CVE-2011-3083: Improper Restriction of Operations within the Bounds of a Memory Buffer

browser/profiles/profileimpliodata.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted web page...

CVE-2011-3083

browser/profiles/profileimpliodata.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted web page...

PT-2012-1643

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 19.0.1084.46 Description The issue arises from improper handling of a malformed ftp URL in the SRC attribute of a VIDEO element. This can be exploited by remote attackers to cause a denial of service, resulting ...

Debian: Security Advisory (DSA-2445-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2455-1 : typo3-src - missing input sanitization

Helmut Hummel of the TYPO3 security team discovered that TYPO3, a web content management system, is not properly sanitizing output of the exception handler. This allows an attacker to conduct cross-site scripting attacks if either third-party extensions are installed that do not sanitize this...

[SECURITY] [DSA 2455-1] typo3-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2455-1 [email protected] http://www.debian.org/security/ Nico Golde April 20, 2012 http://www.debian.org/security/faq -...

Debian DSA-2445-1 : typo3-src - several vulnerabilities

Several remote vulnerabilities have been discovered in the TYPO3 web content management framework : - CVE-2012-1606 Failing to properly HTML-encode user input in several places, the TYPO3 backend is susceptible to Cross-Site Scripting. A valid backend user is required to exploit these...

PT-2012-1022

Name of the Vulnerable Software and Affected Versions CVS versions 1.11 through 1.12 Description The issue concerns multiple vulnerabilities in the CVS package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability ...

WS-2012-0021

In php-src, PHP-5.4.1-RC1 to PHP5215RC1, there is a Buffer overflow vulnerability exists in “phphtmlentities” function which may be triggered by a large input to the “htmlspecialchars” PHP function. This may lead to a denial of service, and even allow remote code execution...

CVE-2011-3626: Undefined Security Weakness

Double free vulnerability in the prepareexec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows remote attackers to execute arbitrary commands via crafted strings in a log file...

WS-2012-0019

In php-src, php-5.3.1RC1 to php-5.4.0beta2 there is a vulnerability which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack BCBA on an HTTPS session, in conjunction with JavaScript code that uses 1 the HTML5 WebSocket API 2 the Java...

FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities

FCMS2.7.2 cms and earlier multiple CSRF Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple CSRF Vulnerability Download link...

Important: cacti

Issue Overview: The release notes http://www.cacti.net/releasenotes087h.php for Cacti 0.8.7h indicate that two security vulnerabilities were fixed, though no corresponding CVE has been issued. Affected Packages: cacti Issue Correction: Run yum update cacti or yum update --advisory ALAS-2011-23 to...

Linux pkexec / polkitd 0.96 Race Condition

!/bin/sh pid; if stat procbuf, &statbuf != 0 gseterror error, POLKITERROR, POLKITERRORFAILED, "stat failed for /proc/%d: %s", process-pid, gstrerror errno; goto out; where the code only rely on stat of the pseudo filesystem src/polkit/polkitsubject.c --------- there's not enough validation to run...

WordPress Multiple Plugin - timthumb.php Vulnerabilites

This Multiple plugin is prone to a timthumb.php library vulnerabilities. The attacker controls domain such as blogger.com by hosting a malicious GIF file with code that is appended to the end on. Then provides it to the script through the src GET parameter. Solution Upgrade the plugin...

[SECURITY] [DSA 2289-1] typo3-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2289-1 [email protected] http://www.debian.org/security/ Florian Weimer August 07, 2011 http://www.debian.org/security/faq -...

Prontus CMS Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Prontus is a /chilean/ "CMS" used by many sites in Chile. The vulnerability is into "antialone.html" which contains some frames using the value of "page" as "src" attribute:...

CVE-2011-2626

Opera before 11.50 allows remote attackers to cause a denial of service application crash by using "injected script" to set the SRC attribute of an IFRAME element...

PT-2011-3975

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.50 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by using injected script to set the SRC attribute of an IFRAME element. Recommendatio...

CVE-2011-2626: Undefined Security Weakness

Opera before 11.50 allows remote attackers to cause a denial of service application crash by using "injected script" to set the SRC attribute of an IFRAME element...