KLA12299 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A use after free vulnerability in Tab...

USN-5087-1 webkit2gtk vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

Google Chrome ChromeOS Networking security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome ChromeOS Networking. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome Navigation Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Navigation. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome file system API code execution vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in the File System API in versions of Google Chrome prior to 94.0.4606.54. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

Google Chrome Offline Code Execution Vulnerability

Google Chrome Offline is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Offline. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

Google Chrome WebGPU code execution vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome WebGPU. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

Google Chrome Background Fetch API security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in the Google Chrome Background Fetch API. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome Background Fetch API security bypass vulnerability (CNVD-2021-73419)

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in the Google Chrome Background Fetch API. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome Google Updater security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Google Updater. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome Performance Manager code execution vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Performance Manager. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

Google Chrome Compositing Security Bypass Vulnerability

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Compositing. An attacker could exploit this vulnerability to bypass security restrictions...

[SECURITY] Fedora 33 Update: firefox-92.0-2.fc33

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

CVE-2021-20829

Cross-site scripting vulnerability due to the inadequate tag sanitization in GROWI versions v4.2.19 and earlier allows remote attackers to execute an arbitrary script on the web browser of the user who accesses a specially crafted page...

CVE-2021-20829

Cross-site scripting vulnerability due to the inadequate tag sanitization in GROWI versions v4.2.19 and earlier allows remote attackers to execute an arbitrary script on the web browser of the user who accesses a specially crafted page...

Cross site scripting

Cross-site scripting vulnerability due to the inadequate tag sanitization in GROWI versions v4.2.19 and earlier allows remote attackers to execute an arbitrary script on the web browser of the user who accesses a specially crafted page...

CVE-2021-20829

GROWI (WESEEK) has an XSS vulnerability (CVE-2021-20829) caused by inadequate tag sanitization in versions up to v4.2.19. An attacker can trigger a script in a user’s browser by loading a specially crafted page. The issue is documented across multiple sources (including Red Hat and NVD entries) a...

Request a Quote < 2.3.5 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise, validate or escape some of its settings in the admin dashboard, leading to authenticated Stored Cross-Site Scripting issues even when the unfilteredhtml capability is disallowed. As admin, put the below payloads in the related vulnerable field/s and save them there i...

[SECURITY] Fedora 33 Update: lynx-2.8.9-13.fc33

Lynx is a text-based Web browser. Lynx does not display any images, but it does support frames, tables, and most other HTML tags. One advantage Lynx has over graphical browsers is speed; Lynx starts and exits quickly and swiftly displays web pages...

CVE-2021-20791

Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors...