Cybozu Garoon 跨站脚本漏洞

A cross-site scripting vulnerability exists in Message in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to execute arbitrary scripts on a logged-in user's Web browser...

USN-5024-1 webkit2gtk vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

Fedora: Security Advisory for chromium (FEDORA-2021-30c84b4924)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: chromium-91.0.4472.164-1.fc33

Chromium is an open-source web browser, powered by WebKit Blink...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2021-54696)

Microsoft Edge is a web browser that comes with Windows 10 and later versions of Microsoft Corporation Microsoft in the U.S. Microsoft Edge has a security vulnerability that could be exploited by attackers to cause information leakage...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2021-54695)

Microsoft Edge is a web browser that comes with Windows 10 and later versions of Microsoft Corporation Microsoft in the U.S. Microsoft Edge has a security vulnerability that could be exploited by attackers to cause information leakage...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2021-54694)

Microsoft Edge is a web browser that comes with Windows 10 and later versions of Microsoft Corporation Microsoft in the U.S. Microsoft Edge has a security vulnerability that could be exploited by attackers to cause information leakage...

CVE-2021-22523

XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions...

Xxe

XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions...

CVE-2021-22523

The vulnerability CVE-2021-22523 affects Micro Focus Verastream Host Integrator (version 7.8 Update 1 and earlier). It is an XML External Entity (XXE) issue in the product likely involving XML processing, with the described impact of controlling a web browser and hijacking user sessions. Connecte...

CVE-2021-22523

XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions...

Microsoft Edge (Chromium) < 92.0.902.55 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 92.0.902.55. It is, therefore, affected by multiple vulnerabilities as referenced in the July 22, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Google Chrome UI framework code execution vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in the UI framework in versions of Google Chrome prior to 92.0.4515.107. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

Google Chrome Protocol Handling Code Execution Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in the protocol handling in versions of Google Chrome prior to 92.0.4515.107. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

Google Chrome Animation security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Animation. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome Installer security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Installer in versions of Google Chrome prior to 92.0.4515.107. An attacker could exploit this vulnerability to bypass security restrictions...

Google Chrome DevTools Code Execution Vulnerability (CNVD-2021-55926)

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome DevTools. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

Google Chrome sensor handling code execution vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in sensor handling in versions of Google Chrome prior to 92.0.4515.107. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

Google Chrome Sharing security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Sharing in versions prior to Google Chrome 92.0.4515.107. An attacker could use this vulnerability to bypass security restrictions...

Google Chrome sqlite code execution vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in sqlite in versions of Google Chrome prior to 92.0.4515.107. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service condition...