Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2023:0032-1 Rating: important References: 1207512 Cross-References: CVE-2023-0471 CVE-2023-0472 CVE-2023-0473 CVE-2023-0474 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes four vulnerabilitie...

Microsoft Edge (Chromium) < 109.0.1343.27 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 109.0.1343.27. It is, therefore, affected by multiple vulnerabilities as referenced in the January 26, 2023 advisory. - Use after free in WebTransport. CVE-2023-0471 - Use after free in WebRTC. CVE-2023-0472 - Type...

[SECURITY] [DSA 5328-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5328-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 26, 2023 https://www.debian.org/security/faq -...

CVE-2023-0472

creationtimestamp| type| source ---|---|--- 2023-01-26 14:09:31+00:00| seen| https://t.me/truesecator/3990 2023-01-30 12:37:15+00:00| seen| https://t.me/cibsecurity/57154...

Chromium: CVE-2023-0472 Use after free in WebRTC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

FreeBSD : chromium -- multiple vulnerabilities (3d0a3eb0-9ca3-11ed-a925-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3d0a3eb0-9ca3-11ed-a925-3065ec8fd3ec advisory. - Use after free in WebTransport. CVE-2023-0471 - Use after free in WebRTC. CVE-2023-0472 - Ty...

CVE-2023-0472

CVE-2023-0472 is a Chrome/WebRTC use-after-free vulnerability affecting Google Chrome prior to 109.0.5414.119. The issue, described as a use-after-free in WebRTC that could enable a remote attacker to cause heap corruption via a crafted HTML page, is rated High severity (CVSS 3.1: 8.8). The Chrom...

CVE-2023-0472

Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Stable Channel Update for Desktop

The Stable channel has been updated to 109.0.5414.119 for Mac and Linux and 109.0.5414.119/.120 for Windows, which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

Google Chrome < 109.0.5414.119 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 109.0.5414.119. It is, therefore, affected by multiple vulnerabilities as referenced in the 202301stable-channel-update-for-desktop24 advisory. - Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowe...

RHEL 6 : aide (RHSA-2022:0472)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:0472 advisory. Advanced Intrusion Detection Environment AIDE is a utility that creates a database of files on the system, and then uses that database to ensure file...

Important: Red Hat Security Advisory: aide security update

An update for aide is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Rockwell Automation ControlLogix Cross-site Scripting (CVE-2009-0472)

Multiple cross-site scripting XSS vulnerabilities in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. This plugin only works with Tenable.ot. Please visit...

CVE-2022-0472

Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9...

CVE-2022-0472

CVE-2022-0472 affects the Packagist package jsdecena/laracom prior to version 2.0.9. The root cause is an Unrestricted Upload of File with Dangerous Type , enabling an attacker with a valid account (per the Huntr PoC) to upload files such as HTML that can contain scripts. This can lead to content...

CVE-2022-0472 Unrestricted Upload of File with Dangerous Type in jsdecena/laracom

Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9...

Mageia: Security Advisory (MGASA-2014-0472)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0472)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0196)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0472)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...