6758 matches found
Security update for privoxy (moderate)
openSUSE Security Update: Security update for privoxy Announcement ID: openSUSE-SU-2021:0017-1 Rating: moderate References: 1157449 Affected Products: openSUSE Backports SLE-15-SP2 An update that contains security fixes can now be installed. Description: This update for privoxy fixes the followin...
Set New InsightVM Goals and Share with Your Team for Increased Visibility and More Efficient Execution
Since 2018, thousands of enterprises have utilized InsightVM’s Goals and SLAs feature to build their organization-specific security goals. Through Goals and SLAs, security teams ensure that they’re making progress toward their goals and service-level agreements SLAs at an appropriate pace, and th...
Cross Origin Resource Sharing (CORS) Bypass
chromium is vulnerable to CORS bypass. The vulnerability exists through insufficient policy enforcement in Blink that allows a remote attacker to leak cross-origin data via a crafted HTML page...
Authorization Bypass
chromium is vulnerable to authorization bypass. The vulnerability exists through Incorrect security UI in sharing...
CVE-2020-26251
Open Zaak is a modern, open-source data- and services-layer to enable zaakgericht werken, a Dutch approach to case management. In Open Zaak before version 1.3.3 the Cross-Origin-Resource-Sharing policy in Open Zaak is currently wide open - every client is allowed. This allows evil.com to run...
CVE-2020-26251
Open Zaak is a modern, open-source data- and services-layer to enable zaakgericht werken, a Dutch approach to case management. In Open Zaak before version 1.3.3 the Cross-Origin-Resource-Sharing policy in Open Zaak is currently wide open - every client is allowed. This allows evil.com to run...
Cross site request forgery (csrf)
Open Zaak is a modern, open-source data- and services-layer to enable zaakgericht werken, a Dutch approach to case management. In Open Zaak before version 1.3.3 the Cross-Origin-Resource-Sharing policy in Open Zaak is currently wide open - every client is allowed. This allows evil.com to run...
CVE-2020-26251
Open Zaak (version prior to 1.3.3) had a wide-open CORS policy allowing any client, which could enable cross-origin scripts to access the API. The CVE notes that Open Zaak 1.3.3 disables CORS by default, with opt-in possible via environment variables. The publicly provided documents state that ex...
[SECURITY] Fedora 32 Update: synergy-1.12.0-1.fc32
Synergy lets you easily share your mouse and keyboard between multiple computers, where each computer has its own display. No special hardware is required, all you need is a local area network. Synergy is supported on Windows, Mac OS X and Linux. Redirecting the mouse and keyboard is as simple as...
Fedora: Security Advisory for synergy (FEDORA-2020-2ef60a0580)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-14476
AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery SSRF vulnerability in the NetCrunch server. Every user can trick the server into performing SMB requests to other systems...
[SECURITY] Fedora 33 Update: synergy-1.12.0-1.fc33
Synergy lets you easily share your mouse and keyboard between multiple computers, where each computer has its own display. No special hardware is required, all you need is a local area network. Synergy is supported on Windows, Mac OS X and Linux. Redirecting the mouse and keyboard is as simple as...
Adrem Netcrunch Code Issue Vulnerability
Adrem Netcrunch is a device monitoring software from the American company Adrem. The software monitors Windows, Linux, Mac OS X, BSD, NetWare, and SNMP devices based on SNMP sources, Windows event logs, and Syslog servers. A code issue vulnerability exists in AdRem NetCrunch version 10.6.0.4587,...
The vulnerability of the screen-sharing function in Google Chrome browsers allows attackers to perform spoofing attacks.
The vulnerability of the screen-sharing function in Google Chrome browser relates to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...
Microsoft Windows SMB Server Information Disclosure Vulnerability
Microsoft Windows SMB Server is a network file-sharing protocol from Microsoft. It allows applications on a computer to read and write files and request services from server programs on a computer network. An information disclosure vulnerability exists in Microsoft Windows SMB Server. The followi...
360 Free Wi-Fi (Windows client) suffers from dll hijacking vulnerability
360 Free WiFi is a free and extremely simple to operate WiFi sharing software, just run the software, you can instantly turn the networked computer into a free WiFi router, thus allowing cell phones, PADs and other hardware devices to access the Internet for free, network sharing, and you can...
File-sharing and cloud storage sites: How safe are they?
There it is again—that annoying message that pops up when your email client informs you that a file is too big to attach. Those of us that are confronted with this problem on a regular basis—and those of us that want to attach files that could get picked up by anti-malware scanners along the...
Dox, steal, reveal. Where does your personal data end up?
The technological shift that we have been experiencing for the last few decades is astounding, not least because of its social implications. Every year the online and offline spheres have become more and more connected and are now completely intertwined, leading to online actions having real...
openSUSE Security Update : chromium (openSUSE-2020-2032)
This update for chromium fixes the following issues : - Update to 87.0.4280.66 boo1178923 - Wayland support by default - CVE-2020-16018: Use after free in payments. - CVE-2020-16019: Inappropriate implementation in filesystem. - CVE-2020-16020: Inappropriate implementation in cryptohome. -...
