CVE-2023-32466

Dell Edge Gateway BIOS (3200 and 5200) contains an out-of-bounds write vulnerability that requires a locally authenticated, high-privilege user to trigger. The issue can lead to exposure of UEFI code and may allow arbitrary code execution or privilege escalation, as described across multiple sour...

Dell Edge Gateway 缓冲区错误漏洞

Dell Edge Gateway is a series of intelligent gateway devices from Dell, Inc. Designed to aggregate, protect, analyze, and relay data from various sensors and devices at the edge of the network. A buffer error vulnerability exists in the Dell Edge Gateway BIOS versions 3200 and 5200, which stems...

Dell Edge Gateway 缓冲区错误漏洞

Dell Edge Gateway is a series of intelligent gateway devices from Dell, Inc. It is designed to aggregate, protect, analyze and relay data from a variety of sensors and devices at the edge of the network. A buffer overflow vulnerability exists in Dell Edge Gateway BIOS versions 3200 and 5200, whic...

Acronis Cyber Infrastructure 安全漏洞

Acronis Cyber Infrastructure is a simple, efficient and secure solution for edge workloads from Acronis Switzerland. A security vulnerability exists in Acronis Cyber Infrastructure that stems from allowing the use of default passwords. An attacker exploiting the vulnerability could remotely execu...

ROS-20240724-02

A vulnerability in the Dawn component of Microsoft Edge and Google Chrome browsers is related to memory usage after it has been freed. Exploitation of the vulnerability could allow a remote attacker, execute arbitrary code using a specially crafted HTML page A vulnerability in the SwiftShader...

FabEdge 安全漏洞

FabEdge is FabEdge open source a container networking solution built on kubernetes and focused on edge computing. A security vulnerability exists in fabedge v0.8.1 and earlier versions, which stems from the presence of insecure privileges allowing an attacker to access sensitive data and elevate...

CVE-2024-0981

Okta Browser Plugin versions 6.5.0 through 6.31.0 Chrome/Edge/Firefox/Safari are vulnerable to cross-site scripting. This issue occurs when the plugin prompts the user to save these credentials within Okta Personal. A fix was implemented to properly escape these fields, addressing the...

CVE-2024-0981

Okta Browser Plugin versions 6.5.0 through 6.31.0 Chrome/Edge/Firefox/Safari are vulnerable to cross-site scripting. This issue occurs when the plugin prompts the user to save these credentials within Okta Personal. A fix was implemented to properly escape these fields, addressing the...

CVE-2024-0981

The CVE-2024-0981 affect is: Okta Browser Plugin versions 6.5.0–6.31.0 (Chrome/Edge/Firefox/Safari) allow cross-site scripting when the plugin prompts to save credentials in Okta Personal. Root cause: improper escaping of fields in the credential-save prompt. Impact: potential XSS; remediation: u...

CVE-2024-0981

Okta Browser Plugin versions 6.5.0 through 6.31.0 Chrome/Edge/Firefox/Safari are vulnerable to cross-site scripting. This issue occurs when the plugin prompts the user to save these credentials within Okta Personal. A fix was implemented to properly escape these fields, addressing the...

USN-6907-1 squid, squid3 vulnerability

Joshua Rogers discovered that Squid did not properly handle multi-byte characters during Edge Side Includes ESI processing. A remote attacker could possibly use this issue to cause a memory corruption error, leading to a denial of service...

PT-2024-5286 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.72 Microsoft Edge affected versions not specified Description: The issue is related to a use after free vulnerability in the User Education component of Google Chrome and Microsoft Edge, which can le...

PT-2024-5303 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.72 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in HTML, allowing a remote attacker to perform UI spoofing via a crafted HTML...

PT-2024-5271 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.72 Microsoft Edge affected versions not specified Description: The issue is related to a race condition in the Frames component of Google Chrome and Microsoft Edge browsers, which can be exploited by...

PT-2024-5276 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.72 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in the Dawn component, which can be exploited by a remote attacker using a crafted HTML page,...

PT-2024-5299 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.72 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in CSS, which can lead to heap corruption. A remote attacker could potentially exploit this by...

PT-2024-5270 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.72 Microsoft Edge affected versions not specified Description: The issue is related to a use after free vulnerability in the Tabs component of Google Chrome and Microsoft Edge browsers. This...

PT-2024-5302 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.72 Microsoft Edge affected versions not specified Description: The issue is related to insufficient validation of untrusted input in the Safe Browsing feature, which can be exploited by a remote...

PT-2024-5274 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.72 Microsoft Edge affected versions not specified Description: The issue is related to a heap buffer overflow in the Layout component, which could allow a remote attacker to exploit heap corruption v...

PT-2024-5275

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.72 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in the Downloads component, which can be exploited by a remote attacker to potentially corrupt...