[SECURITY] Fedora 34 Update: cockpit-260-1.fc34

The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...

CVE-2021-44649

Django CMS 3.7.3 does not validate the plugintype parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting XSS vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user...

firefox security update

An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

Google Chrome resource management error vulnerability

Google Chrome is a Web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome, which stems from the product's screen capture component referencing freed memory. A remote attacker could use this vulnerability to create a specially crafted web page, trick a vict...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-16303)

Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome that could be exploited by remote attackers to create a specially designed web page that bypasses certain security settings...

Google Chrome Access Control Error Vulnerability (CNVD-2022-16301)

Google Chrome is a Web browser from Google, Inc. An access control error vulnerability exists in Google Chrome, which stems from a faulty implementation of Google Chrome's password and could be exploited to create a specially designed Web page that could trick victims into accessing it and...

Google Chrome Security Feature Issue Vulnerability (CNVD-2022-14875)

Google Chrome is a Web browser from Google, Inc. Google Chrome is vulnerable to a security feature issue that results from a bug in the product's WebShare implementation. A remote attacker could exploit the vulnerability to create a specially designed web page, tricking victims into accessing it...

Google Chrome permission permission and access control issue vulnerability (CNVD-2022-14877)

Google Chrome is a web browser from Google, Inc. A permission and access control issue vulnerability exists in Google Chrome, which is caused by a faulty implementation of policy restrictions. A remote attacker could use this vulnerability to bypass the implemented security restrictions...

Adobe Acrobat Reader Javascript event.richValue use-after-free vulnerability

Summary A use-after-free vulnerability exists in the way certain events are handled in Adobe Acrobat Reader 21.007.20091. A specially-crafted javascript code can exploit a use-after-free vulnerability which can lead to arbitrary code execution. User would need to open a malicious file to trigger...

Google Chrome Storage code execution vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Storage, which can be exploited by remote attackers to execute arbitrary code on a system or cause a denial of service condition...

Google Chrome Navigation security bypass vulnerability (CNVD-2022-65584)

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Navigation, which can be exploited by attackers to bypass security restrictions...

Google Chrome Security Feature Issue Vulnerability (CNVD-2022-65582)

Google Chrome is a Web browser from the U.S. company Google Google. Google Chrome is vulnerable to a security feature issue that exists due to an incorrect implementation of a vulnerability in automatically populating Google Chrome. A remote attacker could exploit the vulnerability to be able to...

Google Chrome Media streams API buffer overflow vulnerability

Google Chrome is a web browser from Google, Inc. A buffer overflow vulnerability exists in the Google Chrome Media streams API, which can be exploited by remote attackers to overflow the buffer and execute arbitrary code on the system, or cause the application to crash...

Google Chrome Bookmarks buffer overflow vulnerability

Google Chrome is a web browser from Google, Inc. A buffer overflow vulnerability exists in Google Chrome Bookmarks, which can be exploited by remote attackers to overflow the buffer and execute arbitrary code on the system, or cause the application to crash...

Microsoft Edge remote code execution vulnerability (CNVD-2022-06464)

Microsoft Edge is a Web browser that comes with the post-Windows 10 version of the U.S. Microsoft Edge is vulnerable to remote code execution. No detailed vulnerability details are available at this time...

Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2022-06465)

Microsoft Edge is a Web browser that comes with the post-Windows 10 version of Microsoft Corporation Microsoft. No details of the vulnerability are currently available...

Google Chrome Navigation security bypass vulnerability (CNVD-2022-65578)

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Navigation, which can be exploited by attackers to bypass security restrictions...

Google Chrome Autofill code execution vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Autofill, which can be exploited by remote attackers to execute arbitrary code on a system or cause a denial of service condition...

Fedora: Security Advisory for chromium (FEDORA-2021-6a292e2cf4)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ubuntu: Security Advisory (USN-5213-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...