SoftCOM iKSORIS 安全漏洞

SoftCOM iKSORIS is an application from SoftCOM, Inc. A security vulnerability exists in SoftCOM iKSORIS versions prior to 79.0 that stems from a client-side denial-of-service attack that could result in requests being denied...

SUSE CVE-2019-13724

Out of bounds memory access in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

SUSE CVE-2020-6810

After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode. Combined with spoofing the browser chrome, this could have led to confusing the user about the current origin of the page and...

SUSE CVE-2020-12391

Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. This allowed the execution of scripts that should have been blocked, albeit with a unique opaque origin. This vulnerability affects Firefox 76...

SUSE CVE-2020-12411

Mozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 77...

Mozilla Firefox Address Bar Spoofing Vulnerability (CNVD-2020-42711)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An address bar spoofing vulnerability exists in versions of Mozilla Firefox prior to 70, which can be exploited by an attacker to cause the address bar to display the wrong domain name using the Histor...

CVE-2020-12415

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox 78...

UBUNTU-CVE-2020-12396

Mozilla developers and community members reported memory safety bugs present in Firefox 75. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 76...

CVE-2020-6799

Command line arguments could have been injected during Firefox invocation as a shell handler for certain unsupported file types. This required Firefox to be configured as the default handler for a given file type and for a file downloaded to be opened in a third party application that...

Mozilla Firefox Security Restriction Bypass Vulnerability (CNVD-2020-02974)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 72. An attacker could exploit the vulnerability to bypass security restrictions...

Google Chrome FileReader Memory Misreference Vulnerability

Google Chrome is the United States Google Google company's a Web browser. FileReader is one of the file reading plug-ins. A memory misreference vulnerability exists in FileReader in versions of Google Chrome prior to 72.0.3626.121. An attacker can exploit this vulnerability to execute arbitrary...

Google Chrome Domain Spoofing Vulnerability

Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in versions of Google Chrome prior to 72.0.3626.81, which stems from the program failing to adequately enforce policies. Allows remote attackers to spoof t...

UBUNTU-CVE-2018-17469

Incorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

Unspecified Vulnerability in Google Chrome ServiceWorker (CNVD-2018-22391)

Google Chrome is the United States Google Google company developed a Web browser. ServiceWorker is one of the background messaging components. A security vulnerability exists in ServiceWorker in versions of Google Chrome prior to 70.0.3538.67. No details of the vulnerability are provided at this...