org.opencms:opencms-webapp (8.0.4) potentially affected by CVE-2023-31544 via org.opencms:opencms-core (8.0.4)

org.opencms:opencms-core MAVEN version 8.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-webapp 8.0.4 Source cves: CVE-2023-31544 Source advisory: OSV:GHSA-M44F-9JHG-59CR...

CVE-2023-2726

Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2023-2726

Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-2726

Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. Chromium security severity: Medium...

Design/Logic Flaw

Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-2726

CVE-2023-2726 affects Google Chrome/Chromium prior to 113.0.5672.126, where an attacker could bypass the install dialog by convincing a user to install a malicious web app via a crafted HTML page. This is described as an Inappropriate implementation in WebApp Installs, with Chromium security seve...

CVE-2023-2726

Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-2726

Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-2726

Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-2726: Undefined Security Weakness

Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. Chromium security severity: Medium...

Google Chrome < 113.0.5672.126 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 113.0.5672.126. It is, therefore, affected by multiple vulnerabilities as referenced in the 202305stable-channel-update-for-desktop16 advisory. - Inappropriate implementation in WebApp Installs in Google Chrome prior to...

Google Chrome < 113.0.5672.126 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 113.0.5672.126. It is, therefore, affected by multiple vulnerabilities as referenced in the 202305stable-channel-update-for-desktop16 advisory. - Inappropriate implementation in WebApp Installs in Google Chrome prior to...

chromium -- multiple vulnerabilities

Chrome Releases reports: This update includes 12 security fixes: 1444360 Critical CVE-2023-2721: Use after free in Navigation. Reported by Guang Gong of Alpha Lab, Qihoo 360 on 2023-05-10 1400905 High CVE-2023-2722: Use after free in Autofill UI. Reported by Rong Jian of VRI on 2022-12-14 1435166...

org.eclipse.jetty.aggregate:jetty-all (7.5.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.5.0.rc1) +43 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (7.5.0.rc1)

org.eclipse.jetty:jetty-server MAVEN version 7.5.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc0) +42 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (8.1.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 8.1.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc2), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc2) +28 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (7.0.0.rc2)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc2 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.6.18.v20150929), org.eclipse.jetty.aggregate:jetty-all-server (7.6.18.v20150929) +37 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (7.6.18.v20150929)

org.eclipse.jetty:jetty-server MAVEN version 7.6.18.v20150929 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.18.v20150929 -...

org.eclipse.jetty.aggregate:jetty-all (7.5.0.rc2), org.eclipse.jetty.aggregate:jetty-all-server (7.5.0.rc2) +43 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (7.5.0.rc2)

org.eclipse.jetty:jetty-server MAVEN version 7.5.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.0.rc2 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc2), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc2) +42 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (8.1.0.rc2)

org.eclipse.jetty:jetty-server MAVEN version 8.1.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc2 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.6.6.v20120903), org.eclipse.jetty.aggregate:jetty-all-server (7.6.6.v20120903) +51 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (7.6.6.v20120903)

org.eclipse.jetty:jetty-server MAVEN version 7.6.6.v20120903 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.6.v20120903 -...