Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2021-28035)

NETGEAR R9000, R7800 and R7500 are a wireless router from NETGEAR. A cross-site scripting vulnerability exists in multiple NETGEAR products. The vulnerability stems from the lack of proper validation of client data by the WEB application. An attacker can exploit this vulnerability to execute...

openSUSE Security Update : chromium (openSUSE-2020-604)

This update for chromium fixes the following issues : Chromium was updated to 81.0.4044.129 boo1170107 : - CVE-2020-0561: Fixed a use after free in storage - CVE-2020-6462: Fixed a use after free in task scheduling - CVE-2020-6459: Fixed a use after free in payments - CVE-2020-6460: Fixed an...

OPENSUSE-SU-2020:0604-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 81.0.4044.129 boo1170107: - CVE-2020-0561: Fixed a use after free in storage - CVE-2020-6462: Fixed a use after free in task scheduling - CVE-2020-6459: Fixed a use after free in payments - CVE-2020-6460: Fixed an...

Adobe After Effects MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

Adobe Bridge TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF...

SUAP Cross-Site Scripting Vulnerability

SUAP is a unified public management system of the Brazilian IT Management Board DIGTI. The system supports functions such as personnel management, property control, warehouse management, extended project management and document agreement management. A cross-site scripting vulnerability exists in...

CVE-2019-15874

In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE before 11.3-RELEASE-p8, incomplete packet data validation may result in memory access after it has been freed leading to a kernel panic or other unpredictable results...

Design/Logic Flaw

In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE before 11.3-RELEASE-p8, incomplete packet data validation may result in memory access after it has been freed leading to a kernel panic or other unpredictable results...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-28275)

NETGEAR D7800 and others are products of NETGEAR Corporation.NETGEAR D7800 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR D7800 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R6100 is a wireless...

KLA11758 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out of bounds read and write vulnerability in PDFium component can be exploited to potentially...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-28271)

NETGEAR D6100 and others are products of NETGEAR Corporation.NETGEAR D6100 is a wireless modem.NETGEAR WNDR3700 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR WNDR3700 is a wireless router.NETGEAR WNDR3700 is a wireless router.NETGEAR WNDR3700 is a wireless router.NETGEAR WNDR370...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-28272)

NETGEAR D6100 and others are products of NETGEAR Corporation.NETGEAR D6100 is a wireless modem.NETGEAR WNDR3700 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR WNDR3700 is a wireless router.NETGEAR WNDR3700 is a wireless router.NETGEAR WNDR3700 is a wireless router.NETGEAR WNDR370...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2020-28268)

NETGEAR D6100 and others are products of NETGEAR Corporation.NETGEAR D6100 is a wireless modem.NETGEAR WNDR3700 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR WNDR3700 is a wireless router.NETGEAR WNDR3700 is a wireless router.NETGEAR WNDR3700 is a wireless router.NETGEAR WNDR370...

Google OpenThread Buffer Overflow Vulnerability

Google OpenThread is an open source implementation of the Thread networking protocol from Google USA. A buffer overflow vulnerability exists in Google OpenThread. The vulnerability originates when a network system or product performs an operation in memory without properly validating data...

PHP-Fusion cross-site scripting vulnerability (CNVD-2021-26414)

PHP-Fusion is a Malaysian company PHP-Fusion open source lightweight content management system based on MySql and PHP . The system contains modules such as news, articles and forums. A cross-site scripting vulnerability exists in the banners.php file in PHP-Fusion version 9.03.50. The vulnerabili...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-46568)

NETGEAR D3600 and others are products of NETGEAR, Inc.NETGEAR D3600 is a wireless modem.NETGEAR D6100 is a wireless modem.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless...

RHEL 6 : chromium-browser (RHSA-2020:1970)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1970 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 81.0.4044.122. Security Fixes:...

CVE-2019-5614

In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE before 11.3-RELEASE-p8, incomplete packet data validation may result in accessing out-of-bounds memory leading to a kernel panic or other unpredictable results...

Adobe Bridge TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of TIF...

Adobe Bridge PostScript put Command Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of the...