CVE-2023-1228

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-1228

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-1228

CVE-2023-1228 is a Chromium-based Chrome vulnerability: Insufficient policy enforcement in Intents. Affects Google Chrome on Android prior to 111.0.5563.64 and allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Mitigation in public advisories points to updating Ch...

CVE-2023-1228

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-1228

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 111 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 111.0.5563.64 Linux and Mac, 111.0.5563.64/.65 Windows contains a number of fixes and improvements -- a list of changes is...

K4532: gzip vulnerabilities CAN-2005-0758, CAN-2005-0988, and CAN-2005-1228

Security Advisory Description Note: Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F5...

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2023-1228)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-1228

The Opensea WordPress plugin (≤ 1.0.2, i.e., before 1.0.3) contains a stored XSS vulnerability caused by failing to sanitize and escape certain settings, including the Referer address field. This can allow high-privilege admins to perform Cross-Site Scripting exploits, even when unfiltered_html i...

CVE-2022-1228 Opensea < 1.0.3 - Admin+ Stored XSS

The Opensea WordPress plugin before 1.0.3 does not sanitize and escape some of its settings, like its "Referer address" field, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

SUSE: Security Advisory (SUSE-SU-2016:1228-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1228

creationtimestamp| type| source ---|---|--- 2021-02-24 22:37:10+00:00| seen| https://t.me/cibsecurity/24106...

CVE-2021-1228

CVE-2021-1228 affects Cisco Nexus 9000 Series Fabric Switches in ACI Mode . The issue arises in the LLDP setup phase of the infrastructure VLAN due to insufficient security requirements, enabling an unauthenticated, adjacent attacker to send a crafted LLDP packet and connect an unauthorised serve...

CVE-2020-1228 Windows DNS Denial of Service Vulnerability

...

CVE-2020-1228

CVE-2020-1228 is a DoS vulnerability in the Windows DNS service. An authenticated attacker can send crafted DNS queries that cause the DNS server to become nonresponsive. Affected component: Windows DNS processing of queries. Root cause: improper handling of DNS queries leading to resource exhaus...

KB4577070: Windows Server 2008 September 2020 Security Update

The remote Windows host is missing security update 4577070 or cumulative update 4577064. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...

KB4577053: Windows 7 and Windows Server 2008 R2 September 2020 Security Update

The remote Windows host is missing security update 4577053 or cumulative update 4577051. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...

newurengoy.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1052616 Security Researcher WhiteDevil Helped patch 67 vulnerabilities Received 3 Coordinated Disclosure badges Received 3 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting newurengoy.ru website and...

Information disclosure

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1228...

CVE-2019-1228

CVE-2019-1228 is a Windows kernel information disclosure vulnerability. It stems from the kernel mismanaging memory objects, enabling a local attacker who can log on and run a crafted app to disclose information that could aid further compromise. The vulnerability does not by itself allow code ex...