBE/argument...

CVE-2011-5184

creationtimestamp| type| source ---|---|--- 2011-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36354 2011-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36355 2011-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36357 2011-11-24...

Ability Mail Server < 2.70 Remote Denial of Service

Binary data 5184.prm...

openSUSE Security Update : cups (cups-322)

local users could crash cups by adding a large number of RSS subscriptions CVE-2008-5183, CVE-2008-5184. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cups-322. The text description of this...

openSUSE Security Update : cups (cups-356)

Previous updates for the PNG and HPGL filters were incomplete and are corrected now. Also cups used a guest user account for RSS subscriptions which made it eeasier for attackers to conduct CSRF attacks. CVE-2008-3641, CVE-2008-5184, CVE-2008-5286 %NASLMINLEVEL 70300 C Tenable Network Security,...

Ubuntu: Security Advisory (USN-707-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu USN-707-1 (cupsys)

The remote host is missing an update to cupsys announced via advisory USN-707-1. OpenVAS Vulnerability Test $Id: ubuntu7071.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7071.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-707-1 cupsys Authors: Thomas Rein...

cups: DoS (daemon crash) caused by the large number of subscriptions

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...

FreeBSD Ports: cups-base

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-5184

The web interface cgi-bin/admin.c in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the 1 add and 2 cancel RSS subscription functions...

Null pointer dereference

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...

CVE-2008-5183

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...