CVE-2011-3964

Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors...

MIT Kerberos 5: Multiple vulnerabilities

Background MIT Kerberos 5 is a suite of applications that implement the Kerberos network protocol. Description Multiple vulnerabilities have been discovered in MIT Kerberos 5. Please review the CVE identifiers referenced below for details. Impact A remote attacker may be able to execute arbitrary...

PT-2011-4774

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 16.0.912.63 Description The issue allows remote attackers to spoof the URL bar in Google Chrome via unspecified vectors. This affects the view-source feature. Recommendations For versions prior to 16.0.912.63,...

PT-2011-4986

Name of the Vulnerable Software and Affected Versions One Click Orgs versions prior to 1.2.3 Description The issue allows remote authenticated users to cause a denial of service or spoof votes and comments by selecting a conflicting e-mail address, as the software does not require unique e-mail...

Medium: perl-libwww-perl

Issue Overview: The Net::HTTPS module in libwww-perl LWP before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote...

Google Fixes 27 Bugs in Chrome 15

Google has fixed more than two dozen vulnerabilities in its Chrome browser and also implemented a defense against the BEAST SSL attack. The bugs fixed in the new version of Chrome include 11 high-severity flaws. As part of its bug bounty program, Google paid more than $26,000 in rewards to...

PT-2011-4746

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 15.0.874.102 Description The issue is related to the handling of drag and drop operations on URL strings. This allows remote attackers to spoof the URL bar via unspecified vectors, requiring user assistance...

PT-2011-4141

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 15.0.874.102 Description The issue is related to the handling of history data. It allows remote attackers to spoof the URL bar via unspecified vectors. This can be achieved with the assistance of the user...

CVE-2011-2845: Improper Input Validation

Google Chrome before 15.0.874.102 does not properly handle history data, which allows user-assisted remote attackers to spoof the URL bar via unspecified vectors...

Design/Logic Flaw

CalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, which allows man-in-the-middle attackers to spoof calendar servers and obtain sensitive information via an arbitrary certificate...

CVE-2011-3427

The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 hash algorithm within X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate...

CVE-2011-3599

The Crypt::DSA aka Crypt-DSA module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack...

CVE-2011-3599

The Crypt::DSA aka Crypt-DSA module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack...

CVE-2011-3599

The Crypt::DSA aka Crypt-DSA module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack...

CVE-2011-3599

The CVE-2011-3599 issue affects the Perl Crypt::DSA (Crypt-DSA) module before version 1.18, where, in the absence of /dev/random, it falls back to Data::Random. This fallback could enable remote attackers to spoof signatures or recover signing keys via brute-force. Connected advisories confirm th...

CVE-2011-3599

The Crypt::DSA aka Crypt-DSA module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack...

QtWeb 3.7.3 URL Spoof

QTWeb Internet Browser URL weakness lets remote attackers to do Spoof or phishing attacks Vendor URL: http://www.qtweb.net/ Vendor bugtrack= http://code.google.com/p/qtweb/issues/detail?id=151 Advisore: http://lostmon.blogspot.com/2011/10/qtweb-internet-browser-url-weakness.html Vendor notify: YE...

CVE-2011-3365

The KDE SSL Wrapper KSSL API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name CN of a certificate via rich text...

Stable Channel Update

The Chrome Stable channel has been updated to 14.0.835.163 for all platforms. This release contains the following security fixes. More details about high level features can be found on the Google Chrome blog. Security fixes and rewards: Please see the Chromium security page for more detail. Note...

PT-2011-4136

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 14.0.835.163 Description The issue allows user-assisted remote attackers to spoof the URL bar via vectors related to unusual user interaction. Recommendations For versions prior to 14.0.835.163, update to versio...