53 matches found
CVE-2020-6561
Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
FreeBSD : chromium -- multiple vulnerabilities (d73bc4e6-e7c4-11ea-a878-e09467587c17)
Chrome Releases reports : This update includes 20 security fixes, including : - 1109120 High CVE-2020-6558: Insufficient policy enforcement in iOS. Reported by Alison Huffman, Microsoft Browser Vulnerability Research on 2020-07-24 - 1116706 High CVE-2020-6559: Use after free in presentation API...
GLSA-202008-11 : Chromium, Google Chrome: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202008-11 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 85 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 85.0.4183.83 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...
KLA11941 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, gain privileges, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilitie...
CVE-2019-6561
CVE-2019-6561 is a Cross-Site Request Forgery vulnerability reported for Moxa IKS and EDS devices. The connected update (ICS-CA) details impact as follows: affected products include IKS-G6824A (versions ≤5.6) and EDS series (EDS-405A/408A/510A, ≤3.8). The root cause is CSRF allowing an attacker t...
CVE-2019-6561
Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device...
CVE-2019-6561
Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device...
CVE-2018-6561
dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element...
CVE-2018-6561
dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element...
UBUNTU-CVE-2018-6561
dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element...
CVE-2018-6561
CVE-2018-6561 affects dojo-dijit.Editor in Dojo Toolkit 1.13, enabling cross-site scripting via the onload attribute of an SVG element. The IBM/OSV records confirm the vulnerability details, including the XSS risk in Dijit.Editor and a base score of 6.1 (IBM X-Force vector: CVSS3.0), with exploit...
CVE-2018-6561
dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element...
CVE-2018-6561
dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element...
CVE-2013-6561
CVE-2013-6561 is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-6561
illumos smbsrv NULL pointer dereference allows system crash...
CVE-2016-6561
illumos smbsrv NULL pointer dereference allows system crash...
CVE-2016-6561
illumos smbsrv NULL pointer dereference allows system crash...
CVE-2016-6561
CVE-2016-6561 refers to a NULL pointer dereference in illumOS smbsrv that can cause a system crash. The description provided identifies the affected component as illumOS smbsrv and notes that a NULL pointer dereference is the root cause, leading to denial of service via a crash. The connected doc...