21111 matches found
SUSE CVE-2018-8383
A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8388...
SUSE CVE-2018-12371
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR 60.1, Thunderbird 60, an...
Update Now: Microsoft Releases Patches for 3 Actively Exploited Windows Vulnerabilities
Microsoft on Tuesday released security updates to address 75 flaws spanning its product portfolio, three of which have come under active exploitation in the wild. The updates are in addition to 22 flaws the Windows maker patched in its Chromium-based Edge browser over the past month. Of the 75...
SUSE CVE-2019-12519
An issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled, Squid calls ESIExpression::Evaluate. This function uses a fixed stack buffer to hold the expression while it's being evaluated. When processing the expression, it could either evaluate the top of the...
SUSE CVE-2021-25329
The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the...
SUSE CVE-2022-46349
A vulnerability has been identified in Parasolid V33.1 All versions V33.1.264, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2022 All versions, Solid Edge SE2023 All...
Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Feb 2023)
This host is missing an important security update according to Microsoft Edge Chromium-Based update. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
The vulnerability of the Edge Client for Windows component (f5fpclientW.exe), a control device for access control and remote authentication of the BIG-IP Access Policy Manager, allows a perpetrator to execute arbitrary commands.
The vulnerability of the Edge Client for Windows component f5fpclientW.exe, a control device for access control and remote authentication of the BIG-IP Access Policy Manager, is related to an uncontrolled element in the search path. Exploiting this vulnerability could allow a attacker to execute...
Microsoft Edge browser’s vulnerability, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Edge relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-23374
Microsoft Edge Chromium-based Remote Code Execution Vulnerability...
CVE-2023-23374
Microsoft Edge Chromium-based Remote Code Execution Vulnerability...
CVE-2023-23374
Microsoft Edge Chromium-based Remote Code Execution Vulnerability...
CVE-2023-21794
Microsoft Edge Chromium-based Spoofing Vulnerability...
CVE-2023-21720
Microsoft Edge Chromium-based Tampering Vulnerability...
CVE-2023-21720
Microsoft Edge Chromium-based Tampering Vulnerability...
CVE-2023-21794
Microsoft Edge Chromium-based Spoofing Vulnerability...
Spoofing
Microsoft Edge Chromium-based Spoofing Vulnerability...
Remote code execution
Microsoft Edge Chromium-based Remote Code Execution Vulnerability...
CVE-2023-23374
CVE-2023-23374 affects Microsoft Edge (Chromium-based) and is a Remote Code Execution vulnerability with a CVSS v3.1 base score of 8.3 (HIGH). It is network-exploitable with high attack complexity and requires user interaction. The connected GLSA/Gentoo-NASL entries indicate this CVE is part of a...
