[SECURITY] [DSA 2740-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2740-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 23, 2013 http://www.debian.org/security/faq -...

MGASA-2013-0256 Updated python-django packages fix CVE-2013-4249

Updated python-django package fixes security vulnerability: The issafeurl function has been modified to properly recognize and reject URLs which specify a scheme other than HTTP or HTTPS, to prevent cross-site scripting attacks through redirecting to other schemes, such as javascript. CVE-2013-42...

Cisco Unified Operations Manager HTTP Header Injection Vulnerability

A vulnerability in Cisco Unified Operations Manager could allow an unauthenticated, remote attacker to cause arbitrary HTML or scripts to be executed in a user's browser. The vulnerability is due to a failure to properly validate application URLs. An attacker could exploit this vulnerability by...

Google Chrome Multiple Vulnerabilities-02 (Feb 2013) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Multiple Vulnerabilities-02 Feb2013 (Linux)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln02feb13lin.nasl 27542 2013-02-04 11:39:40Z feb$ Google Chrome Multiple Vulnerabilities-02 Feb2013 Linux Authors: Thanga Prakash S Copyright: Copyright c 2013...

Google Chrome Multiple Vulnerabilities-02 Feb2013 (Windows)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln02feb13win.nasl 6115 2017-05-12 09:03:25Z teissa $ Google Chrome Multiple Vulnerabilities-02 Feb2013 Windows Authors: Thanga Prakash S Copyright: Copyright c...

Google Chrome Multiple Vulnerabilities-02 Feb2013 (MAC OS X)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln02feb13macosx.nasl 6115 2017-05-12 09:03:25Z teissa $ Google Chrome Multiple Vulnerabilities-02 Feb2013 MAC OS X Authors: Thanga Prakash S Copyright: Copyright...

Google Chrome < 24.0.1312.56 Multiple Vulnerabilities

Binary data 6673.pasl...

Google Chrome < 24.0.1312.56 Multiple Vulnerabilities

Binary data 800934.prm...

CVE-2013-0840

Google Chrome before 24.0.1312.56 does not validate URLs during the opening of new windows, which has unspecified impact and remote attack vectors...

CVE-2013-0840

Google Chrome before 24.0.1312.56 does not validate URLs during the opening of new windows, which has unspecified impact and remote attack vectors...

Design/Logic Flaw

Google Chrome before 24.0.1312.56 does not validate URLs during the opening of new windows, which has unspecified impact and remote attack vectors...

CVE-2013-0840

Google Chrome before 24.0.1312.56 does not validate URLs during the opening of new windows, which has unspecified impact and remote attack vectors...

CVE-2013-0840

CVE-2013-0840 affects Google Chrome prior to 24.0.1312.56, where URL validation is skipped when opening new windows. This is a high-severity issue (CVSS v2 base 10.0) with complete confidentiality, integrity, and availability impact. The OpenVAS entries corroborate multiple Chrome vulnerabilities...

CVE-2013-0840

Removed by vendor...

Google Chrome < 24.0.1312.56 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 24.0.1312.56 and is, therefore, affected by the following vulnerabilities : - A use-after-free vulnerability exists related to font handling and canvas. CVE-2013-0839 - An error exists related to URL validation and the...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 151008 High CVE-2013-0839: Use-after-free in canvas font handling. Credit to Atte Kettunen of OUSPG. 170532 Medium CVE-2013-0840: Missing URL validation when opening new windows. 169770 High CVE-2013-0841: Unchecked array index in content blocking. Credit to Google...

xheditor online editor lead to stored xss-vulnerability warning-the black bar safety net

Brief description: The issue before the hair, http://tmxk.org/thread-411-1-1.html that This is at the limit of the Source mode in the case appearxss. Detailed description: First, the official website deomo for testing. ! ! ! Test example the ! Description of case Soufun, phpsoso, the kingcms...

PYSEC-2012-2

The 1 django.http.HttpResponseRedirect and 2 django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting XSS attacks via a data: URL...

CVE-2011-4294

The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x before 2.0.4, and 2.1.x before 2.1.1 does not ensure that a continuation link refers to an http or https URL for the local Moodle instance, which might allow attackers to trick users into visiting arbitrary web sites via...