Debian DSA-5386-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5386 advisory. - Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to potentially exploi...

Chromium: CVE-2023-1817 Insufficient policy enforcement in Intents

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2023-1817

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-1817

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-1817

CVE-2023-1817 is a Chromium/Google Chrome issue affecting Google Chrome on Android prior to 112.0.5615.49, arising from insufficient policy enforcement in Intents. The underlying vulnerability allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Public advisories re...

KLA48769 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. Security UI vulnerability in Navigation can be exploit...

Ubuntu: Security Advisory (USN-4768-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : rust (ALAS-2022-1817)

The version of rust installed on the remote host is prior to 1.61.0-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1817 advisory. A race condition flaw was found in Rust's std::fs::removedirall function. Rust applications that use this function may be vulnerable ...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-1817)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:1817-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-1817

creationtimestamp| type| source ---|---|--- 2022-05-23 16:35:35+00:00| seen| https://t.me/cibsecurity/43164...

CVE-2022-1817 Badminton Center Management System Userlist Module cross site scripting

A vulnerability, which was classified as problematic, was found in Badminton Center Management System. This affects the userlist module at /bcms/admin/?page=user/list. The manipulation of the argument username with the input 1 leads to an authenticated cross site scripting. Exploit details have...

CVE-2022-1817

CVE-2022-1817 affects the Badminton Center Management System, specifically the userlist module at /bcms/admin/?page=user/list. The vulnerability is an authenticated cross-site scripting (XSS) flaw triggered by manipulating the username parameter with a crafted payload (for example: 1). Exploit de...

UBUNTU-CVE-2021-1817

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-1817

CVE-2021-1817 is a memory corruption bug in Apple WebKit/WebKitGTK components exploited by processing maliciously crafted web content. Affected in macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, tvOS 14.5; remediation is to upgrade to the fixed OS versions (e.g., macOS Big Sur 11.3+, iOS/...

USN-4768-1: musl vulnerabilities

It was discovered that musl did not properly handle kernel syscalls. An attacker could use this vulnerability to cause a denial of service crash or possibly execute arbitrary code. CVE-2018-1000001 It was discovered that musl did not properly handle the parsing of DNS response codes. A remote...

CVE-2020-1817

Huawei PCManager contains a local privilege escalation vulnerability (CVE-2020-1817) affecting versions earlier than 10.0.1.36. The issue arises from improper permission management of specific files, allowing low-privilege local attackers to inject commands and escalate privileges. Huawei has rel...

Security Advisory - Privilege Escalation Vulnerability in Huawei PCManager Product

Huawei PCManager has a privilege escalation vulnerability. Due to improper permission management of specific files, local attackers with low permissions can inject commands to exploit this vulnerability. Successful exploit may cause privilege escalation. Vulnerability ID: HWPSIRT-2019-12143 This...

CVE-2013-1817

CVE-2013-1817 affects MediaWiki prior to 1.19.4 and 1.20.x prior to 1.20.3. The vulnerability is in the api.php script and leads to an information disclosure where remote attackers can obtain sensitive information. The OSV and NVD records confirm the affected versions and the nature of the impact...

CVE-2019-1817

CVE-2019-1817 describes a DoS in Cisco Web Security Appliance (AsyncOS) web proxy due to improper validation of HTTP/HTTPS requests. An unauthenticated remote attacker can send malformed requests to trigger a restart of the web proxy process, causing a temporary DoS. The affected product is Cisco...