42 matches found
CVE-2018-6164
CVE-2018-6164 relates to Google Chrome/Chromium’s Blink component. The initial CVE description notes “insufficient origin checks for CSS content in Blink” which allowed a remote attacker to leak cross-origin data via a crafted HTML page. Connected documents corroborate a broader class of cross-or...
F5 Networks BIG-IP : TLS vulnerability (K02714910)
In some circumstances, the Traffic Management Microkernel TMM does not properly handle certain malformed TLS1.2 records, which allows remote attackers to cause a denial-of-service DoS or possible remote command execution on the BIG-IP system. CVE-2017-6164 Impact A remote attacker may be able cau...
Updated chromium-browser-stable packages fix security vulnerabilities
Chromium-browser 68.0.3440.106 fixes security issues: Multiple flaws were found in the way Chromium 67.0.3396.87 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information...
FreeBSD : chromium -- multiple vulnerabilities (b9c525d9-9198-11e8-beba-080027ef1a23)
Google Chrome Releases reports : 42 security fixes in this release, including : - 850350 High CVE-2018-6153: Stack buffer overflow in Skia. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-06-07 - 848914 High CVE-2018-6154: Heap buffer overflow in WebGL. Reported by Omair on 2018-06-01 -...
openSUSE: Security Advisory for Chromium (openSUSE-SU-2018:2134-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2018-6164
Insufficient origin checks for CSS content in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
CVE-2012-6164
This CVE entry is rejected and does not represent an active vulnerability.
IBM WebSphere Application Server 8.5.5.x < 8.5.5.4 Multiple Vulnerabilities
Binary data 700046.prm...
IBM WebSphere Application Server 8.0.0.x < 8.0.0.10 Multiple Vulnerabilities
Binary data 700045.prm...
CVE-2016-6164
Integer overflow in the movbuildindex function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving sample size...
CVE-2016-6164
Integer overflow in the movbuildindex function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving sample size...
CVE-2016-6164
CVE-2016-6164: Integer overflow in FFmpeg’s mov_build_index (libavformat/mov.c) allows remote impact via sample-size vectors. Affected builds include FFmpeg before 2.8.8, 3.0.x before 3.0.3, and 3.1.x before 3.1.1. Impact is described as unspecified in the sources. Remediation: upgrade FFmpeg to ...
CVE-2015-6164
CVE-2015-6164 affects Microsoft Internet Explorer 9–11. The issue is an improper implementation of the XSS Filter, allowing remote attackers to bypass the Same Origin Policy via a crafted web page. This is described as an XSS Filter Bypass vulnerability. Connected sources indicate public exploits...
Microsoft Internet Explorer XSS Filter CVE-2015-6164 Security Bypass Vulnerability
Description Microsoft Internet Explorer is prone to a security-bypass vulnerability that affects the XSS Filter. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. An attacker can exploit this issue to execute arbitrary script...
CVE-2014-6164
CVE-2014-6164 (IBM WebSphere Application Server) affects IBM WAS 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4. A remote attacker can spoof OpenID/OpenID Connect cookies via a crafted URL, potentially exposing sensitive information. Affected products/versions are listed in the IBM bulletin; reme...
CVE-2013-6164
CVE-2013-6164 affects Project'Or RIA 3.4.0. A SQL Injection in view/objectDetail.php via the objectId parameter (Affectations) allows remote attackers to inject arbitrary SQL commands, potentially accessing the database and file system. The ISecAuditors advisory provides PoC-style payloads (e.g.,...
ProjectOr RIA 3.4.0 - objectDetail.php?objectId SQL Injection
ProjectOr RIA 3.4.0 - objectDetail.php?objectId SQL Injection ============================================= INTERNET SECURITY AUDITORS ALERT 2013-017 - Original release date: July 26th, 2013 - Last revised: July 26th, 2013 - Discovered by: Vicente Aguilera Diaz - Severity: 6.8/10 CVSSv2 Base Scor...
Project'Or RIA 3.4.0 - 'objectDetail.php?objectId' SQL Injection
============================================= INTERNET SECURITY AUDITORS ALERT 2013-017 - Original release date: July 26th, 2013 - Last revised: July 26th, 2013 - Discovered by: Vicente Aguilera Diaz - Severity: 6.8/10 CVSSv2 Base Scored - CVE-ID: CVE-2013-6164...