16148 matches found
Debian DSA-3415-1 : chromium-browser - security update
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2015-1302 Rub Wu discovered an information leak in the pdfium library. - CVE-2015-6764 Guang Gong discovered an out-of-bounds read issue in the v8 JavaScript library. - CVE-2015-6765 A use-after-free issue was...
DSA-3415-1 chromium-browser - security update
Bulletin has no description...
Google Chrome HTML注入漏洞
No description provided by source...
Debian Security Advisory DSA 3415-1 (chromium-browser - security update)
Several vulnerabilities have been discovered in the chromium web browser. CVE-2015-1302 Rub Wu discovered an information leak in the pdfium library. CVE-2015-6764 Guang Gong discovered an out-of-bounds read issue in the v8 javascript library. CVE-2015-6765 A use-after-free issue was discovered in...
Debian: Security Advisory (DSA-3415-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Chrome HTML Injection Vulnerability
Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the page serializer of Google Chrome versions prior to 47.0.2526.73, which stems from the program's failure to properly handle Mark of the Web MOTW annotations for URLs containing th...
CVE-2015-6784
The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web MOTW comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring...
Design/Logic Flaw
The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web MOTW comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring...
CVE-2015-6784
The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web MOTW comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring...
CVE-2015-6784
Removed by vendor...
CVE-2015-6784
CVE-2015-6784 affects Google Chrome up to 47.0.2526.73: the page serializer mishandles Mark of the Web comments for URLs containing "--", potentially allowing HTML injection via a crafted URL. The issue was fixed in Chrome 47.0.2526.73 (stable release); users should upgrade to the fixed version.
CVE-2015-6784
The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web MOTW comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring...
UBUNTU-CVE-2015-6784
The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web MOTW comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring...
The vulnerability of the Microsoft .NET Framework software platform allows a perpetrator to inject arbitrary web or HTML code.
The vulnerability of the ASP.NET software platform, Microsoft .NET Framework, exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web or HTML code using a specially crafted variable value...
The vulnerabilities of Microsoft Lync and Skype for Business messaging applications allow a hacker to inject arbitrary web scripts or HTML code.
The vulnerability of Microsoft Lync and Skype for Business instant messaging programs exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web scripts or HTML code through instant messaging...
Google AOSP Email for Android开放重定向漏洞
The Google AOSP Email App is vulnerable to HTML Injection on the email body. It allows a remote attacker to be able to send a crafted email with a payload that redirects the user to a target url as soon as he opens the email. This issue is not related with the email provider configured on the app...
TestLink HTML注入漏洞
No description provided by source...
NXFilter has multiple vulnerabilities
NXFilter is a suite of DNS filtering software. NXFilter version 3.0.3 suffers from cross-site request forgery, cross-site scripting, and HTML injection vulnerabilities vulnerabilities. An attacker can exploit these vulnerabilities to execute arbitrary HTML script code in the context of an affecte...
TestLink HTML Injection Vulnerability
Testlink is TestLink team developed a PHP-based open source test management tool . The tool provides test requirements management , test case management and test data statistics and other functions . TestLink 1.9.14 version of the existence of HTML injection vulnerability. A remote attacker can...