openSUSE Security Update : chromium (openSUSE-2020-519)

This update for chromium fixes the following issues : Chromium was updated to 81.0.4044.92 boo1168911 : - CVE-2020-6454: Use after free in extensions - CVE-2020-6423: Use after free in audio - CVE-2020-6455: Out of bounds read in WebSQL - CVE-2020-6430: Type Confusion in V8 - CVE-2020-6456:...

PT-2020-12759

Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue allows attackers to perform open redirect attacks due to insecure handling of loginRedirect page redirects. Recommendations For CA API Developer Portal versions 4.3.1 and...

PT-2020-12756

Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and access sensitive information due to insecure request handling. Recommendations For CA API...

CVE-2020-11661: Undefined Security Weakness

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data...

PT-2020-12757

Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue allows attackers to perform open redirect attacks due to insecure handling of 404 requests. Recommendations For CA API Developer Portal versions 4.3.1 and earlier, update...

PT-2020-12755

Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue is related to an access control flaw that allows privileged users to view and edit user data. Recommendations For CA API Developer Portal versions 4.3.1 and earlier, upda...

CVE-2020-11665: URL Redirection to Untrusted Site

CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks...

PT-2020-12758

Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue allows attackers to perform open redirect attacks due to the insecure handling of homeRedirect page redirects. Recommendations For CA API Developer Portal versions 4.3.1...

PT-2020-12753

Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue is related to an access control flaw that allows privileged users to perform a restricted user administration action. Recommendations For CA API Developer Portal versions...

PT-2020-12754

Name of the Vulnerable Software and Affected Versions CA API Developer Portal versions 4.3.1 and earlier Description The issue is related to an access control flaw that allows privileged users to view restricted sensitive information. Recommendations For CA API Developer Portal versions 4.3.1 and...

CVE-2020-11664: URL Redirection to Untrusted Site

CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks...

Moderate: Red Hat Security Advisory: Red Hat CodeReady Workspaces 2.1.0 release

Red Hat CodeReady Workspaces 2.1.0 has been released. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in th...

Google Chrome Development Tools Input Verification Unauthorized Access

The vulnerability of Google Chrome browser-based development tools is related to the lack of a mechanism for input validation. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data through a created HTML page...

KLA11748 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Visual Studio can be exploited...

CVE-2020-6443

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...

CVE-2020-6447

Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2020-6443

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...

CVE-2020-6443

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...

CVE-2020-6443

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...

UBUNTU-CVE-2020-6443

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...