Privilege escalation

An elevation of privilege vulnerability in the NVIDIA libomx library libnvomx could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which...

CVE-2016-6789

CVE-2016-6789 is an elevation-of-privilege in the NVIDIA libomx library (LIBNVOMX.SO) that could allow a local attacker to execute arbitrary code with privileged process rights. Affected environment is Android (kernel 3.18) using NVIDIA components. The vulnerability is scored as CVSS v3.0 base 9....

Ubuntu: Security Advisory (USN-2860-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2860-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2860-1 advisory. A race condition was discovered in the MutationObserver implementation in Blink. If a user were tricked in to opening a specially crafted website, an...

openSUSE Security Update : Chromium (openSUSE-2015-912)

Chromium was updated to 47.0.2526.80 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2015-6788: Type confusion in extensions - CVE-2015-6789: Use-after-free in Blink - CVE-2015-6790: Escaping issue in saved pages - CVE-2015-6791: Various fixes from internal audit...

Google Chrome Multiple Vulnerabilities-02 (Dec 2015) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

[SECURITY] [DSA 3418-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3418-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 14, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3418-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3418-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 14, 2015 https://www.debian.org/security/faq -...

FreeBSD : chromium -- multiple vulnerabilities (72c145df-a1e0-11e5-8ad0-00262d5ed8ee)

Google Chrome Releases reports : 7 security fixes in this release, including : - 548273 High CVE-2015-6788: Type confusion in extensions. Credit to anonymous. - 557981 High CVE-2015-6789: Use-after-free in Blink. Credit to cloudfuzzer. - 542054 Medium CVE-2015-6790: Escaping issue in saved pages...

CVE-2015-6789

CVE-2015-6789 is a vulnerability in Blink (used by Google Chrome) described as a race condition in MutationObserver that can lead to a use-after-free and remote denial of service. Affected product: Google Chrome (Blink). Root cause: race condition with unanticipated object deletion in MutationObs...

Important: Red Hat Security Advisory: chromium-browser security update

Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

DSA-3418-1 chromium-browser - security update

Bulletin has no description...

globalsources.com XSS vulnerability

Vulnerable URL: http://www.globalsources.com/gsol/GeneralManager?id=200000000'%3bconfirm'XSSPOSED'%2f%2f=clean=en=prodalert/PAMarketing=GSOLTopNavOSPA Details: Description| Value ---|--- Patched:| Yes, at 27.08.2015 Latest check for patch:| 27.08.2015 09:40 GMT Vulnerability type:| XSS...

CVE-2014-6789

The Anaheim Library 2Go! aka com.bredir.boopsie.anaheim application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6789

The CVE-2014-6789 entry affects the Android app Anaheim Library 2Go! (com.bredir.boopsie.anaheim) version 4.5.110, which does not verify X.509 certificates from SSL servers. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. No exploitation det...

CVE-2013-6789

The CVE-2013-6789 issue affects SilverStripe 3.0.3, where security/MemberLoginForm.php accepts credentials via GET, enabling remote or local attackers to obtain sensitive data by reading web-server access logs, Referer logs, or browser history. Red Hat/NVD entries corroborate the GET-based creden...

CVE-2008-6789

SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788...

CVE-2008-6789

SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788...

CVE-2008-6789

CVE-2008-6789 : A SQL injection vulnerability affects MindDezign Photo Gallery 2.2. The vulnerability is triggered by the username parameter in the login action to the admin module in index.php, allowing remote attackers to execute arbitrary SQL commands. This is a different vector from CVE-2008-...

CVE-2008-6789

creationtimestamp| type| source ---|---|--- 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6819 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6820...