Google Chrome < 75.0.3770.90 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 75.0.3770.90. It is, therefore, affected by a vulnerability as referenced in the 201906stable-channel-update-for-desktop13 advisory. - Use after free in Blink in Google Chrome prior to 75.0.3770.90 allowed a remote...

Google Chrome < 75.0.3770.90 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 75.0.3770.90. It is, therefore, affected by a vulnerability as referenced in the 201906stable-channel-update-for-desktop13 advisory. - Use after free in Blink in Google Chrome prior to 75.0.3770.90 allowed a remote attack...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2019-10962

BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on the Alaris Gateway Workstation does not prevent an attacker with knowledge of the IP address of the Alaris Gateway Workstation terminal to gain access to the status and...

CVE-2019-10962

BD Alaris Gateway Workstation Web Browser User Interface vulnerability (CVE-2019-10962) allows an attacker who knows the device IP to access status and configuration data due to improper access control (CWE-284). Affected firmware versions include 1.0.13, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.1.5,...

CVE-2019-10962

BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on the Alaris Gateway Workstation does not prevent an attacker with knowledge of the IP address of the Alaris Gateway Workstation terminal to gain access to the status and...

Max-Severity Bug in Infusion Pump Gateway Puts Lives at Risk

Researchers have disclosed two separate vulnerabilities within the Becton Dickinson Alaris Gateway Workstation for medical infusion pumps in hospitals, one carrying a critical rating of 10 out of 10 on the CVSS v.3 severity scale. Alaris Gateway Workstations power, monitor and control infusion...

[SECURITY] Fedora 30 Update: firefox-67.0.2-1.fc30

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Microsoft Edge Buffer Overflow Vulnerability (CNVD-2019-27395)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A buffer overflow vulnerability exists in the way the Chakra scripting engine handles memory objects in Microsoft Edge. An attacker could exploit this vulnerability to execute arbitrary...

Microsoft Edge Buffer Overflow Vulnerability (CNVD-2019-27396)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A buffer overflow vulnerability exists in the way the Chakra scripting engine in Microsoft Edge handles in-memory objects. The vulnerability originates when a web system or product perfor...

PT-2019-12104

Name of the Vulnerable Software and Affected Versions BD Alaris Gateway versions 1.0.13, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.1.5, and 1.1.6 Description The web browser user interface on the Alaris Gateway Workstation does not prevent an attacker with knowledge of the IP address of the Alaris...

Fedora Update for firefox FEDORA-2019-c22338aa23

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office SharePoint CVE-2019-1033 Cross Site Scripting Vulnerability

Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

Microsoft Azure DevOps Server CVE-2019-0996 Spoofing Vulnerability

Description Microsoft Azure DevOps Server is prone to a spoofing vulnerability. An attacker can exploit this issue to conduct spoofing attacks and to bypass certain security restrictions and perform unauthorized actions. This may lead to other attacks. Technologies Affected Microsoft Azure DevOps...

Malicious Package

ngx-pica contains malicious code. The code when executed in the browser will capture password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=...

Nvidia GeForce Experience Web Helper - Command Injection Exploit

Exploit for windows platform in category local exploits //Send request to local GFE server function submitRequestport,secret var xhr = new XMLHttpRequest; xhr.open"POST", "http://127.0.0.1:"+port+"/gfeupdate/autoGFEInstall/", true; xhr.setRequestHeader"Accept",...

JVN#29188908: Joruri CMS 2017 vulnerable to cross-site scripting

Joruri CMS 2017 provided by SiteBridge Inc. contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by the developer. Products Affect...

Nvidia GeForce Experience Web Helper - Command Injection

Nvidia GeForce Experience Web Helper - Command Injection //Send request to local GFE server function submitRequestport,secret var xhr = new XMLHttpRequest; xhr.open"POST", "http://127.0.0.1:"+port+"/gfeupdate/autoGFEInstall/", true; xhr.setRequestHeader"Accept",...

Nvidia GeForce Experience Web Helper - Command Injection

//Send request to local GFE server function submitRequestport,secret var xhr = new XMLHttpRequest; xhr.open"POST", "http://127.0.0.1:"+port+"/gfeupdate/autoGFEInstall/", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8";...

Denial Of Service(DoS)

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Mozilla: Compartment mismatch with fetch API CVE-2019-9819...