2497 matches found
CVE-2020-6576
CVE-2020-6576 is a vulnerability in the Chromium browser involving a use-after-free in the offscreen canvas component. The issue could allow a remote attacker to corrupt the heap via a crafted HTML page, potentially enabling arbitrary code execution. The most concrete remediation in the provided ...
CVE-2020-6576: Use After Free
Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
RHEL 6 : chromium-browser (RHSA-2020:3740)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3740 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 85.0.4183.102. Security Fixes:...
chromium-browser: Use after free in offscreen canvas
Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2020-6576
Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
chromium -- multiple vulnerabilities
Chrome Releases reports: This release contains 5 security fixes: 1116304 High CVE-2020-6573: Use after free in video. Reported by Leecraso and Guang Gong of 360 Alpha Lab working with 360 BugCloud on 2020-08-14 1102196 High CVE-2020-6574: Insufficient policy enforcement in installer. Reported by...
KLA11957 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free in offscreen canvas can be exploited to cause denial of service; 2. Use after free in video can be...
CVE-2020-5775
Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains...
CVE-2020-5775
Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains...
Server side request forgery (ssrf)
Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains...
CVE-2020-5775
Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains...
CVE-2020-5775
Canvas LMS 2020-07-29 is exposed to a blind Server-Side Request Forgery (SSRF) that allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains. The vulnerability potentially enables access to sensitive information, data modification...
CVE-2020-5775: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains...
PT-2020-18696 · Instructure · Canvas Lms
Name of the Vulnerable Software and Affected Versions: Canvas LMS affected versions not specified Description: The issue allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains. This is related to a Server-Side Request Forgery...
@argueta10/vue-webrtc (1.3.0), @hacksore/rtcmulticonnection (>=3.7.1, <=4.0.0-alpha1) +15 more potentially affected by unknown CVE via canvas-designer (1.3.0)
canvas-designer NPM version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on canvas-designer and may be impacted: - @argueta10/vue-webrtc 1.3.0 - @hacksore/rtcmulticonnection =3.7.1, =3.7.2, =1.3.6, =1.0.1, =0.1.0, =3.5.0, =0.0.1, =1.0.0, =0.1.0,...
Cross-site Scripting (XSS)
Overview canvas-designer is a JavaScript Canvas2D drawing tool, supporting dozens of builtin tools, as well as generates JavaScript code for 2D animations. Affected versions of this package are vulnerable to Cross-site Scripting XSS. It's possible to send malicious data to the message listener...
canvas buffer overflow vulnerability
canvas is an image drawing software package. A buffer overflow vulnerability exists in canvas 1.6.9 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service or execute arbitrary code...
CVE-2020-8215
A buffer overflow is present in canvas version = 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image...
