8008 matches found
Rocky Linux 8 : thunderbird (RLSA-2023:3221)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:3221 advisory. - In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and...
Google Android Information Disclosure Vulnerability (CNVD-2023-46126)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to a lack of permission checking in the applySyncTransaction of WindowOrganizer.java. An attacker can exploit this vulnerability to obtain sensitive...
macOS 11.x < 11.7.7 Multiple Vulnerabilities (HT213760)
The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.7.7. It is, therefore, affected by multiple vulnerabilities: - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, iOS 15.7.6 a...
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2023-1982)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AlmaLinux 9 : thunderbird (ALSA-2023:3150)
The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2023:3150 advisory. - In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofin...
Google Android Information Disclosure Vulnerability (CNVD-2023-41883)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability caused by a lack of permission checking in AnalyzeMfcResp of NxpMfcReader.cc. An attacker can exploit the vulnerability to obtain sensitive information...
Google Android Sensor.cpp file buffer overflow vulnerability
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer overflow vulnerability that stems from a lack of bounds checking in the unflattenString8 of the Sensor.cpp file, which can be exploited by an attacker to cause the disclosure of local...
EulerOS 2.0 SP10 : shim (EulerOS-SA-2023-1962)
According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an...
EulerOS 2.0 SP10 : shim (EulerOS-SA-2023-1984)
According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an...
Oracle Linux 7 : thunderbird (ELSA-2023-3151)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-3151 advisory. 102.11.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 102.11.0-1 - Update to...
Oracle Linux 9 : thunderbird (ELSA-2023-3150)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-3150 advisory. 102.11.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 102.11.0-1 - Update to 102.11.0 build1 Tenable h...
Mozilla: Content process crash due to invalid wasm code
The Mozilla Foundation Security Advisory describes this flaw as: A type checking bug would have led to invalid code being compiled...
Mozilla: Content process crash due to invalid wasm code
The Mozilla Foundation Security Advisory describes this flaw as: A type checking bug would have led to invalid code being compiled...
Mozilla: Content process crash due to invalid wasm code
The Mozilla Foundation Security Advisory describes this flaw as: A type checking bug would have led to invalid code being compiled...
Mozilla: Content process crash due to invalid wasm code
The Mozilla Foundation Security Advisory describes this flaw as: A type checking bug would have led to invalid code being compiled...
Mozilla: Content process crash due to invalid wasm code
The Mozilla Foundation Security Advisory describes this flaw as: A type checking bug would have led to invalid code being compiled...
Mozilla: Content process crash due to invalid wasm code
The Mozilla Foundation Security Advisory describes this flaw as: A type checking bug would have led to invalid code being compiled...
Mozilla: Content process crash due to invalid wasm code
The Mozilla Foundation Security Advisory describes this flaw as: A type checking bug would have led to invalid code being compiled...
Updated firefox/nss/rootcerts packages fix security vulnerability
In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks CVE-2023-32205. An out-of-bounds read could have led to a crash in the RLBox Expat driver CVE-2023-32206. A missing delay in popup...