Google Chrome Same Origin Policy Bypass Vulnerability (CNVD-2020-00270)

Google Chrome is a web browser from Google, and WebSockets is one of the communication protocols used to exchange data between the client and the server. Google Chrome suffers from a same-origin policy bypass vulnerability that stems from the program's failure to fully implement the policy. The...

Google Chrome Type Obfuscation Vulnerability (CNVD-2020-00274)

Google Chrome is the United States Google Google company's a Web browser. JavaScript is one of the JavaScript code debugging components. A type confusion vulnerability exists in Google Chrome. An attacker can exploit this vulnerability to cause heap corruption with the help of specially crafted...

Google Chrome Resource Management Error Vulnerability (CNVD-2019-42756)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions prior to Google Chrome 75.0.3770.142. The vulnerability stems from the system's mismanagement of resources such as memory. A remote attacker can exploit the vulnerability to cause heap...

Cross-Site Scripting

Overview All versions of html-pages are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize folder names, allowing attackers to execute arbitrary JavaScript in the victim's browser through folders with names containing malicious code. Recommendation No fix is currently available...

CVE-2018-20434

LibreNMS 1.46 is affected by CVE-2018-20434. The vulnerability allows remote command execution via the POST parameter $_POST['community'] used in html/pages/addhost.inc.php during device creation. A subsequent request to /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=localhost tri...

[SECURITY] Fedora 30 Update: appstream-generator-0.7.7-1.fc30

appstream-generator is a tool to generate distribution metadata from package repositories. It will extract icons, download screenshots, validate and transform the metadata, and return XML or YAML files that can be read by AppStream clients, such as software centers. It will also generate issue...

Debian DSA-4395-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2018-17481 A use-after-free issue was discovered in the pdfium library. - CVE-2019-5754 Klzgrad discovered an error in the QUIC networking implementation. - CVE-2019-5755 Jay Bosamiya discovered an implementation erro...

GHSA-5P26-HW7F-3CPR Cross-Site Scripting in html-pages

All versions of html-pages are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize folder names, allowing attackers to execute arbitrary JavaScript in the victim's browser through folders with names containing malicious code. Recommendation No fix is currently available. Conside...

Cross-Site Scripting in html-pages

All versions of html-pages are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize folder names, allowing attackers to execute arbitrary JavaScript in the victim's browser through folders with names containing malicious code. Recommendation No fix is currently available. Conside...

Google Chrome DevTools Navigation Restriction Bypass Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. Devtools is one of the development and debugging tools. A security vulnerability exists in DevTools in versions of Google Chrome prior to 66.0.3359.117, which stems from the program's failure to handle URLs correctl...

Google Chrome Extensions Memory Misreference Vulnerability (CNVD-2019-03601)

Google Chrome is a web browser developed by Google, Inc.Extensions is one of the browser extensions. A memory misreference vulnerability exists in Extensions in versions prior to Google Chrome 71.0.3578.80. A remote attacker can exploit the vulnerability to corrupt the heap with the help of...

Google Chrome Downloads Command Execution Vulnerability

Google Chrome is a web browser developed by Google.Downloads is one of the download components. A security vulnerability exists in Downloads in versions of Google Chrome prior to 66.0.3359.117, which originates when the program parses documents into HTML files. A remote attacker could exploit thi...

GitLab: A profile page of a user can be denied from loading by appending .html to the username

Summary: I was able to create a user with the username "dashboard.html". Once, the account is set up, when the user clicks on his profile, the actual dashboard will show up instead of his profile page. Same can be done for all the HTML pages in GitLab. Steps To Reproduce: 1. Register a new user...

Google Chrome Networking Disk Cache Memory Misreference Vulnerability

Google Chrome is a web browser developed by Google.Networking Disk Cache is one of the network disk cache components. A memory misreference vulnerability exists in Networking Disk Cache in Google Chrome versions prior to 66.0.3359.106. The vulnerability can be exploited to execute arbitrary code...

Google Chrome Skia Heap Corruption Vulnerability

Google Chrome is a web browser developed by Google, Inc. Skia is an open source 2D graphics library that provides common APIs that work on a variety of hardware and software platforms. A security vulnerability exists in Skia in versions of Google Chrome prior to 71.0.3578.80. A remote attacker ca...

Google Chrome V8 Buffer Overflow Vulnerability (CNVD-2019-01581)

Google Chrome is the United States Google Google company developed a Web browser. v8 is one of the open source JavaScript engine. An out-of-bounds write vulnerability exists in V8 in versions prior to Google Chrome 71.0.3578.80. A remote attacker can exploit this vulnerability to execute arbitrar...

Google Chrome Media Information Disclosure Vulnerability

Google Chrome is a web browser developed by Google, Inc.Media is one of the multimedia components. A security vulnerability exists in Media in versions of Google Chrome prior to 71.0.3578.80. A remote attacker can exploit this vulnerability to bypass the same-origin policy used for audio content...

Google Chrome Skia Arbitrary Code Execution Vulnerability

Google Chrome is a web browser developed by Google, Inc. Skia is an open source 2D graphics library that provides common APIs that work on a variety of hardware and software platforms. A security vulnerability exists in Skia in versions of Google Chrome prior to 66.0.3359.106. A remote attacker c...

chromium-browser: Out of bounds memory access in V8

Incorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page...

Google Chrome Blink Information Disclosure Vulnerability (CNVD-2018-24370)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security vulnerability exists in Blink in Google Chrome versions prior to 70.0.3538.67. The vulnerability can be exploited by ...