Tag Archives: vulnerabilities

Google has released a new free tool that allows open-source developers to more easily access vulnerability information relevant to their projects.   The Go-based tool — called OSV-Scanner — provides an automated capability to match a developer’s code and dependencies against lists of known vulnerabilities and deliver instant feedback if patches or updates are needed.   Software projects are usually built on top of a mountain of dependencies — instead of starting from zero, developers… Source link

Google’s first stable channel version of Chrome 105 for Windows, Mac, and Linux, released this week, contained fixes for 24 vulnerabilities in previous versions of the software, including one “critical” flaw and eight that the company rated as being of “high” severity. A plurality — nine — of the security issues that Google addressed with Chrome 105 were so-called use-after-free vulnerabilities, or flaws that allow attackers to use previously freed memory spaces to execute malicious… Source link

Google Chrome is under attack, the tech giant warns, as it patches 11 security issues in its … [+] browser. (Photo by Jaap Arriens/NurPhoto via Getty Images) NurPhoto via Getty Images Google has revealed that two weaknesses in Chrome are under active attack, as users have been urged to update their browser to avoid becoming a victim. They were reported to Google via an anonymous party and were given a severity rating of “high.” Little more information was… Source link

Google Analytics started life as a web server log analysis package developed by Urchin Software, which Google acquired in 2005. Google Analytics quickly came to dominate the website analytics space because it was offered for free at a time when site analytics software like Web Trends and Omniture cost hundreds of thousands of dollars. Practically all small sites and blogs adopted Google Analytics, because they could not afford anything else. Today, Google Analytics represents the vast… Source link

Google on Wednesday released version 90.0.4430.85 of the Chrome browser for Windows, Mac, and Linux. The release contains seven security fixes, including one for a zero-day vulnerability that was exploited in the wild. The zero-day, which was assigned the identifier of CVE-2021-21224, was described as a “type confusion in V8”. In an advisory penned by Chrome technical program manager Srinivas Sista, five vulnerabilities were detailed:… Source link