71 matches found
Fedora 32 : chromium (2020-bf684961d9)
Just enough time for one more update. Chromium 84. Fixes CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519 CVE-2020-6520 CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524 CVE-2020-6525 CVE-2020-6526...
GLSA-202007-08 : Chromium, Google Chrome: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202007-08 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...
CVE-2020-6520
Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2020-6520
CVE-2020-6520: A heap buffer overflow in Skia used by Google Chrome prior to version 84.0.4147.89 allowed remote exploitation via a crafted HTML page (heap corruption). Multiple connected sources confirm the issue resides in Skia used by Chrome/Chromium and the fix was delivered via Chrome/Chromi...
openSUSE: Security Advisory for chromium (openSUSE-SU-2020:1021-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : chromium (openSUSE-2020-1021)
This update for chromium fixes the following issues : - Update to 84.0.4147.89 boo1174189 : - Critical CVE-2020-6510: Heap buffer overflow in background fetch. - High CVE-2020-6511: Side-channel information leakage in content security policy. - High CVE-2020-6512: Type Confusion in V8. - High...
Google Chrome < 84.0.4147.89 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 84.0.4147.89. It is, therefore, affected by multiple vulnerabilities as referenced in the 202007stable-channel-update-for-desktop advisory. - Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed...
KLA11869 Multiple vulnerability in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Incorrect security UI vulnerability in PWAs can be...
CVE-2019-6520
CVE-2019-6520 affects Moxa IKS and EDS industrial switches, caused by improper access control on the server side that allows a read-only user to perform arbitrary configuration changes. Affected products include IKS-G6824A series (Version 5.6 and prior) and EDS-405A/EDS-408A/EDS-510A series (Vers...
CVE-2018-17666
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2018-17666
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2018-6520
SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL...
CVE-2018-6520
SimpleSAMLphp before 1.15.2 is vulnerable to an open redirect protection bypass through crafted authority data in a URL. The underlying issue is in the URL handling that allows bypass of redirect protections, enabling potential open redirects. Affected component: SimpleSAMLphp (prior to 1.15.2). ...
CVE-2018-6520
SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL...
CVE-2013-6520
CVE-2013-6520 entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-6520
The Multicast DNS mDNS responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtain potentially sensitive information via port-5353 UDP...
CVE-2017-6520
The CVE-2017-6520 issue affects the mDNS responder in Bose SoundTouch 30. The vulnerable behavior is that the mDNS responder answers IPv4 unicast queries with non-link-local source addresses, enabling remote attackers to trigger traffic amplification and potentially obtain sensitive information o...
CVE-2016-6520
CVE-2016-6520 affects ImageMagick prior to version 7.0.2-7. The vulnerability is a buffer overflow in MagickCore/enhance.c related to pixel cache morphology, leading to possible remote impact (details not specified). According to sources, fixes were released in the SUSE advisories and the upstrea...