[SECURITY] Fedora 34 Update: lynx-2.8.9-13.fc34

Lynx is a text-based Web browser. Lynx does not display any images, but it does support frames, tables, and most other HTML tags. One advantage Lynx has over graphical browsers is speed; Lynx starts and exits quickly and swiftly displays web pages...

VulnCheck KEV: CVE-2021-30632

Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome,...

Authorities Arrest Another TrickBot Gang Member in South Korea

Another alleged member of the TrickBot gang has been apprehended, this time when trying to leave South Korea, according to published reports. The Russian national, who is an alleged developer of the notorious crimeware, reportedly had been trapped in South Korea since February 2020 due to COVID-1...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge is a web browser that comes with systems after Windows 10. An elevation of privilege vulnerability exists in Microsoft Edge Chromium-based. An attacker can exploit this vulnerability to execute arbitrary code with elevated privileges...

Microsoft Edge for Android信息泄露漏洞

Microsoft Edge for Android is a web browser for Android from Microsoft Corporation USA. The vulnerability is caused by errors in the configuration of the network system or product during operation, which can be exploited by attackers to obtain sensitive information...

Google Chrome WebApp Installs Code Execution Vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome WebApp Installs. The vulnerability is caused by use after the WebApp installation is free. A remote attacker can exploit this vulnerability to execute arbitrary code on the system or cause a...

Google Chrome Base internals code execution vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Base internals. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

Google Chrome Blink security bypass vulnerability (CNVD-2021-67542)

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Blink. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome Autofill Spoofing Vulnerability (CNVD-2021-67541)

Google Chrome is a web browser from Google, Inc. A spoofing vulnerability exists in Google Chrome Autofill. An attacker can exploit this vulnerability to perform spoofing...

Google Chrome 信息泄露漏洞

Google Chrome Navigation is an information disclosure vulnerability in Google Chrome, a web browser from Google, Inc. A remote attacker could exploit this vulnerability to obtain sensitive information...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Base internals. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

User Activity Log < 1.4.7 - Reflected Cross Site Scripting via Query String

The plugin does not escape the $SERVER'QUERYSTRING' before outputting it back in attributes, which could lead to Reflected Cross-Site Scripting in web browsers which do not encode URL characters. With a web browser which does not encode characters or use burp suite and decode the URL via the...

Fedora: Security Advisory for firefox (FEDORA-2021-ca8368f328)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 33 Update: firefox-91.0.1-2.fc33

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 34 Update: firefox-91.0.1-2.fc34

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Security Bulletin: IBM API Connect is impacted by a vulnerability in Drupal CKEditor (CVE-2020-27193)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-27193 DESCRIPTION: CKSource CKEditor is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the Color Button dialog. A remote attacker could exploit thi...

USN-5047-1: Firefox vulnerability

It was discovered that Firefox could be made to incorrectly accept newlines in HTTP/3 response headers. If a user were tricked into opening a specially crafted website, an attacker could exploit this to conduct header splitting attacks...

Google Chrome ANGLE code execution vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome ANGLE. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

[SECURITY] Fedora 34 Update: firefox-91.0-1.fc34

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

VulnCheck KEV: CVE-2018-8114

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951,...