7770 matches found
CVE-2021-22523
XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions...
Xxe
XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions...
CVE-2021-22523
The vulnerability CVE-2021-22523 affects Micro Focus Verastream Host Integrator (version 7.8 Update 1 and earlier). It is an XML External Entity (XXE) issue in the product likely involving XML processing, with the described impact of controlling a web browser and hijacking user sessions. Connecte...
CVE-2021-22523
XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions...
Microsoft Edge (Chromium) < 92.0.902.55 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 92.0.902.55. It is, therefore, affected by multiple vulnerabilities as referenced in the July 22, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...
CVE-2021-22523: Improper Restriction of XML External Entity Reference
XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions...
PT-2021-15124
Name of the Vulnerable Software and Affected Versions Micro Focus Verastream Host Integrator versions 7.8 Update 1 and earlier Description The issue is related to an XML External Entity vulnerability, which could allow the control of a web browser and hijacking of user sessions. Recommendations F...
Google Chrome Animation security bypass vulnerability
Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Animation. An attacker could exploit this vulnerability to bypass security restrictions...
Google Chrome Sharing security bypass vulnerability
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Sharing in versions prior to Google Chrome 92.0.4515.107. An attacker could use this vulnerability to bypass security restrictions...
Google Chrome DevTools Code Execution Vulnerability (CNVD-2021-55926)
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome DevTools. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...
Google Chrome UI framework code execution vulnerability
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in the UI framework in versions of Google Chrome prior to 92.0.4515.107. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...
Google Chrome sqlite code execution vulnerability
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in sqlite in versions of Google Chrome prior to 92.0.4515.107. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service condition...
Google Chrome sensor handling code execution vulnerability
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in sensor handling in versions of Google Chrome prior to 92.0.4515.107. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...
Google Chrome Protocol Handling Code Execution Vulnerability
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in the protocol handling in versions of Google Chrome prior to 92.0.4515.107. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service condition...
Google Chrome Installer security bypass vulnerability
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Installer in versions of Google Chrome prior to 92.0.4515.107. An attacker could exploit this vulnerability to bypass security restrictions...
HM Multiple Roles < 1.3 - Arbitrary Role Change
The plugin does not have any access control to prevent low privilege users to set themselves as admin via their profile page As any authenticated user, go to your Profile page and Tick the Administrator Role checkbox. In v1.2, the checkboxes are disabled in the UI but can be tampered with by eith...
Mozilla VPN 安全特征问题漏洞
Mozilla VPN is an open source virtual private network Web browser extension, desktop application and mobile application from the Mozilla Foundation in the U.S. A security vulnerability exists in versions of Mozilla VPN prior to 2.3. An attacker could exploit the vulnerability to gain control of t...
[SECURITY] Fedora 34 Update: chromium-91.0.4472.164-1.fc34
Chromium is an open-source web browser, powered by WebKit Blink...
Microsoft Edge (Chromium) < 91.0.864.71 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 91.0.864.71. It is, therefore, affected by multiple vulnerabilities as referenced in the July 19, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...