CVE-2023-40281

EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and "products/product" of Management page. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using t...

CVE-2023-40281

EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and "products/product" of Management page. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using t...

Google Chrome Resource Management Error Vulnerability (CNVD-2023-64447)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability previously existed in Google Chrome version 93.0.4577.82, which stemmed from the presence of Blink free after use. An attacker could exploit the vulnerability to cause a denial of service wi...

Google Chrome Data Forgery Problem Vulnerability (CNVD-2023-65156)

Google Chrome is a web browser from Google, an American company. A data forgery issue vulnerability exists in Google Chrome prior to version 116.0.5845.96, which stems from insufficient data validation of Systems Extensions, and can be exploited by a remote attacker to bypass file restrictions vi...

Google Chrome Resource Management Error Vulnerability (CNVD-2023-64448)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability previously existed in Google Chrome version 92.0.4515.107, which stemmed from the presence of Blink free after use. An attacker could exploit the vulnerability to cause a denial of service...

Google Chrome Resource Management Error Vulnerability (CNVD-2023-64449)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability previously existed in Google Chrome version 96.0.4664.93, which stems from the existence of free after use of ANGLE. An attacker could exploit the vulnerability to cause a denial of service...

JVN#46993816: EC-CUBE 2 series vulnerable to cross-site scripting

EC-CUBE 2 series provided by EC-CUBE CO.,LTD. contains a cross-site scripting vulnerability CWE-79 in "mail/template" and "products/product" of Management page. Impact An arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using the...

Google Chrome Resource Management Error Vulnerability (CNVD-2023-64446)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability previously existed in Google Chrome version 91.0.4472.77, which stemmed from the existence of DevTools free after use. An attacker could exploit the vulnerability to cause the browser to cra...

Multiple Flaws Found in ScrutisWeb Software Exposes ATMs to Remote Hacking

Four security vulnerabilities in the ScrutisWeb ATM fleet monitoring software made by Iagona could be exploited to remotely break into ATMs, upload arbitrary files, and even reboot the terminals. The shortcomings were discovered by the Synack Red Team SRT following a client engagement. The issues...

User Activity Log < 1.6.7 - IP Spoofing

Description This plugin retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic. 1. In User Activity Log Settings, enable the setting "Allow Ip Address of users to log." and save...

Google Chrome Security Bypass Vulnerability (CNVD-2023-63444)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome versions prior to 108.0.5359.71 due to an improper implementation in DevTools. An attacker can use this vulnerability to bypass file access restrictions to install malicious...

Debian: Security Advisory (DLA-3523-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-24477

In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the user session upon logout. Thus an authenticated local attacker may gain acces to the original user's session...

Design/Logic Flaw

In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the user session upon logout. Thus an authenticated local attacker may gain acces to the original user's session...

CVE-2023-24477

CVE-2023-24477 affects Nozomi Guardian/CMC; before 22.6.2, due to timing with Chrome, logout does not always fully invalidate the user session. This creates a local, authenticated attacker capability to access the original user session. Connected sources (Siemens/CISA advisories and vendor notes)...

firefox security update

An update is available for firefox. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

CVE-2023-3978

A flaw was found in the Golang HTML package where it is vulnerable to Cross-site scripting caused by the improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's web browser within the security...

Google Chrome Code Execution Vulnerability (CNVD-2023-63469)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is due to a free use after in Cast. An attacker can exploit the vulnerability to execute arbitrary code on a system or cause an application to crash...

Google Chrome Code Execution Vulnerability (CNVD-2023-63471)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that stems from a mal-execution issue in Extensions. An attacker could exploit this vulnerability to execute arbitrary code on a system or cause an application to crash...

Fedora: Security Advisory for chromium (FEDORA-2023-8a94349e38)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...