Google Chrome Sign-In code execution vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Sign-In, which is caused by use after a free sign-in. An attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service...

Google Chrome Type Obfuscation Vulnerability

Google Chrome is a web browser from Google, an American company. A type obfuscation vulnerability exists in versions of Google Chrome prior to V8 108.0.5359.71, which can be exploited by remote attackers to launch an attack via a crafted HTML page using heap corruption...

Unspecified Vulnerability in Google Chrome (CNVD-2022-86349)

Google Chrome is a web browser from Google, an American company. Google Chrome versions prior to 108.0.5359.71 suffer from a security vulnerability in the use of Audio after release, which can be exploited by an attacker to launch an attack via a specially crafted Chrome Extension exploiting heap...

Unspecified Vulnerability in Google Chrome (CNVD-2022-86348)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Goole Chrome versions prior to 108.0.5359.71 for use after the release of Mojo, which can be exploited by attackers to launch an attack via a constructed HTML page using heap corruption...

Google Chrome Extensions Code Execution Vulnerability (CNVD-2023-04555)

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome Extensions, which can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service...

Google Chrome Security Bypass Vulnerability (CNVD-2023-08259)

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome, which stems from insufficient untrusted input validation in CORS. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome Camera Capture Code Execution Vulnerability

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome Camera Capture, which can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service...

Google Chrome Security Bypass Vulnerability (CNVD-2023-08277)

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome, which stems from improper implementation in navigation. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome Security Bypass Vulnerability (CNVD-2023-08260)

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome, which is caused by insufficient policy enforcement in DevTools. An attacker could exploit this vulnerability to bypass security restrictions...

Cross site scripting

useroidc is an OpenID Connect user backend for Nextcloud. Versions prior to 1.2.1 did not properly validate discovery urls which may lead to a stored cross site scripting attack vector. The impact is limited due to the restrictive CSP that is applied on this endpoint. Additionally this...

[SECURITY] Fedora 36 Update: firefox-107.0-3.fc36

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

CVE-2022-43983

CVE-2022-43983 affects Browsershot v3.57.2. The flaw arises because HTML content passed to Browsershot::html is not validated for file:// URLs, enabling an external attacker to remotely obtain arbitrary local files. Documented impact includes high severity (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I...

Fedora: Security Advisory for firefox (FEDORA-2022-2321894a60)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: firefox-107.0-3.fc37

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Mozilla Firefox: Multiple Vulnerabilities

Background Mozilla Firefox is a popular open-source web browser from the Mozilla project. Description Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

AntiHacker < 4.20 - Subscriber+ Arbitrary Plugin Installation

The plugin does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org Run the below command in the developer console of the web browser while being on the blog as a...

StopBadBots < 7.24 - Subscriber+ Arbitrary Plugin Installation

The plugin does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org Run the below command in the developer console of the web browser while being on the blog as a...

Mozilla Firefox has an unspecified vulnerability (CNVD-2023-15816)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozila Firefox has a security vulnerability that could be exploited by attackers to cause potential user obfuscation or spoofing attacks...

Mozilla Firefox backlink vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. A backlink vulnerability exists in Mozila Firefox, which stems from an error message generated when resolving symbolic links such as file:///proc/self/fd/1, where the symbolic link resolves to a buffer containin...

Car Dealer < 3.05 - Subscriber+ Arbitrary Plugin Installation

The plugin does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org Run the below command in the developer console of the web browser while being on the blog as a...