openSUSE: Security Advisory for chromium (openSUSE-SU-2023:0193-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rocky Linux 8 : php:7.2 (RLSA-2019:3735)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2019:3735 advisory. - In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to writ...

F5 Networks BIG-IP : OpenSSL vulnerability (K21462542)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.0.0 / 15.0.0. It is, therefore, affected by a vulnerability as referenced in the K21462542 advisory. - While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This...

SUSE: Security Advisory (SUSE-SU-2023:3735-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : openssl (ELSA-2018-4187)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4187 advisory. 1.0.1e-57.0.3 - Avoid out-of-bounds read. Fixes CVE 2017-3735. By Rich Salz Tenable has extracted the preceding description block directly from the Oracle Linux...

DEBIAN-CVE-2023-3735

Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-3735

Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-3735

CVE-2023-3735 concerns Google Chrome/Chromium: an inappropriate implementation in the Web API Permission Prompts allowed a crafted HTML page to obfuscate security UI. The issue affects Chrome/Chromium’s permission UI handling and is classified as Medium severity (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:...

CVE-2023-3735

Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-3735

Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Medium...

Chromium: CVE-2023-3735 Inappropriate implementation in Web API Permission Prompts

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA51267 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Web API Permission...

Microsoft Edge (Chromium) < 114.0.1901.183 / 115.0.1901.183 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1901.183 / 115.0.1901.183. It is, therefore, affected by multiple vulnerabilities as referenced in the July 21, 2023 advisory. - Microsoft Edge Chromium-based Spoofing Vulnerability CVE-2023-35392 - Microsoft Edg...

[SECURITY] [DSA 5456-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5456-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 20, 2023 https://www.debian.org/security/faq -...

Security Bulletin: Multiple security vulnerabilities have been identified in Open SSL, which is shipped with IBM Tivoli Network Manager IP Edition.

Summary Open SSL is shipped with IBM Tivoli Network Manager IP Edition version 3.9. Information about security vulnerabilities affecting Open SSL has been published here. Vulnerability Details CVEID: CVE-2017-3735 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information,...

Huawei EulerOS: Security Advisory for shim-signed (EulerOS-SA-2023-1748)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openssl security update

1.0.1e-59.0.4 - Backport fixes for CVE-2023-0286 Orabug: 35212597 1.0.1e-59.0.3 - Fix possible infinite loop in BNmodsqrt CVE-2022-0778Orabug: 33969800 1.0.1e-59.0.1 - Backport fixes for CVE-2020-1971 Orabug: 32654738 1.0.1e-58.0.1 - Oracle bug 28730228: backport CVE-2018-0732 - Oracle bug...

CVE-2022-3735

Incident summary (CVE-2022-3735): A vulnerability in seccome Ehoney affects the file /api/public/signup, where improper access controls could enable privilege escalation. Multiple connected sources confirm the issue as critical with unknown product versions and incomplete details on affected rele...

CVE-2021-3735

A deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset ahciresetport while handling a host-to-device Register FIS Frame Information Structure packet from the guest. A privileged user inside the guest could use this flaw to hang the QEMU process on the host...

CVE-2021-3735

CVE-2021-3735 describes a deadlock in the AHCI controller device of QEMU. The issue occurs during a software reset (ahci_reset_port) while processing a host-to-device Register FIS from a guest, allowing a privileged guest user to hang the QEMU process on the host and cause a denial of service. Co...