DSA-2862-1 chromium-browser - several

Bulletin has no description...

CVE-2013-6649

CVE-2013-6649 is a use-after-free in Blink’s SVG rendering (RenderSVGImage::paint) affecting Google Chrome before 32.0.1700.102. Publicly referenced advisories confirm the issue resides in the Blink/WebKit SVG implementation and can lead to denial of service or potentially other impact via vector...

CVE-2012-6649

creationtimestamp| type| source ---|---|--- 2012-06-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19050...

CVE-2008-6649

CVE-2008-6649 : SQL injection in Ktools PhotoStore component manager/image_details_editor.php affects versions 2.5, 2.9.8, 3.1.0, and up to 3.5.2. The vulnerability allows remote attackers to execute arbitrary SQL commands via the id parameter. Public references (e.g., Exploit-DB, Secunia, OSVDB,...

CVE-2008-6649

creationtimestamp| type| source ---|---|--- 2008-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5580 2008-05-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5582...

Cross site scripting

Cross-site scripting XSS vulnerability in the login page in Lxlabs HyperVM 2.0 allows remote attackers to inject arbitrary web script or HTML via the frmemessage parameter, a different vector than CVE-2006-6649. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2006-6649

CVE-2006-6649 describes a cross-site scripting (XSS) vulnerability in display.php of HyperVM 1.2 and earlier, exploitable via an encoded frm_action parameter. The weakness is disclosed in the CVE entry, which notes that the vendor disputes the issue and that the dispute could concern severity or ...