Fedora 27 : chromium (2018-812b5d5a71)

Update to 66.0.3359.181. Security fix for CVE-2018-6085 CVE-2018-6086 CVE-2018-6087 CVE-2018-6088 CVE-2018-6089 CVE-2018-6090 CVE-2018-6091 CVE-2018-6092 CVE-2018-6093 CVE-2018-6094 CVE-2018-6095 CVE-2018-6096 CVE-2018-6097 CVE-2018-6098 CVE-2018-6099 CVE-2018-6100 CVE-2018-6101 CVE-2018-6102...

Fedora Update for chromium FEDORA-2018-94e1bc8c23

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4182-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2018-6056 lokihardt discovered an error in the v8 JavaScript library. - CVE-2018-6057 Gal Beniamini discovered errors related to shared memory permissions. - CVE-2018-6060 Omair discovered a use-after-free issue in...

Critical: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

CVE-2013-6099

This CVE ID is rejected/not used and does not represent an active vulnerability entry.

CVE-2013-6099

...

PayPal PHP Merchant SDK <= 3.9.1 Cross-site Scripting Vulnerability

This host has installed the PayPal PHP Merchant SDK and is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2017-6099

Cross-site scripting XSS vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK aka merchant-sdk-php 3.9.1 allows remote attackers to inject arbitrary web script or HTML via the token parameter...

CVE-2017-6099

CVE-2017-6099 is an XSS vulnerability affecting PayPal PHP Merchant SDK (merchant-sdk-php)

CVE-2016-6099

CVE-2016-6099 affects IBM Security Key Lifecycle Manager (formerly Tivoli Key Lifecycle Manager) v2.5 (2.5.0.7) and v2.6 (2.6.0.2). The issue is an information disclosure to unauthorized users, which could enable further attacks. CVSS v3 base score 5.3. remediation is available: IBM fixes 2.5.0-I...

Hewlett Packard Enterprise Network Automation RMI Registry Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Network Automation. Authentication is not required to exploit this vulnerability. The specific flaw exists within an exposed RMI registry on TCP port 6099. By sending a...

Microsoft .NET Framework XSS / Privilege Escalation Vulnerability

Exploit for windows platform in category remote exploits Product: =========================== Microsoft .NET Framework Vulnerability Type: ============================ XSS / Elevation of Privilege CVE Reference: ============== CVE-2015-6099 Vulnerability Details: ====================== Microsoft...

Web Clients HTTP URL JavaScript Function Cross-Site Scripting (CVE-2015-1159; CVE-2015-6099; CVE-2015-6972; CVE-2017-0068)

A cross-site scripting vulnerability has been reported in multiple web clients. The vulnerability is due to improper input validation. A remote attacker could exploit this vulnerability to execute arbitrary scripting or HTML code in the user's browser session...

CVE-2014-6099

IBM Sterling B2B Integrator 5.2.x (and Sterling Integrator 5.1) is affected by CVE-2014-6099 due to a lack of login- Brute-force protection on the Change Password screen, enabling potential admin credential compromise. The IBM bulletin lists affected versions (5.2 through 5.2.4; 5.1 as applicable...

CVE-2012-6099

The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration...

CVE-2012-6099

The CVE-2012-6099 issue affects Moodle’s moodle1 backup converter in backup/converter/moodle1/lib.php. The root cause is improper validation of pathnames, enabling remote authenticated users to read arbitrary files by abusing the backup-restoration feature. Affected versions are Moodle 2.1.x befo...

CVE-2008-6099

PHP remote file inclusion vulnerability in index.php in RPortal 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fileop parameter...

CVE-2008-6099

CWE-style: CVE-2008-6099 is a PHP remote file inclusion vulnerability in index.php of RPortal 1.1 and earlier. The issue allows remote attackers to execute arbitrary PHP code by supplying a URL in the file_op parameter. Affected component: index.php (RPortal 1.1 and earlier). Root cause: unsafely...

CVE-2008-6099

creationtimestamp| type| source ---|---|--- 2008-10-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6648...

CVE-2007-6099

Unspecified vulnerability in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 might leave "media pinholes" open upon a restart of the SIP module, which might make it easier for remote attackers to conduct unauthorized activities...