CVE-2020-6482

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

CVE-2020-6472

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory or disk via a crafted Chrome Extension...

Google Chrome Security Bypass Vulnerability (CNVD-2020-29309)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Developer Tools in versions prior to Google Chrome 83.0.4103.61, which stems from the program's failure to fully enforce policies. An attacker can exploit the vulnerability to bypass security...

Google Chrome Security Bypass Vulnerability (CNVD-2020-29307)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Developer Tools in versions prior to Google Chrome 83.0.4103.61, which stems from the program's failure to fully enforce policies. An attacker can exploit the vulnerability to bypass security...

Google Chrome Security Bypass Vulnerability (CNVD-2020-29228)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in the developer tools in Google Chrome versions prior to 83.0.4103.61. An attacker can exploit the vulnerability to bypass security restrictions with the help of a specially crafted website...

Google Chrome Security Bypass Vulnerability (CNVD-2020-29306)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Developer Tools in versions prior to Google Chrome 83.0.4103.61, which stems from the program's failure to fully enforce policies. An attacker can exploit the vulnerability to bypass security...

Google Chrome Security Bypass Vulnerability (CNVD-2020-29235)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in the developer tools in Google Chrome versions prior to 83.0.4103.61. An attacker can exploit the vulnerability to bypass security restrictions with the help of a specially crafted website...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Rational Application Developer for WebSphere Software

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 that are used by IBM Rational Application Developer for WebSphere Software. IBM Rational Application Developer for WebSphere Software has addressed the applicable CVEs. Vulnerability Details CVEID:...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Rational Application Developer for WebSphere Software

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 that are used by IBM Rational Application Developer for WebSphere Software. IBM Rational Application Developer for WebSphere Software has addressed the applicable CVEs. Vulnerability Details CVEID:...

PT-2020-3433

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 83.0.4103.61 Description The issue is related to insufficient policy enforcement in developer tools, which can be exploited by an attacker to obtain potentially sensitive information. This can be achieved by...

PT-2020-3515

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 83.0.4103.61 Description The issue is related to an inappropriate implementation in developer tools, allowing a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page. This...

PT-2020-3432

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 83.0.4103.61 Description The issue is related to insufficient policy enforcement in developer tools, allowing an attacker to potentially perform a sandbox escape via a crafted Chrome Extension. This could be...

Micro Focus Enterprise Server and Enterprise Developer Cross-Site Scripting Vulnerability

Micro Focus Enterprise Server and Micro Focus Enterprise Developer are both products of Micro Focus, a British company.Micro Focus Enterprise Server is an enterprise server. Micro Focus Enterprise Server is an enterprise server that provides a deployment environment for mainframe applications.Mic...

PT-2020-3430

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 83.0.4103.61 Description The issue is related to insufficient policy enforcement in developer tools, allowing an attacker to potentially perform a sandbox escape via a crafted Chrome Extension if a user is...

PT-2020-3508

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 83.0.4103.61 Description The issue is related to insufficient policy enforcement in developer tools, allowing an attacker to bypass navigation restrictions via a crafted Chrome Extension if a user is convinced t...

CVE-2020-9524

Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Patch Update 8. The vulnerability could allow an attacker to trigger administrative actions when an administrator viewed malicious data left by the attacker...

CVE-2020-9524

Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Patch Update 8. The vulnerability could allow an attacker to trigger administrative actions when an administrator viewed malicious data left by the attacker...

CVE-2020-9524

Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Patch Update 8. The vulnerability could allow an attacker to trigger administrative actions when an administrator viewed malicious data left by the attacker...

Cross site scripting

Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Patch Update 8. The vulnerability could allow an attacker to trigger administrative actions when an administrator viewed malicious data left by the attacker...

CVE-2020-9524

Micro Focus Enterprise Server and Enterprise Developer (all versions prior to 5.0 Patch Update 8) are affected by a Cross-Site Scripting (XSS) vulnerability in the web application layer. The root cause is insufficient validation of client-side data, enabling both stored and reflected XSS scenario...