76 matches found
KLA65278 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out of bounds read vulnerability in...
Fedora 38 : chromium (2024-01f4c93547)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-01f4c93547 advisory. Update to 123.0.6312.58 High CVE-2024-2625: Object lifecycle issue in V8 Medium CVE-2024-2626: Out of bounds read in Swiftshader Medium CVE-2024-262...
CVE-2024-2631
CVE-2024-2631 affects Google Chrome/Chromium on iOS with insecure UI handling in versions before 123.0.6312.58, enabling a remote attacker to spoof UI via a crafted HTML page. The vulnerability is categorized as Medium severity in the provided metrics, with network attack vector, user interaction...
CVE-2024-2631
Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
Google Chrome Security Update (stable-channel-update-for-desktop_19-2024-03) - Linux
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Google Chrome Security Update (stable-channel-update-for-desktop_19-2024-03) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 123 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 123.0.6312.58 Linux 123.0.6312.58/.59 Windows, Mac contains a number of fixes and improvements -- a list of changes is...
KLA65227 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Downloads can be exploited to cause...
CVE-2019-2631
creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:22+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5990...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2023-2631)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-2631
creationtimestamp| type| source ---|---|--- 2023-05-16 22:30:44+00:00| seen| https://t.me/cibsecurity/64252 2025-01-22 21:02:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2650...
CVE-2023-2631
A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2023-2631
A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2023-2631
A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2023-2631 CSRF vulnerability and missing permission checks in Code Dx Plugin
A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2023-2631
CVE-2023-2631 affects Jenkins Code Dx Plugin 3.1.0 and earlier. The issue is missing permission checks on several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified URL. Some endpoints do not require POST, enabling CSRF. Exploitation status is not ...
SUSE CVE-2019-2631
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Information Schema. Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...