Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 67 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 67.0.3396.62 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

openSUSE Security Update : Chromium (openSUSE-2018-456)

This update for Chromium to version 66.0.3359.170 fixes the following issues : Security issues fixed boo1092923 : - CVE-2018-6121: Privilege Escalation in extensions - CVE-2018-6122: Type confusion in V8 - CVE-2018-6120: Heap buffer overflow in PDFium - Various fixes from internal audits, fuzzing...

CVE-2016-6123

IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2015-6123

Cross-site scripting XSS vulnerability in Microsoft Excel for Mac 2011 and Excel 2016 for Mac allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message that is mishandled by Outlook for Mac, aka "Microsoft Outlook for Mac Spoofing Vulnerability."...

CVE-2015-6123

Cross-site scripting XSS vulnerability in Microsoft Excel for Mac 2011 and Excel 2016 for Mac allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message that is mishandled by Outlook for Mac, aka "Microsoft Outlook for Mac Spoofing Vulnerability."...

CVE-2015-6123

CVE-2015-6123 is an XSS vulnerability affecting Microsoft Excel 2011 for Mac and Excel 2016 for Mac. The issue arises from a crafted Outlook for Mac email mishandling HTML, enabling remote attackers to inject arbitrary script/HTML. Connected sources reference MS15-116 Office for Mac updates as th...

Microsoft Outlook for Mac CVE-2015-6123 Spoofing Vulnerability

Description Microsoft Outlook for Mac is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft Excel...

KLA10696 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges or execute arbitrary code. Below is a complete list of vulnerabilities 1. Improper memory objects handling can be exploited remotely via...

Microsoft Outlook for Mac Spoofing (MS15-116: CVE-2015-6123)

A spoofing vulnerability has been reported in Microsoft outlook for Mac. The vulnerability is due to an error in Microsoft Office Outlook that fail to sanitize html input or treat it in a safe manner. A remote attacker can exploit this vulnerability by sending HTML e-mails to victims with content...

MS15-116: Security Updates for Microsoft Office to Address Remote Code Execution (3104540) (Mac OS X)

The version of Microsoft Office installed on the remote Mac OS X host is affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist due to improper handling of objects in memory. A remote attacker can exploit these vulnerabilities by convincing a user to open a...

CVE-2013-6123

Multiple array index errors in drivers/media/video/msm/server/msmcamserver.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node...

CVE-2013-6123

Multiple array index errors in drivers/media/video/msm/server/msmcamserver.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node...

CVE-2013-6123

CVE-2013-6123 affects the MSM camera driver in the Linux kernel 3.x (MSM CAM server). The root cause is multiple array index errors in msm_cam_server.c, related to handling of camera device-node input, involving the functions msm_ctrl_cmd_done , msm_ioctl_server , and msm_server_send_ctrl . This ...

Qualcomm out of bounds camera

Out of bounds array access in camera driver CVE-2013-6123: The camera driver provides an ioctl system call interface to user space clients for communication. When processing this communication, the msmioctlserver, msmserversendctrl, and msmctrlcmddone functions use a user-supplied value as an ind...

Oracle Linux 3 : net-snmp (ELSA-2009-0295)

From Red Hat Security Advisory 2009:0295 : Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Simple Network Management Protocol SNMP is a...

CentOS Update for net-snmp CESA-2009:0295 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SLES10: Security update for net-snmp

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: net-snmp net-snmp-devel perl-SNMP More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES9: Security update for net-snmp

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: net-snmp net-snmp-devel perl-SNMP For more information, please visit the referenced security advisories. More details may also be found by searching for...

SLES9: Security update for net-snmp

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: net-snmp net-snmp-devel perl-SNMP For more information, please visit the referenced security advisories. More details may also be found by searching for...

SuSE9 Security Update : net-snmp (YOU Patch Number 12441)

With this update of net-snmp the handling of TCP wrappers rules for client authorization was improved, prior to this update it was possible for remote attackers to bypass intended access restrictions and execute SNMP queries. CVE-2008-6123 Additionally binding to multiple interfaces was improved...