Design/Logic Flaw

Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to reboot Chrome OS to potentially exploit heap corruption via UI interaction. Chromium security severity: Low...

UBUNTU-CVE-2022-3318

Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to reboot Chrome OS to potentially exploit heap corruption via UI interaction. Chromium security severity: Low...

CVE-2022-3318

CVE-2022-3318 is a use-after-free in ChromeOS Notifications affecting Google Chrome on ChromeOS prior to 106.0.5249.62. Exploitation would require user interaction (a reboot lure) and could enable heap corruption via UI. Remediation: update to Chrome/Chromium 106.0.5249.61 or later (as reflected ...

CVE-2022-3318

Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to reboot Chrome OS to potentially exploit heap corruption via UI interaction. Chromium security severity: Low...

CVE-2022-3318

Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to reboot Chrome OS to potentially exploit heap corruption via UI interaction. Chromium security severity: Low...

GLSA-202210-16 : Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-16 Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities - Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to...

CVE-2022-24669 Anonymous users can register / de-register for configuration change notifications

It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network services...

Stored Cross-Site Scripting (XSS)

Description There is insufficient input validation in the pop-up notifications. Proof of Concept Steps to reproduce: 1. Log in to an admin account 2. Click on Services - Services Templates 3. Create a new Service Template with the Name alertdocument.location 4. The XSS is triggered when the...

The vulnerability in the implementation of the Export Utility function of the Ultimate SMS Notifications plugin for WooCommerce, a content management system for WordPress websites, allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Export Utility function implementation in the Ultimate SMS Notifications plugin for WooCommerce, a content management system for WordPress websites, is related to the absence of a mechanism to neutralize elements in the CSV file. Exploiting this vulnerability could allow ...

The vulnerability of the Notifications component of the Google Chrome browser allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Notifications component of the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

Improvements in Security Update Notifications Delivery – And a New Delivery Method

At MSRC, we are passionate about ensuring our customers have a positive experience when they use the Microsoft Security Update Guide SUG. A big part of improving that experience is ensuring that customers have timely and easily accessible notifications. As such we have two important announcements...

CVE-2022-42715

A reflected XSS vulnerability exists in REDCap before 12.04.18 in the Alerts & Notifications upload feature. A crafted CSV file will, when uploaded, trigger arbitrary JavaScript code execution...

CVE-2022-42715

A reflected XSS vulnerability exists in REDCap before 12.04.18 in the Alerts & Notifications upload feature. A crafted CSV file will, when uploaded, trigger arbitrary JavaScript code execution...

Cross site scripting

A reflected XSS vulnerability exists in REDCap before 12.04.18 in the Alerts & Notifications upload feature. A crafted CSV file will, when uploaded, trigger arbitrary JavaScript code execution...

Improvements in Security Update Notifications Delivery - And a New Delivery Method

At MSRC, we are passionate about ensuring our customers have a positive experience when they use the Microsoft Security Update Guide SUG. A big part of improving that experience is ensuring that customers have timely and easily accessible notifications. As such we have two important announcements...

Improvements in Security Update Notifications Delivery - And a New Delivery Method

At MSRC, we are passionate about ensuring our customers have a positive experience when they use the Microsoft Security Update Guide SUG. A big part of improving that experience is ensuring that customers have timely and easily accessible notifications. As such we have two important announcements...

REDCap 跨站脚本漏洞

REDCap is a data collection and management web application. A security vulnerability exists in versions of REDCap prior to 12.04.18, which stems from its Alerts & Notifications upload feature that allows an attacker to upload a carefully crafted CSV file to achieve reflective cross-site scripting...

CVE-2022-42715

A reflected XSS vulnerability exists in REDCap before 12.04.18 in the Alerts & Notifications upload feature. A crafted CSV file will, when uploaded, trigger arbitrary JavaScript code execution...

Alert || high memory usage - SDX

SDX high memory usage. Customer might see this on their device and might be receiving smtp alerts warning them of this...

USN-5659-1: kitty vulnerabilities

Stephane Chauveau discovered that kitty incorrectly handled image filenames with special characters in error messages. A remote attacker could possibly use this to execute arbitrary commands. This issue only affected Ubuntu 20.04 LTS. CVE-2020-35605 Carter Sande discovered that kitty incorrectly...