162 matches found
CVE-2020-6546
Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted filesystem...
CVE-2020-6546
CVE-2020-6546 affects Google Chrome on Windows/macOS/Linux via an Inappropriate implementation in the installer. The root cause is an flawed installer flow that can be abused by a local attacker to escalate privileges through a crafted filesystem, as detailed in multiple advisories. The impact is...
Fedora 31 : chromium (2020-88bf0a76d1)
Update to Chromium 85.0.4183.83. Bugs fixed, security holes patched, and features added. Hold on to your butts. List of CVEs resolved with this update: CVE-2020-6532 CVE-2020-6537 CVE-2020-6538 CVE-2020-6539 CVE-2020-6540 CVE-2020-6541 CVE-2020-6542 CVE-2020-6543 CVE-2020-6544 CVE-2020-6545...
Important: Red Hat Security Advisory: chromium-browser security update
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
openSUSE Security Update : chromium (openSUSE-2020-1206)
This update for chromium fixes the following issues : - Chromium updated to 84.0.4147.125 boo1175085 - CVE-2020-6542: Use after free in ANGLE - CVE-2020-6543: Use after free in task scheduling - CVE-2020-6544: Use after free in media - CVE-2020-6545: Use after free in audio - CVE-2020-6546:...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:1214-1 Rating: important References: 1174497 1175044 1175085 Cross-References: CVE-2020-6542 CVE-2020-6543 CVE-2020-6544 CVE-2020-6545 CVE-2020-6546 CVE-2020-6547 CVE-2020-6548 CVE-2020-6549 CVE-2020-6550...
openSUSE: Security Advisory for chromium (openSUSE-SU-2020:1206-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Google Chrome Security Update (stable-channel-update-for-desktop-2020-08) - Windows
Google Chrome is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Google Chrome Security Update (stable-channel-update-for-desktop-2020-08) - Linux
Google Chrome is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-6546
Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted filesystem...
Google Chrome < 84.0.4147.125 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 84.0.4147.125. It is, therefore, affected by multiple vulnerabilities as referenced in the 202008stable-channel-update-for-desktop advisory. - Use after free in offline mode in Google Chrome on iOS prior to 84.0.4147.12...
Plays.tv Remote Code Execution (CVE-2018-6546)
A remote code execution vulnerability exists in Plays.tv. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2019-6546
CVE-2019-6546 affects GE Communicator prior to 4.0.517. The issue allows placing malicious files in the program’s working directory, potentially enabling manipulation of widgets/UI elements. Affected component/behavior is described in multiple sources (NVD and ICS advisories). Remediation per PT ...
CVE-2016-6546 iTrack Easy mobile application stores the user password in base-64 encoding/cleartext
The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is considered equivalent to cleartext...
CVE-2016-6546
The CVE-2016-6546 entry concerns the iTrack Easy mobile app which stores the user’s cloud API password in the cache.db file using base64 encoding. The base64 format is treated as equivalent to cleartext, exposing credentials on local access. Documents consistently describe this as a cleartext-lik...
CVE-2018-6546
CVE-2018-6546 affects the AMD driver-installation package plays.tv service (plays_service.exe) prior to version 1.27.7.0. The flaw allows code execution with SYSTEM privileges when the execute_installer parameter is used in an HTTP message, due to improper user authentication. A remote attacker c...
CVE-2013-6546
CVE-2013-6546 is rejected and not used; this ID does not represent an active vulnerability entry.
iTrack Easy contains multiple vulnerabilities
Overview iTrack Easy contains multiple vulnerabilities including sensitive information exposure and missing authentication. Description CWE-200: Information Exposure - CVE-2016-6542The iTrack device tracking ID number is the device's BLE MAC address. It can be obtained by being in range of the...
CVE-2015-6546
CVE-2015-6546 affects the vCMP host in multiple BIG-IP products (Analytics, APM, ASM, GTM, Link Controller, LTM, AAM, AFM, PEM, Edge Gateway, WebAccelerator, WOM, PSM) with vulnerable versions 11.0.0–11.5.3. The issue allows remote attackers to cause a denial of service by sending malicious traff...