58 matches found
CVE-2015-6644
CVE-2015-6644 : The vulnerability concerns Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01. A crafted application can cause the library to leak sensitive information, enabling an attacker who can force a user to run a malicious app to obtain private data. The connected docu...
Nexus Security Bulletin—January 2016Stay organized with collectionsSave and categorize content based on your preferences.
We have released a security update to Nexus devices through an over-the-air OTA update as part of our Android Security Bulletin Monthly Release process. The Nexus firmware images have also been released to the Google Developer site. Builds LMY49F or later and Android 6.0 with Security Patch Level...
CVE-2012-6644
ClipBucket 2.6 is reported to be affected by multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via several parameters across different pages: (1) cat in channels.php, (2) collections.php, (3) groups.php, (4) videos.php, (...
SuSE Update for chromium openSUSE-SU-2014:0243-1 (chromium)
Check for the Version of chromium OpenVAS Vulnerability Test $Id: gbsuse201402431.nasl 8044 2017-12-08 08:32:49Z santu $ SuSE Update for chromium openSUSE-SU-2014:0243-1 chromium Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This...
chromium to 32.0.1700.102 (important)
Chromium was updated to version 32.0.1700.102: Stable channel update: - Security Fixes: CVE-2013-6649: Use-after-free in SVG images CVE-2013-6650: Memory corruption in V8 and 12 other fixes - Other: Mouse Pointer disappears after exiting full-screen mode Drag and drop files into Chromium may not...
[SECURITY] [DSA 2862-1] chromium-browser security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2862-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 16, 2014 http://www.debian.org/security/faq -...
Debian DSA-2862-1 : chromium-browser - several vulnerabilities
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2013-6641 Atte Kettunen discovered a use-after-free issue in Blink/Webkit form elements. - CVE-2013-6643 Joao Lucas Melo Brasio discovered a Google account information disclosure issue related to the one-click sign-on...
[SECURITY] [DSA 2862-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2862-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 16, 2014 http://www.debian.org/security/faq -...
DSA-2862-1 chromium-browser - several
Bulletin has no description...
CVE-2013-6644
Removed by vendor...
FreeBSD : chromium -- multiple vulnerabilities (5acf4638-7e2c-11e3-9fba-00262d5ed8ee)
Google Chrome Releases reports : 11 security fixes in this release, including : - 249502 High CVE-2013-6646: Use-after-free in web workers. Credit to Collin Payne. - 326854 High CVE-2013-6641: Use-after-free related to forms. Credit to Atte Kettunen of OUSPG. - 324969 High CVE-2013-6642: Address...
CVE-2012-6644
creationtimestamp| type| source ---|---|--- 2012-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36530 2012-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36529 2012-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36524 2012-01-09...
Mandriva Linux Security Advisory : joomla (MDVSA-2008:060)
Several severe security issues were discovered in the Joomla! PHP-based content management system. These issues have been fixed in version 1.0.15 which is provided with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
CVE-2008-6644
CVE-2008-6644 is an XSS vulnerability in DotNetNuke’s Default.aspx (affecting 4.8.3 and earlier) that allows remote attackers to inject arbitrary script/HTML via the PATH_INFO. The affected component is DotNetNuke web UI, with the root cause being improper handling of PATH_INFO leading to script ...
CVE-2008-6644
creationtimestamp| type| source ---|---|--- 2008-05-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31865...
CVE-2007-6644
Joomla! before 1.5 RC4 allows remote authenticated administrators to promote arbitrary users to the administrator group, in violation of the intended security model...
CVE-2007-6644
CVE-2007-6644 concerns Joomla! prior to version 1.5 RC4, where remote authenticated administrators could elevate arbitrary users to the administrator group, violating the intended security model. The description indicates an authenticated-admin privilege escalation vulnerability in the Joomla cor...
CVE-2006-6644
This CVE affects the Meeting (mx_meeting) module for mxBB, specifically version 1.1.2 and earlier. The vulnerability is a PHP remote file inclusion in pages/meeting_constants.php that allows a remote attacker to execute arbitrary PHP code by supplying a URL in the module_root_path parameter. Impa...