840 matches found
CVE-2021-30609
Chromium: CVE-2021-30609 Use after free in Sign-In...
CVE-2021-30609
CVE-2021-30609 is a use-after-free vulnerability in Chromium’s Sign-In code path. Connected advisories (Astra Linux, Fedora package updates) indicate Chromium/Chromium-based packages were updated to address this issue (e.g., Chromium 93.0.4577.x in Fedora updates). The available documents do not ...
CVE-2021-30609
Chromium: CVE-2021-30609 Use after free in Sign-In...
Chromium: CVE-2021-30609 Use after free in Sign-In
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Google Chrome < 93.0.4577.63 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 93.0.4577.63. It is, therefore, affected by multiple vulnerabilities as referenced in the 202108stable-channel-update-for-desktop31 advisory. - Chromium: CVE-2021-30624 Use after free in Autofill CVE-2021-30624 -...
Google Chrome < 93.0.4577.63 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 93.0.4577.63. It is, therefore, affected by multiple vulnerabilities as referenced in the 202108stable-channel-update-for-desktop31 advisory. - Chromium: CVE-2021-30624 Use after free in Autofill CVE-2021-30624 - Chromium...
Google Chrome Sign-In code execution vulnerability
Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Sign-In. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Sign-In. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...
chromium -- multiple vulnerabilities
Chrome Releases reports: This release contains 27 security fixes, including: 1233975 High CVE-2021-30606: Use after free in Blink. Reported by Nan Wang @eternalsakura13 and koocola @alocook of 360 Alpha Lab on 2021-07-28 1235949 High CVE-2021-30607: Use after free in Permissions. Reported by...
Widespread credential phishing campaign abuses open redirector links
Microsoft has been actively tracking a widespread credential phishing campaign using open redirector links. Attackers combine these links with social engineering baits that impersonate well-known productivity tools and services to lure users into clicking. Doing so leads to a series of...
Larvata Flygo 安全漏洞
Larvata Flygo is an attendance clocking software from Larvata Taiwan. Larvata Flygo contains Insecure Direct Object Reference has a security vulnerability that allows a remote attacker, after authenticating as a normal user, to access a specific employee's sign-in record by manipulating the...
Veeam My Account Sign In FAQ
Below are the most commonly asked questions. Click to expand Which email should I use to log in to the Veeam My Account Portal? You should use your email associated with the company you work with. If you have worked with Veeam Support before, search through your email client to see which email...
PHPFusion < 9.03.100 Multiple Vulnerabilities
PHPFusion is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Microsoft Windows and Windows Server Security Feature Bypass Vulnerability (CNVD-2021-29103)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A security feature bypass vulnerability exists in "Azure AD Web Sign-in" in Microsoft...
CVE-2021-27092
Azure AD Web Sign-in Security Feature Bypass Vulnerability...
CVE-2021-27092
Azure AD Web Sign-in Security Feature Bypass Vulnerability...
Security feature bypass
Azure AD Web Sign-in Security Feature Bypass Vulnerability...
CVE-2021-27092 Azure AD Web Sign-in Security Feature Bypass Vulnerability
...
CVE-2021-27092
CVE-2021-27092: Azure AD Web Sign-in Security Feature Bypass Vulnerability. The connected data confirms a concrete vulnerability in Azure Active Directory web sign-in, enabling arbitrary browsing via federated endpoints. CVSS metrics show a high to critical impact (CVSSv3.1: 9.8, NETWORK, LOW exp...