Microsoft Edge (Chromium) < 89.0.774.54 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 89.0.774.54. It is, therefore, affected by multiple vulnerabilities as referenced in the March 15, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Cybozu Office Cross-Site Scripting Vulnerability (CNVD-2021-18062)

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A cross-site scripting vulnerability exists in the address book in Cybozu Office. The vulnerability can be exploited to execute arbitrary script in a logged-in user's web browser...

New Browser Attack Allows Tracking Users Online With JavaScript Disabled

Researchers have discovered a new side-channel that they say can be reliably exploited to leak information from web browsers that could then be leveraged to track users even when JavaScript is completely disabled. "This is a side-channel attack which doesn't require any JavaScript to run," the...

Fedora: Security Advisory for firefox (FEDORA-2021-43088486b2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 32 Update: firefox-86.0-7.fc32

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 34 Update: firefox-86.0-7.fc34

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Unspecified Vulnerability in Mozilla Firefox (CNVD-2021-15355)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox. No details of the vulnerability are provided at this time...

Google Chrome Extension Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Extensions. An attacker can exploit this vulnerability to bypass security restrictions...

CVE-2020-25715

A flaw was found in pki-core. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting XSS attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity. Mitigation Because the...

Google Chrome < 89.0.4389.72 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 89.0.4389.72. It is, therefore, affected by multiple vulnerabilities as referenced in the 202103stable-channel-update-for-desktop advisory. - Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a...

Ellipse Enterprise Asset Management跨站脚本漏洞

Ellipse Enterprise Asset Management Ellipse EAM is a business process management software provided by Ellipse Industrial Equipment in the United Kingdom. Ellipse Enterprise Asset Management suffers from a cross-site scripting vulnerability that can be exploited by an attacker to trick a user into...

Ellipse Enterprise Asset Management跨站脚本漏洞

Ellipse Enterprise Asset Management Ellipse EAM is a business process management software provided by Ellipse Industrial Equipment in the United Kingdom. Ellipse Enterprise Asset Management suffers from a cross-site scripting vulnerability that can be exploited by an attacker to trick a user into...

Mozilla Firefox Memory Corrupted Code Execution Vulnerability (CNVD-2021-15495)

Mozilla Firefox is a popular WEB browser. A memory corruption vulnerability exists in Mozilla Firefox, which allows remote attackers to submit a specially crafted web request that can be tricked into being parsed by the user, which can crash the application or execute arbitrary code in the contex...

[SECURITY] Fedora 33 Update: chromium-88.0.4324.182-1.fc33

Chromium is an open-source web browser, powered by WebKit Blink...

Fedora: Security Advisory for firefox (FEDORA-2021-e440aa9307)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 33 Update: firefox-86.0-2.fc33

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Critical: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Critical: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2021-21323

Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor...

Design/Logic Flaw

Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor...