53 matches found
CVE-2023-5866
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1...
CVE-2023-5866 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1...
CVE-2023-5866
The CVE-2023-5866 entry concerns phpMyFAQ before 3.2.1 where cookies in HTTPS sessions lack the Secure attribute, enabling potential sensitive data exposure. Affected product: phpMyFAQ (thorsten/phpmyfaq) prior to 3.2.1. Root cause: missing Secure flag on cookies during HTTPS sessions. Impact: co...
RHEL 9 : grafana (RHSA-2023:5866)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:5866 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: HTTP/2: Multip...
K11922628: NGINX Controller sensitive command-line arguments vulnerability CVE-2020-5866
Security Advisory Description The helper.sh script, which is used optionally in NGINX Controller to change settings, uses sensitive items as command-line arguments. CVE-2020-5866 Impact The affected script causes sensitive items to display in the system process listing ps , top while the helper.s...
SUSE CVE-2019-5866
Out of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Ubuntu: Security Advisory (USN-5866-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5866)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5866 advisory. - kvm: fix kvmioctlcreatedevice reference counting CVE-2019-6974 Jann Horn Orabug: 29434845 CVE-2019-6974 - KVM: nVMX: unconditionally cancel...
CVE-2020-5866
The CVE affects F5 NGINX Controller pre-3.3.0: the helper.sh script that is used to change settings accepts sensitive items as command-line arguments. This can cause sensitive data to be exposed in system process listings (ps/top) and stored in bash history; audit logs may also capture them if en...
CVE-2019-5866
Out of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
UBUNTU-CVE-2019-5866
Out of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2019-5866
Out of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2019-5866
Out of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2019-5866
CVE-2019-5866 describes an out-of-bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.142, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. Affected product: Google Chrome (JS engine). Root cause: out-of-bounds memory access. I...
KLA11738 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. DoS vulnerability in V8 component can be exploited remotely via special crafted webpage. 2. OSI...
Stable Channel Update for Desktop
The stable channel has been updated to 75.0.3770.142 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain...
KLA11523 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service and obtain sensitive information. Below is a complete list of vulnerabilities: 1. Unspecified vulnerability can be exploited to cause denial of service; 2. Unspecifie...
CVE-2018-5866
CVE-2018-5866 affects Qualcomm Snapdragon mobile/wear platforms (MDM9206/9607/9650 and various SD/SDA generations). The issue stems from processing logs where data is copied into a buffer pointed to by an untrusted pointer, within Snapdragon Mobile/Snapdragon Wear components. Affected products li...
CVE-2017-5866
The CVE-2017-5866 issue affects ownCloud Server, where the autocomplete in the E‑Mail share dialog could disclose sensitive information via unspecified vectors. Affected versions are: < 8.1.11, < 8.2.9, < 9.0.7, and