Design/Logic Flaw

A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0.3359.139 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page...

CVE-2018-6118

A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0.3359.139 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page...

CVE-2018-6118

Removed by vendor...

CVE-2018-6086

A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page...

CVE-2018-6086

A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page...

CVE-2018-6086

A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page...

SUSE-SU-2017:1479-1 Security update for ceph

This update provides Ceph 10.2.6, which brings fixes and enhancements: This security issue was fixed: - CVE-2016-9579: Do not abort RGW server when accepting a CORS request with short origin. bsc1014986 These non-security issues were fixed: - common: Add rdbmap to ceph-common. bsc1029482 -...

Mozilla Firefox ESR < 45.8 Multiple Vulnerabilities

Binary data 9987.prm...

python-django: Denial-of-service possibility in logout() view by filling session store

It was found that certain Django functions would, in certain circumstances, create empty sessions. A remote attacker could use this flaw to fill up the session store or cause other users' session records to be evicted by requesting a large number of new sessions...

python-django: Denial-of-service possibility in logout() view by filling session store

It was found that Django incorrectly handled the session store. A session could be created by anonymously accessing the django.contrib.auth.views.logout view if it was not decorated correctly with django.contrib.auth.decorators.loginrequired. A remote attacker could use this flaw to fill up the...

kernel security and bug fix update

2.6.32-504.3.3 - x86 traps: stop using IST for SS Petr Matousek 1172810 1172811 CVE-2014-9322 2.6.32-504.3.2 - md dm-thin: fix pooliohints to avoid looking at maxhwsectors Mike Snitzer 1161420 1161421 1142773 1145230 2.6.32-504.3.1 - s390 zcrypt: toleration of new crypto adapter hardware Hendrik...

Threat Outbreak Alert: Fake Eviction Notice Email Messages on February 24, 2014

Medium Alert ID: 33023 First Published: 2014 February 25 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an eviction notice for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Fake Eviction Notice Email Messages on February 21, 2014

Medium Alert ID: 32972 First Published: 2014 February 24 15:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a court notice for the recipient. The text in the email message attempts to convince the recipient to open th...

Threat Outbreak Alert: Fake Eviction Notification Email Messages on February 18, 2014

Medium Alert ID: 32906 First Published: 2014 February 18 21:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an eviction notice for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Fake Eviction Notice Email Messages on February 3, 2014

Medium Alert ID: 32689 First Published: 2014 February 3 15:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an eviction notification for the recipient. The text in the email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Eviction Notice Email Messages on January 31, 2014

Medium Alert ID: 32642 First Published: 2014 January 31 15:09 GMT Last Updated: 2014 February 3 14:25 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an eviction notice for the recipient. The text in the email message...

Simultaneous multithreading processors may leak information through cache eviction analysis techniques

Overview Operating systems on hardware platforms supporting simultaneous multi-threading Hyper-Threading technology in particular are potentially vulnerable to information leakage to local users. Proof of concept papers and code demonstrating successful attacks against cryptographic keys are in...