Fedora Update for qt5-qtwebengine FEDORA-2018-e08d828ed9

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for chromium (important)

This update for chromium to 64.0.3282.119 fixes several issues. These security issues were fixed: - CVE-2018-6031: Use after free in PDFium boo1077571 - CVE-2018-6032: Same origin bypass in Shared Worker boo1077571 - CVE-2018-6033: Race when opening downloaded files boo1077571 - CVE-2018-6034:...

Google Chrome < 64.0.3282.119 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 64.0.3282.119. It is, therefore, affected by multiple vulnerabilities as referenced in the 201801stable-channel-update-for-desktop24 advisory. - Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a...

Google Chrome < 64.0.3282.119 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 64.0.3282.119. It is, therefore, affected by multiple vulnerabilities as referenced in the 201801stable-channel-update-for-desktop24 advisory. - Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a...

openSUSE: Security Advisory for chromium (openSUSE-SU-2018:0259-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-6040

Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially bypass content security policy via a crafted HTML page...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 64 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 64.0.3282.119 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcomin...

CVE-2017-6040

CVE-2017-6040 concerns an Information Exposure in Belden Hirschmann GECKO Lite Managed switch (Version 2.0.00 and earlier). The vulnerability arises from saving a copy of the downloaded configuration file (which includes password hashes) in a location accessible without authentication, enabling a...

CVE-2016-6040

The CVE-2016-6040 issue affects IBM Jazz Foundation within IBM Jazz-based CLM/Rational products. An authenticated user could take over a previously logged-in user because session expiration is not enforced. Affected products include Rational CLM 4.0–6.0.2, Rational Team Concert, Rational Quality ...

Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt8.M60P.3

6:2.11.3-alt8.M60P.3 built Dec. 23, 2015 Dmitry V. Levin in task 155253 Dec. 23, 2015 Dmitry V. Levin - Backported upstream fixes for sw15330/CVE-2013-1914, sw14699/CVE-2013-4237, sw1585567/CVE-2013-4332, sw14134/CVE-2012-6656, sw17325/CVE-2014-6040, sw14547/CVE-2012-4412,4424...

CVE-2015-6040

CVE-2015-6040 is a memory corruption vulnerability in Microsoft Office components (Excel 2007/2010, Excel for Mac 2011/2016, Office Compatibility Pack, Excel Viewer) that can be exploited remotely by a crafted Office document to execute arbitrary code. Root cause: improper handling of memory obje...

Microsoft Office Excel Remote Code Execution Vulnerabilities (3116111)

This host is missing a critical security update according to Microsoft Bulletin MS15-131. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Memory Corruption (MS15-131: CVE-2015-6040)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

SUSE: Security Advisory for glibc (SUSE-SU-2014:1129-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2015-495)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES10 Security Update : glibc (SUSE-SU-2015:0170-1)

glibc has been updated to fix security issues : - Fix crashes on invalid input in IBM gconv modules CVE-2014-6040, CVE-2012-6656, bsc894553, bsc894556, GLIBC BZ 17325, GLIBC BZ 14134 - Fixed a stack overflow during hosts parsing CVE-2013-4357 - Copy filename argument in posixspawnfileactionsaddop...

Debian DLA-97-1 : eglibc security update

CVE-2012-6656 Fix validation check when converting from ibm930 to utf. When converting IBM930 code with iconv, if IBM930 code which includes invalid multibyte character '0xffff' is specified, then iconv segfaults. CVE-2014-6040 Crashes on invalid input in IBM gconv modules BZ 17325 These changes...

Medium: glibc

Issue Overview: An out-of-bounds read flaw was found in the way glibc's iconv function converted certain encoded data to UTF-8. An attacker able to make an application call the iconv function with a specially crafted argument could use this flaw to crash that application. CVE-2014-6040 It was fou...

CentOS 7 : glibc (CESA-2015:0327)

Updated glibc packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2015:0327 Updated glibc packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS bas...