8630 matches found
Mozilla: Malicious extensions could have spoofed popup information
The Mozilla Foundation Security Advisory describes this issue as: A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website...
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Mozilla: Malicious extensions could have spoofed popup information
The Mozilla Foundation Security Advisory describes this issue as: A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website...
RHEL 8 : firefox (RHSA-2021:0989)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0989 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
RHEL 8 : thunderbird (RHSA-2021:0995)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0995 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.9.0. Security Fixes: Mozilla:...
The vulnerability of Google Chrome browser extensions, which allows a perpetrator to compromise data integrity
The vulnerability of Google Chrome browsers is related to the insufficient implementation of policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...
The vulnerability of Google Chrome browser extensions, related to deficiencies in access control for certain functions, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of Google Chrome’s browser extensions is related to insufficient checks of the policy. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of Google Chrome’s browser extensions, related to deficiencies in access control for certain functions, allows attackers to gain access to confidential data.
The vulnerability of Google Chrome browsers is related to the insufficient implementation of policies. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...
The vulnerability of Google Chrome browser extensions, related to deficiencies in access control for certain functions, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of Google Chrome browsers is related to the improper application of policies. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...
[SECURITY] Fedora 34 Update: gnome-shell-extensions-40.0~rc-1.fc34
GNOME Shell Extensions is a collection of extensions providing additional a nd optional functionality to GNOME Shell. Enabled extensions: apps-menu auto-move-windows drive-menu launch-new-instance native-window-placement places-menu screenshot-window-sizer user-theme window-list windowsNavigator...
Fedora: Security Advisory for gnome-shell-extensions (FEDORA-2021-303f6623fa)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
DNSSEC: How It Works & Key Considerations
From its beginnings as a replacement for a centralized database, the Domain Name System DNS has evolved into a dynamic, highly distributed, question-answer protocol. The proverbial "phone book of the internet" has increased in complexity and scale alongside the rapid growth of the World Wide Web...
The vulnerability of HEVC Video Extensions relates to improper code generation, allowing attackers to execute arbitrary code.
The vulnerability of HEVC Video Extensions is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Unrestricted File Upload in Form Framework
Due to the lack of ensuring file extensions belong to configured allowed mime-types, attackers can upload arbitrary data with arbitrary file extensions - however, default fileDenyPattern successfully blocked files like .htaccess or malicious.php...
TYPO3 安全漏洞
TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Typo3 Association. A file upload vulnerability exists in TYPO3, which can be exploited by an attacker to upload arbitrary data with arbitrary file extensions...
SYS.2.3.A17
Die Nutzung von Systemaufrufen SOLLTE insbesondere fuer exponierte Dienste und Anwendungen auf die unbedingt notwendige Anzahl beschraenkt werden z. B. durch seccomp. Die vorhandenen Standardprofile bzw. -regeln von SELinux, AppArmor sowie alternativen Erweiterungen SOLLTEN manuell ueberprueft un...
CVE-2021-27051
HEVC Video Extensions Remote Code Execution Vulnerability...
CVE-2021-27050
HEVC Video Extensions Remote Code Execution Vulnerability...