CVE-2020-6441

CVE-2020-6441 affects Chromium/Google Chrome prior to version 81.0.4044.92 and is described as an insufficient policy enforcement issue in the omnibox component, allowing a remote, crafted HTML page to bypass the security UI. Public advisories confirm the vulnerability as a policy‑enforcement err...

CVE-2020-6439

Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page...

CVE-2020-6439

CVE-2020-6439 affects Google Chrome/Chromium where an insufficient policy enforcement in navigations permits bypassing the security UI via a crafted HTML page. Affected component is the navigation policy enforcement flow in Chromium/Chrome prior to version 81.0.4044.92. The issue is described as ...

Security feature bypass

vulnerability within the Multimedia Viewer feature of Cisco Webex Meetings could allow an authenticated, remote attacker to bypass security protections. The vulnerability is due to missing security warning dialog boxes when a room host views shared multimedia files. An authenticated, remote...

CVE-2020-3126

Cisco Webex Meetings Multimedia Viewer vulnerability (CVE-2020-3126) allows an authenticated, remote attacker with the host role to bypass security warnings when viewing shared multimedia. The root cause is missing warning dialog boxes that should appear before a file is displayed; a former room ...

The vulnerability of the Open Build Service software platform, related to authentication errors, allows attackers to circumvent existing security restrictions and execute a type of “man-in-the-middle” attack.

The vulnerability of the Open Build Service software platform is related to errors in verifying the authenticity of certificates. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute a type of “man-in-the-middle” attack...

CVE-2020-6441

Insufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page...

CVE-2020-6439

Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page...

CVE-2018-21062

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. When biometric authentication is disabled, an attacker can view Streams content e.g., a Gallery slideshow of a locked Secure Folder via a connection to an external device. The Samsung ID is SVE-2018-11766 August 2018...

CVE-2018-21082

An issue was discovered on Samsung mobile devices with N7.x software. Dex Station allows App Pinning bypass and lock-screen bypass via the "Use screen lock type to unpin" option. The Samsung ID is SVE-2017-11106 February 2018...

Security feature bypass

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. An attacker can bypass the password requirement for tablet user switching by folding the magnetic cover. The Samsung ID is SVE-2017-10602 December 2017...

Unspecified Vulnerability in PrimeKey Solutions EJBCA

PrimeKey Solutions EJBCA is a software PKI certificate authority package from PrimeKey Solutions, Sweden. A security vulnerability exists in PrimeKey Solutions EJBCA versions prior to 6.15.2.6 and 7.x versions prior to 7.3.1.2. An attacker can exploit this vulnerability to bypass security...

Unspecified Vulnerability in Google Chrome WebView

Google Chrome is a Web browser from Google, and WebView is a Webkit-based control for displaying Web pages. An unspecified vulnerability exists in Google Chrome WebView. An attacker can exploit this vulnerability with a specially crafted application to bypass security restrictions...

Unspecified Vulnerability in Google Chrome (CNVD-2020-38215)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an unspecified vulnerability that arises from the program not adequately validating untrusted input in the clipboard. An attacker can exploit this vulnerability to bypass security restrictions with special...

Google Chrome Multifunction Box Policy Enforcement Deficiency Vulnerability

Google Chrome is a web browser from Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in omnibox in versions of Google Chrome prior to 81.0.4044.92. A remote attacker can exploit this vulnerability to bypass security restrictions with the help of specially...

Samsung Mobile Device Input Validation Error Vulnerability (CNVD-2020-34730)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An input validation error vulnerability exists in Samsung mobile devices, which can be exploited by attackers to bypass security restrictions...

Unspecified Vulnerability in Google Chrome (CNVD-2020-38213)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an unspecified vulnerability that stems from insufficient policy enforcement. The vulnerability can be exploited by an attacker to bypass security restrictions with the help of specially crafted HTML pages...

Google Chrome suffers from an unspecified vulnerability (CNVD-2020-38209)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an unspecified vulnerability that stems from insufficient policy enforcement. The vulnerability can be exploited by an attacker to bypass security restrictions with the help of specially crafted HTML pages...

Google Chrome Security Update (stable-channel-update-for-desktop_7-2020-04) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-9816

A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all...