kernel: kernel: buffer over write in vgacon_scroll

A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VTRESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the...

Mozilla: When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario

The Mozilla Foundation Security Advisory describes this flaw as: When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the function APZCTreeManager::ComputeClippedCompositionBounds did not follow...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-1236)

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. This update is signed with the new UEFI signing key for openSUSE. It contains rebuilds of all available KMP packages also rebuilt with the new UEFi signing key. boo1174543 The following security bugs were fixed : ...

chromium-browser: Side-channel information leakage in scroll to text

Side-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

iOS14 shows Instagram opens camera even when users scroll photo feed

By Zara Khan iPhone's iOS14 shows that Instagram opens the user's camera even when... This is a post from HackRead.com Read the original post: iOS14 shows Instagram opens camera even when users scroll photo feed...

UBUNTU-CVE-2020-6531

Side-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Google Chrome Information Leakage Vulnerability (CNVD-2020-43474)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An information leakage vulnerability exists in "Scroll to Text" in Google Chrome versions prior to 84.0.4147.89, which can be exploited by attackers to obtain...

January 23, 2020—KB4534324 (Preview of Monthly Rollup)

None None...

openSUSE Security Update : links (openSUSE-2019-2185)

This update for links fixes the following issues : links was updated to 2.20.1 : - libevent bug fixes links was updated to 2.20 : - Security bug fixed: when links was connected to tor, it would send real dns requests outside the tor network when the displayed page contains link elements with...

Security update for links (moderate)

openSUSE Security Update: Security update for links Announcement ID: openSUSE-SU-2019:2185-1 Rating: moderate References: 1149886 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 An update that contains security fixes can now be...

scroll to top - Moderately critical - Cross site scripting - SA-CONTRIB-2019-061

The Scroll To Top module enables you to have an animated scroll to top link in the bottom of the node. The module does not sufficiently filter configuration text leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with...

WordPress Parallax Scroll Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language , support for PHP and MySQL servers to set up a personal blog site . Parallax Scroll Plugin is used in one of the page scrolling effect plugin . A cross-site scripting vulnerability exists in the...

EulerOS 2.0 SP3 : irssi (EulerOS-SA-2019-1093)

According to the version of the irssi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.CVE-2019-5882 Note that Tenable Network Security h...

Parallax Scroll <= 2.0.1 - Cross-Site Scripting (XSS)

The Parallax Scroll by adamrob.co.uk WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress Parallax Scroll Plugin < 2.1 XSS Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

WordPress Parallax Scroll plugin <= 2.0.1 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by Adam Robinson in WordPress Parallax Scroll plugin version = 2.0.1. Solution Update the WordPress Parallax Scroll plugin to the latest available version at least 2.1...

CVE-2019-7413

In the Parallax Scroll aka adamrob-parallax-scroll plugin before 2.1 for WordPress, includes/adamrob-parralax-shortcode.php allows XSS via the title text. "parallax" has a spelling change within the PHP filename...

Design/Logic Flaw

In the Parallax Scroll aka adamrob-parallax-scroll plugin before 2.1 for WordPress, includes/adamrob-parralax-shortcode.php allows XSS via the title text. "parallax" has a spelling change within the PHP filename...

CVE-2019-7413

In the Parallax Scroll aka adamrob-parallax-scroll plugin before 2.1 for WordPress, includes/adamrob-parralax-shortcode.php allows XSS via the title text. "parallax" has a spelling change within the PHP filename...

CVE-2019-7413

CVE-2019-7413 concerns the WordPress plugin “Parallax Scroll” (adamrob-parallax-scroll). All documented sources indicate the vulnerability is a cross-site scripting (XSS) flaw in the shortcode handling: the file includes/adamrob-parralax-shortcode.php allows XSS via the title text, with a noted f...