Lucene search
HistoryApr 09, 2014 - 10:56 a.m.
CVE-2014-1716
cve-2014-1716
cross-site scripting
xss
google v8
runtime_setprototype
universal xss
uxss
security vulnerability
nvd
4.8 Medium
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
77.6%
Cross-site scripting (XSS) vulnerability in the Runtime_SetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.116, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka “Universal XSS (UXSS).”
References
Related
seebug
seebug
Google V8 Runtime_SetPrototype()函数访问检查缺失漏洞
2014-04-11 00:00:00
prion
prion
Cross site scripting
2014-04-09 10:56:00
ubuntucve
ubuntucve
CVE-2014-1716
2014-04-09 00:00:00
debiancve
debiancve
CVE-2014-1716
2014-04-09 10:56:00
threatpost
threatpost
Google Patches 31 Flaws in Chrome
2014-04-08 14:55:23
osv
osv
chromium-browser - security update
2014-04-15 00:00:00
nessus
nessus
Debian DSA-2905-1 : chromium-browser - security update
2014-04-17 00:00:00
openSUSE Security Update : chromium (openSUSE-SU-2014:0601-1)
2014-06-13 00:00:00
openvas
openvas
Google Chrome Multiple Vulnerabilities - 01 (Apr 2014) - Linux
2014-04-22 00:00:00
Google Chrome Multiple Vulnerabilities - 01 (Apr 2014) - Mac OS X
2014-04-22 00:00:00
Mageia: Security Advisory (MGASA-2014-0183)
2022-01-28 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2905-1] chromium-browser security update
2014-04-21 00:00:00
Google Chrome / Chromium multiple security vulnerabilities
2014-04-21 00:00:00
debian
debian
[SECURITY] [DSA 2905-1] chromium-browser security update
2014-04-16 01:22:56
[SECURITY] [DSA 2905-1] chromium-browser security update
2014-04-16 01:22:56
mageia
mageia
Updated chromium-browser packages fix multiple security vulnerabilities
2014-04-20 15:43:35
freebsd
freebsd
chromium -- multiple vulnerabilities
2014-04-08 00:00:00
chrome
chrome
Stable Channel Update
2014-04-08 00:00:00
gentoo
gentoo
Chromium: Multiple vulnerabilities
2014-08-30 00:00:00
4.8 Medium
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
77.6%
Related for CVE-2014-1716