CVE-2020-6576

CVE-2020-6576 is a vulnerability in the Chromium browser involving a use-after-free in the offscreen canvas component. The issue could allow a remote attacker to corrupt the heap via a crafted HTML page, potentially enabling arbitrary code execution. The most concrete remediation in the provided ...

Fedora 32 : chromium (2020-9b9e8e5306)

Update Chromium to 85.0.4183.102. Fix issue where unpackaged components prevented hardware accelerated rendering from working. Also fixes the following security issues: CVE-2020-6573 CVE-2020-6574 CVE-2020-6575 CVE-2020-6576 CVE-2020-15959 Note that Tenable Network Security has extracted the...

RHEL 6 : chromium-browser (RHSA-2020:3740)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3740 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 85.0.4183.102. Security Fixes:...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

GLSA-202009-03 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202009-03 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...

FreeBSD : chromium -- multiple vulnerabilities (bed5d41a-f2b4-11ea-a878-e09467587c17)

Chrome Releases reports : This release contains 5 security fixes : - 1116304 High CVE-2020-6573: Use after free in video. Reported by Leecraso and Guang Gong of 360 Alpha Lab working with 360 BugCloud on 2020-08-14 - 1102196 High CVE-2020-6574: Insufficient policy enforcement in installer. Report...

Google Chrome Security Update (stable-channel-update-for-desktop-2020-09) - Linux

Google Chrome is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[ASA-202009-6] chromium: multiple issues

Arch Linux Security Advisory ASA-202009-6 ========================================= Severity: High Date : 2020-09-09 CVE-ID : CVE-2020-6573 CVE-2020-6574 CVE-2020-6575 CVE-2020-6576 CVE-2020-6579 Package : chromium Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1225...

Stable Channel Update for Desktop

The stable channel has been updated to 85.0.4183.102 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 5 security fixes: 1116304 High CVE-2020-6573: Use after free in video. Reported by Leecraso and Guang Gong of 360 Alpha Lab working with 360 BugCloud on 2020-08-14 1102196 High CVE-2020-6574: Insufficient policy enforcement in installer. Reported by...

KLA11957 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free in offscreen canvas can be exploited to cause denial of service; 2. Use after free in video can be...

CVE-2019-6576

CVE-2019-6576 affects Siemens SIMATIC HMI Comfort Panels (4"–22"), Comfort Outdoor Panels (7"/15"), KTP Mobile Panels (KTP400F, KTP700, KTP700F, KTP900, KTP900F), WinCC Runtime Advanced/Professional, WinCC (TIA Portal) and HMI Classic Devices (all versions prior to V15.1 Update 1). Root cause: in...

CVE-2019-6576

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15.1 Update 1, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15.1 Update 1, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F All versions V15.1 Update 1, SIMATIC WinCC...

CVE-2018-6576

SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...

CVE-2018-6576

Event Manager 1.0 (PHP-based script) is affected by a SQL injection vulnerability in the parameters: event.php?id and page.php?slug. The issue is caused by unsanitized user input that allows injection of SQL commands. Affected component is the Event Manager 1.0 application; exploitation is refere...

CVE-2015-6576

CVE-2015-6576 affects Atlassian Bamboo. Affected: Bamboo 2.2 prior to 5.8.5 and 5.9.x prior to 5.9.7. Root cause: an unspecified resource deserialization flaw in the web interface allows remote attackers with access to Bamboo to execute arbitrary Java code. Impact: remote code execution with the ...

CVE-2013-6576

...

CVE-2013-6576

The CVE-2013-6576 entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-6576

CVE-2017-6576 : The WordPress Mail Masta (aka mail-masta) plugin version 1.0 is vulnerable to a SQL injection in ./inc/campaign/campaign-delete.php via the GET parameter id. Attacker with WordPress admin access can exploit this to execute arbitrary SQL commands. Public sources (CNVD/NVD) confirm ...

CVE-2014-6576

Oracle Fusion Middleware’s Oracle Adaptive Access Manager (OAM) component (versions 11.1.1.5, 11.1.1.7, 11.1.2.1, 11.1.2.2) contains an unspecified vulnerability in the OAM Integration subcomponent that could allow remote authenticated users to impact confidentiality and integrity. The provided d...