openSUSE Security Update : Opera (openSUSE-SU-2012:1122-1)

Opera was updated to 12.02 Fixed an issue where truncated dialogs may be used to trick users - full changelog available at: http://www.opera.com/docs/changelogs/unix/1202/ - fixes bnc778087 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Liferay Portal 6.2.0 CE GA1 Multiple XSS

According to its self-reported version number, the version of Liferay Portal running on the remote host is 6.2.0. It is, therefore, potentially affected by the following cross-site scripting vulnerabilities : - Input passed from page titles is not sanitized before it is displayed in the Recycle...

SuSE 11.3 Security Update : icedtea-web (SAT Patch Number 8974)

The OpenJDK Java Plugin IcedTea Web was released to fix a temporary file access problem. Changes : - Dialogs center on screen before becoming visible. - Support for u45 new manifest attributes Application-Name. - Custom applet permission policies panel in itweb-settings control panel. - Plugin...

[SECURITY] Fedora 20 Update: drupal6-ctools-1.11-1.fc20

This suite is primarily a set of APIs and tools to improve the developer experience. It also contains a module called the Page Manager whose job is to manage pages. In particular it manages panel pages, but as it grows it will be able to manage far more than just Panels. For the moment, it includ...

Fedora 19 : icedtea-web-1.4.2-0.fc19 (2014-2071)

New in release 1.4.2 2014-02-05 : - Dialogs center on screen before becoming visible - Support for u45 new manifest attributes Application-Name - Custom applet permission policies panel in itweb-settings control panel - Plugin - PR1271: icedtea-web does not handle 'javascript:'-protocol URLs -...

[SECURITY] Fedora 20 Update: xdialog-2.3.1-13.fc20

Xdialog is designed to be a drop in replacement for the cdialog program. It converts any terminal based program into a program with an X-windows interface. The dialogs are easier to see and use and Xdialog adds even more functionalities help button+box, treeview, editbox, file selector, range box...

Google Chrome < 31.0.1650.63 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is a version prior to 31.0.1650.63. It is, therefore, affected by the following vulnerabilities : - An error exists related to session fixation, the sync process and HTTP 302 redirects. CVE-2013-6634 - A use-after-free error exists related...

Google Chrome < 31.0.1650.63 Multiple Vulnerabilities (Mac OS X)

The version of Google Chrome installed on the remote Mac OS X host is a version prior to 31.0.1650.63. It is, therefore, affected by the following vulnerabilities : - An error exists related to session fixation, the sync process and HTTP 302 redirects. CVE-2013-6634 - A use-after-free error exist...

Code injection

The WebContentsImpl::AttachInterstitialPage function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 31.0.1650.48 does not cancel JavaScript dialogs upon generating an interstitial warning, which allows remote attackers to spoof the address bar via a crafted web site...

CVE-2013-6626

Removed by vendor...

CVE-2013-6626

The WebContentsImpl::AttachInterstitialPage function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 31.0.1650.48 does not cancel JavaScript dialogs upon generating an interstitial warning, which allows remote attackers to spoof the address bar via a crafted web site...

CVE-2013-6626: Undefined Security Weakness

The WebContentsImpl::AttachInterstitialPage function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 31.0.1650.48 does not cancel JavaScript dialogs upon generating an interstitial warning, which allows remote attackers to spoof the address bar via a crafted web site...

Facebook Open Redirect

Description: Title : Facebook Open URL Redirection Vulnerability 2013 Status : Unfixed Severity : High Works on : Any browser with any version Homepage : www.facebook.com Author : Arul Kumar.V Email : [email protected] I have found Open URL Redirection Vulnerabilities in facebook's dialogs...

CVE-2013-0794: Undefined Security Weakness

Mozilla Firefox before 20.0 and SeaMonkey before 2.17 do not prevent origin spoofing of tab-modal dialogs, which allows remote attackers to conduct phishing attacks via a crafted web site...

Opera Truncated Dialogs Code Execution Vulnerability (Mac OS X)

The host is installed with Opera and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gboperatruncationdialogcodeexecvulnmacosx.nasl 6079 2017-05-08 09:03:33Z teissa $ Opera Truncated Dialogs Code Execution Vulnerability Mac OS X Authors: Antu Sanadi Copyright: Copyright ...

Opera Truncated Dialogs Code Execution Vulnerability - Windows

Opera is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Truncated Dialogs Code Execution Vulnerability - Mac OS X

Opera is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Truncated Dialogs Code Execution Vulnerability - Linux

Opera is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Truncated Dialogs Code Execution Vulnerability (Linux)

The host is installed with Opera and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gboperatruncationdialogcodeexecvulnlin.nasl 6074 2017-05-05 09:03:14Z teissa $ Opera Truncated Dialogs Code Execution Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2013...

Opera Truncated Dialogs Code Execution Vulnerability (Windows)

The host is installed with Opera and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gboperatruncationdialogcodeexecvulnwin.nasl 6079 2017-05-08 09:03:33Z teissa $ Opera Truncated Dialogs Code Execution Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 20...