760 matches found
CVE-2024-49722
In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-49722
In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
Linux Distros Unpatched Vulnerability : CVE-2018-1042
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Moodle 3.x has Server Side Request Forgery in the filepicker. CVE-2018-1042 Note that Nessus relies on the presence of the package as reported by the vendor...
Linux Distros Unpatched Vulnerability : CVE-2024-25978
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality. CVE-2024-25978 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2025-8881
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI...
SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2025:03009-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03009-1 advisory. - Firefox Extended Support Release 140.2.0 ESR MFSA 2025-67 bsc1248162 CVE-2025-9179 bmo1979527: Sandbox escape due to invalid pointer in the...
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 140.2.0 ESR MFSA 2025-67 bsc1248162 CVE-2025-9179 bmo1979527: Sandbox escape due to invalid pointer in the Audio/Video: GMP component CVE-2025-9180 bmo1979782: Same-origin policy bypass in the Graphics:...
SUSE-SU-2025:03009-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 140.2.0 ESR MFSA 2025-67 bsc1248162 CVE-2025-9179 bmo1979527: Sandbox escape due to invalid pointer in the Audio/Video: GMP component CVE-2025-9180 bmo1979782: Same-origin policy bypass in the Graphics:...
SUSE-SU-2025:03008-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 140.2.0 ESR MFSA 2025-67 bsc1248162 CVE-2025-9179 bmo1979527: Sandbox escape due to invalid pointer in the Audio/Video: GMP component CVE-2025-9180 bmo1979782: Same-origin policy bypass in the Graphics:...
Introducing the Qualys App Picker: Easier, Faster Navigation for All Your Security Applications
Navigating your cybersecurity platform should be easy. That is why we have reimagined the way users access Qualys applications with the brand-new Qualys App Picker , a streamlined, intuitive navigation panel designed to make access faster, easier, and smarter in the Qualys Enterprise TruRisk...
Chromium: CVE-2025-8881 Inappropriate implementation in File Picker
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Linux Distros Unpatched Vulnerability : CVE-2024-7529
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability...
KLA86735 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Aura can be exploited to cause denial of service or execu...
Microsoft Edge (Chromium) < 139.0.3405.102 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 139.0.3405.102. It is, therefore, affected by multiple vulnerabilities as referenced in the August 15, 2025 advisory. - Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to...
Microsoft Edge (Chromium) < 138.0.3351.140 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 138.0.3351.140. It is, therefore, affected by multiple vulnerabilities as referenced in the August 15, 2025 advisory. - Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to...
Malicious code in respace-ui-component-picker (npm)
The package respace-ui-component-picker was found to contain malicious code...
Malicious code in @frozen-ui/picker (npm)
The package @frozen-ui/picker was found to contain malicious code...
Malicious code in via-date-picker-rollup (npm)
The package via-date-picker-rollup was found to contain malicious code...