SUSE-SU-2019:2916-1 Security update for gdb

This update for gdb fixes the following issues: Update to gdb 8.3.1: jscECO-368 Security issues fixed: - CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. bsc1142772 Upgrade libipt from v2.0 to v2.0.1. - Enable librpm for version librpm.so.3...

SUSE-SU-2019:2913-1 Security update for gdb

This update for gdb fixes the following issues: Update to gdb 8.3.1: jscECO-368 Security issues fixed: - CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. bsc1142772 Upgrade libipt from v2.0 to v2.0.1. - Enable librpm for version librpm.so.3...

SUSE-SU-2019:2902-1 Security update for gdb

This update for gdb fixes the following issues: Update to gdb 8.3.1: jscECO-368 Security issues fixed: - CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. bsc1142772 Upgrade libipt from v2.0 to v2.0.1. - Enable librpm for version librpm.so.3...

CVE-2018-6112

Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

UBUNTU-CVE-2018-6112

Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

CVE-2018-6112

CVE-2018-6112 concerns Google Chrome/Chromium DevTools where the DevTools component mishandled URLs, enabling a remote attacker to bypass navigation restrictions via a crafted HTML page. The vulnerability is described as an incorrect handling of URLs in DevTools, leading to navigation bypass. Pub...

CVE-2018-6112

Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

WordPress WP ecommerce Shop Styling 2.5 File Disclosure

File disclosure vulnerability in WordPress WP ecommerce Shop Styling plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WordPress WP e-Commerce Shop Styling Plugin Directory Traversal Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.WP e-Commerce Shop Styling is one of the plug-ins used to improve the style of WP e-commerce store templates. A...

CVE-2015-5468

A directory traversal vulnerability exists in the WP e-Commerce Shop Styling plugin for WordPress (versions before 2.6 ). The root cause is an improper limitation of a pathname within ./wp-ecommerce-shop-styling/includes/download.php, where user input from the filename parameter is not properly s...

CVE-2015-5468: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter to includes/download.php...

stylingagenten.se XSS vulnerability

Vulnerable URL: http://www.stylingagenten.se/sv/blog/search?orderby=position=descsearchquery="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 337455 Google Pagerank| 2 VIP...

WordPress E-Commerce Shop Styling Plugin <= 2.5 - Local File Inclusion

This plugin is prone to a local file inclusion vulnerability, becuse the code in ./wp-ecommerce-shop-styling/includes/download.php is not sanitized. Solution Update the plugin...

WordPress WP e-Commerce Shop Styling Plugin Arbitrary File Download Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.WP e-Commerce Shop Styling is one of the plugin used to improve the style of WP e-commerce store templates. An...

WordPress Code Styling Localization Plugin <= 1.99.17 - XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress WP ecommerce Shop Styling 'dompdf' Remote File Inclusion Vulnerability

WordPress WP ecommerce Shop Styling Plugin is prone to a remote file inclusion vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

CVE-2013-0724

PHP remote file inclusion vulnerability in includes/generate-pdf.php in the WP ecommerce Shop Styling plugin for WordPress before 1.8 allows remote attackers to execute arbitrary PHP code via a URL in the dompdf parameter...

CVE-2013-0724: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/generate-pdf.php in the WP ecommerce Shop Styling plugin for WordPress before 1.8 allows remote attackers to execute arbitrary PHP code via a URL in the dompdf parameter...

CVE-2012-1929

Opera before 11.62 on Mac OS X allows remote attackers to spoof the address field and security dialogs via crafted styling that causes page content to be displayed outside of the intended content area...

Web page content may overlap the address field

The browser's user interface contains several pieces of security information. To preserve this information correctly, web page content should not be able to display over the user interface. Certain styling can cause Opera to allow the content to be displayed outside the page, over the address...