4059 matches found
CVE-2012-2868
Removed by vendor...
CVE-2012-2868: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving improper interaction between worker processes and an XMLHttpRequest aka XHR object...
PT-2012-4320
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 21.0.1180.89 Description A race condition exists due to improper interaction between worker processes and an XMLHttpRequest object, allowing remote attackers to cause a denial of service or possibly have other...
CVE-2012-4591
About.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page...
Code injection
About.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page...
PT-2012-5499
Name of the Vulnerable Software and Affected Versions McAfee Enterprise Mobility Manager EMM versions prior to 10.0 Description The issue allows remote attackers to obtain potentially sensitive information by visiting the About.aspx page in the Portal, which discloses the name of the user account...
CVE-2012-4591: Exposure of Sensitive Information to an Unauthorized Actor
About.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page...
CVE-2011-3090
Race condition in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to worker processes...
Race condition
Race condition in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to worker processes...
CVE-2011-3090
CVE-2011-3090 is referenced in openSUSE openSUSE-SU-2012:0656-1 as part of a Chromium v8 update. It indicates a race condition with worker processes in Chromium/Chrome prior to the patch, potentially enabling denial-of-service or other unspecified impact. The remediation in the linked patch is to...
CVE-2011-3090
Race condition in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to worker processes...
CVE-2011-3090: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to worker processes...
CVE-2011-3090
Removed by vendor...
PT-2012-1650
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 19.0.1084.46 Apple iTunes affected versions not specified Description A race condition exists, allowing remote attackers to cause a denial of service or possibly have other unspecified impacts via vectors relate...
JBoss 'mod_cluster'安全绕过漏洞
Bugtraq ID: 51554 CVE ID:CVE-2011-4608 JBOSS是一个基于J2EE的开放源代码的应用服务器。 modcluster允许worker节点在任意虚拟主机vhost上注册,而无视应用在其他虚拟主机上的安全性限制。在某些环境下,一个vhost配置为内部worker节点,而另一个配置为服务外部内容。远程攻击者可以利用此缺陷通过没有配置应用安全限制的外部虚拟主机注册为攻击者控制的worker节点,然后使用worker节点服务恶意内容,截获验证凭据,劫持用户会话。 0 Red Hat JBoss Enterprise Web Server for RHEL 6...
mod_cluster: malicious worker nodes can register on any vhost
modcluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide malicious content, hijack sessions, and steal credentials by registering from ...
Important: Red Hat Security Advisory: mod_cluster-native security update
An updated modcluster-native package that fixes one security issue is now available for JBoss Enterprise Web Platform 5.1.2 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System...
Important: Red Hat Security Advisory: mod_cluster-native security update
An update for the Native components for JBoss Enterprise Application Platform 5.1.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System...
Important: Red Hat Security Advisory: mod_cluster-native security update
An updated modcluster-native package that fixes one security issue is now available for JBoss Enterprise Application Platform 5.1.2 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scorin...
Important: Red Hat Security Advisory: mod_cluster-native security update
An update for the modcluster native component for JBoss Enterprise Web Server 1.0.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System...