Inappropriate implementation in Autofill in Google Chrome prior to 1.70 allowed a remote attacker to bypass autofill restrictions via a crafted HTML page. Inappropriate implementation in Fullscreen in Google Chrome prior to 1.70 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Depending on how a web application uses and configures TIFF Server, a remote attacker may be able to enumerate files or directories, traverse directories, bypass authentication, or access restricted files.

The default configuration of Aquaforest TIFF Server allows access to arbitrary file paths, subject to any restrictions imposed by Internet Information Services (IIS) or Microsoft Windows. Inappropriate implementation in Autofill in Google Chrome prior to 1.62 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. Inappropriate implementation in Autofill in Google Chrome prior to 1.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. This issue affects Juniper Networks Junos OS on MX Series: * All versions earlier than 20.4R3-S9 * 21.2 versions earlier than 21.2R3-S3 * 21.4 versions earlier than 21.4R3-S5 * 22.1 versions earlier than 22.1R3 * 22.2 versions earlier than 22.2R3 * 22.3 versions earlier than 22.3R2.

In an Abstracted Fabric (AF) scenario if routing-instances (RI) are configured, specific valid traffic destined to the device can bypass the configured lo0 firewall filters as it's received in the wrong RI context. An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the intended access restrictions.

WindowManager 10.13.2 free downloads