Liferay Portal 6.2.0 CE GA1 Multiple XSS

According to its self-reported version number, the version of Liferay Portal running on the remote host is 6.2.0. It is, therefore, potentially affected by the following cross-site scripting vulnerabilities : - Input passed from page titles is not sanitized before it is displayed in the Recycle...

SuSE 11.3 Security Update : icedtea-web (SAT Patch Number 8974)

The OpenJDK Java Plugin IcedTea Web was released to fix a temporary file access problem. Changes : - Dialogs center on screen before becoming visible. - Support for u45 new manifest attributes Application-Name. - Custom applet permission policies panel in itweb-settings control panel. - Plugin...

[SECURITY] Fedora 20 Update: drupal6-ctools-1.11-1.fc20

This suite is primarily a set of APIs and tools to improve the developer experience. It also contains a module called the Page Manager whose job is to manage pages. In particular it manages panel pages, but as it grows it will be able to manage far more than just Panels. For the moment, it includ...

Fedora 19 : icedtea-web-1.4.2-0.fc19 (2014-2071)

New in release 1.4.2 2014-02-05 : - Dialogs center on screen before becoming visible - Support for u45 new manifest attributes Application-Name - Custom applet permission policies panel in itweb-settings control panel - Plugin - PR1271: icedtea-web does not handle 'javascript:'-protocol URLs -...

[SECURITY] Fedora 20 Update: xdialog-2.3.1-13.fc20

Xdialog is designed to be a drop in replacement for the cdialog program. It converts any terminal based program into a program with an X-windows interface. The dialogs are easier to see and use and Xdialog adds even more functionalities help button+box, treeview, editbox, file selector, range box...

Google Chrome < 31.0.1650.63 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is a version prior to 31.0.1650.63. It is, therefore, affected by the following vulnerabilities : - An error exists related to session fixation, the sync process and HTTP 302 redirects. CVE-2013-6634 - A use-after-free error exists related...

Google Chrome < 31.0.1650.63 Multiple Vulnerabilities (Mac OS X)

The version of Google Chrome installed on the remote Mac OS X host is a version prior to 31.0.1650.63. It is, therefore, affected by the following vulnerabilities : - An error exists related to session fixation, the sync process and HTTP 302 redirects. CVE-2013-6634 - A use-after-free error exist...

Code injection

The WebContentsImpl::AttachInterstitialPage function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 31.0.1650.48 does not cancel JavaScript dialogs upon generating an interstitial warning, which allows remote attackers to spoof the address bar via a crafted web site...

CVE-2013-6626

Removed by vendor...

CVE-2013-6626

The WebContentsImpl::AttachInterstitialPage function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 31.0.1650.48 does not cancel JavaScript dialogs upon generating an interstitial warning, which allows remote attackers to spoof the address bar via a crafted web site...

Facebook Open Redirect

Description: Title : Facebook Open URL Redirection Vulnerability 2013 Status : Unfixed Severity : High Works on : Any browser with any version Homepage : www.facebook.com Author : Arul Kumar.V Email : [email protected] I have found Open URL Redirection Vulnerabilities in facebook's dialogs...

Opera Truncated Dialogs Code Execution Vulnerability (Mac OS X)

The host is installed with Opera and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gboperatruncationdialogcodeexecvulnmacosx.nasl 6079 2017-05-08 09:03:33Z teissa $ Opera Truncated Dialogs Code Execution Vulnerability Mac OS X Authors: Antu Sanadi Copyright: Copyright ...

Opera Truncated Dialogs Code Execution Vulnerability - Linux

Opera is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Truncated Dialogs Code Execution Vulnerability - Mac OS X

Opera is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Truncated Dialogs Code Execution Vulnerability - Windows

Opera is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Truncated Dialogs Code Execution Vulnerability (Linux)

The host is installed with Opera and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gboperatruncationdialogcodeexecvulnlin.nasl 6074 2017-05-05 09:03:14Z teissa $ Opera Truncated Dialogs Code Execution Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2013...

Opera Truncated Dialogs Code Execution Vulnerability (Windows)

The host is installed with Opera and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gboperatruncationdialogcodeexecvulnwin.nasl 6079 2017-05-08 09:03:33Z teissa $ Opera Truncated Dialogs Code Execution Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 20...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. VID 5bae2ab4-0820-11e2-be5f-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID 5bae2ab4-0820-11e2-be5f-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Google Releases Chrome 22 and Pays Out Nearly $30K in Rewards

Google has released Chrome 22, a major new version of its browser that includes a huge number of security fixes, many of them high-priority vulnerabilities. The company also handed out nearly $30,000 in rewards to security researchers, more than half of it to Sergey Glazunov, who discovered two...

CVE-2012-2877

The extension system in Google Chrome before 22.0.1229.79 does not properly handle modal dialogs, which allows remote attackers to cause a denial of service application crash via unspecified vectors...