32 matches found
CVE-2021-31506
This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
CVE-2021-31506
CVE-2021-31506 concerns OpenText Brava! Desktop (Build 16.6.4.55). The issue is a PDF parsing flaw where insufficient validation allows a read past the end of an allocated data structure, enabling information disclosure. The vulnerability requires user interaction (target must visit a malicious p...
CVE-2019-13674
IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
CVE-2019-13674
IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
CVE-2019-13674
CVE-2019-13674 (Google Chrome) is a type-confusion in Chrome’s V8 engine related to induction-variable type handling (Infinity/NaN) inside a loop. The vulnerability could be triggered by constructing a loop that exploits NaN behavior, allowing crafted inputs to potentially trigger misinterpretati...
CVE-2019-13674
IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
Fedora 31 : chromium (2019-9a5e81214f)
Chromium update to 77.0.3865.120. For the upstream announcement see https://chromereleases.googleblog.com/2019/10/stable-channel-update-fo r-desktop.html. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...
openSUSE Security Update : chromium (openSUSE-2019-2153)
This update for chromium fixes the following issues : Security issues fixed : - CVE-2019-5870: Fixed a use-after-free in media. boo1150425 - CVE-2019-5871: Fixed a heap overflow in Skia. boo1150425 - CVE-2019-5872: Fixed a use-after-free in Mojo boo1150425 - CVE-2019-5874: Fixed a behavior that...
Google Chrome Security Updates (stable-channel-update-for-desktop-2019-09) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
CVE-2018-13674
CVE-2018-13674 affects the ComBillAdvancedToken Ethereum token. The mintToken function contains an integer overflow that enables the contract owner to set any user’s balance to an arbitrary value. This is the underlying root cause and directly enables balance manipulation by the owner. The provid...
CVE-2017-13674
CVE-2017-13674 affects Symantec ProxyClient 3.4 for Windows. A local attacker can escalate privileges to LocalSystem and execute arbitrary code, as described in multiple sources. The issue is a local privilege-escalation vulnerability in ProxyClient 3.4 for Windows, with impact described as privi...
SA152: Privilege Escalation Vulnerability in ProxyClient
SUMMARY The ProxyClient application for Windows is susceptible to a privilege escalation vulnerability. A malicious local Windows user can, under certain circumstances, exploit this vulnerability to escalate their privileges on the system and execute arbitrary code with LocalSystem privileges...