Fedora: Security Advisory for guacamole-server (FEDORA-2021-2c25f03d0b)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: guacamole-server-1.3.0-9.fc35

Guacamole is an HTML5 remote desktop gateway. Guacamole provides access to desktop environments using remote desktop protoc ols like VNC and RDP. A centralized server acts as a tunnel and proxy, allowing access to multiple desktops through a web browser. No browser plugins are needed, and no clie...

Google Chrome service workers security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google chrome, which is caused by improper design or implementation during the development of code for a web system or product. A remote attacker could exploit the vulnerability to bypass security restrictions...

Google Chrome navigation security bypass vulnerability

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security vulnerability that stems from an error in the product's navigation implementation. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome referrer security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome due to an improper implementation of certain features in the product. A remote attacker could exploit the vulnerability to bypass security restrictions...

Google Chrome cache security bypass vulnerability

Google Chrome is a web browser from Google, Inc. Google chrome has a security vulnerability that can be exploited by attackers to bypass security restrictions...

Google Chrome V8 Code Execution Vulnerability (CNVD-2021-91296)

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which is caused by type obfuscation in V8. An attacker could exploit the vulnerability to execute arbitrary code on the system...

Google Chrome storage foundation code execution vulnerability

Google Chrome is a web browser from Google, Inc. Google chrome has a security vulnerability that could be exploited by remote attackers to execute arbitrary code on the system...

Google Chrome background fetch security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome due to improper enforcement of policies obtained from the product's backend. A remote attacker could exploit the vulnerability to bypass security restrictions...

Google Chrome CORS security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome due to inadequate enforcement of cross-domain resource sharing policies in the software. An attacker could use this vulnerability to bypass security restrictions...

Google Chrome input security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which stems from the product's mishandling of input data. An attacker could use this vulnerability to bypass security restrictions...

[SECURITY] Fedora 33 Update: firefox-94.0-1.fc33

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Cross-Site Scripting (XSS)

GNU Mailman is vulnerable to cross-site scripting. The vulnerability exists due to HTTP reply from an archive web server lacking a MIME type, and a web browser performing MIME sniffing may conclude that the MIME type should have been text/html, and execute JavaScript code...

Siemens Mendix

1. EXECUTIVE SUMMARY CVSS v3 4.0 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Mendix Vulnerability: Use of Web Browser Cache Containing Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a local attacker to read cached documents by...

Hardcoded credentials

A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device properties. Viewing the passwords requires configuring a web browser to display HTML password input fields...

Fedora: Security Advisory for firefox (FEDORA-2021-a87c34524c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: XSS vulerability in Dojo affects IBM Tivoli Business Service Manager (CVE-2018-15494)

Summary Dojo Toolkit is shipped as part of IBM Tivoli Business Manager 6.2.0. Information about security vulnerabilities affecting Dojo Toolkit has been published in a security bulletin. Vulnerability Details CVEID: CVE-2018-15494 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting,...

[SECURITY] Fedora 33 Update: chromium-94.0.4606.81-1.fc33

Chromium is an open-source web browser, powered by WebKit Blink...

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2022-36980)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox is vulnerable to a resource management error that can be exploited by attackers to cause memory corruption and potentially exploitable crashes...

Mozilla Firefox has an unspecified vulnerability (CNVD-2021-101168)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. A security vulnerability exists in Mozilla Firefox, which stems from a series of navigation that allows Firefox to enter full-screen mode without notifying or warning the user. This could lead to spoofing attack...