RHEL 8 : firefox (RHSA-2023:0290)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0290 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

CVE-2023-0290

Rapid7 Velociraptor did not properly sanitize the client ID parameter to the CreateCollection API, allowing a directory traversal in where the collection task could be written. It was possible to provide a client id of "../clients/server" to schedule the collection for the server as a server...

CVE-2023-0290

Summary of CVE-2023-0290 (Velociraptor) : A vulnerability in the CreateCollection API allows directory traversal via an unsafely sanitized client ID parameter, enabling a collection task to be written for the server when scheduling from the server artifact path “../clients/server.” Exploitation r...

Important Photon OS Security Update - PHSA-2022-0290

Updates of 'linux-esx', 'linux-secure', 'linux-rt', 'linux', 'linux-aws' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-4.0-0290

Updates of 'linux-rt', 'linux-aws', 'linux-secure', 'linux-esx', 'linux' packages of Photon OS have been released...

AlmaLinux 8 : parfait:0.5 (ALSA-2022:0290)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:0290 advisory. log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender CVE-2022-23305 log4j: Unsafe deserialization flaw in Chainsaw log...

CVE-2022-0290

Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

CVE-2022-0290

CVE-2022-0290 is a use-after-free vulnerability in Chrome/Chromium’s Site isolation that could enable a remote attacker to escape the sandbox via a crafted HTML page. The issue affects Chrome/Chromium prior to version 97.0.4692.99 and is categorized with high severity in multiple advisories. Expl...

MGASA-2022-0043 Updated chromium-browser-stable packages fix security vulnerability

CVE-2022-0096: Use after free in Storage. CVE-2022-0097: Inappropriate implementation in DevTools. CVE-2022-0098: Use after free in Screen Capture. CVE-2022-0099: Use after free in Sign-in. CVE-2022-0100: Heap buffer overflow in Media streams API. CVE-2022-0101: Heap buffer overflow in Bookmarks...

Mageia: Security Advisory (MGASA-2020-0290)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0290)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2013-0290)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 8 : parfait:0.5 (ELSA-2022-0290)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0290 advisory. - Obsolete remove vulnerable versions of log4j12 NVR 1.2.17-23 when upgrading to parfait 0.5.4-4 CVE-2021-4104 Tenable has extracted the preceding...

[SECURITY] [DSA 5054-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5054-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 23, 2022 https://www.debian.org/security/faq -...

Chromium: CVE-2022-0290 Use after free in Site isolation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2021-0290

The CVE-2021-0290 issue is a Junos OS vulnerability where specially crafted Ethernet frames can cause an interface to permanently go down, leading to a DoS. Affected are MX Series, EX9200 Series, and SRX4600 devices with specific platform families and Junos OS versions listed in the CVE details (...

Juniper Junos OS Vulnerability (JSA11192)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11192 advisory. - Improper Handling of Exceptional Conditions in Ethernet interface frame processing of Juniper Networks Junos OS allows an attacker to send specially crafted frames over th...

SUSE: Security Advisory (SUSE-SU-2016:0290-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:0290-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : firefox (RHSA-2021:0290)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0290 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...