82 matches found
CVE-2023-0697
CVE-2023-0697: In Google Chrome for Android, prior to 110.0.5481.77, an inappropriate Fullscreen implementation allows a remote attacker to spoof the security UI via a crafted HTML page. The issue is fixed in Chrome 110.0.5481.77+. Affected product: Google Chrome on Android; root cause: Fullscree...
KLA20220 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Full screen mode can be exploited to cause denial of service...
chromium -- multiple vulnerabilities
Chrome Releases reports: This release contains 15 security fixes, including: 1402270 High CVE-2023-0696: Type Confusion in V8. Reported by Haein Lee at KAIST Hacking Lab on 2022-12-18 1341541 High CVE-2023-0697: Inappropriate implementation in Full screen mode. Reported by Ahmed ElMasry on...
CVE-2021-0697
CVE-2021-0697 is a race-condition vulnerability in the PVRSRVRGXSubmitTransferKM path of rgxtransfer.c (PowerVR GPU) on Android SoCs. It enables a possible user-after-free leading to local escalation of privilege with no additional execution privileges required and no user interaction. Exploit st...
Security Updates for Microsoft Office Products C2R (February 2020)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...
CVE-2022-0697
creationtimestamp| type| source ---|---|--- 2022-03-07 02:29:01+00:00| seen| https://t.me/cibsecurity/38499...
CVE-2022-0697 Open Redirect in archivy/archivy
Open Redirect in GitHub repository archivy/archivy prior to 1.7.0...
CVE-2022-0697
Open Redirect in archivy/archivy prior to 1.7.0. The issue is caused by an input validation error that enables an open redirect when handling links to GitHub repositories. Affected versions are before 1.7.0 (some sources note vulnerability persists up to 1.7.1). Remediation, where documented, is ...
SUSE: Security Advisory (SUSE-SU-2018:0697-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.1.38 skopeo security update
An update for skopeo is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Security Updates for Microsoft Office Products (February 2020) (deprecated)
This plugin has been deprecated to be brought in line with Tenable's C2R plugin policy. Pleas use smbntms22marvisioc2r.nasl instead. %NASLMINLEVEL 70300 C Tenable, Inc. @DEPRECATED@ Disabled on 2022/06/09. Deprecated by smbntms20fedofficec2r.nasl. include'deprecatednasllevel.inc';...
CVE-2020-0697
CVE-2020-0697 is a Microsoft Office elevation-of-privilege flaw affecting the OLicenseHeartbeat task. An authenticated attacker could place a specially crafted file in a specific location to run the task with SYSTEM privileges, enabling arbitrary file corruption. The vulnerability is addressed by...
CentOS Update for freerdp CESA-2019:0697 centos7
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-0697
The connected advisories describe a remote code execution vulnerability in the Microsoft Windows DHCP Client caused by improper processing of DHCP responses (memory corruption) in the DhcpExtractFullOptions path. A remote attacker could send crafted DHCP replies to execute arbitrary code with adm...
Oracle Linux 7 : freerdp (ELSA-2019-0697)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0697 advisory. - Fix CVE-2018-8786 1684152 - Fix CVE-2018-8787 1684156 Tenable has extracted the preceding description block directly from the Oracle Linux security...
RHEL 7 : freerdp (RHSA-2019:0697)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0697 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to R...
CVE-2019-0697
creationtimestamp| type| source ---|---|--- 2019-03-13 10:23:16+00:00| exploited| https://t.me/CyberGovIL/381 2019-06-21 23:17:22+00:00| published-proof-of-concept| https://t.me/w2hack/248...
CVE-2018-0697
Metabase is affected by a cross-site scripting vulnerability (CWE-79) in version 0.29.3 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially affecting a logged-in user’s browser session. Public details across multiple s...
CVE-2017-0697
CVE-2017-0697 is a DoS vulnerability in the Android media framework. The connected documents confirm impact on Android devices with versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The Android media framework is the affected component; the issue arises within that framework, leadi...
