DEBIAN-CVE-2019-5794

Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

UBUNTU-CVE-2019-5794

Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

CVE-2019-5802

CVE-2019-5802 is a UI spoofing vulnerability in Chromium/Google Chrome prior to 73.0.3683.75. The issue enables a remote attacker to spoof a domain via crafted HTML content, as documented by multiple sources (Chrome security notes and distribution advisories). The flaw is categorized under conten...

CVE-2019-5802

Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

Cross-Site Scripting (XSS)

Apache JSPWiki is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the ReferredPagesPlugin and navigation breadcrumbs, to steal session tokens or perform unwanted actions on behalf of the user...

Fedora 30 : webkit2gtk3 (2019-f18fb0f37d)

Fix rendering of emojis copy-pasted from GTK emoji chooser. - Fix space characters not being rendered with some CJK fonts. - Fix adaptive streaming playback with older GStreamer versions. - Set a maximum zoom level for pinch zooming gesture. - Fix navigation gesture to not interfere with...

Update for Windows 7 SP1 and Windows Server 2008 R2 SP1: April 25, 2019

Update for Windows 7 SP1 and Windows Server 2008 R2 SP1: April 25, 2019 Summary This update includes the quality improvements from KB4493448, in addition to new Japanese Era related changes. Key changes include: Updates the NLS registry to support the new Japanese Era. Addresses an issue that...

chromium-browser: Forced navigation from service worker

Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

xss vulnerability in uke365 website category navigation system v1.3.4fe***.html page

Uc365 website classification navigation system is a navigation management system based on PHP + MYSQL development and construction. An xss vulnerability exists in the Uke365 Website Classifieds Navigation System v1.3.4fe.html page, which can be exploited by an attacker to obtain administrator...

UX365 website category navigation system v1.3.4we***.php file has xss vulnerability

Uc365 website classification navigation system is a navigation management system based on PHP + MYSQL development and construction. An xss vulnerability exists in the file we.php in the Uke365 website category navigation system v1.3.4, which can be exploited by an attacker to obtain administrator...

xss vulnerability in uke365 website category navigation system v1.3.4ad***.html page

Uc365 website classification navigation system is a navigation management system based on PHP + MYSQL development and construction. An xss vulnerability exists in the v1.3.4ad.html page of the Uke365 website category navigation system, which can be exploited by an attacker to obtain administrator...

UX365 website category navigation system v1.3.4ar***.php file has xss vulnerability

Uc365 website classification navigation system is a navigation management system based on PHP + MYSQL development and construction. An xss vulnerability exists in the file ar.php in the Uke365 website category navigation system v1.3.4, which can be exploited by an attacker to obtain administrator...

openSUSE: Security Advisory for chromium (openSUSE-SU-2019:1324-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1325-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 74.0.3729.108 boo1133313: CVE-2019-5805: Use after free in PDFium CVE-2019-5806: Integer overflow in Angle CVE-2019-5807: Memory corruption in V8 CVE-2019-5808: Use after free in Blink CVE-2019-5809: Use after free in...

Out-Of-Bounds Read

Mozilla Firefox is an open source web browser. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2014-1518,...

CVE-2019-9803

The Upgrade-Insecure-Requests UIR specification states that if UIR is enabled through Content Security Policy CSP, navigation to a same-origin URL must be upgraded to HTTPS. Firefox will incorrectly navigate to an HTTP URL rather than perform the security upgrade requested by the CSP in some...

Google Chrome Security Updates (stable-channel-update-for-desktop_23-2019-04) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Forced Navigation Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions prior to Google Chrome 74.0.3729.108. An attacker can exploit this vulnerability by tricking a user into visiting a specially crafted website to bypass security restrictions and gain...

CVE-2019-5823

Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component Access Control Error Vulnerability

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation. The products provide human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise PeopleTools is one of the tools and technology platform...