7437 matches found
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
[SECURITY] [DLA 2411-1] firefox-esr security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2411-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 21, 2020 https://wiki.debian.org/LTS -...
USN-4584-1: HtmlUnit vulnerability
It was discovered that HtmlUnit incorrectly initialized Rhino engine. An Attacker could possibly use this issue to execute arbitrary Java code...
CVE-2020-4740
IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 188150...
Mozilla Firefox Information Disclosure Vulnerability (CNVD-2021-54004)
Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. Versions prior to Mozilla Firefox 80 and versions prior to Android-based Firefox 80 are vulnerable to an information disclosure vulnerability that could be exploited by an attacker to obtain the login status of ...
Microsoft Edge (Chromium) < 86.0.622.38 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 86.0.622.38. It is, therefore, affected by multiple vulnerabilities as referenced in the ADV200002-10-8-2020 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...
Nord Security: Possible RCE through Windows Custom Protocol on Windows client
Summary: The NordVPN windows client application registered two custom protocols NordVPN: and NordVPN.Notification: for process communication. This makes us are able to communicate with NordVPN.exe from web browser. After looking the executable binary, I noticed the class...
The vulnerability of the Google Chrome and Sailfish Browser rendering process allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Google Chrome and Sailfish Browser rendering process is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure or execute arbitrary code by deleting the current embedded HTML obje...
Google Chrome < 86.0.4240.75 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 86.0.4240.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 202010stable-channel-update-for-desktop advisory. - Insufficient policy enforcement in networking in Google Chrome prior to...
[SECURITY] Fedora 31 Update: firefox-81.0.1-3.fc31
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Fedora: Security Advisory for chromium (FEDORA-2020-aea86f913e)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 33 Update: chromium-85.0.4183.121-1.fc33
Chromium is an open-source web browser, powered by WebKit Blink...
Mozilla: Custom cursor can overlay user interface
When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived broken state, especially when interactions with existing browser dialogs and warnings do not work. Thi...
SpinetiX Fusion Digital Signage 3.4.8 Username Enumeration Weakness
Summary At SpinetiX we inspire businesses to unlock the potential of their story. We believe in the power of digital signage as a dynamic new storytelling platform to engage with people. For more than 13 years, we have been constantly innovating to deliver cutting-edge digital signage solutions...
Why Web Browser Padlocks Shouldn't Be Trusted
For years, Apple, Firefox, Google and Microsoft relentlessly made the point that in order to avoid rogue sites you must make sure your browser “padlock” is either locked, green or is otherwise indicating a site as being “secure.” Now, cybersecurity firms are stressing that those padlocks are not...
Debian DSA-4768-1 : firefox-esr - security update
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, cross-site scripting or spoofing the origin of a download. Debian follows the extended support releases ESR of Firefox. Support for the 68.x series has...
Fedora: Security Advisory for chromium (FEDORA-2020-6da740d38c)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 33 Update: firefox-81.0-6.fc33
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...