Mozilla VPN 安全特征问题漏洞

Mozilla VPN is an open source virtual private network Web browser extension, desktop application and mobile application from the Mozilla Foundation in the U.S. A security vulnerability exists in versions of Mozilla VPN prior to 2.3. An attacker could exploit the vulnerability to gain control of t...

HM Multiple Roles < 1.3 - Arbitrary Role Change

The plugin does not have any access control to prevent low privilege users to set themselves as admin via their profile page As any authenticated user, go to your Profile page and Tick the Administrator Role checkbox. In v1.2, the checkboxes are disabled in the UI but can be tampered with by eith...

[SECURITY] Fedora 34 Update: chromium-91.0.4472.164-1.fc34

Chromium is an open-source web browser, powered by WebKit Blink...

Microsoft Edge (Chromium) < 91.0.864.71 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 91.0.864.71. It is, therefore, affected by multiple vulnerabilities as referenced in the July 19, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

[SECURITY] Fedora 34 Update: firefox-90.0-3.fc34

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Fedora: Security Advisory for chromium (FEDORA-2021-ca58c57bdf)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for firefox (FEDORA-2021-722e2543fe)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

firefox bugfix update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 78.12.0 ESR. Bug Fixes and Enhancements: Cannot reach websites after update from 78.11.0-3 to 78.12.0-1 BZ1983018...

What is scareware?

Scareware is a type of rogue program which has been around for many years, arguably dating back to 1990. It can be installed without permission, or via deception and false promises. Scareware is primarily used to panic or worry someone into performing a task they otherwise wouldn’t have done. The...

Google Chrome buffer overflow vulnerability

Google Chrome is a web browser from Google, Inc. Google Chrome 91.0.4472.164 previously contained a buffer overflow vulnerability that could be exploited by remote attackers to cause heap corruption via crafted HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2021-68462)

Google Chrome is a web browser from Google, Inc. Google Chrome 91.0.4472.164 was previously vulnerable to resource management errors that could be exploited by remote attackers to cause heap corruption via crafted HTML pages...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 78.12.0 ESR. Security Fixes: Mozilla: Use-after-free in accessibility features of a document CVE-2021-29970 Mozilla: Memory safety bugs fixed in...

RLSA-2021:2743 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 78.12.0 ESR. Security Fixes: Mozilla: Use-after-free in accessibility features of a document CVE-2021-29970 Mozilla: Memory safety bugs fixed in...

[SECURITY] Fedora 33 Update: firefox-90.0-1.fc33

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Fedora: Security Advisory for firefox (FEDORA-2021-e0adbf04a9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2021-90105)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation, U.S. Mozilla Firefox is vulnerable to a resource management error that stems from a post-release usage error in the outdated Cairo library. An attacker could exploit the vulnerability to create a specially crafted web page...

Security Bulletin: A cross-site scripting vulnerability in JQuery affects IBM InfoSphere Information Server

Summary A cross-site scripting vulnerability in JQuery used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID: CVE-2015-9251 DESCRIPTION: jQuery is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could explo...

Cross-site Scripting (XSS) - Stored in projectsend/projectsend

✍️ Description section parameter at Line 331 of email-templates.php sends unvalidated data to a web browser, which can result in the browser executing malicious code. In this case the data is sent at builtinecho in email-templates.php at line 331 🕵️‍♂️ Proof of Concept Data enters in application...

Cross-site Scripting (XSS) - Reflected in projectsend/projectsend

✍️ Description GET parameter ?client= in Line 419 of manage-files.php sends unvalidated data to a web browser, which can result in the browser executing malicious code. In this case the data is sent at builtinecho in manage-files.php at line 419. 🕵️‍♂️ Proof of Concept Data enters a web application...