CVE-2022-3309

Use after free in assistant in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via specific UI gestures. Chromium security severity: Medium...

CVE-2022-3309

CVE-2022-3309 affects Google Chrome/Chromium on ChromeOS, where a use-after-free in the Assistant component could allow a remote attacker, via specific UI gestures, to potentially escape the sandbox. The vulnerability is described for ChromeOS pre-106.0.5249.62. Remediation per the documents is u...

Stable Channel Update for ChromeOS

The Stable channel is being updated to 106.0.5249.112 Platform version: 15054.98.0 for most ChromeOS devices and will be rolled out over the next few days. For Chrome browser fixes, see the Chrome Desktop release announcement. If you find new issues, please let us know one of the following ways:...

Mageia: Security Advisory (MGASA-2022-0357)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10139-1 Rating: important References: 1203808 Cross-References: CVE-2022-3201 CVE-2022-3304 CVE-2022-3305 CVE-2022-3306 CVE-2022-3307 CVE-2022-3308 CVE-2022-3309 CVE-2022-3310 CVE-2022-3311 CVE-2022-3312...

Debian DSA-5244-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5244 advisory. - Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to install...

Security Bulletin: CSRF vulnerability in IBM Infosphere Guardium (CVE-2012-3309)

Abstract Security Bulletin: CSRF vulnerability in IBM Infosphere Guardium CVE-2012-3309 Content SUMMARY: Account creation panel is susceptible to cross site request forgery. VULNERABILITY DETAILS: CVE ID: CVE-2012-3309 DESCRIPTION: Account creation panel is susceptible to cross site request forge...

Slackware: Security Advisory (SSA:2017-195-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:2034-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:3309-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:2035-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3309

creationtimestamp| type| source ---|---|--- 2021-01-27 00:36:42+00:00| seen| https://t.me/cibsecurity/22688...

CVE-2021-3309

packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store,...

CVE-2021-3309

packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store,...

CVE-2021-3309

CVE-2021-3309 affects the Wekan LDAP integration: the module at packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections that are not authorized by the Certification Authority trust store, due to improper CA trust verification. This vulnerability could impact confidentialit...

CVE-2021-3309

packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store,...

CVE-2020-3309

Cisco Firepower Device Manager (FDM) On-Box software is affected by CVE-2020-3309, an input-validation vulnerability that enables an authenticated, remote attacker to upload a malicious file and overwrite arbitrary files on the device, potentially modifying the underlying OS. The issue is trigger...

CVE-2020-3309 Cisco Firepower Device Manager On-Box Software Arbitrary File Overwrite Vulnerability

A vulnerability in Cisco Firepower Device Manager FDM On-Box software could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation. An attacker could exploit this...

CVE-2015-3309

The CVE-2015-3309 entry concerns Etherpad’s Minify.js (node/utils/Minify.js) with a directory traversal vulnerability in Etherpad versions 1.1.2 through 1.5.4. The root cause is an incomplete fix to CVE-2015-3297, allowing an attacker to read arbitrary files via a .. sequence in the path paramete...

Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2017-1170)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...