Mageia: Security Advisory (MGASA-2017-0442)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Jupyter Server 代码问题漏洞

Jupyter Server is a Jupyter community application used to provide back-end services for Jupyter web applications. A security vulnerability exists in the Jupyter Server Proxy that originates from allowing authenticated clients to bypass security checks by proxying requests to other hosts...

The vulnerability of the WebAuthentication user authentication mechanism in Google Chrome allows a hacker to disclose protected information.

The vulnerability of the WebAuthentication user authentication mechanism of Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

The vulnerability of the Google Chrome browser’s cache component, which allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s cache component is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the iFrame Sandbox component in Google Chrome allows a hacker to bypass existing security restrictions.

The vulnerability of the iFrame Sandbox component in Google Chrome is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the WebView component for displaying web pages in Google Chrome allows attackers to circumvent existing security restrictions.

The vulnerability of the WebView component of Google Chrome’s browser involves errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created HTML page...

The vulnerability of the Google Chrome browser’s Navigation function in the Windows operating system allows a perpetrator to circumvent existing security restrictions by using a specially created HTML page.

The vulnerability of the Google Chrome browser’s Navigation function in the Windows operating system is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially...

Server-Side Request Forgery in Apache Kylin

All request mappings in StreamingCoordinatorController.java handling /kylin/api/streamingcoordinator/ REST API endpoints did not include any security checks, which allowed an unauthenticated user to issue arbitrary requests, such as assigning/unassigning of streaming cubes, creation/modification...

Improper Validation and Sanitization in url-parse

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks...

CVE-2021-27738

All request mappings in StreamingCoordinatorController.java handling /kylin/api/streamingcoordinator/ REST API endpoints did not include any security checks, which allowed an unauthenticated user to issue arbitrary requests, such as assigning/unassigning of streaming cubes, creation/modification...

Server side request forgery (ssrf)

All request mappings in StreamingCoordinatorController.java handling /kylin/api/streamingcoordinator/ REST API endpoints did not include any security checks, which allowed an unauthenticated user to issue arbitrary requests, such as assigning/unassigning of streaming cubes, creation/modification...

The vulnerability of Google Chrome’s Service Worker service allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Service Worker service is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the WebView component for displaying web pages in Google Chrome browser and on the Android operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WebView component of Google Chrome’s browser involves errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Mesh-Kridik - An Open-Source Security Checker That Performs Various Security Checks On A Kubernetes Cluster With Istio Service Mesh And Is Leveraged By OPA (Open Policy Agent) To Enforce Security Rules

Enhance your Kubernetes service mesh security !! mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and outputs a security report. The security checks tests are the full implementation of istio security best practic...

The vulnerability of the Referer component in Google Chrome’s Chrome browser stems from improperly implemented security checks for standard elements, allowing attackers to disclose protected information.

The vulnerability of the Referer component in Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created web page...

The vulnerability in the browser text input implementation of Google Chrome allows attackers to disclose protected information.

The vulnerability in the browser text input implementation of Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of Google Chrome’s WebView component allows a hacker to bypass existing security restrictions by using a specially created HTML page.

The vulnerability of Google Chrome’s WebView component is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created HTML page...

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows attackers to carry out spoofing attacks.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

Samsung SMR 安全漏洞

Samsung RRC MeasurementReport is a wireless resource control protocol measurement report for Samsung Samsung mobile devices. The Samsung RRC MeasurementReport suffers from an anomalous condition handling vulnerability that stems from the lack of proper RRC security variable checking in the Exynos...

CentOS: Security Advisory for mailman (CESA-2021:4913)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...