AZL-79070 CVE-2023-29406 affecting package golang 1.25.7-1

The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value...

K6916: Case change in URL host name circumvents Accessibility Scope

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

PT-2020-18690

Name of the Vulnerable Software and Affected Versions Teltonika firmware version 00.02.02 Description The issue is related to insufficient output sanitization, allowing a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks. This is achieved by injecting malicious...

Debian DSA-2785-1 : chromium-browser - several vulnerabilities

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2013-2906 Atte Kettunen of OUSPG discovered race conditions in Web Audio. - CVE-2013-2907 Boris Zbarsky discovered an out-of-bounds read in window.prototype. - CVE-2013-2908 Chamal de Silva discovered an address bar...

DSA-2785-1 chromium-browser - several

Bulletin has no description...

Debian Security Advisory DSA 2785-1 (chromium-browser - several vulnerabilities)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2013-2906 Atte Kettunen of OUSPG discovered race conditions in Web Audio. CVE-2013-2907 Boris Zbarsky discovered an out-of-bounds read in window.prototype. CVE-2013-2908 Chamal de Silva discovered an address bar spoofin...

CVE-2008-2720: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Menalto Gallery before 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the 1 host and 2 path components of a URL...