Fedora: Security Advisory for neatvnc (FEDORA-2023-a5e10b188a)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for indi-3rdparty-libraries (FEDORA-2023-a5e10b188a)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for xine-lib (FEDORA-2023-a5e10b188a)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Moderate: Red Hat Security Advisory: Logging Subsystem 5.5.8 - Red Hat OpenShift

Logging Subsystem 5.5.8 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the Referenc...

Debian: Security Advisory (DSA-1526-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2023-0076 Updated chromium-browser-stable packages fix security vulnerability

Chromium updated Chromium to 110.0.5481.177 to fix vulnerabilities including CVE-2023-0927 Use after free in Web Payments API. CVE-2023-0928 Use after free in SwiftShader. CVE-2023-0929 Use after free in Vulkan. CVE-2023-0930 Heap buffer overflow in Video. CVE-2023-0931 Use after free in Video...

Updated chromium-browser-stable packages fix security vulnerability

Chromium updated Chromium to 110.0.5481.177 to fix vulnerabilities including CVE-2023-0927 Use after free in Web Payments API. CVE-2023-0928 Use after free in SwiftShader. CVE-2023-0929 Use after free in Vulkan. CVE-2023-0930 Heap buffer overflow in Video. CVE-2023-0931 Use after free in Video...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2023:0061-1 Rating: important References: 1208589 Cross-References: CVE-2023-0927 CVE-2023-0928 CVE-2023-0929 CVE-2023-0930 CVE-2023-0931 CVE-2023-0932 CVE-2023-0933 CVE-2023-0941 Affected Products: openSUSE...

Chromium: CVE-2023-0930 Heap buffer overflow in Video

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2023-0930

Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

FreeBSD : chromium -- multiple vulnerabilities (4d6b5ea9-bc64-4e77-a7ee-d62ba68a80dd)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4d6b5ea9-bc64-4e77-a7ee-d62ba68a80dd advisory. - Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allow...

CVE-2023-0930

Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-0930

CVE-2023-0930 corresponds to a heap buffer overflow in Chrome/Chromium’s Video component, present in Google Chrome prior to 110.0.5481.177. The issue could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. The vulnerability is rated High severity with network...

CVE-2023-0930

Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

KLA40223 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Prompts can be exploited to execute arbitrary code or cause...

GHSA-WC52-2XWV-H7XR ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from...

SUSE: Security Advisory (SUSE-SU-2022:0930-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-0930

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

CVE-2022-0930 File upload filter bypass leading to stored XSS in microweber/microweber

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

CVE-2022-0930

CVE-2022-0930 affects microweber/microweber. The issue is a file upload filter bypass that allows stored XSS via uploaded HTML-like files, reported for versions prior to 1.2.12. The root cause is inadequate validation/filtration of uploads enabling JavaScript execution on access. Remediation per ...