Google Chrome < 108.0.5359.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 108.0.5359.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop29 advisory. - Use after free in Accessibility in Google Chrome prior to 108.0.5359.71...

CVE-2022-4195

Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing warnings via a malicious file. Chromium security severity: Medium...

CVE-2022-4195

CVE-2022-4195 stems from insufficient policy enforcement in Safe Browsing within Google Chrome. The vulnerability allows a remote attacker to bypass Safe Browsing warnings via a malicious file, affecting Chrome versions prior to 108.0.5359.71. The Chrome 108 release notes acknowledge this and lis...

CVE-2022-4195

Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing warnings via a malicious file. Chromium security severity: Medium...

Google Chrome < 108.0.5359.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 108.0.5359.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop29 advisory. - Use after free in Accessibility in Google Chrome prior to 108.0.5359.71...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 28 security fixes, including: 1379054 High CVE-2022-4174: Type Confusion in V8. Reported by Zhenghang Xiao @Kipreyyy on 2022-10-27 1381401 High CVE-2022-4175: Use after free in Camera Capture. Reported by Leecraso and Guang Gong of 360 Alpha Lab on...

The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Information Disclosure

firefox, sid, is vulnerable to information disclosure. The vulnerability exists in private browsing mode because of private browsing date not properly manage which allows to attacker to access sensitive information in the system...

Ubuntu: Security Advisory (USN-5726-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Use After Free

chromium is vulnerable to use-after free. The vulnerability exists in Safe Browsing in Google Chrome which allows an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

USN-5726-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the contents of the addressbar, bypass security restrictions, cross-site tracing or execute arbitra...

GHSA-XX6G-JJ35-PXJV Cross Site Scripting vulnerability in wsgidav when directory browsing is enabled

Impact Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. Patches Users can upgrade to v4.1.0 Workarounds Set dirbrowser.enable = False in the configuration. For instance, when using a Python dictionary to configure the...

Cross Site Scripting vulnerability in wsgidav when directory browsing is enabled

Impact Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. Patches Users can upgrade to v4.1.0 Workarounds Set dirbrowser.enable = False in the configuration. For instance, when using a Python dictionary to configure the...

CVE-2022-45417

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private...

UBUNTU-CVE-2022-45417

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private...

Security Vulnerabilities fixed in Firefox 107 — Mozilla

Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined with Range requests might have allowed them to determine the presence or length of a media file. Through a series of popup and window.print calls, an...

Cross-Site Scripting (XSS)

wsgidav is vulnerable to cross-site scripting. The vulnerability exists in the init function of dirbrowser.py when directory browsing is enabled which allows an attacker to inject and execute malicious JavaScript...

CVE-2022-41905

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set dirbrowser.enable = Fal...

PYSEC-2022-43018

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set dirbrowser.enable = Fal...

CVE-2022-41905 wsgidav is vulnerable to Cross-Site Scripting (XSS) when directory browsing is enabled

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set dirbrowser.enable = Fal...