747 matches found
CVE-2022-4183: Undefined Security Weakness
Insufficient policy enforcement in Popup Blocker in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
chromium -- multiple vulnerabilities
Chrome Releases reports: This release contains 28 security fixes, including: 1379054 High CVE-2022-4174: Type Confusion in V8. Reported by Zhenghang Xiao @Kipreyyy on 2022-10-27 1381401 High CVE-2022-4175: Use after free in Camera Capture. Reported by Leecraso and Guang Gong of 360 Alpha Lab on...
Google Chrome < 108.0.5359.71 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 108.0.5359.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop29 advisory. - Use after free in Accessibility in Google Chrome prior to 108.0.5359.71...
New Updates for ESET's Advanced Home Solutions
It's no secret that antivirus software is as essential to your computer as a power cord. However, the threats don't stop at your devices. For example, criminals trying to steal your data can attack your Wi-Fi router, and phishing attempts can target your email. ESET's latest consumer product...
CVE-2022-44727
CVE-2022-44727 affects the PrestaShop EU Cookie Law GDPR (Banner + Blocker) module prior to version 2.1.3. The vulnerability is a SQL Injection via cookies lgcookieslaw or __lglaw, enabling unauthorized data access as described in multiple sources. Root cause: unsafely handled cookie data in the ...
CVE-2022-44727: Improper Neutralization of Special Elements used in an SQL Command
The EU Cookie Law GDPR Banner + Blocker module before 2.1.3 for PrestaShop allows SQL Injection via a cookie lgcookieslaw or lglaw...
WordPress User Blocker plugin <= 1.5.5 - Auth. CSV Injection vulnerability
Auth. CSV Injection vulnerability discovered by Mika in the WordPress User Blocker plugin versions = 1.5.5. Solution Update the WordPress User Blocker plugin to the latest available version at least 1.5.6...
Malicious code in com.tunnelbear.blocker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c468294ac2adc018e4e040e8fd0d5f9abd2e499644c0d57947a408e46fa1e0c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OPENSUSE-SU-2022:0110-1 Security update for opera
This update for opera fixes the following issues: Update to 85.0.4341.28 - CHR-8816 Update chromium on desktop-stable-99-4341 to 99.0.4844.84 - DNA-98092 Crash at views::MenuItemView::GetMenuController - DNA-98278 Translations for O85 - DNA-98320 Mac Unable to delete recent search entries -...
OPENSUSE-SU-2022:0103-1 Security update for opera
This update for opera fixes the following issues: Opera was updated to 85.0.4341.28 - CHR-8816 Update chromium on desktop-stable-99-4341 to 99.0.4844.84 - DNA-98092 Crash at views::MenuItemView::GetMenuController - DNA-98278 Translations for O85 - DNA-98320 Mac Unable to delete recent search...
Wordpress Plugin IP2Location Country Blocker Cross-Site Request Forgery Vulnerability
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site request forgery vulnerability exists in the...
Wordpress Plugin IP2Location Country Blocker Cross-Site Request Forgery Vulnerability
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site request forgery vulnerability exists in the...
Tips to protect your data, security, and privacy from a hands-on expert
This post was authored by one of the most active helpers on the Malwarebytes forums who wishes to remain anonymous. Back in the early days of personal computing, perhaps one of the only real concerns was data loss from a drive failure. That risk still exists, but we all face many other threats...
WordPress Ad Blocker Notify Lite plugin <= 2.4.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ad Blocker Notify Lite plugin versions = 2.4.0. Solution No patched version available...
WordPress Woocommerce Blocker Lite plugin <= 2.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Woocommerce Blocker Lite plugin versions = 2.0.3. Solution Update the WordPress Woocommerce Blocker Lite plugin to the latest available version at least 2.1.0...
WordPress Ad Blocker Notify Lite plugin <= 2.4.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Ad Blocker Notify Lite plugin versions = 2.4.0. Solution No patched version available...
WordPress Woocommerce Blocker Lite plugin <= 2.0.3 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Woocommerce Blocker Lite plugin versions = 2.0.3. Solution Update the WordPress Woocommerce Blocker Lite plugin to the latest available version at least 2.1.0...
CVE-2021-25108
The IP2Location Country Blocker WordPress plugin before 2.26.6 does not have CSRF check in the ip2locationcountryblockersaverules AJAX action, allowing attackers to make a logged in admin block arbitrary country, or block all of them at once, preventing users from accessing the frontend...
CVE-2021-25108
The IP2Location Country Blocker WordPress plugin before 2.26.6 does not have CSRF check in the ip2locationcountryblockersaverules AJAX action, allowing attackers to make a logged in admin block arbitrary country, or block all of them at once, preventing users from accessing the frontend...