MediaWiki < 1.18.5 / 1.19.2 Multiple Vulnerabilities

According to its version number, the instance of MediaWiki running on the remote host is affected by multiple security vulnerabilities : - A stored cross-site scripting HTML injection vulnerability exists because the application fails to sufficiently sanitize user-supplied input submitted to the...

Google Releases Chrome 22 and Pays Out Nearly $30K in Rewards

Google has released Chrome 22, a major new version of its browser that includes a huge number of security fixes, many of them high-priority vulnerabilities. The company also handed out nearly $30,000 in rewards to security researchers, more than half of it to Sergey Glazunov, who discovered two...

CVE-2012-2879

Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service DOM topology corruption via a crafted document...

CVE-2012-2881

Google Chrome before 22.0.1229.79 does not properly handle plug-ins, which allows remote attackers to cause a denial of service DOM tree corruption or possibly have unspecified other impact via unknown vectors...

CVE-2012-2881

Google Chrome before 22.0.1229.79 does not properly handle plug-ins, which allows remote attackers to cause a denial of service DOM tree corruption or possibly have unspecified other impact via unknown vectors...

Memory corruption

Google Chrome before 22.0.1229.79 does not properly handle plug-ins, which allows remote attackers to cause a denial of service DOM tree corruption or possibly have unspecified other impact via unknown vectors...

CVE-2012-2879

Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service DOM topology corruption via a crafted document...

Design/Logic Flaw

Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service DOM topology corruption via a crafted document...

CVE-2012-2881

Technical details (affected product/component/version, root cause, exploit info, or remediation) are not publicly available in the provided connected documents beyond the initial CVE description. Monitor for updates from official advisories.

CVE-2012-2879

CVE-2012-2879 affects Chromium/Google Chrome prior to version 22.0.1229.79, where crafting a document could trigger DOM topology corruption leading to a crash/DoS. Connected sources reference Chromium/openSUSE advisories noting multiple vulnerabilities and confirm a patch/upstream fix in the Chro...

CVE-2012-2879

Removed by vendor...

CVE-2012-2881

Removed by vendor...

[SECURITY] Fedora 17 Update: seamonkey-2.12.1-1.fc17

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

[SECURITY] Fedora 16 Update: seamonkey-2.12.1-1.fc16

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 143439 High CVE-2012-2889: UXSS in frame handling. Credit to Sergey Glazunov. 143437 High CVE-2012-2886: UXSS in v8 bindings. Credit to Sergey Glazunov. 139814 High CVE-2012-2881: DOM tree corruption with plug-ins. Credit to Chamal de Silva. 135432 High...

[SECURITY] Fedora 18 Update: seamonkey-2.12-1.fc18

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

Fedora Update for seamonkey FEDORA-2012-12958

Check for the Version of seamonkey OpenVAS Vulnerability Test Fedora Update for seamonkey FEDORA-2012-12958 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

[SECURITY] Fedora 17 Update: seamonkey-2.12-1.fc17

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 8264)

This update changes the default configuration to use FilesMatch with 'SetHandler' rather than 'AddHandler' to protect weakly written web applications from content confusion. Since this is a hardening measure, no CVE was assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

MediaWiki 1.x userlang参数跨站脚本漏洞

Bugtraq ID:55370 CVE ID: CVE-2012-4378 MediaWiki是一套以GPL授权发行的Wiki引擎。 通过"uselang"参数传递给index.php的输入在通过某些工具返回给用户之前缺少过滤，可导致基于DOM的跨站脚本攻击，构建构建恶意WEB页，诱使用户解析，可获得敏感信息或劫持用户会话。 0 MediaWiki 1.x 厂商解决方案 MediaWiki 1.18.5或1.19.2已经修复此漏洞，建议用户下载使用： http://wikipedia.sourceforge.net/...