CVE-2018-6113

This CVE (CVE-2018-6113) concerns Google Chrome on iOS (pre-66.0.3359.117) where improper handling of pending navigation entries in Navigation allows a remote attacker to spoof the domain via a crafted HTML page. The issue is categorized as a URL spoofing/domain spoofing vulnerability in the Navi...

Fedora 28 : chromium (2018-94e1bc8c23)

Update to 66.0.3359.181. Security fix for CVE-2018-6085 CVE-2018-6086 CVE-2018-6087 CVE-2018-6088 CVE-2018-6089 CVE-2018-6090 CVE-2018-6091 CVE-2018-6092 CVE-2018-6093 CVE-2018-6094 CVE-2018-6095 CVE-2018-6096 CVE-2018-6097 CVE-2018-6098 CVE-2018-6099 CVE-2018-6100 CVE-2018-6101 CVE-2018-6102...

Fedora 27 : chromium (2018-812b5d5a71)

Update to 66.0.3359.181. Security fix for CVE-2018-6085 CVE-2018-6086 CVE-2018-6087 CVE-2018-6088 CVE-2018-6089 CVE-2018-6090 CVE-2018-6091 CVE-2018-6092 CVE-2018-6093 CVE-2018-6094 CVE-2018-6095 CVE-2018-6096 CVE-2018-6097 CVE-2018-6098 CVE-2018-6099 CVE-2018-6100 CVE-2018-6101 CVE-2018-6102...

Critical: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

CVE-2018-6113

Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

CVE-2016-6113

CVE-2016-6113 concerns IBM Verse web UI, where a cross-site scripting vulnerability allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. The description and related references confirm XSS impact; however, the provided documen...

IBM Tivoli Endpoint Manager Multiple Cross Site Scripting Vulnerabilities

IBM Tivoli Endpoint Manager is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PHP 5.3.x < 5.3.14 / 5.4.x < 5.4.4 Multiple Vulnerabilities

Binary data 9097.prm...

CVE-2015-6113

Mode C: CVE-2015-6113 is a Windows kernel security feature bypass where a local attacker could bypass filesystem permissions via FileLinkInformation hard-links in sandboxed processes. The root cause is that ZwSetInformationFile accepted a link operation with 0 desired access for the file handle, ...

Microsoft Windows Kernel CVE-2015-6113 Local Security Bypass Vulnerability

Description Microsoft Windows is prone to a local security-bypass vulnerability. Local attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based System...

ManageEngine AssetExplorer < 6.1.0 Build 6113 Multiple XSS

The version of ManageEngine AssetExplorer running on the remote host is prior to 6.1.0 build 6113. It is, therefore, affected by multiple cross-site scripting XSS vulnerabilities : - A cross-site scripting vulnerability exists due to improper validation of input to the Publisher name before...

CVE-2014-6113

IBM Tivoli Endpoint Manager (TEM) Web Reports component is affected by CVE-2014-6113. The vulnerability is a cross-site scripting issue in TEM 9.1 prior to 9.1.1229, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The vulnerability is tied to the Web Repo...

SuSE 11.1 / 11.2 Security Update : xorg-x11-server-rdp (SAT Patch Numbers 6111 / 6113)

This update of xorg-x11-server-rdp fixed the following security issues : - memory exhaustion flaw CVE-2011-4028 / CVE-2011-4029 - race condition flaw. CVE-2010-2240 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE...

PHP 'openssl_encrypt()' Function Information Disclosure Vulnerability - Windows

PHP is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

Ubuntu 12.04 LTS : php5 vulnerability (USN-1702-1)

It was discovered that PHP incorrectly handled the opensslencrypt function when used with an empty string. An attacker could use this flaw to cause PHP to disclose arbitrary memory contents and possibly expose sensitive information. Note that Tenable Network Security has extracted the preceding...

CVE-2012-6113

This CVE affects PHP 5.3.9–5.3.13 where the openssl_encrypt() code path in ext/openssl/openssl.c fails to initialize a variable, enabling a remote attacker to read sensitive memory contents by supplying zero-length input data. The issue is a memory disclosure vulnerability. Public references indi...

CentOS 4 / 5 : wireshark (CESA-2008:0058)

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously...

RedHat Update for wireshark RHSA-2008:0059-01

Check for the Version of wireshark OpenVAS Vulnerability Test RedHat Update for wireshark RHSA-2008:0059-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CVE-2008-6113

SemanticScuttle contains a cross-site scripting (XSS) vulnerability in versions before 0.90. The issue allows remote attackers to inject arbitrary web script or HTML, via vectors related to the username and profile page. The connected sources confirm the affected software and the impact (arbitrar...

CentOS 3 : wireshark (CESA-2008:0059)

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known ...