Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 103 to the stable channel for Windows,Mac and Linux.This will roll out over the coming days/weeks. Chrome 103.0.5060.53 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 14 security fixes, including: 1335458 Critical CVE-2022-2156: Use after free in Base. Reported by Mark Brand of Google Project Zero on 2022-06-11 1327312 High CVE-2022-2157: Use after free in Interest groups. Reported by Nan Wang@eternalsakura13 and...

SUSE: Security Advisory (SUSE-SU-2016:2156-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-2156

Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite component: Customer Tab. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customers...

CVE-2021-2156

CVE-2021-2156 affects Oracle E-Business Suite, Oracle Customers Online (Customer Tab) on versions 12.1.3 and 12.2.3–12.2.10. The issue allows a low-privilege, network-accessing attacker over HTTP to cause unauthorized creation/deletion/modification of data or access to all Oracle Customers Online...

CVE-2021-2156

Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite component: Customer Tab. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customers...

at.iem:sysson_2.11 (>=1.14.1 <=1.15.0), at.iem:sysson_2.12 (>=1.14.1 <=1.15.0) +1032 more potentially affected by CVE-2015-2156 via io.netty:netty (>=3.10.0.Final <=3.10.2.Final)

io.netty:netty MAVEN version =3.10.0.Final, =1.14.1, =1.14.1, =2.5.0-beta.0, =2.5.0-beta.0, =2.5.0-beta.0, =2.5.0-beta.0, =3.2.2, =3.2.2, =2.5.0-beta.0, =2.5.0-beta.0, =2.5.0-beta.0, =3.5.3, =2.5.0-beta.0, =2.5.0-beta.0, =3.4.0, =3.5.7-jre7.0 and more Source cves: CVE-2015-2156 Source advisory:...

ai.databand.azkaban:azkaban-web-server (=3.18.0), at.salzburgresearch.nodekeeper:nodekeeper-java (>=1.0 <=1.2) +2130 more potentially affected by CVE-2015-2156 via org.jboss.netty:netty (>=3.1.0.BETA1 <=3.2.9.Final)

org.jboss.netty:netty MAVEN version =3.1.0.BETA1, =1.0, =0.3.1, =1.0, =1.16.0, =1.16.0, =1.0, =0.2.0, =0.1.5, =0.1.5, =0.5.0 and more Source cves: CVE-2015-2156 Source advisory: OSV:GHSA-XFV3-RRFM-F2RV...

Debian: Security Advisory (DLA-2156-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-2156

The CVE-2020-2156 issue affects Jenkins DeployHub Plugin (up to and including 8.0.14). The root cause is that credentials are transmitted in plain text as part of job configuration forms and, although encrypted on disk in config.xml, can be viewed by users with Extended Read permission, potential...

CVE-2019-2156

CVE-2019-2156 affects Android 10 where the libxaac library has an out-of-bounds read due to a missing bounds check, enabling potential information disclosure. The vulnerability impacts information confidentiality and requires user interaction to exploit; there is no indication of remote code exec...

CVE-2018-2156

CVE-2018-2156 is rejected and not an active vulnerability entry.

CVE-2018-2156

...

CVE-2010-2156

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dhcp/iscdhcpdclientid.rb 2025-02-06 03:13:39+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:47+00:00| seen|...

CVE-2015-2156

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name a...

CVE-2015-2156

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name a...

CVE-2015-2156

CVE-2015-2156 concerns Netty (and Play Framework): improper validation of cookie name/value characters can bypass HttpOnly and expose sensitive data. In IBM StreamSets Data Collector context, this vulnerability affects versions 5.0.0–6.4.1 and remediation is to upgrade to IBM StreamSets Data Coll...

CVE-2017-2156

CVE-2017-2156 affects the Vivaldi installer for Windows prior to version 1.7.735.48, where an untrusted search path vulnerability allows an attacker to execute arbitrary code by placing a specially crafted executable in an unspecified directory. The issue stems from the installer loading executab...

CVE-2016-2156

calendar/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 provides calendar-event data without considering whether an activity is hidden, which allows remote authenticated users to obtain sensitive information via a...

CVE-2016-2156

The CVE-2016-2156 vulnerability affects Moodle versions up to 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3, where calendar-event data can be exposed via web-service requests because hidden activities are not honored. This could allow remote authenti...