The vulnerability of Google Chrome’s networking component allows a hacker to replace the domain name.

The vulnerability of Google Chrome’s networking component is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to remotely replace a domain name...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Schneider Electric EcoStruxure Control Expert 输入验证错误漏洞

Schneider Electric EcoStruxure Control Expert formerly Unity Pro is a suite of programming software for Schneider Electric logic controller products from Schneider Electric, France. A security vulnerability exists in Schneider Electric EcoStruxure Control Expert that arises from a failure to...

The vulnerability of Google Chrome web browser’s file system allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s file system is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Cryptohome browser component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Cryptohome web browser’s Google Chrome component is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

NewStart CGSL CORE 5.05 / MAIN 5.05 : mutt Vulnerability (NS-SA-2020-0095)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has mutt packages installed that are affected by a vulnerability: - An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles .. directory traversal in a mailbox name. CVE-2018-14355 No...

NewStart CGSL CORE 5.05 / MAIN 5.05 : libqb Vulnerability (NS-SA-2020-0088)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libqb packages installed that are affected by a vulnerability: - libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames under /dev/shm and /tmp without...

The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome allows a hacker to gain unauthorized access to protected information.

The vulnerability of the PDFium web browser’s PDF-content processing component in Google Chrome relates to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

CentOS: Security Advisory for qt5-qtbase (CESA-2020:5021)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-8532

A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in watchOS 5.2, iOS 12.2. A malicious application may be able to access restricted files...

The vulnerability of the WildFly application server in Java, related to errors in the implementation of security checks for standard elements, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the WildFly application server relates to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Incorrect Security Checks

firefox is doing incorrect security checks. Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks...

Debian: Security Advisory (DLA-2370-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Juniper Junos BGP DoS (JSA11024)

According to the self reported version of Junos OS on the remote device it is affected by a denial of service vulnerability as referenced in the JSA11024 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenab...

RHEL 7 : bash (RHSA-2020:3592)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3592 advisory. The bash packages provide Bash Bourne-again shell, which is the default shell for Red Hat Enterprise Linux. Security Fixes: bash: BASHCMD is writable...

Mozilla: Incorrect serialization of nsIPrincipal.origin for IPv6 addresses

The Mozilla Foundation Security Advisory describes this flaw as: Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks...

Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability (JSA11018)

The version of Junos OS installed on the remote host is prior to 12.3X48-D100, 15.1X49-D210, 17.3R2-S5, 17.4R2-S9, 18.1R3-S10, 18.2R2-S7, 18.3R1-S7, 18.4R1-S6, 19.1R1-S4, 19.2R1-S3, 19.3R2-S1, or 19.4R1-S1. It is, therefore, affected by a unified access control UAC bypass vulnerability as...

GLSA-202007-26 : SQLite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-26 SQLite: Multiple vulnerabilities Multiple vulnerabilities have been discovered in SQLite. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

Joker Malware Apps Once Again Bypass Google's Security to Spread via Play Store

Cybersecurity researchers took the wraps off yet another instance of Android malware hidden under the guise of legitimate applications to stealthily subscribe unsuspecting users for premium services without their knowledge. In a report published by Check Point research today, the malware —...

Fedora: Security Advisory for ntp (FEDORA-2020-a0b39d58db)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...