openSUSE Security Update : v8 (openSUSE-SU-2013:1962-1)

Update spec-file to fit the changes in V8 addition of internal ICU - Building against system ICU - Regenerate Makefiles before using them - Update to 3.22.24.8 - Security fixes bcn854473 : - CVE-2013-6638: Buffer overflow in v8 - CVE-2013-6639: Out of bounds write in v8 - CVE-2013-6640: Out of...

Fedora Update for v8 FEDORA-2014-4625

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-6640

Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...

CVE-2012-6640

Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...

CVE-2012-6640

Cross-site scripting (XSS) in Horde Internet Mail Program (IMP) before 5.0.22, used with Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment. No remediation details are provided in the supplied documents.

CVE-2012-6640

Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...

Fedora Update for v8 FEDORA-2014-3222

Check for the Version of v8 OpenVAS Vulnerability Test Fedora Update for v8 FEDORA-2014-3222 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

Fedora Update for v8 FEDORA-2013-23401

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for v8 FEDORA-2013-23437

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : v8-3.14.5.10-3.fc18 (2013-23401)

This update resolves multiple security vulnerabilities in the V8 JavaScript just-in-time compiler. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Debian DSA-2811-1 : chromium-browser - several vulnerabilities

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2013-6634 Andrey Labunets discovered that the wrong URL was used during validation in the one-click sign on helper. - CVE-2013-6635 cloudfuzzer discovered use-after-free issues in the InsertHTML and Indent DOM editing...

[SECURITY] [DSA 2811-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2811-1 [email protected] http://www.debian.org/security/ Michael Gilbert December 07, 2013 http://www.debian.org/security/faq -...

CVE-2013-6640

The CVE-2013-6640 issue affects the Google V8 JavaScript engine (used in Google Chrome) where the function DehoistArrayIndex in hydrogen-dehoist.cc allows an attacker to trigger an out-of-bounds read via a crafted array index. This vulnerability is associated with V8 builds before version 3.22.24...

Debian Security Advisory DSA 2811-1 (chromium-browser - several vulnerabilities)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2013-6634 Andrey Labunets discovered that the wrong URL was used during validation in the one-click sign on helper. CVE-2013-6635 cloudfuzzer discovered use-after-free issues in the InsertHTML and Indent DOM editing...

SuSE 11.2 Security Update : Xen and libvirt (SAT Patch Number 6640)

Xen was updated to fix several security issues : - A xen HVM guest destroy p2m teardown host DoS vulnerability was fixed, where malicious guest could lock/crash the host. CVE-2012-3433 - A xen HVM guest user mode MMIO emulation DoS was fixed. CVE-2012-3432 - The xen pv bootloader doesn't check th...

CVE-2007-6640

Creammonkey (0.9–1.1) and GreaseKit (1.2–1.3) expose dangerous user-scripting APIs (GM_addStyle, GM_log, GM_openInTab, GM_setValue, GM_getValue, GM_xmlhttpRequest) to web pages, allowing a remote attacker to read/modify configuration or trigger HTTP requests from a page hosting a userscript. The ...

CVE-2006-6640

Omniture SiteCatalyst is affected by multiple XSS vulnerabilities. Remote attackers can inject arbitrary script/HTML via the ss parameter in search.asp and via the company and username fields on the web login page. No root-cause/exploit details or remediation are provided in the supplied documents.