147 matches found
openSUSE Security Update : chromium (openSUSE-2020-322)
This update for chromium tio version 80.0.3987.132 fixes the following issues : Chromium was updated to 80.0.3987.132 boo1165826 - CVE-2020-6420: Fixed improper policy enforcement in media. - Fixed other fixes from internal audits, fuzzing and other initiatives. C Tenable Network Security, Inc. T...
OPENSUSE-SU-2020:0324-1 Security update for chromium
This update for chromium tio version 80.0.3987.132 fixes the following issues: Chromium was updated to 80.0.3987.132 boo1165826 - CVE-2020-6420: Fixed improper policy enforcement in media. - Fixed other fixes from internal audits, fuzzing and other initiatives...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:0322-1 Rating: important References: 1165826 Cross-References: CVE-2020-6420 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for chromiu...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:0324-1 Rating: important References: 1165826 Cross-References: CVE-2020-6420 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 An update that fixes one vulnerability is now available...
CVE-2020-6420
Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass same origin policy via a crafted HTML page...
KLA11680 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Policy enforcement vulnerability in media component can be...
[ASA-202003-1] chromium: access restriction bypass
Arch Linux Security Advisory ASA-202003-1 ========================================= Severity: High Date : 2020-03-04 CVE-ID : CVE-2020-6420 Package : chromium Type : access restriction bypass Remote : Yes Link : https://security.archlinux.org/AVG-1107 Summary ======= The package chromium before...
Stable Channel Update for Desktop
The stable channel has been updated to 80.0.3987.132 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...
Google Chrome < 80.0.3987.132 Vulnerability
The version of Google Chrome installed on the remote Windows host is prior to 80.0.3987.132. It is, therefore, affected by a vulnerability as referenced in the 202003stable-channel-update-for-desktop advisory. - Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132...
Google Chrome < 80.0.3987.132 Vulnerability
The version of Google Chrome installed on the remote macOS host is prior to 80.0.3987.132. It is, therefore, affected by a vulnerability as referenced in the 202003stable-channel-update-for-desktop advisory. - Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowe...
Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-1545)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Vulnerabilities in php5 affect IBM Flex System Manager (FSM): (CVE-2013-4248 CVE-2013-6420 CVE-2014-2497 CVE-2014-4049)
Summary A security vulnerability has been discovered in openssh that is included in IBM FSM. Vulnerability Details Abstract Security vulnerabilities have been discovered in php5 that is included in IBM FSM. Content Vulnerability Details: CVE-ID: CVE-2013-4248 DESCRIPTION: PHP could allow a remote...
CVE-2015-6420
creationtimestamp| type| source ---|---|--- 2018-09-26 17:10:06+00:00| seen| MISP/5babbc5a-a658-4b4b-8b94-2c060a021402 2023-12-11 12:08:49+00:00| seen| https://t.me/arpsyndicate/1728 2025-04-19 21:02:14+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ln6ztj6gwt2h 2025-08-27...
TP-Link EAP Controller lacks RMI authentication and is vulnerable to deserialization attacks
Overview The TP-LINK EAP Controller is TP-LINK's software for remotely controlling wireless access point devices. EAP Controller for Linux lacks user authentication for RMI service commands, as well as utilizes an outdated vulnerable version of Apache commons-collections, which may allow an...
Security fix for the ALT Linux 8 package clamav version 0.99.3-alt1
0.99.3-alt1 built Jan. 30, 2018 Sergey Y. Afonin in task 198652 Jan. 28, 2018 Sergey Y. Afonin - 0.99.3 multiple CVE's, look to README - removed cve-2017-6418.patch and cve-2017-6420.patch in upstream now...
Fedora 26 : clamav (2018-a86bad9689)
Fixes some regressions of previous versions ---- Security fixes CVE-2017-6420 1483910, CVE-2017-6418 1483908 ---- Fixes for rhbz 1530678 and 1518016 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempt...
openSUSE: Security Advisory for clamav (openSUSE-SU-2018:0258-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE SLED12 / SLES12 Security Update : clamav (SUSE-SU-2018:0255-1)
This update for clamav fixes the following issues : - Update to security release 0.99.3 bsc1077732 - CVE-2017-12376 ClamAV Buffer Overflow in handlepdfname Vulnerability - CVE-2017-12377 ClamAV Mew Packet Heap Overflow Vulnerability - CVE-2017-12379 ClamAV Buffer Overflow in messageAddArgument...
Fedora 27 : clamav (2018-2a1f469c85)
Fixes some regressions of previous versions ---- Security fixes CVE-2017-6420 1483910, CVE-2017-6418 1483908 ---- - Fix bugs 1126595,1464269,1126625 and 1258536, - Update of main.cvd, daily.cvd and bytecode.cvd ---- - Fixes for rhbz 1530678 and 1518016 Note that Tenable Network Security has...
Security fix for the ALT Linux 9 package clamav version 0.99.2-alt3
Sept. 25, 2017 Anton V. Boyarshinov 0.99.2-alt3 - Fixes: + CVE-2017-6418 remote attackers can cause a denial of service out-of-bounds read via a crafted e-mail message + CVE-2017-6420 remote attackers can cause a denial of service use-after-free via a crafted PE file with WWPack compression...