KLA61310 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Audio can be exploited to cause denial of servi...

Chromium: CVE-2023-4366 Use after free in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Debian: Security Advisory (DSA-5479-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-4366

creationtimestamp| type| source ---|---|--- 2023-08-15 22:36:47+00:00| seen| https://t.me/cibsecurity/68589...

DEBIAN-CVE-2023-4366

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4366

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4366

The CVE-2023-4366 entry describes a Use-after-free vulnerability in Chrome/Chromium Extensions prior to version 116.0.5845.96, potentially allowing heap corruption when a user is tricked into installing a malicious extension via a crafted HTML page. The issue is tied to the Extensions component, ...

CVE-2023-4366

Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

Stable Channel Update for Desktop

The Stable and Extended stable channels has been updated to 116.0.5845.96 for Mac and Linux and 116.0.5845.96/.97 for Windows, which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and...

CVE-2021-4366

The CVE-2021-4366 entry concerns the WordPress PWA for WP & AMP plugin. Affected component: pwaforwp_update_features_options function. Root cause: missing capability check leads to an authorization bypass in versions up to and including 1.7.32, allowing authenticated attackers to alter restricted...

CVE-2022-4366

creationtimestamp| type| source ---|---|--- 2022-12-08 22:12:55+00:00| seen| https://t.me/cibsecurity/54197...

CVE-2022-4366

Missing Authorization in GitHub repository lirantal/daloradius prior to master branch...

CVE-2022-4366

CVE-2022-4366 affects the daloRADIUS project (lirantal/daloradius). Public records show missing authorization leading to exposure of sensitive system information to unauthorized users, with references describing an unauthenticated disclosure and exposure of details via repository endpoints. The i...

CVE-2022-4366 Missing Authorization in lirantal/daloradius

Missing Authorization in GitHub repository lirantal/daloradius prior to master branch...

CVE-2022-4366 Missing Authorization in lirantal/daloradius

Missing Authorization in GitHub repository lirantal/daloradius prior to master branch...

CVE-2022-4366 Missing Authorization in lirantal/daloradius

Missing Authorization in GitHub repository lirantal/daloradius prior to master branch...

CVE-2019-4366

creationtimestamp| type| source ---|---|--- 2020-08-03 16:55:24+00:00| seen| https://t.me/cibsecurity/13824...

CVE-2019-4366

CVE-2019-4366 affects IBM Cognos Analytics 11.0 and 11.1, causing information disclosure by accessing cached browser data. The IBM Security Bulletin lists the affected versions and provides fixes: upgrade to IBM Cognos Analytics 11.1.7.0 (for 11.1.x) or 11.0.13 FP2 (for 11.0.x). The vulnerability...

CVE-2019-4366

IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data. IBM X-Force ID: 161748...

CVE-2020-4366

IBM Planning Analytics Local 2.0 is affected by a cross-site scripting (XSS) vulnerability in the Web UI, which could allow an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted session. Root cause: XSS in the Web UI of Planning Analytics Local 2.0. Affec...