Microsoft Edge (Chromium) < 86.0.622.68 Vulnerability

The version of Microsoft Edge installed on the remote Windows host is prior to 86.0.622.68. It is, therefore, affected by a vulnerability as referenced in the ADV200002-11-11-2020 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-report...

[SECURITY] Fedora 33 Update: firefox-82.0.3-1.fc33

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Mozilla Firefox: Remote code execution

Background Mozilla Firefox is a popular open-source web browser from the Mozilla project. Description Invalid assumptions when emitting the the MCallGetProperty opcode in the JavaScript JIT may result in a use-after-free condition. Impact A remote attacker could possibly execute arbitrary code wi...

USN-4625-1: Firefox vulnerability

A use-after-free was discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could exploit this to execute arbitrary code...

Google Chrome < 86.0.4240.193 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 86.0.4240.193. It is, therefore, affected by a vulnerability as referenced in the 202011stable-channel-update-for-desktop9 advisory. - Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a...

Mozilla Firefox ESR < 78.4.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 78.4.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2020-49 advisory. - In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an...

UBUNTU-CVE-2020-15275

MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malicious javascript. This javascript will be executed in a user's browser when the user is viewing that SVG file on the wiki. Users are strongly advised to upgrad...

[SECURITY] Fedora 31 Update: chromium-86.0.4240.111-1.fc31

Chromium is an open-source web browser, powered by WebKit Blink...

Fedora: Security Advisory for chromium (FEDORA-2020-8aca25b5c8)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: chromium-86.0.4240.111-1.fc32

Chromium is an open-source web browser, powered by WebKit Blink...

Cross site scripting

HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting XSS vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or stea...

CVE-2020-14240

HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting XSS vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or stea...

CVE-2020-28041

The SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.6410.2.64 devices allows remote attackers to communicate with arbitrary TCP and UDP services on a victim's intranet machine, if the victim visits an attacker-controlled web site with a modern browser, aka NAT Slipstreaming. This occurs...

Nextcloud: Stored XSS in markdown file with Nextcloud Talk using Internet Explorer

While editing a markdown file through the text app, users can create link elements that have a javascript URL such as javascript:alert1. Steps to reproduce: While editing a markdown file, select some text and click the "Add Link" button. Using a web proxy, intercept the request and change the hre...

[SECURITY] Fedora 33 Update: firefox-82.0.2-1.fc33

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities

Background Mozilla Firefox is a popular open-source web browser from the Mozilla project. Mozilla Thunderbird is a popular open-source email client from the Mozilla project. Description Multiple vulnerabilities have been discovered in Mozilla Firefox and Mozilla Thunderbird. Please review the CVE...

[SECURITY] Fedora 31 Update: firefox-82.0-4.fc31

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 33 Update: firefox-82.0-4.fc33

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

USN-4599-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the prompt for opening an external application, obtain sensitive information, or execute arbitrary...

Debian: Security Advisory (DSA-4778-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...