Debian: Security Advisory (DSA-4421-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for chromium (openSUSE-SU-2019:1062-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GLSA-201903-23 : Chromium: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201903-23 Chromium: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details. Impact : Please review...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:1062-1 Rating: important References: 1129059 Cross-References: CVE-2019-5787 CVE-2019-5788 CVE-2019-5789 CVE-2019-5790 CVE-2019-5791 CVE-2019-5792 CVE-2019-5793 CVE-2019-5794 CVE-2019-5795 CVE-2019-5796...

openSUSE: Security Advisory for chromium (openSUSE-SU-2019:0343-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:0343-1 Rating: important References: 1129059 Cross-References: CVE-2019-5787 CVE-2019-5788 CVE-2019-5789 CVE-2019-5790 CVE-2019-5791 CVE-2019-5792 CVE-2019-5793 CVE-2019-5794 CVE-2019-5795 CVE-2019-5796...

CVE-2019-5799

Incorrect inheritance of a new document's policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page...

[ASA-201903-8] chromium: multiple issues

Arch Linux Security Advisory ASA-201903-8 ========================================= Severity: High Date : 2019-03-13 CVE-ID : CVE-2019-5787 CVE-2019-5788 CVE-2019-5789 CVE-2019-5790 CVE-2019-5791 CVE-2019-5792 CVE-2019-5793 CVE-2019-5794 CVE-2019-5795 CVE-2019-5796 CVE-2019-5797 CVE-2019-5798...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 73 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 73.0.3683.75 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

CVE-2018-5799

In Zoho ManageEngine ServiceDesk Plus before 9403, an XSS issue allows an attacker to run arbitrary JavaScript via a /api/request/?OPERATIONNAME= URI, aka SD-69139...

CVE-2018-5799

The vulnerability CVE-2018-5799 affects Zoho ManageEngine ServiceDesk Plus prior to version 9403, where an XSS flaw allows an attacker to run arbitrary JavaScript via the /api/request/?OPERATION_NAME= URI (SD-69139). The issue stems from insufficient input sanitization in the API endpoint, enabli...

ManageEngine Service Desk Plus Cross Site Scripting

Exploit Title: ManageEngine Service Desk Plus "%3ca xmlns%3aa%3d'http%3a%2f%2fwww.w3.org %2f1999%2fxhtml'%3e%3ca%3abody onload%3d'alert1'%2f%3e%3c%2fa%3e &TECHNICIANKEY=E428CCCD-D5F4-4CF8-9452-76C195982BE3&INPUTDATA=from0limit25filterbyAllRequests will cause the execution of script. Fixes...

CVE-2017-5799

CVE-2017-5799 is a remote code execution vulnerability in HP OpenCall Media Platform (OCMP). Affected versions: OCMP 3.x before 3.4.2 RP201 and OCMP 4.x before 4.4.7 RP702. Root cause involves a vulnerability that could allow an attacker to remotely execute arbitrary code, potentially compromisin...

CVE-2017-5799

creationtimestamp| type| source ---|---|--- 2017-04-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41927...

CVE-2016-5799

CVE-2016-5799 affects Moxa OnCell G3100V2 (firmware before 2.8) and G3111/G3151/G3211/G3251 (firmware before 1.7). The vulnerability is due to improper restriction of excessive authentication attempts, enabling remote attackers to perform brute-force authentication to gain access. Connected advis...

Mageia: Security Advisory (MGASA-2016-0116)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-5799

CVE-2015-5799 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3, enabling remote execution of code or a memory corruption-induced denial of service via a crafted web site. The connected advisories indicate the issue resides in WebKit/WebKit2 and that a fix was released in WebKit...

CVE-2013-5799

CVE-2013-5799 concerns an unspecified vulnerability in the Oracle Agile PLM Framework component of the Oracle Supply Chain Products Suite 9.3.2 . The available description states it allows remote attackers to affect integrity via unknown vectors related to Security. The connected documents confir...

CVE-2012-5799

The CVE-2012-5799 issue affects the Canada Post module in PrestaShop, where the code path using PHP fsockopen does not verify that the server hostname matches a domain listed in the certificate’s Common Name (CN) or subjectAltName. This enables potential MITM spoofing of SSL servers using arbitra...

CVE-2008-5799

CVE-2008-5799 is an XSS vulnerability in the TYPO3 extension Wir ber uns (fsmi_people) version 0.0.24 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to NVD, the impact is partial integrity with no confidentiality/availabili...