openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0193-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0193-1 advisory. - Use after free in WebRTC. CVE-2023-3727, CVE-2023-3728 - Use after free in Tab Groups. CVE-2023-3730 - Out of bounds memory access in Mojo...

com.day.crx:crx-server-j2ee (>=2.3.4, <=2.3.6), io.inkstand:scribble (>=0.1.0, <=0.2.0) +3 more potentially affected by CVE-2023-37895 via org.apache.jackrabbit:jackrabbit-webapp (>=1.5.0, <=2.20.10)

org.apache.jackrabbit:jackrabbit-webapp MAVEN version =1.5.0, =2.3.4, =0.1.0, =1.5.0, =2.19.2, =5.13.1, =5.20.4 Source cves: CVE-2023-37895 Source advisory: OSV:GHSA-Q8CM-3V62-JJ79...

org.apache.jackrabbit:jackrabbit-standalone-components (>=2.21.0, <=2.21.17) potentially affected by CVE-2023-37895 via org.apache.jackrabbit:jackrabbit-webapp (>=2.21.0, <=2.21.17)

org.apache.jackrabbit:jackrabbit-webapp MAVEN version =2.21.0, =2.21.0, =2.21.17 Source cves: CVE-2023-37895 Source advisory: OSV:GHSA-Q8CM-3V62-JJ79...

com.day.crx:crx-server-j2ee (>=2.3.4, <=2.3.6), io.inkstand:scribble (>=0.1.0, <=0.2.0) +3 more potentially affected by CVE-2023-37895 via org.apache.jackrabbit:jackrabbit-webapp (>=1.5.0, <=2.20.10)

org.apache.jackrabbit:jackrabbit-webapp MAVEN version =1.5.0, =2.3.4, =0.1.0, =1.5.0, =2.19.2, =5.13.1, =5.20.4 Source cves: CVE-2023-37895 Source advisory: GHSA-Q8CM-3V62-JJ79...

org.apache.jackrabbit:jackrabbit-standalone-components (>=2.21.0, <=2.21.17) potentially affected by CVE-2023-37895 via org.apache.jackrabbit:jackrabbit-webapp (>=2.21.0, <=2.21.17)

org.apache.jackrabbit:jackrabbit-webapp MAVEN version =2.21.0, =2.21.0, =2.21.17 Source cves: CVE-2023-37895 Source advisory: GHSA-Q8CM-3V62-JJ79...

CVE-2023-37895

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

Deserialization of untrusted data

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

CVE-2023-37895

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

org.apache.jackrabbit:jackrabbit-standalone-components (>=2.21.0, <=2.21.17) potentially affected by CVE-2023-37895 via org.apache.jackrabbit:jackrabbit-webapp (>=2.21.0, <=2.21.17)

org.apache.jackrabbit:jackrabbit-webapp MAVEN version =2.21.0, =2.21.0, =2.21.17 Source cves: CVE-2023-37895 Source advisory: MEND:CVE-2023-37895...

com.day.crx:crx-server-j2ee (>=2.3.4, <=2.3.6), io.inkstand:scribble (>=0.1.0, <=0.2.0) +3 more potentially affected by CVE-2023-37895 via org.apache.jackrabbit:jackrabbit-webapp (>=1.5.0, <=2.20.10)

org.apache.jackrabbit:jackrabbit-webapp MAVEN version =1.5.0, =2.3.4, =0.1.0, =1.5.0, =2.19.2, =5.13.1, =5.20.4 Source cves: CVE-2023-37895 Source advisory: MEND:CVE-2023-37895...

CVE-2023-37895 Apache Jackrabbit RMI access can lead to RCE

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

CVE-2023-37895

Summary: CVE-2023-37895 affects Apache Jackrabbit Webapp/Standalone via an unsafe deserialization in the commons-beanutils component, enabling remote code execution over RMI. Affected RMIs include versions up to 2.20.10 (stable) and 2.21.17 (unstable). Impact: potential remote code execution with...

CVE-2023-37895

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

WebApp Installs Component Information Disclosure

The vulnerability of Google Chrome browser’s WebApp installations is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential information...

Chromium: CVE-2023-3733 Inappropriate implementation in WebApp Installs

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Edge (Chromium) < 114.0.1901.183 / 115.0.1901.183 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1901.183 / 115.0.1901.183. It is, therefore, affected by multiple vulnerabilities as referenced in the July 21, 2023 advisory. - Microsoft Edge Chromium-based Spoofing Vulnerability CVE-2023-35392 - Microsoft Edg...

Debian DSA-5456-1 : chromium - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5456 advisory. - Use after free in WebRTC. CVE-2023-3727, CVE-2023-3728 - Use after free in Tab Groups. CVE-2023-3730 - Out of bounds memory access in Mojo. CVE-2023-3732 -...

SUSE CVE-2023-3733

Inappropriate implementation in WebApp Installs in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

Google Chrome Security Update (stable-channel-update-for-desktop-2023-07) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Security Update (stable-channel-update-for-desktop-2023-07) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...