85 matches found
Fedora: Security Advisory for chromium (FEDORA-2023-b427f54e68)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-5499-1 : chromium - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5499 advisory. - Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate a permission prompt v...
[SECURITY] [DSA 5499-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5499-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 18, 2023 https://www.debian.org/security/faq -...
Chromium: CVE-2023-4901 Inappropriate implementation in Prompts
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium) < 117.0.2045.31 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 117.0.2045.31. It is, therefore, affected by multiple vulnerabilities as referenced in the September 15, 2023 advisory. - Microsoft Edge Chromium-based Elevation of Privilege Vulnerability CVE-2023-36562, CVE-2023-3673...
CVE-2023-4901
CVE-2023-4901 affects Google Chrome/Chromium: an improper Prompts implementation prior to Chrome 117.0.5938.62 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. Impact is Medium (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N; base score 4.3). Affected products in...
CVE-2023-4901
Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. Chromium security severity: Medium...
CVE-2022-4901
creationtimestamp| type| source ---|---|--- 2023-03-01 22:33:39+00:00| seen| https://t.me/cibsecurity/59264...
CVE-2022-4901
Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the local UI via a malicious VPN configuration that must be manually loaded by the victim...
CVE-2022-4901
Sophos Connect (VPN client) is affected by multiple stored XSS vulnerabilities in versions prior to 2.2.90, allowing Javascript execution in the local UI when a malicious VPN configuration is manually loaded by the victim. Impact is limited to the local UI; no exploitation details are provided be...
CVE-2022-4901
Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the local UI via a malicious VPN configuration that must be manually loaded by the victim...
CVE-2018-4901
creationtimestamp| type| source ---|---|--- 2022-06-10 23:02:10+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/37...
CVE-2020-4901
The CVE-2020-4901 issue affects IBM Robotic Process Automation with Automation Anywhere 11.0. The root cause is an information-disclosure vulnerability enabling an attacker on the network to obtain sensitive data (via username enumeration) and, in some cases, trigger a denial of service. The avai...
CVE-2020-4901
IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive information or cause a denial of service through username enumeration. IBM X-Force ID: 190992...
Security Bulletin: Information disclosure vulnerability may affect IBM Robotic Process Automation Anywher - CVE-2020-4901
Summary IBM Robotic Process Automation Anywhere is vulnerable to an information disclosure attack Vulnerability Details CVEID: CVE-2020-4901 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere could allow an attacker on the network to obtain sensitive information or cause a denia...
CVE-2020-4901
IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive information or cause a denial of service through username enumeration. IBM X-Force ID: 190992...
Debian DSA-4901-1 : gst-libav1.0 - security update
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
CVE-2019-4901
This CVE entry is rejected/not used; it does not represent an active vulnerability entry.
CVE-2011-4901
CVE-2011-4901 affects TYPO3 prior to 4.3.12, 4.4.x prior to 4.4.9, and 4.5.x prior to 4.5.4. The issue enables remote attackers to extract arbitrary information from the TYPO3 database (information disclosure). Root cause and affected component are described in TYPO3 security advisories and relat...