115 matches found
CVE-2022-1872
CVE-2022-1872 concerns Google Chrome’s Extensions API, where insufficient policy enforcement allowed a user-assisted attacker to bypass downloads policy via a crafted HTML page and a malicious extension. The issue affects Chrome/Chromium prior to version 102.0.5005.61, with fixes released in the ...
CVE-2022-1872
Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page...
Fedora: Security Advisory for chromium (FEDORA-2022-bcb096166f)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Chromium: CVE-2022-1872 Insufficient policy enforcement in Extensions API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
KLA12548 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Inappropriate implementation vulnerability in...
[SECURITY] [DSA 5148-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5148-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 25, 2022 https://www.debian.org/security/faq -...
CVE-2022-1872
No description is available for this CVE...
CVE-2021-1872
creationtimestamp| type| source ---|---|--- 2021-09-08 18:34:42+00:00| seen| https://t.me/cibsecurity/28458...
CVE-2021-1872
CVE-2021-1872 is a logic issue related to CallKit state management in Apple platforms. The issue could affect muting a CallKit call while ringing, where mute may not be enabled. It has been fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, and macOS Big Sur 11.3. The NVD entry shows a CVSS v3.1 bas...
SUSE: Security Advisory (SUSE-SU-2018:1872-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:1175-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1872
CVE-2020-1872 documents a digital balance bypass vulnerability in Huawei P10 Plus smartphones. Affected devices include P10 Plus models with software versions earlier than 9.1.0.201 (C01E75R1P12T8), earlier than 9.1.0.252 (C185E2R1P9T8 and C432E4R1P9T8), and earlier than 9.1.0.255 (C576E6R1P8T8)....
Debian DLA-1872-1 : python-django security update
It was discovered that there were two vulnerabilities in the Django web development framework : - CVE-2019-14232: Prevent a possible denial of service in django.utils.text.Truncator. If django.utils.text.Truncator's chars and words methods were passed the html=True argument, they were extremely...
CVE-2019-1872 Cisco TelePresence Video Communication Server and Cisco Expressway Series Server-Side Request Forgery Vulnerability
A vulnerability in Cisco TelePresence Video Communication Server VCS and Cisco Expressway Series software could allow an unauthenticated, remote attacker to cause an affected system to send arbitrary network requests. The vulnerability is due to improper restrictions on network services in the...
CVE-2019-1872
The CVE-2019-1872 entry applies to Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Series. The vulnerability stems from improper restrictions on network services, enabling an unauthenticated, remote attacker to cause the affected system to generate and send arbitrary netw...
Debian: Security Advisory (DLA-1740-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1740-1 : libav security update
Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2015-1872 The ffmjpegdecodesof function in libavcodec/mjpegdec.c did not validate the number of components in a JPEG-LS Start Of Frame segment, which allowed remote attackers to caus...
[SECURITY] [DLA 1740-1] libav security update
Package : libav Version : 6:11.12-1deb8u6 CVE ID : CVE-2015-1872 CVE-2017-14058 CVE-2017-1000460 CVE-2018-6392 CVE-2018-1999012 Debian Bug : Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2015-1872 The ffmjpegdecodesof function i...
Security Bulletin: IBM Maximo Asset Management is vulnerable to cross-site scripting (CVE-2018-1872)
Summary IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Vulnerability Details CVEID:...