SuSE Update for Chromium openSUSE-SU-2012:1637-1 (Chromium)

Check for the Version of Chromium OpenVAS Vulnerability Test $Id: gbsuse201216371.nasl 8494 2018-01-23 06:57:55Z teissa $ SuSE Update for Chromium openSUSE-SU-2012:1637-1 Chromium Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

[slackware-security] pidgin (SSA:2013-044-01)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security pidgin SSA:2013-044-01 New pidgin packages are available for Slackware 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: +--------------------------+...

Java write file file name 0 0 truncation BUG that caused file upload vulnerability and fix-vulnerability warning-the black bar safety net

Java in the above two environments to write the files, because 0 0 is truncated and not correct for the new generated file name. For example, the user needs to username abc. jsp . jpg, but after 0 0 after truncation, the resulting file name becomes the abc. jsp , therefore we are in relation to t...

Feindura CMS v2.0.4 <= (thumbnail) File Upload Vulnerability

The Bug is 0day on Feindura CMS v2.0.4 when use Thumbnail to upload images attacker can upload remote and big file/webShell 100mb .gif to the target . Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com...

NGS000330 Technical Advisory: Squiz CMS File Path Traversal

======= Summary ======= Name: Squiz CMS - File Path Traversal Release Date: 30 November 2012 Reference: NGS00330 Discoverer: Robert Ray [email protected] Vendor: Squiz Vendor Reference: 11846 Systems Affected: Squiz CMS V11654 Risk: High Status: Published ======== TimeLine ========...

CVE-2012-5138

Google Chrome before 23.0.1271.95 does not properly handle file paths, which has unspecified impact and attack vectors...

CVE-2012-5138

CVE-2012-5138 affects Chromium; the issue is incorrect file path handling . Public references in openSUSE/SUSE advisories show this CVE is included in the Chromium updates. The connected documents indicate a remediation path via upgrading Chromium to newer releases (e.g., openSUSE/SU-2012:1637-1,...

Google Chrome Multiple Vulnerabilities-02 Dec2012 (Mac OS X)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln02dec12macosx.nasl 5956 2017-04-14 09:02:12Z teissa $ Google Chrome Multiple Vulnerabilities-02 Dec2012 Mac OS X Authors: Antu Sanadi Copyright: Copyright c 20...

Google Chrome Multiple Vulnerabilities-02 Dec2012 (Linux)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln02dec12lin.nasl 5999 2017-04-21 09:02:32Z teissa $ Google Chrome Multiple Vulnerabilities-02 Dec2012 Linux Authors: Antu Sanadi Copyright: Copyright c 2012...

Google Chrome Multiple Vulnerabilities-02 Dec2012 (Windows)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln02dec12win.nasl 5940 2017-04-12 09:02:05Z teissa $ Google Chrome Multiple Vulnerabilities-02 Dec2012 Windows Authors: Antu Sanadi Copyright: Copyright c 2012...

sanlock world writable /var/log/sanlock.log

The setuplogging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations...

Two High-Risk Flaws Fixed in Google Chrome 23

Google has fixed two bugs in its Chrome browser, including a high-severity vulnerability in its media handler that a researcher named Pinkie Pie discovered. The bug, which is different from another use-after-free vulnerability the researcher used in the Pwnium contest at Hack in the Box in Octobe...

Squiz CMS 11654 File Path Traversal

======= Summary ======= Name: Squiz CMS - File Path Traversal Release Date: 30 November 2012 Reference: NGS00330 Discoverer: Robert Ray Vendor: Squiz Vendor Reference: 11846 Systems Affected: Squiz CMS V11654 Risk: High Status: Published ======== TimeLine ======== Discovered: 29 June 2012 Release...

Google Chrome < 23.0.1271.95 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 23.0.1271.95 and is, therefore, affected by the following vulnerabilities : - A use-after-free error exists related to media source handling. CVE-2012-5137 - An unspecified error exists related to file path handling...

Squiz CMS 11654 File Path Traversal Vulnerability

Exploit for php platform in category web applications ======= Summary ======= Name: Squiz CMS - File Path Traversal Release Date: 30 November 2012 Reference: NGS00330 Discoverer: Robert Ray Vendor: Squiz Vendor Reference: 11846 Systems Affected: Squiz CMS V11654 Risk: High Status: Published...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 161564 High CVE-2012-5138: Incorrect file path handling. Credit to Google Chrome Security Team Jüri Aedla. 162835 High CVE-2012-5137: Use-after-free in media source handling. Credit to Pinkie Pie...

Opera < 12.11 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 12.11 and is, therefore, reportedly affected by the following vulnerabilities : - A heap-based buffer overflow error exists related to handling HTTP responses that can lead to application crashes or arbitrary code execution. 1036 -...

XSS in Issue Collector

Hi Atlassian! There is a XSS vulnerability in the issue collector: File: /atlassian-jira-5.1.8-source/jira-issue-collector-plugin/src/main/resources/templates/view-collector.vm Line 82: $issue.summary Anonymous users can inject JS in the issue summary which usually will be executed by users with...

USN-1614-1: Ruby vulnerabilities

Tyler Hicks and Shugo Maeda discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. An attacker could use this flaw to bypass intended access restrictions. USN-1602-1 fixed these vulnerabilities in other Ubuntu releases. This update provides the...

Ubuntu Update for ruby1.9.1 USN-1614-1

Ubuntu Update for Linux kernel vulnerabilities USN-1614-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16141.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ruby1.9.1 USN-1614-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net Th...