WordPress Facebook Page Photo Gallery Plugin <= 2.0.9 - XSS

This plugin is prone to a DOM cross site scripting vulnerability. This attack is executed as a result of modifying the DOM in the victim’s browser used by the original client side script. Solution Update the plugin...

Facebook Page Photo Gallery <= 2.0.9 - DOM Cross-Site Scripting (XSS)

The facebook-page-photo-gallery WordPress plugin was affected by a DOM Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/prettyPhotormsg0d/2,/...

WordPress prettyPhoto <= 1.1 - DOM Cross-Site Scripting (XSS)

The WordPress prettyPhoto WordPress plugin was affected by a DOM Cross-Site Scripting XSS security vulnerability. http://www.example.com/prettyPhotogallery/1,/...

WordPress prettyPhoto <= 1.1 - DOM Cross-Site Scripting (XSS)

The WordPress prettyPhoto WordPress plugin was affected by a DOM Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/prettyPhotogallery/1,/...

Google Chrome Multiple Vulnerabilities-01 (May 2015) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Updated chromium-browser-stable packages fix security vulnerabilities

Chromium-browser 42.0.2311.135 fixes security issues: a use-after-free in DOM CVE-2015-1243, and various fixes from internal audits, fuzzing and other initiatives CVE-2015-1250...

Design/Logic Flaw

Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggerin...

CVE-2015-1243

Removed by vendor...

CVE-2015-1243

CVE-2015-1243 affects Google's Blink DOM (MutationObserver.cpp, MutationObserver::disconnect) in Chrome up to 42.0.2311.135. The vulnerability is a use-after-free that can be triggered by unregistering a MutationObserver not currently registered, enabling remote DoS or unspecified impact. Documen...

Google Chrome DOM memory misreference vulnerability (CNVD-2015-02865)

Google Chrome is a popular WEB browser. A memory misreference vulnerability exists in Google Chrome DOM handling, which allows remote attackers to exploit the vulnerability to construct a malicious WEB page that can be tricked into parsing by users, which can crash the application or execute...

Debian Security Advisory DSA 3243-1 (libxml-libxml-perl - security update)

Tilmann Haak from xing.com discovered that XML::LibXML, a Perl interface to the libxml2 library, did not respect the expandentities parameter to disable processing of external entities in some circumstances. This may allow attackers to gain read access to otherwise protected resources, depending ...

CVE-2015-1243

Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggerin...

UBUNTU-CVE-2015-1243

Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggerin...

Google Chrome < 42.0.2311.135 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 42.0.2311.135. It is, therefore, affected by multiple vulnerabilities as referenced in the 201504stable-channel-update28 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attacke...

FreeBSD : chromium -- multiple vulnerabilities (210f80b9-ede4-11e4-81c4-00262d5ed8ee)

Google Chrome Releases reports : 5 security fixes in this release, including : - 453279 High CVE-2015-1243: Use-after-free in DOM. Credit to Saif El-Sherei. - 481777 CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives. %NASLMINLEVEL 70300 C Tenable Network Security,...

Stable Channel Update

The stable channel has been updated to 42.0.2311.135 for Windows, Mac and Linux. A list of changes is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 5 security fixes in this release, including: 453279 High CVE-2015-1243: Use-after-free in DOM. Credit to Saif El-Sherei. 481777 CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives...

Exquisite Ultimate Newspaper Theme <= 1.3.3 - DOM Cross-Site Scripting (XSS)

The exquisite-wp WordPress theme was affected by a DOM Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/...

Exquisite Ultimate Newspaper Theme <= 1.3.3 - DOM Cross-Site Scripting (XSS)

The exquisite-wp WordPress theme was affected by a DOM Cross-Site Scripting XSS security vulnerability. http://www.example.com/...

[SECURITY] Fedora 22 Update: seamonkey-2.33.1-1.fc22

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...