CVE-2024-1554

The fetch API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers fetch may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a fetch response controlled by the addition...

CVE-2024-1554

The fetch API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers fetch may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a fetch response controlled by the addition...

Design/Logic Flaw

The fetch API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers fetch may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a fetch response controlled by the addition...

UBUNTU-CVE-2024-1554

The fetch API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers fetch may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a fetch response controlled by the addition...

CVE-2024-1554

The fetch API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers fetch may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a fetch response controlled by the addition...

CVE-2024-1554

The fetch API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers fetch may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a fetch response controlled by the addition...

CVE-2024-1554

The CVE-2024-1554 issue affects Mozilla Firefox (and related builds) where the fetch() API and navigation shared the same cache because the cache key did not include optional request headers. Under certain conditions an attacker could prime the browser cache with a fetch() response controlled by ...

CVE-2024-1554

The fetch API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers fetch may contain. Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a fetch response controlled by the addition...

Google Chrome < 122.0.6261.57 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 122.0.6261.57. It is, therefore, affected by multiple vulnerabilities as referenced in the 202402stable-channel-update-for-desktop20 advisory. - Insufficient policy enforcement in Download in Google Chrome prior to...

PT-2024-1839 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 122.0.6261.57 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Navigation function of the browsers, allowing a remote attacker to bypass...

PT-2024-1847 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 122.0.6261.57 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Navigation function of the browsers, which may allow a remote attacker to...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 12 security fixes: 41495060 High CVE-2024-1669: Out of bounds memory access in Blink. Reported by Anonymous on 2024-01-26 41481374 High CVE-2024-1670: Use after free in Mojo. Reported by Cassidy Kim@cassidy6564 on 2023-12-06 41487933 Medium...

Nav2 Security Vulnerability

Nav2 is a navigation framework and system for ROS2. A security vulnerability exists in Nav2 that stems from an incorrect pointer order that can lead to reuse after release...

Nav2 Security Vulnerability

Nav2 is a navigation framework and system for ROS2. A security vulnerability exists in Nav2 that stems from an incorrect pointer order that can lead to reuse after release...

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability previously existed in Google Chrome version 122.0.6261.57, which stemmed from an improper implementation of the Navigation module...

Mozilla Firefox Security Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability previously existed in Mozilla Firefox version 123, which stemmed from the fetch API and navigation incorrectly sharing the same cache...

Nav2 Security Vulnerability

Nav2 is a navigation framework and system for ROS2. A security vulnerability exists in Nav2 that stems from the isCurrent function in /src/layeredcostmap.cpp containing a NULL pointer dereference...

PT-2024-20808 · Open Robotics · Ros2 +1

Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions Description: A buffer overflow issue was discovered in the nav2 controller process, which can be triggered by sending a crafted .yaml file. Recommendations: For Open...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability previously existed in Google Chrome version 122.0.6261.57, which stemmed from a mal-implementation issue in the Navigation module. An attacker could exploit this vulnerability to bypass security...

GLSA-202402-14 : QtWebEngine: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202402-14 QtWebEngine: Multiple Vulnerabilities - Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...