78 matches found
CVE-2020-6541
Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2020-6541
Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2020-6541
The CVE-2020-6541 entry concerns a Use-after-free in WebUSB in Google Chrome prior to version 84.0.4147.105 . The underlying issue could allow a remote attacker to potentially exploit a heap corruption via a crafted HTML page. Affected software is Chrome’s WebUSB component; exploitability is desc...
Security update of chromium (low)
openSUSE Security Update: Security update of chromium Announcement ID: openSUSE-SU-2020:1181-1 Rating: low References: 1174582 Cross-References: CVE-2020-6532 CVE-2020-6537 CVE-2020-6538 CVE-2020-6539 CVE-2020-6540 CVE-2020-6541 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixe...
Fedora 31 : chromium (2020-88bf0a76d1)
Update to Chromium 85.0.4183.83. Bugs fixed, security holes patched, and features added. Hold on to your butts. List of CVEs resolved with this update: CVE-2020-6532 CVE-2020-6537 CVE-2020-6538 CVE-2020-6539 CVE-2020-6540 CVE-2020-6541 CVE-2020-6542 CVE-2020-6543 CVE-2020-6544 CVE-2020-6545...
openSUSE Security Update : chromium (openSUSE-2020-1154)
Chromium was updated to 84.0.4147.105 boo1174582 : - CVE-2020-6537: Type Confusion in V8 - CVE-2020-6538: Inappropriate implementation in WebView - CVE-2020-6532: Use after free in SCTP - CVE-2020-6539: Use after free in CSS - CVE-2020-6540: Heap buffer overflow in Skia - CVE-2020-6541: Use after...
openSUSE: Security Advisory for Security (openSUSE-SU-2020:1154-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2020:1154-1 Security update of chromium
Chromium was updated to 84.0.4147.105 boo1174582: CVE-2020-6537: Type Confusion in V8 CVE-2020-6538: Inappropriate implementation in WebView CVE-2020-6532: Use after free in SCTP CVE-2020-6539: Use after free in CSS CVE-2020-6540: Heap buffer overflow in Skia CVE-2020-6541: Use after free in WebU...
FreeBSD : chromium -- multiple vulnerabilities (9a447f78-d0f8-11ea-9837-e09467587c17)
Chrome Releases reports : This update contains 8 security fixes, including : - 1105318 High CVE-2020-6537: Type Confusion in V8. Reported by Alphalaab on 2020-07-14 - 1096677 High CVE-2020-6538: Inappropriate implementation in WebView. Reported by Yongke Wang@Rudykewang and Aryb1n@aryb1n of Tence...
GLSA-202007-59 : Chromium, Google Chrome: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202007-59 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...
Google Chrome < 84.0.4147.105 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 84.0.4147.105. It is, therefore, affected by multiple vulnerabilities as referenced in the 202007stable-channel-update-for-desktop27 advisory. - Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a...
KLA11917 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in WebUSB can be exploited to cause denial of service. 2. Heap...
Huawei EulerOS: Security Advisory for zziplib (EulerOS-SA-2019-2236)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for zziplib (EulerOS-SA-2019-2478)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2 : zziplib (ALAS-2019-1357)
An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function zzipparserootdirectory in zip.c, which will lead to a denial of service attack.CVE-2018-16548 In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling...
Low: zziplib
Issue Overview: An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function zzipparserootdirectory in zip.c, which will lead to a denial of service attack.CVE-2018-16548 In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address whe...
popidolonline.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-999088 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting popidolonline.co.uk websit...
zziplib security update
CentOS Errata and Security Advisory CESA-2019:2196 An update for zziplib is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
Scientific Linux Security Update : zziplib on SL7.x x86_64 (20190806)
Security Fixes : - zziplib: Bus error caused by loading of a misaligned address inzzip/zip.c CVE-2018-6541 - zziplib: Memory leak triggered in the function zzipparserootdirectory in zip.c CVE-2018-16548 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...
zziplib security update
0.13.62-11 - Fix CVE-2018-6541 - Part of the original patch has already been applied in the past CVE-2018-7726, so the bug should not be reproducible in a way described in the github issue, even without this commit. Applying the rest of the original patch anyway. -...