7437 matches found
Critical: Red Hat Security Advisory: firefox security and bug fix update
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
ALSA-2022:0818 Critical: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.7.0 ESR. Security Fixes: Mozilla: Use-after-free in XSLT parameter processing CVE-2022-26485 Mozilla: Use-after-free in WebGPU IPC Framework...
RLSA-2022:0818 Critical: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.7.0 ESR. Security Fixes: Mozilla: Use-after-free in XSLT parameter processing CVE-2022-26485 Mozilla: Use-after-free in WebGPU IPC Framework...
Critical: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.7.0 ESR. Security Fixes: Mozilla: Use-after-free in XSLT parameter processing CVE-2022-26485 Mozilla: Use-after-free in WebGPU IPC Framework...
Mozilla Firefox Permission License and Access Control Issues Vulnerability (CNVD-2023-59958)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a permissions licensing and access control issue vulnerability that stems from a logic error when handling iframes. The vulnerability can be exploited by an attacker to...
CVE-2022-25311
A vulnerability has been identified in SINEC NMS All versions = V1.0.3 V2.0, SINEC NMS All versions V1.0.3, SINEMA Server V14 All versions. The affected software do not properly check privileges between users during the same web browser session, creating an unintended sphere of control. This coul...
CVE-2022-25311
A vulnerability has been identified in SINEC NMS All versions = V1.0.3 V2.0, SINEC NMS All versions V1.0.3, SINEMA Server V14 All versions. The affected software do not properly check privileges between users during the same web browser session, creating an unintended sphere of control. This coul...
CVE-2022-25311
The CVE-2022-25311 issue is an improper privilege management flaw in Siemens SINEC NMS (versions around 1.0.3 and SINEMA Server V14) where privileges are not correctly checked between users within the same browser session, enabling a authenticated low-privilege user to escalate privileges. Connec...
Cross site scripting
A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-site scripting through browsing protection in a SAFE web browser. User interaction is required prior to exploitation. A successful exploitation may lead to...
CVE-2021-44749
F-Secure SAFE Browser Protection for Android is reported vulnerable to universal cross-site scripting due to improper URL handling in the SAFE browser protection module. The vulnerability could allow arbitrary code execution; user interaction is required for exploitation. Connected sources refere...
Google Chrome Cast UI Heap Buffer Overflow Vulnerability
Google Chrome is a web browser from Google, Inc. A heap buffer overflow vulnerability exists in the Google Chrome Cast UI, which can be exploited by attackers to cause arbitrary code execution...
Google Chrome Read Out-of-Bounds Vulnerability
Google Chrome is a web browser from Google, Inc. Google Chrome suffers from a read out-of-bounds vulnerability, which stems from a read out-of-bounds issue in ANGLE and can be exploited by attackers to potentially execute arbitrary code...
Google Chrome Information Disclosure Vulnerability (CNVD-2022-45558)
Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to an information disclosure vulnerability that could be exploited to disclose cross-domain data via crafted HTML pages...
Google Chrome Cast UI memory error reference vulnerability
Google Chrome is a web browser from Google, Inc. A memory mis-reference vulnerability exists in the Google Chrome Cast UI, which is caused by a mix-up in the program's instructions for freeing memory, and can be exploited to cause the program to crash and execute arbitrary code...
Google Chrome Media Memory Misreference Vulnerability (CNVD-2022-63926)
Google Chrome is a web browser from Google, Inc. Google Chrome Media is vulnerable to a memory misreference vulnerability that results from a mix-up in the program's instructions for freeing memory, which could be exploited to execute arbitrary code on the system or cause a denial of service...
Google Chrome OS Shell Memory Misreference Vulnerability
Google Chrome is a web browser from Google, Inc. A memory mis-reference vulnerability exists in Google Chrome OS Shell, which can be exploited by attackers to execute arbitrary code on the system or cause a denial of service condition...
Google Chrome GPU Code Execution Vulnerability (CNVD-2022-20554)
Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome GPU, which can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service condition...
Google Chrome ANGLE code execution vulnerability (CNVD-2022-20555)
Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome ANGLE, which can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service condition...
Google Chrome Resource Management Error Vulnerability (CNVD-2022-20558)
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a resource management error vulnerability that stems from a release and reuse technique within the file manager component. A remote attacker could exploit this vulnerability to create a specially crafted w...