3702 matches found
Google Chrome < 68.0.3440.75 Multiple Vulnerabilities
Binary data 700361.pasl...
Security Bulletin: Vulnerability to allow an authenticated user to obtain sensitive user information (CVE-2018-1708) affects IBM Platform Symphony, IBM Spectrum Symphony
Summary Vulnerability to allow an authenticated user to obtain sensitive user information such as passwords through the WebUI CVE-2018-1708 affects IBM Platform Symphony, IBM Spectrum Symphony Vulnerability Details CVEID: CVE-2018-1708 DESCRIPTION: IBM Spectrum Symphony could allow an authenticat...
Oracle Communications Order and Service Management Component Remote Vulnerability (CNVD-2018-09096)
Oracle Communications is Oracle's suite of applications for rapidly delivering and monetizing digital life communications.Communications Order and Service Management is one of the components used to coordinate activities between internal BOSS systems. A security vulnerability exists in the WebUI...
Design/Logic Flaw
Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications subcomponent: WebUI. Supported versions that are affected are 7.2.4.3.0, 7.3.0.1.x, 7.3.1.0.7 and 7.3.5.0.x. Easily exploitable vulnerability allows low privileged attacker with...
IkiWiki Detection Consolidation
Consolidation of IkiWiki detections. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...
chromium-browser: csp bypass through extensions
Lack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension...
FreeBSD : chromium -- multiple vulnerabilities (8e986b2b-1baa-11e8-a944-54ee754af08e)
Google Chrome Releases reports : Several security fixes in this release, including : - 780450 High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01 - 787103 High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu @shhnjk on 2017-11-20 - 793620...
Google Chrome for Mac, Windows and Linux WebUI Memory Misreference Vulnerability
Google Chrome for Mac, Windows and Linux is a web browser for Mac, Windows and Linux platforms developed by Google, Inc. WebUI is one of the web interfaces. A memory misreference vulnerability exists in the WebUI in versions prior to Google Chrome 64.0.3282.119 on Windows, Mac, and Linux platform...
Security update for chromium (important)
This update for chromium to 64.0.3282.119 fixes several issues. These security issues were fixed: - CVE-2018-6031: Use after free in PDFium boo1077571 - CVE-2018-6032: Same origin bypass in Shared Worker boo1077571 - CVE-2018-6033: Race when opening downloaded files boo1077571 - CVE-2018-6034:...
CVE-2018-6054
Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension...
KLA11185 Multiple vulnerabilities in Google Chrome
Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface, obtain sensitive information and perform cross-site scripting attack. Below ...
Debian: Security Advisory (DLA-897-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-863-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2017-0449 Updated deluge packages fix security vulnerability
The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template fileCVE-2017-9031. Updated deluge package adds systemd services required to autostart deluge daemon and web service...
Updated deluge packages fix security vulnerability
The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template fileCVE-2017-9031. Updated deluge package adds systemd services required to autostart deluge daemon and web service...
OTRS WebUI Detection
Binary data otrsdetect.nbin...
Hirschmann Device Detection Consolidation
Consolidation of Hirschmann device detections. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Improper access control
An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log-in regardless the provided password...
CVE-2017-14189
Summary: CVE-2017-14189 affects Fortinet FortiWebManager 5.8.0 where the admin login fails to verify the provided password, allowing login access to anyone who can reach the admin WebUI. The root cause is an improper access-control check in the login process. Public references include the FortiGu...
