FreeBSD : chromium -- multiple vulnerabilities (83eb9374-7b97-11ed-be8f-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 83eb9374-7b97-11ed-be8f-3065ec8fd3ec advisory. - Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote...

KLA20125 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Blink Frames can be exploited to cause denial of service or...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 8 security fixes, including: 1383991 High CVE-2022-4436: Use after free in Blink Media. Reported by Anonymous on 2022-11-15 1394692 High CVE-2022-4437: Use after free in Mojo IPC. Reported by koocola@alocook and Guang Gong of 360 Vulnerability Resear...

Google Chrome < 108.0.5359.125 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 108.0.5359.125. It is, therefore, affected by multiple vulnerabilities as referenced in the 202212stable-channel-update-for-desktop13 advisory. - Use after free in Blink Media. CVE-2022-4436 - Use after free in Mojo IPC...

Google Chrome < 108.0.5359.124 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 108.0.5359.124. It is, therefore, affected by multiple vulnerabilities as referenced in the 202212stable-channel-update-for-desktop13 advisory. - Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. and V8 is an open source JavaScript engine. A security vulnerability exists in Google Chrome versions prior to 108.0.5359.124 for Mac and Linux, and prior to 108.0.5359.125 for Windows, which stems from a post-release reuse in Aura...

CVE-2022-2249

Privilege escalation related vulnerabilities were discovered in Avaya Aura Communication Manager that may allow local administrative users to escalate their privileges. This issue affects Communication Manager versions 8.0.0.0 through 8.1.3.3 and 10.1.0.0...

CVE-2022-2249

Privilege escalation related vulnerabilities were discovered in Avaya Aura Communication Manager that may allow local administrative users to escalate their privileges. This issue affects Communication Manager versions 8.0.0.0 through 8.1.3.3 and 10.1.0.0...

Privilege escalation

Privilege escalation related vulnerabilities were discovered in Avaya Aura Communication Manager that may allow local administrative users to escalate their privileges. This issue affects Communication Manager versions 8.0.0.0 through 8.1.3.3 and 10.1.0.0...

CVE-2022-2249

Technical details about CVE-2022-2249 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2022-2249 Avaya Aura Communication Manager Privilege Escalation Vulnerabilities

Privilege escalation related vulnerabilities were discovered in Avaya Aura Communication Manager that may allow local administrative users to escalate their privileges. This issue affects Communication Manager versions 8.0.0.0 through 8.1.3.3 and 10.1.0.0...

Avaya Aura Communication Manager 安全漏洞

Avaya Aura Communication Manager is a comprehensive software foundation for real-time voice and video interactions from Avaya USA. A security vulnerability exists in Avaya Aura Communication Manager versions 8.0.0.0 through 8.1.3.3, prior to 10.1.0.1, which originated from a vulnerability that...

CVE-2022-2249 Avaya Aura Communication Manager Privilege Escalation Vulnerabilities

Privilege escalation related vulnerabilities were discovered in Avaya Aura Communication Manager that may allow local administrative users to escalate their privileges. This issue affects Communication Manager versions 8.0.0.0 through 8.1.3.3 and 10.1.0.0...

CVE-2022-2975

A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the root user. This issue affects Application Enablement Services versions 8.0.0.0...

CVE-2022-2975

A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the root user. This issue affects Application Enablement Services versions 8.0.0.0...

CVE-2022-2975

A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the root user. This issue affects Application Enablement Services versions 8.0.0.0...

Design/Logic Flaw

A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the root user. This issue affects Application Enablement Services versions 8.0.0.0...

PT-2022-19817 · Avaya · Avaya Aura Application Enablement Services

Name of the Vulnerable Software and Affected Versions: Avaya Aura Application Enablement Services versions 8.0.0.0 through 8.1.3.4 Avaya Aura Application Enablement Services versions 10.1.0.0 through 10.1.0.1 Description: A vulnerability related to weak permissions was detected in the Avaya Aura...

CVE-2022-2975

The CVE-2022-2975 issue affects Avaya Aura Application Enablement Services web application. A weak-permissions flaw allows an administrative user to modify accounts, which can lead to arbitrary code execution as the root user. Affected versions are 8.0.0.0–8.1.3.4 and 10.1.0.0–10.1.0.1; versions ...

CVE-2022-2975 Avaya Aura Application Enablement Services weak permissions in web application

A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the root user. This issue affects Application Enablement Services versions 8.0.0.0...