CVE-2016-4583

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document...

CVE-2016-4586

WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

openSUSE Security Update : nodejs (openSUSE-2016-884)

This update for nodejs fixes the following issue : - CVE-2016-1669 : - fix buffer overflow in v8 boo987919 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-884. The text descripti...

The vulnerability of Google Chrome browser allows a remote attacker to execute arbitrary code.

The vulnerability of Google Chrome exists due to improper interaction between the IPC component, the Gamepad API, and Google V8. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Google Chrome browser allows a violator to circumvent access restrictions.

The vulnerability of the bindings/scripts/v8types.py file in Google Chrome’s Blink subsystem is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass access restrictions by using a Java script that utilizes the Blink API...

The vulnerability of Google Chrome browser allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability exists in Google Chrome due to improper interaction between extensions, IPC, sync APIs, and Google V8. Exploiting this vulnerability allows malicious actors to execute arbitrary code remotely...

The vulnerability of Google Chrome browser allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability exists in Google Chrome due to improper interaction between extensions, IPC, sync APIs, and Google V8. Exploiting this vulnerability allows malicious actors to execute arbitrary code remotely...

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure or otherwise affect the system.

A vulnerability in the Google Chrome browser, related to errors in Google V8 JavaScript. Exploiting this vulnerability allows a malicious actor to trigger a service failure or cause other adverse effects on the system...

Horsys 8 Session Fixation / User Enumeration / XSS

Several Vulnerabilities founded in Horsys V8 Horsys is a human resource appliation, allowing the user to manage his profile, vacation, position title and other personnal data like address, phone number and so on. The application runs on Windows and launches a web server. This product has been...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the ToV8Value function content/child/v8valueconverterimpl.cc in Google Chrome’s V8 browser kernel is related to the lack of restrictions on the use of built-in functions. Exploiting this vulnerability can allow a malicious actor to cause service failures the use of resources...

The vulnerability in the browser kernel V8, which allows a hacker to trigger a service failure or cause other effects

The vulnerability of the objects.cc component in the V8 browser kernel arises due to incorrect restrictions on optimization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures or other effects by using specially crafted JavaScript code...

Google Chrome < 51.0.2704.63 Multiple Vulnerabilities

Binary data 9372.pasl...

Google Chrome < 50.0.2661.102 Multiple Vulnerabilities

Binary data 9371.pasl...

Security updates for all active release lines, June 2016

Security updates for all active release lines, June 2016 Update 23-June-2016 Releases available After a thorough assessment of the fixes we were planning on including, we have decided to scale back this security update to only include a subset. We are deferring some fixes while we improve the...

The vulnerability of the V8 browser engine and the Google Chrome browser, which allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the Zone::New function in the zone.cc browser engine V8 and Google Chrome browser is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions or potentially have other effects, by using specially crafted JavaScript co...

Ubuntu 14.04 LTS / 16.04 LTS : Oxide vulnerabilities (USN-2992-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2992-1 advisory. An unspecified security issue was discovered in Blink. If a user were tricked in to opening a specially crafted website, an attacker could...

Ubuntu: Security Advisory (USN-2992-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2992-1 oxide-qt vulnerabilities

An unspecified security issue was discovered in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same-origin restrictions. CVE-2016-1673 An issue was discovered with Document reattachment in Blink in some circumstances. ...

openSUSE Security Update : Chromium (openSUSE-2016-682)

Chromium was updated to 51.0.2704.79 to fix the following vulnerabilities : - CVE-2016-1696: Cross-origin bypass in Extension bindings - CVE-2016-1697: Cross-origin bypass in Blink - CVE-2016-1698: Information leak in Extension bindings - CVE-2016-1699: Parameter sanitization failure in DevTools ...

CVE-2016-1688

The regexp aka regular expression implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service out-of-bounds read via crafted JavaScript code...