CVE-2020-27831

A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications. This flaw allows an attacker to add email addresses they do not own to repository notifications...

Authorization

A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications. This flaw allows an attacker to add email addresses they do not own to repository notifications...

CVE-2020-27831

A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications. This flaw allows an attacker to add email addresses they do not own to repository notifications...

CVE-2021-27676

Centreon version 20.10.2 is affected by a cross-site scripting XSS vulnerability. The depdescription Dependency Description and depname Dependency Name parameters are vulnerable to stored XSS. A user has to log in and go to the Configuration Notifications Hosts page...

Cross site scripting

Centreon version 20.10.2 is affected by a cross-site scripting XSS vulnerability. The depdescription Dependency Description and depname Dependency Name parameters are vulnerable to stored XSS. A user has to log in and go to the Configuration Notifications Hosts page...

CVE-2021-27676

Centreon version 20.10.2 is affected by a cross-site scripting XSS vulnerability. The depdescription Dependency Description and depname Dependency Name parameters are vulnerable to stored XSS. A user has to log in and go to the Configuration Notifications Hosts page...

PT-2021-11422 · Red Hat · Red Hat Quay

Name of the Vulnerable Software and Affected Versions: Red Hat Quay affected versions not specified Description: A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications. This flaw allows an...

openSUSE Security Update : chromium (openSUSE-2021-762)

This update for chromium fixes the following issues : This is a rerelease with aarch64 enabled. Chromium 90.0.4430.212 boo1185908 - CVE-2021-30506: Incorrect security UI in Web App Installs - CVE-2021-30507: Inappropriate implementation in Offline - CVE-2021-30508: Heap buffer overflow in Media...

Insecure Keys Management

github.com/google/exposure-notifications-server uses an insecure key management. An attacker can re-publish imported keys before they have expired, allowing for potential replay of RPIs...

openSUSE: Security Advisory for chromium (openSUSE-SU-2021:0762-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Import of incorrectly embargoed keys could cause early publication

Impact If your installation is using the export-importer service, there is potential impact. If your installation is not importing keys via the export-importer services, your installation is not impacted. In versions 0.19.1 and earlier, the export-importer service assumed that the server it was...

Debian DSA-4917-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2021-30506 @retsew0x01 discovered an error in the Web App installation interface. - CVE-2021-30507 Alison Huffman discovered an error in the Offline mode. - CVE-2021-30508 Leecraso and Guang Gong discovered a buffer...

openSUSE: Security Advisory for chromium (openSUSE-SU-2021:0742-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:0742-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 90.0.4430.212 boo1185908 CVE-2021-30506: Incorrect security UI in Web App Installs CVE-2021-30507: Inappropriate implementation in Offline CVE-2021-30508: Heap buffer overflow in Media Feeds CVE-2021-30509: Out of bounds write in Tab...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0742-1 Rating: important References: 1185496 1185716 1185908 Cross-References: CVE-2021-30506 CVE-2021-30507 CVE-2021-30508 CVE-2021-30509 CVE-2021-30510 CVE-2021-30511 CVE-2021-30512 CVE-2021-30513...

Metasploit Wrap-Up

Stopped at the gate? A fun new module from timwr, taking advantage of a technique reported by Cedric Owens, is reminding everyone if there is no fence a gate will not deter us. The new module provides a quick wrapper for payloads that bypasses download origination and authorization requirements...

Chromium: CVE-2021-30512 Use after free in Notifications

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA12176 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A use after free vulnerability in...

Google Chrome Resource Management Error Vulnerability (CNVD-2021-34711)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability previously existed in Google Chrome version 90.0.4430.212. The vulnerability stems from a "Use Security After Free Use" issue found in the program's "Notifications" component. No details of...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability previously existed in Google Chrome version 90.0.4430.212. The vulnerability stems from a "Use Security After Free Use" issue found in the program's "Notifications" component. No details of...