7770 matches found
Google Chrome Security Feature Issue Vulnerability (CNVD-2022-45573)
Google Chrome is a web browser from Google, Inc. A security feature vulnerability exists in versions of Google Chrome prior to 98.0.4758.80, which can be exploited by remote attackers to bypass navigation restrictions via carefully designed HTML pages...
Google Chrome Resource Management Error Vulnerability (CNVD-2022-45572)
Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in versions of Google Chrome prior to 98.0.4758.80, which can be exploited by remote attackers to potentially exploit heap corruption via user interaction...
Microsoft Edge (Chromium) < 98.0.1108.50 Vulnerability
The version of Microsoft Edge installed on the remote Windows host is prior to 98.0.1108.50. It is, therefore, affected by a vulnerability as referenced in the February 10, 2022 advisory. - Microsoft Edge Chromium-based Spoofing Vulnerability CVE-2022-23264 Note that Nessus has not tested for thi...
Google Chrome Resource Management Error Vulnerability (CNVD-2022-44720)
Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome, which can be exploited by remote attackers to potentially exploit heap corruption by corrupting configuration files...
Google Chrome Buffer Overflow Vulnerability (CNVD-2022-45563)
Google Chrome is a web browser from Google, Inc. A buffer overflow vulnerability exists in Google Chrome. A remote attacker could exploit this vulnerability to potentially exploit heap corruption via a carefully crafted HTML page...
Microsoft Edge (Chromium-based) 篡改漏洞（CNVD-2022-60124）
Microsoft Edge is a web browser that comes with versions of Windows 10 and later. Microsoft Edge Chromium-based is vulnerable to a tampering vulnerability that could be exploited by attackers to compromise integrity...
Google Chrome Input Validation Error Vulnerability (CNVD-2022-45564)
Google Chrome is a web browser from Google, Inc. An input validation error vulnerability exists in Google Chrome, which could be exploited by remote attackers to spoof the contents of the multi-function box URL bar via a crafted HTML page...
Debian: Security Advisory (DLA-2916-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2916-1] firefox-esr security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2916-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 09, 2022 https://wiki.debian.org/LTS -...
Vulnerability Spotlight: Use-after-free in Google Chrome could lead to code execution
Marcin Towalski of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered an exploitable use-after-free vulnerability in Google Chrome. Google Chrome is a cross-platform web browser — and Chromium is the open-source version of the browser... This is only t...
Schneider Electric PowerLogic PM5560 Improper Neutralization of Input During Web Page Generation (CVE-2018-7795)
A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic PM5560 prior to FW version 2.5.4 product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manipulated to cause execution of java script code. Th...
Rockwell Automation Allen-Bradley PowerMonitor 1000 Improper Neutralization of Input During Web Page Generation (CVE-2018-19615)
Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arbitrary code into a targeted user's web browser to gain access to the affected device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
[SECURITY] Fedora 34 Update: firefox-96.0.3-1.fc34
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
cockpit bug fix and enhancement update
An update is available for cockpit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Cockpit enables users to administer GNU/Linux servers using a web browser. It...
Type confusion
The checkprivacysettings AJAX action of the WordPress GDPR WordPress plugin before 1.9.27, available to both unauthenticated and authenticated users, responds with JSON data without an "application/json" content-type. Since an HTML payload isn't properly escaped, it may be interpreted by a web...
Type confusion
The checkprivacysettings AJAX action of the WordPress GDPR WordPress plugin before 1.9.26, available to both unauthenticated and authenticated users, responds with JSON data without an "application/json" content-type. Since an HTML payload isn't properly escaped, it may be interpreted by a web...
CVE-2021-24814 WordPress GDPR & CCPA < 1.9.26 - Authenticated Reflected Cross-Site Scripting
The checkprivacysettings AJAX action of the WordPress GDPR WordPress plugin before 1.9.26, available to both unauthenticated and authenticated users, responds with JSON data without an "application/json" content-type. Since an HTML payload isn't properly escaped, it may be interpreted by a web...
CVE-2021-24814
The CVE-2021-24814 entry concerns the WordPress GDPR & CCPA plugin (before 1.9.26). The check_privacy_settings AJAX action responds with JSON data without an application/json content-type, allowing HTML payloads to be interpreted by the victim’s browser. This enables JavaScript execution in the b...
Fedora: Security Advisory for chromium (FEDORA-2021-22594d9eb0)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...