52 matches found
CVE-2020-6562
Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
FreeBSD : chromium -- multiple vulnerabilities (d73bc4e6-e7c4-11ea-a878-e09467587c17)
Chrome Releases reports : This update includes 20 security fixes, including : - 1109120 High CVE-2020-6558: Insufficient policy enforcement in iOS. Reported by Alison Huffman, Microsoft Browser Vulnerability Research on 2020-07-24 - 1116706 High CVE-2020-6559: Use after free in presentation API...
GLSA-202008-11 : Chromium, Google Chrome: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202008-11 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 85 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 85.0.4183.83 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...
KLA11941 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, gain privileges, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilitie...
CVE-2019-6562
CVE-2019-6562 affects Philips Tasy EMR (versions 3.02.1744 and prior) and related WebPortal components. The root cause is improper neutralization of input during web page generation (XSS) , leading to potential cross-site scripting. Affected: Tasy EMR 3.02.1744 and prior; Tasy WebPortal 3.02.1757...
Philips Tasy EMR (Update A)
1. EXECUTIVE SUMMARY --------- Begin Update A Part 1 of 7 --------- CVSS v3 4.3 ATTENTION: Low skill level to exploit --------- End Update A Part 1 of 7 --------- Vendor: Philips Equipment: Tasy EMR --------- Begin Update A Part 2 of 7 --------- Vulnerability: Cross-site Scripting, Information...
CVE-2016-6562
The CVE-2016-6562 entry affects ShoreTel Mobility Client for iOS and Android, with versions 9.1.3.109 and earlier failing to properly validate SSL certificates over HTTPS. This permits MITM exposure of sensitive account information (e.g., login credentials) for devices on the same network. CERT/N...
CVE-2018-6562
totemomail Encryption Gateway before 6.0b567 allows remote attackers to obtain sensitive information about user sessions and encryption key material via a JSONP hijacking attack...
CVE-2018-6562
The CVE-2018-6562 entry concerns totemomail Encryption Gateway prior to 6.0_b567, where a JSONP hijacking vulnerability allows remote attackers to obtain sensitive information about user sessions and encryption key material. Public sources describe this as a remote, web-facing information-disclos...
torrentdownload.ch XSS vulnerability
Vulnerable URL: https://www.torrentdownload.ch/search?q=%3Cimg%20src=x%20onerror=alert%27openbugbounty%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6562 VIP website status:...
CVE-2013-6562
CVE-2013-6562 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-6562
The provided connected records include concrete details for CVE-2017-6562: XSS in Agora-Project 3.2.2. The vulnerability is triggered via index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS], indicating a reflected/DOM-based XSS in the file handling controller. Affected software: A...
Oracle: Security Advisory (ELSA-2014-1636)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux: Security Advisory (ALAS-2014-432)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 6 : java-1.8.0-openjdk (CESA-2014:1636)
Updated java-1.8.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...
java security update
CentOS Errata and Security Advisory CESA-2014:1636 Updated java-1.8.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS...
Important: java-1.8.0-openjdk
Issue Overview: It was discovered that the Libraries component in OpenJDK failed to properly handle ZIP archives that contain entries with a NUL byte used in the file names. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions. CVE-2014-6562 Multiple fla...