4158 matches found
Moodle Minor SQL injection risk in admin user browsing
A limited SQL injection risk was identified in the "browse list of users" site administration page...
GHSA-MQW9-3CJM-XWP3 Moodle Minor SQL injection risk in admin user browsing
A limited SQL injection risk was identified in the "browse list of users" site administration page...
CVE-2022-40315
A limited SQL injection risk was identified in the "browse list of users" site administration page...
Debian DSA-5244-1 : chromium - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5244 advisory. - Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to install...
Google Chrome Security Update (stable-channel-update-for-desktop_27-2022-09) - Linux
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
PT-2022-5094
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 106.0.5249.62 Description The issue is related to insufficient validation of untrusted input in the Safe Browsing feature, allowing a remote attacker to bypass a security feature via a crafted HTML page. This...
FreeBSD : chromium -- multiple vulnerabilities (18529cb0-3e9c-11ed-9bc7-3065ec8fd3ec)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 18529cb0-3e9c-11ed-9bc7-3065ec8fd3ec advisory. - Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior t...
CVE-2022-2856
CVE-2022-2856 is a Google Chrome/Chromium Intents input-validation vulnerability. Affected component: Chrome/Chromium on Android (and Chromium-derived browsers) prior to 104.0.5112.101; root cause: insufficient validation of untrusted input passed via Intents, enabling a remote attacker to load a...
CVE-2022-2856
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Valu...
Security bulletin: Directory browsing vulnerability in IBM's Netezza Performance Portal 1.0.2 (CVE-2013-0470)
Abstract A vulnerability exists in IBM's Netezza Performance Portal that allows the application's directory structure to be browsed. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-0470 DESCRIPTION: Users of Netezza Performance Portal can access and list the contents of the application’s director...
PT-2022-21508 · Apple · Ios +1
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16 Description: An issue existed with the file paths used to store website data, potentially allowing an unauthorized user to access browsing history. The issue was resolved by improving how website data is stored and by...
The vulnerability of the “Private Browsing” function in the Mozilla Firefox browser, which allows a hacker to trigger a service failure.
The vulnerability of the “Private Browsing” function in the Mozilla Firefox browser is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to induce a service failure...
The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...
WS-2022-0315
planka before 1.7.4 is vulnerable to forced browsing, which can lead to phishing attacks for example, redirecting the site to a fake login page. This can also lose data because Planka allows redirects without requesting that the user confirm leaving the page...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10092-1 Rating: important References: 1202075 Cross-References: CVE-2022-2603 CVE-2022-2604 CVE-2022-2605 CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612...
CVE-2022-2622
Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file...
CVE-2022-2622
Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file...
DEBIAN-CVE-2022-2622
Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file...