FreeBSD : py-matrix-synapse -- multiple vulnerabilities (d9f686f3-fde0-48dc-ab0a-01c2fe3e0529)

Matrix developers report : Due to the two security issues highlighted below, server administrators are encouraged to update Synapse. We are not aware of these vulnerabilities being exploited in the wild. - A malicious homeserver could force Synapse to reset the state in a room to a small subset o...

py-matrix-synapse -- multiple vulnerabilities

Matrix developers report: Due to the two security issues highlighted below, server administrators are encouraged to update Synapse. We are not aware of these vulnerabilities being exploited in the wild. A malicious homeserver could force Synapse to reset the state in a room to a small subset of t...

Unspecified vulnerability in Google Chrome accessibility

Google Chrome is a web browser of Google Google, Inc. accessibility is one of the auxiliary functions of the plug-in. A security vulnerability exists in accessibility in Google Chrome versions prior to 74.0.3729.108, which can be exploited by remote attackers to obtain sensitive information from...

Unspecified vulnerability in Google Chrome notifications

Google Chrome is a web browser by Google, Inc. notifications is one of the notification components. A security vulnerability in notifications in versions of Google Chrome prior to 74.0.3729.108 exists because the program fails to fully enforce policies, which can be exploited by remote attackers ...

Google Chrome Security Bypass Vulnerability (CNVD-2020-32324)

Google Chrome is a web browser from Google, AppCache is an application caching plugin. A security vulnerability exists in AppCache in Google Chrome versions prior to 80.0.3987.87. A remote attacker can exploit this vulnerability to bypass AppCache security restrictions with the help of specially...

Unspecified Vulnerability in Google Chrome CSP

Google Chrome is a web browser from Google, Inc.CSP is a content security policy plugin. A security vulnerability exists in CSP in versions of Google Chrome prior to 80.0.3987.87, which stems from the program's failure to adequately enforce policies, and can be exploited by a remote attacker to...

DEBIAN-CVE-2020-6502

Incorrect implementation in permissions in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page...

Google Chrome Devtools Resource Management Error Vulnerability

Google Chrome is a web browser of Google Google, Inc. and Devtools is one of the development and debugging tools. A resource management error vulnerability exists in Google Chrome Devtools. The vulnerability can be exploited to execute arbitrary code or cause a denial of service via specially...

Google Chrome Developer Tools Data Forgery Issue Vulnerability

Google Chrome is a web browser from Google, and Developer Tools is one of the developer tools components. A data forgery vulnerability exists in Google Chrome Developer Tools. The vulnerability can be exploited to execute arbitrary code via specially crafted HTML pages...

Google Chrome WebRTC Buffer Overflow Vulnerability (CNVD-2020-31535)

Google Chrome is a web browser from Google, Inc. WebRTC is a component of the browser that supports real-time voice or video conversations. A security vulnerability exists in WebRTC in Google Chrome versions prior to 81.0.4044.92. A remote attacker can exploit this vulnerability to execute...

Google Chrome Cache Misbehavior Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 81.0.4044.92. A remote attacker can exploit the vulnerability to disclose cross-origin data with the help of specially crafted HTML pages...

CVE-2019-19336

A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the...

CVE-2019-19336

A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the...

CVE-2019-19336

A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the...

Google Chrome Cross-Origin Data Leakage Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A cross-origin data leakage vulnerability exists in Google Chrome versions prior to 80.0.3987.87. The vulnerability stems from an improper implementation of CORS in...

CVE-2019-19336

A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the user's oVirt session...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-00998)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability exists in versions of Google Chrome prior to 77.0.3865.75, which can be exploited by remote attackers to cause heap corruption with the help of specially crafted HTML pages...

Google Chrome Input Validation Error Vulnerability (CNVD-2020-00482)

Google Chrome is a web browser from Google, Inc. and Omnibox is a real-time search engine. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to spoof Omnibox content with the help of specially crafted HTML pages on iOS...

Google Chrome JavaScript component buffer overflow vulnerability (CNVD-2020-00480)

Google Chrome is the United States Google Google company's a Web browser. JavaScript is one of the JavaScript code debugging components. A buffer overflow vulnerability exists in the Google Chrome JavaScript component. An attacker can exploit this vulnerability to cause heap corruption with the...

Google Chrome JavaScript component buffer overflow vulnerability (CNVD-2020-00479)

Google Chrome is the United States Google Google company's a Web browser. JavaScript is one of the JavaScript code debugging components. A buffer overflow vulnerability exists in the Google Chrome JavaScript component. An attacker can exploit this vulnerability to cause heap corruption with the...