Updated chromium-browser-stable packages fix security vulnerability

The chromium-browser-stable package has been updated to the 101.0.4951.64 version, fixing many bugs and 13 CVE. Some of them are listed below: 1316990 High CVE-2022-1633: Use after free in Sharesheet. Reported by Khalil Zhani on 2022-04-18 1314908 High CVE-2022-1634: Use after free in Browser UI...

org.jenkins-ci.plugins.nodesharing:node-sharing-executor (>=2.0.0, <=2.0.3), org.jenkins-ci.plugins.nodesharing:node-sharing-lib (>=2.0.0, <=2.0.3) +3 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.17.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.nodesharing:node-sharing-executor =2.0.0, =2.0.0, =2.0.0, =2.0.0,...

UBUNTU-CVE-2022-1736

Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default...

CVE-2022-1736

Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default...

KLA12555 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in ANGLE can be exploited to cause denial of service or execute arbitrar...

PT-2022-14082 · Unknown +3 · Gnome-Control-Center +3

Name of the Vulnerable Software and Affected Versions: gnome-control-center affected versions not specified Description: The issue concerns the configuration of gnome-control-center in Ubuntu, which allowed Remote Desktop Sharing to be enabled by default. Additionally, turning off RDP Remote...

Use-After-Free

chromium is vulnerable to use-after-free. The vulnerability exists in Sharing which causes a heap corruption allowing a malicious attacker to cause a denial of service...

org.jenkins-ci.plugins.nodesharing:node-sharing-executor (>=2.0.0, <=2.0.3), org.jenkins-ci.plugins.nodesharing:node-sharing-lib (>=2.0.0, <=2.0.3) +2 more potentially affected by CVE-2018-1000601 via org.jenkins-ci.plugins:credentials (1.27)

org.jenkins-ci.plugins:credentials MAVEN version 1.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins.nodesharing:node-sharing-executor =2.0.0, =2.0.0, =2.0.0, =2.0.0,...

org.jenkins-ci.plugins.nodesharing:foreman-node-sharing (>=1.2.8, <=1.2.9), org.jenkins-ci.plugins.nodesharing:node-sharing-executor (>=2.0.0, <=2.0.3) +3 more potentially affected by CVE-2018-1999037 via org.jenkins-ci.plugins:resource-disposer (>=0.1, <=0.8)

org.jenkins-ci.plugins:resource-disposer MAVEN version =0.1, =1.2.8, =2.0.0, =1.2.0, =2.18, =0.32, =0.37 Source cves: CVE-2018-1999037 Source advisory: OSV:GHSA-63JG-5WV6-7GHV...

GHSA-2XJX-V99W-GQF3 Exposure of Sensitive Information in System.Net.Http

An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing CORS configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .N...

Chromium: CVE-2022-1640 Use after free in Sharing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Insecure cookie sharing in Hawtio

It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store cookies are stored locally and are not passed between the client and the end URL which means all clients using that proxy are sharing the same cookies...

Google Chrome Microsoft Edge Screen Sharing RCE

The vulnerability of the screen-sharing function in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

Google Chrome Screen Sharing RCE

The vulnerability of the Google Chrome browser’s screen sharing function is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

DEA Investigating Breach of Law Enforcement Data Portal

The U.S. Drug Enforcement Administration DEA says it is investigating reports that hackers gained unauthorized access to an agency portal that taps into 16 different federal law enforcement databases. KrebsOnSecurity has learned the alleged compromise is tied to a cybercrime and online harassment...

Account Takeover

Description In this case i found that api endpoint Leaking password and username. Proof of Concept 1. An Admin add a new secretary with access to providers 2. Secretary send a post request to https://demo.easyappointments.org/index.php/backendapi/ajaxgetcalendarappointments endpoint 3. If selecte...

Help Employees and Consumers Avoid Self-inflicted Cybersecurity Mistakes

It shouldn’t be news to anyone that people sharing information online are concerned about the safety of their data. Imperva recently conducted a study with YouGov plc regarding consumers’ attitudes towards data, whether they feel in control of their personal data, and if they trust the...

PT-2022-2493

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 101.0.4951.64 Description The issue is related to a use after free in the screen sharing function, which can lead to heap corruption. A remote attacker could potentially exploit this by convincing a user to...

[SECURITY] Fedora 35 Update: cifs-utils-6.15-1.fc35

The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. This package contains tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS...

[SECURITY] Fedora 36 Update: cifs-utils-6.15-1.fc36

The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. This package contains tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS...