CVE-2021-3450

The X509VFLAGX509STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an...

The vulnerability of PWA components in Google Chrome allows attackers to compromise data integrity.

The vulnerability of PWA components in Google Chrome browsers is related to improper security checks for standard elements. Exploiting this vulnerability can allow an attacker to compromise data integrity...

The vulnerability in the implementation of the Google Chrome browser’s external protocol allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s external browser protocol is related to improper security checks for standard elements. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the isolated environment of the Google Chrome browser’s iframe allows a perpetrator to compromise data integrity.

The vulnerability in the isolated iframe environment of Google Chrome relates to improper security checks for standard elements. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to improper security checks for standard elements. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service failures...

The vulnerability of Google Chrome’s HTTP protocol implementation lies in the improper implementation of security checks for standard elements, allowing attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of Google Chrome’s HTTP protocol implementation is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of protected information...

CVE-2021-27515

An input validation flaw exists in the node.js-url-parse, which results in the URL being incorrectly set to the document location protocol instead of the URL being passed as an argument. This flaw allows an attacker to bypass security checks on URLs. The highest threat from this vulnerability is ...

Fedora 32 : libpq / postgresql (2021-3db6876545)

The remote Fedora 32 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-3db6876545 advisory. - Update to the latest upstream release. FEDORA-2021-3db6876545 Note that Nessus has not tested for this issue but has instead relied only on the application...

The vulnerability of Google Chrome’s Skia graphic library allows attackers to perform spoofing attacks.

The vulnerability of Google Chrome’s Skia graphics library is related to implementation errors in standardized security checks. Exploiting this vulnerability allows a malicious actor to carry out spam attacks using a specially created HTML page...

Ubuntu 20.10 : SQLite vulnerability (USN-4732-1)

The remote Ubuntu 20.10 host has packages installed that are affected by a vulnerability as referenced in the USN-4732-1 advisory. SQLite could be made to crash or run programs if it processed a specially crafted query. Tenable has extracted the preceding description block directly from the Ubunt...

Fedora 33 : czmq (2021-c756747fd0)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-c756747fd0 advisory. - Downstream of zeromq, rebuilt to fix security issues FEDORA-2021-c756747fd0 Note that Nessus has not tested for this issue but has instead relied only on t...

The vulnerability of Google Chrome’s cookie handling mechanism allows a hacker to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s cookie handling mechanism is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the WebRTC technology implementation in Google Chrome browsers allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the WebRTC technology implemented in the Google Chrome web browser is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Google Chrome’s networking component allows a hacker to replace the domain name.

The vulnerability of Google Chrome’s networking component is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to remotely replace a domain name...

Schneider Electric EcoStruxure Control Expert 输入验证错误漏洞

Schneider Electric EcoStruxure Control Expert formerly Unity Pro is a suite of programming software for Schneider Electric logic controller products from Schneider Electric, France. A security vulnerability exists in Schneider Electric EcoStruxure Control Expert that arises from a failure to...

The vulnerability of Google Chrome web browser’s file system allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s file system is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Cryptohome browser component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Cryptohome web browser’s Google Chrome component is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

NewStart CGSL CORE 5.05 / MAIN 5.05 : libqb Vulnerability (NS-SA-2020-0088)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libqb packages installed that are affected by a vulnerability: - libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames under /dev/shm and /tmp without...

NewStart CGSL CORE 5.05 / MAIN 5.05 : mutt Vulnerability (NS-SA-2020-0095)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has mutt packages installed that are affected by a vulnerability: - An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles .. directory traversal in a mailbox name. CVE-2018-14355 No...