WebApp Provider Unauthorized Access

The vulnerability of the WebApp Provider component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Chromium: CVE-2022-2161 Use after free in WebApp Provider

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that originates from the reuse of the WebApp Provider after release...

PT-2022-3064

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 103.0.5060.53 Microsoft Edge affected versions not specified Description The issue is related to a use after free in the WebApp Provider, which could allow a remote attacker to potentially exploit heap corruptio...

Malicious code in mattermost-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9ce8f02251eba861f2430bb80e15d90e2ea15ebcfe9586d76c3a65b6c935e03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4506 Malicious code in mattermost-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9ce8f02251eba861f2430bb80e15d90e2ea15ebcfe9586d76c3a65b6c935e03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4507 Malicious code in mattermost-webapp-profiling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0507ee66265c1781e45307f46fd6db9ec8af3481f25b080e9f3d8a628ad350b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7177 Malicious code in wix-user-preferences-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29e4630a25b98ef601b67373c19a7e895e64e5c6ce1ae6cb9fdbafa41d101036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6690 Malicious code in twilio-chat-console-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d43b58f29b1c20f3fa4c8d6c56e87e0fe9432726d8b380b35b38b1f5deda3b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6691 Malicious code in twilio-chat-console-webapp.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e49ceaa7ff098d3318e69bf952690e21a038f0172d1d88c26b9c9882d9607f50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10005-1 Rating: important References: 1199893 Cross-References: CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856 CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860 CVE-2022-1861 CVE-2022-1862...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10009-1 Rating: critical References: 1199893 1200139 1200423 Cross-References: CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856 CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860 CVE-2022-1861...

Chromium: CVE-2022-1864 Use after free in WebApp Installs

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA12548 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Inappropriate implementation vulnerability in...

WebApp Component Disclosure

The vulnerability of the Google Chrome browser’s WebApp component is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially created web page...

Updated chromium-browser-stable packages fix security vulnerability

The chromium-browser-stable package has been updated to the 102.0.5005.61 version, fixing many bugs and 32 CVE. Some of them are listed below: CVE-2022-1853: Use after free in Indexed DB. CVE-2022-1854: Use after free in ANGLE. CVE-2022-1855: Use after free in Messaging. CVE-2022-1856: Use after...

de.eonas.portal.demo:content (0.1), de.eonas.portal.demo:templates (0.1) +2 more potentially affected by CVE-2019-11818 via org.opencms:opencms-core (8.0.3.1)

org.opencms:opencms-core MAVEN version 8.0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal.demo:content 0.1 - de.eonas.portal.demo:templates 0.1 -...

org.opencms:opencms-webapp (8.0.4) potentially affected by CVE-2019-11818 via org.opencms:opencms-core (8.0.4)

org.opencms:opencms-core MAVEN version 8.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-webapp 8.0.4 Source cves: CVE-2019-11818 Source advisory: OSV:GHSA-C8J6-GQQ8-4PRJ...

org.opencms:opencms-webapp (8.0.2) potentially affected by CVE-2019-11818 via org.opencms:opencms-core (8.0.2)

org.opencms:opencms-core MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-webapp 8.0.2 Source cves: CVE-2019-11818 Source advisory: OSV:GHSA-C8J6-GQQ8-4PRJ...

edu.internet2.middleware.grouper:grouper-ui (>=2.4.0, <=2.6.13), edu.internet2.middleware.grouper:grouper-ui-webapp (>=2.6.10, <=2.6.13) potentially affected by CVE-2021-28490 via org.owasp:csrfguard (3.1.0)

org.owasp:csrfguard MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.owasp:csrfguard and may be impacted: - edu.internet2.middleware.grouper:grouper-ui =2.4.0, =2.6.10, =2.6.13 Source cves: CVE-2021-28490 Source advisory:...