3528 matches found
Fedora 31 : firefox (2020-38b5ecdd73)
Added fixes for mozbz1661192, mozbz1640567 Wayland popup issues - Enabled build with PGO ---- - New upstream version 81.0.1 ---- - Disabled OpenH264 download from mozilla - Removed fdk-aac-free dependency ---- - Fixed usage of OpenH264 - Don't download OpenH264 from Cisco but use Fedora packages...
Mozilla: Bypassing iframe sandbox when allowing popups
An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on sandbox configurations that allowed popups and hosted arbitrary content. This vulnerability affects Firefox ESR 78.1, Firefox 79, and...
openSUSE Security Update : java-11-openjdk (openSUSE-2020-1191)
This update for java-11-openjdk fixes the following issues : - Update to upstream tag jdk-11.0.8+10 July 2020 CPU, bsc1174157 - Security fixes : + JDK-8230613: Better ASCII conversions + JDK-8231800: Better listing of arrays + JDK-8232014: Expand DTD support + JDK-8233234: Better Zip Naming +...
SUSE SLED15 / SLES15 Security Update : java-11-openjdk (SUSE-SU-2020:2143-1)
This update for java-11-openjdk fixes the following issues : Update to upstream tag jdk-11.0.8+10 July 2020 CPU, bsc1174157 - Security fixes : + JDK-8230613: Better ASCII conversions + JDK-8231800: Better listing of arrays + JDK-8232014: Expand DTD support + JDK-8233234: Better Zip Naming +...
UBUNTU-CVE-2020-15653
An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on sandbox configurations that allowed popups and hosted arbitrary content. This vulnerability affects Firefox ESR 78.1, Firefox 79, and...
Exploit for Deserialization of Untrusted Data in Sygnoos Popup_Builder
CVE-2020-9006: Wordpress Popup-Builder Plugin Exploit Usage:...
grafana: XSS annotation popup vulnerability
A flaw was found in grafana. The software is vulnerable to an annotation popup XSS...
grafana: XSS annotation popup vulnerability
A flaw was found in grafana. The software is vulnerable to an annotation popup XSS...
CVE-2020-13158
Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter...
Mattermost Desktop App Authorization Issue Vulnerability
Mattermost Desktop App is a messaging desktop application from Mattermost USA. An authorization issue vulnerability exists in Mattermost Desktop App versions prior to 4.4.0, which stems from the program failing to properly handle the popup of the HTTP Basic Authentication box and can be exploited...
CVE-2020-12052
A flaw was found in grafana. The software is vulnerable to an annotation popup XSS...
WordPress Login/Signup Popup plugin <= 1.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by NinTechNet in WordPress Login/Signup Popup plugin versions = 1.4. Solution Update the WordPress Login/Signup Popup plugin to the latest available version at least 1.5...
VulnCheck KEV: CVE-2020-36715
The Login/Signup Popup plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on several functions in versions up to, and including, 1.4. This makes it possible for authenticated attackers to inject arbitrary web scripts into the plugin settings that execute...
Fedora 31 : webkit2gtk3 (2020-7f34d2cfd8)
Update to 2.28.2 : - Fix excessive CPU usage due to GdkFrameClock not being stopped. - Fix UI process crash when EGLWLbindwaylanddisplay extension is not available. - Fix position of select popup menus in X11. - Fix playing of Youtube live stream/H264 URLs. - Fix several crashes and rendering...
SUSE-SU-2020:1198-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Security issue fixed: - CVE-2020-3899: Fixed a memory consumption issue that could have led to remote code execution bsc1170643. Non-security issues fixed: - Update to version 2.28.2 bsc1170643: + Fix excessive CPU usage due to GdkFrameClock...
Fedora 30 : webkit2gtk3 (2020-bd170e803f)
Update to 2.28.2 : - Fix excessive CPU usage due to GdkFrameClock not being stopped. - Fix UI process crash when EGLWLbindwaylanddisplay extension is not available. - Fix position of select popup menus in X11. - Fix playing of Youtube live stream/H264 URLs. - Fix several crashes and rendering...
jQuery <= 3.5 html() Cross Site Scripting Exploit
Exploit for jsp platform in category web applications jquery-xss-in-html jQuery 3.5 Cross-Site Scripting XSS in html Timmy Willison recently released a new version of jQuery. jQuery 3.5 fixes a cross-site scripting XSS vulnerability found in the jQuery’s HTML parser. The Snyk open source security...
CVE-2020-12052
Grafana version 6.7.3 is vulnerable for annotation popup XSS...
