7499 matches found
[SECURITY] Fedora 40 Update: chromium-124.0.6367.201-1.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
CVE-2024-28761
IBM App Connect Enterprise (versions 11.0.0.1–11.0.0.25 and 12.0.1.0–12.0.12.0) is vulnerable to an HTML injection in the Admin API/Dashboard component. The issue arises from inadequate protection of the web page structure, enabling a remote attacker to inject HTML that executes in the victim’s b...
CVE-2024-28761 IBM App Connect Enterprise HTML injection
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force I...
[SECURITY] Fedora 39 Update: chromium-124.0.6367.155-1.fc39
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 40 Update: chromium-124.0.6367.155-1.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
CVE-2024-22344
IBM TXSeries for Multiplatforms 8.2 is vulnerable to HTML injection in the Administration Console. The issue allows a remote attacker to inject HTML that executes in the victim’s browser within the hosting site’s security context. Connected sources corroborate the vulnerability as CVE-2024-22344 ...
firefox security update
An update is available for firefox. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...
JVN#61054671: Phormer vulnerable to cross-site scripting
Phormer contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user. Solution Update the Software Update the software to the latest version according to the information provided by the developer. Phormer version 3.35 was released...
CVE-2024-3459
CVE-2024-3459 affects KioWare for Windows up to version 8.34. The issue lets an attacker escape the KioWare sandbox by downloading PDFs which open in an external viewer; through the viewer’s built‑in features it can launch a web browser, enumerate local files, and subsequently start any program w...
K000138894: BIG-IP Configuration utility XSS vulnerability CVE-2024-33604
Security Advisory Description A reflected cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. CVE-2024-33604 Impact An attacker may exploit this...
Google Chrome < 124.0.6367.155 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 124.0.6367.155. It is, therefore, affected by multiple vulnerabilities as referenced in the 202405stable-channel-update-for-desktop7 advisory. - Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a...
firefox security update
An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...
RLSA-2024:1912 Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.10.0 ESR. Security Fixes: GetBoundName in the JIT returned the wrong object CVE-2024-3852 Out-of-bounds-read after mis-optimized switch...
CVE-2024-34089
An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When...
CVE-2024-34089
CVE-2024-34089 concerns Archer Platform 6 prior to 2024.04 with a stored cross-site scripting (XSS) flaw. A remote authenticated Archer user can inject malicious HTML/JavaScript into a trusted application data store, which is then executed by victims’ browsers in the vulnerable app’s context. The...
Mozilla Firefox: Multiple Vulnerabilities
Background Mozilla Firefox is a popular open-source web browser from the Mozilla project. Description Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...
[SECURITY] Fedora 39 Update: chromium-124.0.6367.118-1.fc39
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 40 Update: chromium-124.0.6367.118-1.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
USN-6747-2: Firefox regressions
USN-6747-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potential...