3532 matches found
Astra Linux – Vulnerability in Chromium
In Google Chrome, a out-of-bounds read in the Tab Strip feature was exploited before version 92.0.4515.131. This allowed an attacker to convince a user to install a malicious extension, enabling them to perform an out-of-bounds memory read through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
The incorrect security UI in the Tab Strip component of Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to perform domain spoofing through a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
The use of after-free in TabStrip in Google Chrome before version 149.0.7827.103 allowed a remote attacker who convinced a user to perform certain UI gestures to execute arbitrary code through a crafted HTML page. Chromium security severity: Critical...
Astra Linux – Vulnerability in Chromium
Before version 92.0.4515.131, writing out-of-bounds data using Tab groups in Google Chrome allowed an attacker who convinced a user to install a malicious extension to perform an out-of-bounds memory write via a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Before version 91.0.4472.77, using Tab Strip in Google Chrome allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Before version 91.0.4472.77, using Tab Strip in Google Chrome allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Firefox, Thunderbird
An attacker could cause a select dropdown menu to be displayed over another tab; this could lead to user confusion and potential spoofing attacks. This vulnerability affects Firefox 133, Firefox ESR 128.5, Thunderbird 133, and Thunderbird 128.5...
CVE-2024-40507
CVE-2024-40507 openPetra v.2023.02 の serverMPersonnel.asmx 関数を介したクロスサイトスクリプティングの脆弱性。 説明 : 認証されていないユーザーが、openPetra v.2023.02 の serverMPersonnel.asmx 関数を介した XSS を悪用して、認証済みユーザーから Cookie を窃取する可能性があります。 脆弱な製品バージョン : openPetra v.2023.02 CVE 作成者 : Jansen Moreira 日付 : 13/07/2024 CVE : CVE-2024-40507 CVE...
CVE-2022-4556
CVE-2022-4556 - SOGo Webmail의 저장형 XSS v5.7.1 🧠 요약 SOGo 웹 인터페이스 의 신원 기본 설정Identity Preferences 섹션에 있는 fullName 필드에서 저장형 크로스 사이트 스크립팅XSS 취약점이 발견되었으며, 버전 5.7.1 에 영향을 미칩니다. 인증된 공격자는 악성 스크립트를 주입할 수 있으며, 해당 스크립트는 공격자를 포함한 모든 사용자가 메일 탭에 접근할 때마다 실행됩니다. 🆔 CVE 세부 정보 CVE ID : CVE-2022-4556 CVSS v3.1 : 6.1 중...
CVE-2026-13718 Tabs Responsive <= 2.5 - Shop Manager+ Stored XSS via WooCommerce Product Tab Content
The Tabs Responsive WordPress plugin through 2.5 does not sanitize the content of WooCommerce product tabs before storing and rendering it, allowing a shop manager to store JavaScript that executes when any user, including an administrator, views the product page...
CLEANSTART-2024-LX85594 Heap buffer overflow in tab groups in Google Chrome prior to 89
Security vulnerability affects the chromium package. Heap buffer overflow in tab groups in Google Chrome prior to 89...
CLEANSTART-2024-DM83445 Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92
Security vulnerability affects the chromium package. Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92...
CLEANSTART-2024-SV99071 Out of bounds read in Tab Strip in Google Chrome prior to 92
Security vulnerability affects the chromium package. Out of bounds read in Tab Strip in Google Chrome prior to 92...
CLEANSTART-2024-WX22664 Out of bounds write in Tab Groups in Google Chrome prior to 92
Security vulnerability affects the chromium package. Out of bounds write in Tab Groups in Google Chrome prior to 92...
CLEANSTART-2024-UT68300 Heap buffer overflow in Tab Groups in Google Chrome prior to 98
Security vulnerability affects the chromium package. Heap buffer overflow in Tab Groups in Google Chrome prior to 98...
CLEANSTART-2024-UQ63036 Use after free in Thumbnail Tab Strip in Google Chrome prior to 98
Security vulnerability affects the chromium package. Use after free in Thumbnail Tab Strip in Google Chrome prior to 98...
CLEANSTART-2024-FM62766 Use after free in Tab Groups in Google Chrome prior to 102
Security vulnerability affects the chromium package. Use after free in Tab Groups in Google Chrome prior to 102...
Rocky Linux 9 [CIQ] Security Update: coreutils / coreutils-common / coreutils-debuginfo / etc (crlsa-2026_66403)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202666403 advisory. coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 Tenable has extracted the preceding description block directly from...