OPENSUSE-SU-2022:0133-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 101.0.4951.64 boo1199409 CVE-2022-1633: Use after free in Sharesheet CVE-2022-1634: Use after free in Browser UI CVE-2022-1635: Use after free in Permission Prompts CVE-2022-1636: Use after free in Performance APIs...

Chromium: CVE-2022-1639 Use after free in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2022-1639

creationtimestamp| type| source ---|---|--- 2022-05-12 12:47:10+00:00| seen| https://t.me/truesecator/2931...

Stable Channel Update for Desktop

The Stable channel has been updated to 101.0.4951.64 for Windows, Mac and Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...

SUSE: Security Advisory (SUSE-SU-2013:1639-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : python-pip (ALAS-2021-1639)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1639 advisory. The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting...

CVE-2021-1639

creationtimestamp| type| source ---|---|--- 2021-02-26 02:44:21+00:00| seen| https://t.me/cibsecurity/24181...

CVE-2021-1639

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-1639

CVE-2021-1639 appears as a Visual Studio Code remote code execution vulnerability. Connected sources confirm Visual Studio Code is affected and note public exploits exist (Kaspersky). The documents provide high-severity impact for this CVE but do not consistently expose concrete root-cause detail...

CVE-2021-1639 Visual Studio Code Remote Code Execution Vulnerability

...

Security Update for Microsoft Visual Studio Code (Feb 2021)

An arbitrary code execution vulnerability exists in Microsoft Visual Studio Code. An unauthenticated, local attacker can exploit this by persuading a victim to open specially-crafted content which could exploit this vulnerability to execute arbitrary code on the system with privileges of the...

Juniper Junos DoS (JSA11020)

The version of Junos OS installed on the remote host is prior to 12.3R12-S15, 12.3X48-D95, 14.1X50-D145, 14.1X53-D47, 15.1R2, 15.1X49-D170, or 15.1X53-D67. It is, therefore, affected by a vulnerability as referenced in the JSA11020 advisory. Note that Nessus has not tested for this issue but has...

Huawei EulerOS: Security Advisory for apr-util (EulerOS-SA-2020-1639)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1639

Affected product: Juniper Networks Junos OS. Issue: processing of specially crafted Ethernet OAM packets causes the CFM daemon to overflow due to improper handling of malformed data, leading to a Denial of Service (DoS) by crashing the CFM process; continued packet receipt can extend the DoS. Aff...

CVE-2019-1639

Cisco Webex Network Recording Player and Webex Player for Windows are affected by a vulnerability in ARF/WRF file parsing that can lead to remote code execution via a crafted ARF/WRF file or link. The ZDI advisory specifies an ARF file out-of-bounds write vulnerability that allows code execution ...

Debian: Security Advisory (DLA-1639-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-1639

The CVE-2018-1639 issue affects Jazz Reporting Service’s Report Builder, impacting Jazz Reporting Service versions 5.0–5.0.2 and 6.0–6.0.6, where an authenticated user could obtain sensitive information beyond their privileges. The root cause is not detailed beyond privilege escalation of the Rep...

Security Bulletin: Security vulnerability affects the Report Builder that is shipped with Jazz Reporting Service (CVE-2018-1639)

Summary There is a security vulnerability in the Report Builder shipped with Jazz Reporting Service. Vulnerability Details CVEID: CVE-2018-1639 DESCRIPTION: The Report Builder of Jazz Reporting Service could allow an authenticated user to obtain sensitive information beyond its assigned privilege...

RHEL 6 : kernel (RHSA-2018:1639)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1639 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: An industry-wide issue was found in the way man...

openSUSE: Security Advisory for Chromium (openSUSE-SU-2016:0729-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...