205 matches found
Ubuntu: Security Advisory (USN-2320-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2320-1: Oxide vulnerabilities
A use-after-free was discovered in the websockets implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash. CVE-2014-3165 An issue was discovered in the Public Key Pinning...
Ubuntu: Security Advisory (USN-2298-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2298-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2298-1 advisory. A type confusion bug was discovered in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this t...
USN-2298-1 oxide-qt vulnerabilities
A type confusion bug was discovered in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code with the privileges of the sandboxed render process. CVE-2014-1730 A...
Oxide Webserver 2.0.4 - Denial of Service Vulnerability
No description provided by source. Title : Oxide Webserver Remote Denial of Service Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://sourceforge.net/projects/oxide/ Advisory : http://secpod.org/blog/?p=516 :...
CVE-2014-3156
Buffer overflow in the clipboard implementation in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger unexpected bitmap data, related to content/renderer/rendererclipboardclient.cc and...
CVE-2014-1745
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to...
CVE-2014-1722
Use-after-free vulnerability in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function in core/rendering/RenderBlock.cpp in Blink, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors...
CVE-2014-1725
The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does not properly handle string data composed exclusively of whitespace characters, which allows remote attackers to cause a denial of service out-of-bounds read via a window.atob...
CVE-2014-1719
Use-after-free vulnerability in the WebSharedWorkerStub::OnTerminateWorkerContext function in content/worker/websharedworkerstub.cc in the Web Workers implementation in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service heap memory corruption or possibly have...
CVE-2014-1716
Cross-site scripting XSS vulnerability in the RuntimeSetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.116, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...
Oxide Webserver 2.0.4 Denial Of Service
Title : Oxide Webserver Remote Denial of Service Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://sourceforge.net/projects/oxide/ Advisory : http://secpod.org/blog/?p=516 : http://secpod.org/advisories/SecPodOxideWebServerDoSVuln.txt Software : Oxide Webserver...
Oxide WebServer 2.0.4 - Denial of Service
Oxide WebServer 2.0.4 - Denial of Service Title : Oxide Webserver Remote Denial of Service Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://sourceforge.net/projects/oxide/ Advisory : http://secpod.org/blog/?p=516 :...
Oxide Webserver 2.0.4 Denial of Service Vulnerability
Exploit for windows platform in category dos / poc Overview: --------- Oxide Webserver v2.0.4 is prone to a remote Denial of Service vulnerability as it fails to handle crafted requests from the client properly. Technical Description: ---------------------- The vulnerability is caused by an error...
Oxide WebServer 2.0.4 - Denial of Service
Title : Oxide Webserver Remote Denial of Service Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://sourceforge.net/projects/oxide/ Advisory : http://secpod.org/blog/?p=516 : http://secpod.org/advisories/SecPodOxideWebServerDoSVuln.txt Software : Oxide Webserver...
CVE-2011-4712
Directory traversal vulnerability in Oxide WebServer allows remote attackers to read arbitrary files via a ..\ dot dot backslash in an HTTP request...
Directory traversal
Directory traversal vulnerability in Oxide WebServer allows remote attackers to read arbitrary files via a ..\ dot dot backslash in an HTTP request...
CVE-2011-4712
CVE-2011-4712 describes a directory traversal vulnerability in Oxide WebServer, allowing remote attackers to read arbitrary files via a ..\ in an HTTP request. The NVD entry assigns a medium base score (5.0) with network access, low attack complexity, and no authentication required; confidentiali...
CVE-2011-4712
Directory traversal vulnerability in Oxide WebServer allows remote attackers to read arbitrary files via a ..\ dot dot backslash in an HTTP request...