PT-2020-6282

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 80.0.3987.87 Description The issue is related to insufficient policy enforcement in the Safe Browsing feature, allowing a remote attacker to bypass navigation restrictions. This can be achieved via a crafted HTM...

KLA11660 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A...

The vulnerability of the web protection component of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, and Kaspersky Security Cloud allows a malicious actor to disable certain security functions of the product, such as private browsing and antivirus protection.

The vulnerability of the web protection component of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, and Kaspersky Security Cloud lies in insufficient validation of input data. Exploiting this vulnerability c...

Huawei EulerOS: Security Advisory for firefox (EulerOS-SA-2017-1326)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-14766

Path Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to browse the server filesystem...

CVE-2019-14766

Path Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to browse the server filesystem...

PT-2020-9601

Name of the Vulnerable Software and Affected Versions DIMO YellowBox CRM versions prior to 6.3.4 Description The issue allows a standard authenticated user to browse the server filesystem due to a path traversal vulnerability in the file browser. Recommendations For versions prior to 6.3.4, updat...

CVE-2019-18893

XSS in the Video Downloader component before 1.5 of Avast Secure Browser 77.1.1831.91 and AVG Secure Browser 77.0.1790.77 allows websites to execute their code in the context of this component. While Video Downloader is technically a browser extension, it is granted a very wide set of privileges...

PT-2020-10004

Name of the Vulnerable Software and Affected Versions Avast Secure Browser version 77.1.1831.91 AVG Secure Browser version 77.0.1790.77 Description The issue allows websites to execute their code in the context of the Video Downloader component, which has a wide set of privileges. This includes...

CVE-2019-17018

When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerability affects Firefox 72...

Code injection

When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerability affects Firefox 72...

CVE-2019-17018

When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerability affects Firefox 72...

UBUNTU-CVE-2019-17018

When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerability affects Firefox 72...

CVE-2019-17018

CVE-2019-17018 affects Mozilla Firefox versions before 72 on Windows 10, where in Private Browsing Mode the Windows keyboard may retain word suggestions to improve keyboard accuracy. This is the asserted vulnerability detail; no additional remediation or exploit information is provided in the con...

CVE-2019-17018

When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerability affects Firefox 72...

CVE-2019-17018

When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerability affects Firefox 72...

JVN#97325754: F-RevoCRM vulnerable to cross-site scripting

F-RevoCRM provided by ThinkingReed inc. contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Apply the Patch Apply the patch according to the information provided by the developer. Apply Workaround Applying the...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2020-01174)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An information disclosure vulnerability exists in Mozilla Firefox versions prior to 72. The vulnerability can be exploited by an attacker to obtain sensitive information when using untraceable browsing...

CVE-2019-17018: Exposure of Sensitive Information to an Unauthorized Actor

When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerability affects Firefox 72...

PT-2020-6740

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 72 Description The issue is related to information disclosure. It may allow a remote attacker to disclose protected information. The problem occurs when using Private Browsing Mode on Windows 10, where the Windows...