CVE-2023-40575 Out-Of-Bounds Read in FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalYUV444ToRGB8uP3AC4RBGRX function. This issue is likely down to insufficient data for the pSrc variable and results in crashe...

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

CVE-2023-38831-winrar-expoit-simple-Poc Very important I h...

Fedora 37 : chromium (2023-6c8de2cd15)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-6c8de2cd15 advisory. update to 115.0.5790.170. Fixes several security issues Tenable has extracted the preceding description block directly from the Fedora security...

Google Chrome Data Forgery Problem Vulnerability (CNVD-2023-65156)

Google Chrome is a web browser from Google, an American company. A data forgery issue vulnerability exists in Google Chrome prior to version 116.0.5845.96, which stems from insufficient data validation of Systems Extensions, and can be exploited by a remote attacker to bypass file restrictions vi...

CVE-2023-4369

CVE-2023-4369 affects Google Chrome on ChromeOS prior to 116.0.5845.120. The issue is insufficient data validation in Systems Extensions, which could allow a user who is convinced to install a malicious extension to bypass file restrictions via a crafted HTML page. Connected sources corroborate t...

CVE-2023-4369: Undefined Security Weakness

Insufficient data validation in Systems Extensions in Google Chrome on ChromeOS prior to 116.0.5845.120 allowed an attacker who convinced a user to install a malicious extension to bypass file restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2023-4773 · Siemens · Ruggedcom Rs900 +27

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM i800 versions RUGGEDCOM i801 versions RUGGEDCOM i802 versions RUGGEDCOM i803 versions RUGGEDCOM M2100 versions RUGGEDCOM M2200 versions RUGGEDCOM M969 versions RUGGEDCOM RMC30 versions RUGGEDCOM RMC8388 versions 4.X through 5.X...

openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0216-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0216-1 advisory. - Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page...

Privilege Escalation

chromium is vulnerable to Privilege Escalation. The vulnrability exists due to the insufficient data validation in Installer of the library, which allows an attacker to perform privilege escalation via malliciously crafted symbolic link...

F5 BIG-IP Data Forgery Issue Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A data forgery issue vulnerability exists in the F5 BIG-IP Edge Client, which stems from the presence of insufficient data...

Microsoft Edge (Chromium) < 114.0.1823.106 / 115.0.1901.200 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1823.106 / 115.0.1901.200. It is, therefore, affected by multiple vulnerabilities as referenced in the August 7, 2023 advisory. - Microsoft Edge Chromium-based Security Feature Bypass Vulnerability CVE-2023-38157...

CVE-2023-4077

Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. Chromium security severity: Medium...

Input validation

Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2023-4077

Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2023-4077

Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. Chromium security severity: Medium...

PT-2023-5485

Name of the Vulnerable Software and Affected Versions VideoEdge affected versions not specified Description The issue is related to insufficient data authentication in the VideoEdge network video recorder software. This could allow an attacker to edit configuration files, potentially leading to a...

CVE-2023-4077

Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. Chromium security severity: Medium...

Stable Channel Update for Desktop

The Stable channel has been updated to 115.0.5790.170 for Mac and Linux and 115.0.5790.170/.171 for Windows, which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

Google Chrome < 115.0.5790.170 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 115.0.5790.170. It is, therefore, affected by multiple vulnerabilities as referenced in the 202308stable-channel-update-for-desktop advisory. - Inappropriate implementation in Extensions in Google Chrome prior to...

The vulnerability of the Windows Cryptographic component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Cryptographic component in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...