58 matches found
CVE-2016-6757
CVE-2016-6757 describes an information-disclosure vulnerability affecting Qualcomm components used in Android devices, specifically the camera driver and video driver. The issue could allow a local malicious application to access data beyond its permissions after compromising a privileged process...
Ubuntu: Security Advisory (USN-2770-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : Chromium (openSUSE-2015-679)
Chromium was update do the stable release 46.0.2490.71 to fix security issues. The following vulnerabilities were fixed : - CVE-2015-6755: Cross-origin bypass in Blink - CVE-2015-6756: Use-after-free in PDFium - CVE-2015-6757: Use-after-free in ServiceWorker - CVE-2015-6758: Bad-cast in PDFium -...
[SECURITY] [DSA 3376-1] chromium-browser security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3376-1 [email protected] https://www.debian.org/security/ Michael Gilbert October 20, 2015 https://www.debian.org/security/faq -...
Ubuntu: Security Advisory (USN-2770-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 3376-1 (chromium-browser - security update)
Several vulnerabilities have been discovered in the chromium web browser. CVE-2015-1303 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in the DOM implementation. CVE-2015-1304 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in the v8 javascript library...
Important: Red Hat Security Advisory: chromium-browser security update
Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...
CVE-2015-6757
CVE-2015-6757 is a use-after-free vulnerability in Chrome’s ServiceWorker implementation (content/browser/service_worker/embedded_worker_instance.cc) that affects Chrome before 46.0.2490.71. The issue could allow a remote attacker to cause a denial of service or potentially other impact by manipu...
CVE-2015-6757
Use-after-free vulnerability in content/browser/serviceworker/embeddedworkerinstance.cc in the ServiceWorker implementation in Google Chrome before 46.0.2490.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging object destruction in a...
FreeBSD : chromium -- multiple vulnerabilities (8301c04d-71df-11e5-9fcb-00262d5ed8ee)
Google Chrome Releases reports : 24 security fixes in this release, including : - 519558 High CVE-2015-6755: Cross-origin bypass in Blink. Credit to Mariusz Mlynski. - 507316 High CVE-2015-6756: Use-after-free in PDFium. Credit to anonymous. - 529520 High CVE-2015-6757: Use-after-free in...
Stable Channel Update
The Chrome team is delighted to announce the promotion of Chrome 46 to the stable channel for Windows, Mac and Linux. Chrome 46.0.2490.71 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new...
CVE-2007-6757
CVE-2007-6757 concerns GE Healthcare Centricity DMS with a Museadmin account password Muse!Admin, reflecting default or hard-coded credentials across Centricity DMS and related GE Healthcare products. The ICS-CERT advisory (ICSMA-18-037-02) documents the use of default/hard-coded credentials in m...
CVE-2014-6757
The CVE-2014-6757 entry concerns the Android app “The Koran - AlqoranVideos” (com.alqoran.videos.example) version 1.0, which does not verify X.509 certificates from SSL servers. This creates a man-in-the-middle risk, allowing spoofed servers and potential exposure of sensitive information via cra...
SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 6757)
IBM Java 1.4.2 was updated to 13 fp3. The following security issues were fixed: CVE-2009-3867: A buffer overflow vulnerability in the Java Runtime Environment audio system might allow an untrusted applet or Java Web Start application to escalate privileges. For example, an untrusted applet might...
CVE-2008-6757
CVE-2008-6757 concerns a cross-site scripting vulnerability in ViArt Shop (Shopping Cart) 3.5. The flaw exists in manuals_search.php, where the manuals_search parameter enables remote attackers to inject arbitrary web script or HTML. The NVD entry lists a CVSS v2 base score of 4.3 (MEDIUM) with a...
CVE-2008-6757
creationtimestamp| type| source ---|---|--- 2008-12-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32685...
CVE-2006-6757
The CVE-2006-6757 entry concerns a directory traversal vulnerability in cwmExplorer 1.0, specifically in index.php via the show_file parameter, enabling remote attackers to read arbitrary files and source code and obtain sensitive information. The NVD entry lists a CVSS v2 base score of 7.8 (HIGH...