Lucene search
+L

8757 matches found

osv_debian
osv_debian
•added 2023/05/03 12:15 a.m.•11 views

DEBIAN-CVE-2023-2463

Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6.2AI score0.00859EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/03 12:15 a.m.•31 views

Design/Logic Flaw

Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS4.8AI score0.00859EPSS
SaveExploits0References7Affected Software3
FreeBSD
FreeBSD
•added 2023/05/03 12:00 a.m.•54 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This update includes 15 security fixes: 1423304 Medium CVE-2023-2459: Inappropriate implementation in Prompts. Reported by Rong Jian of VRI on 2023-03-10 1419732 Medium CVE-2023-2460: Insufficient validation of untrusted input in Extensions. Reported by Martin Bajanik,...

8.8CVSS7.4AI score0.00968EPSS
SaveExploits0References1
CVE
CVE
•added 2023/05/02 11:47 p.m.•178 views

CVE-2023-2463

CVE-2023-2463 : In Google Chrome (Android), an inappropriate implementation in Full Screen Mode could allow a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page. Affected software is Chrome/Chromium family, with the issue linked to Full Screen handling. The vuln...

4.3CVSS4.7AI score0.00859EPSS
SaveExploits0References7Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/02 11:47 p.m.•17 views

CVE-2023-2463

Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00859EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2023/05/02 11:47 p.m.•46 views

CVE-2023-2463

Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

5.3AI score0.00859EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2023/05/02 11:47 p.m.•54 views

CVE-2023-2463

Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.9AI score0.00859EPSS
SaveExploits0
CNNVD
CNNVD
•added 2023/05/02 12:00 a.m.•19 views

Google Chrome security vulnerabilities

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Full Screen Mode, which can be exploited by attackers to bypass security restrictions...

4.3CVSS6.5AI score0.00859EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
•added 2023/05/02 12:00 a.m.•70 views

Google Chrome < 113.0.5672.63 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 113.0.5672.63. It is, therefore, affected by multiple vulnerabilities as referenced in the 202305stable-channel-update-for-desktop advisory. - Use after free in OS Inputs in Google Chrome on ChromeOS prior to...

8.8CVSS7.2AI score0.00968EPSS
SaveExploits0References21
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/02 12:00 a.m.•5 views

CVE-2023-2463: Undefined Security Weakness

Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.7AI score0.00859EPSS
SaveExploits0References1
Amazon
Amazon
•added 2023/05/02 12:00 a.m.•43 views

Low: screen

Issue Overview: socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process. CVE-2023-24626 Affected...

6.5CVSS6.3AI score0.0054EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2023/05/02 12:00 a.m.•37 views

Amazon Linux 2 : screen (ALAS-2023-2023)

The version of screen installed on the remote host is prior to 4.1.0-0.27.20120314git3c2946. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2023 advisory. socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Lin...

6.5CVSS6.4AI score0.0054EPSS
SaveExploits3References4
Akamai Blog
Akamai Blog
•added 2023/04/28 1:00 p.m.•19 views

Render Pages Faster for Optimized Browsing, Part 5 of 5

Find out what happens once the browser has downloaded usable assets and it's time to display something on-screen...

6.9AI score
SaveExploits0
osv_oesa
osv_oesa
•added 2023/04/28 11:05 a.m.•23 views

OESA-2023-1263 screen security update

Screen is a full-screen window manager that multiplexes a physical terminal between several processes,typically interactive shells. Security Fixes: socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users to...

6.5CVSS6.2AI score0.0054EPSS
SaveExploits3References2
The Hacker News
The Hacker News
•added 2023/04/28 9:18 a.m.•16 views

Attention Online Shoppers: Don't Be Fooled by Their Sleek, Modern Looks — It's Magecart!

An ongoing Magecart campaign has attracted the attention of cybersecurity researchers for leveraging realistic-looking fake payment screens to capture sensitive data entered by unsuspecting users. "The threat actor used original logos from the compromised store and customized a web element known ...

6.7AI score
SaveExploits0
Citrix
Citrix
•added 2023/04/27 12:00 a.m.•22 views

Gateway Logon Page showing Blank (Logon page white screen)

The logon page of newly added gateway virtual server shows blank, while all the previous configured gateway virtual servers working fine...

7.1AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2023/04/26 7:46 p.m.•46 views

Open redirect vulnerability on CMSSecurity relogin screen

An attacker can display a link to a third party website on a login screen by convincing a legitimate content author to follow a specially crafted link. Upgrade to silverstripe/framework 4.12.5 or above to remedy the vulnerability. Reporter: Matthew Dekker...

6.1CVSS6AI score0.00419EPSS
SaveExploits0References6Affected Software1
osv_cve
osv_cve
•added 2023/04/26 2:00 p.m.•36 views

CVE-2023-22729 Silverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, an attacker can display a link to a third party website on a login screen by convincing a legitimate content author to follow a specially crafted link...

5.4CVSS6.1AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2023/04/26 2:00 p.m.•56 views

CVE-2023-22729 Silverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, an attacker can display a link to a third party website on a login screen by convincing a legitimate content author to follow a specially crafted link...

5.4CVSS6.4AI score0.00419EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/04/26 12:00 a.m.•17 views

PT-2023-18670 · Silverstripe · Silverstripe/Framework

Name of the Vulnerable Software and Affected Versions: Silverstripe Framework versions prior to 4.12.15 Description: An attacker can display a link to a third party website on a login screen by convincing a legitimate content author to follow a specially crafted link. Recommendations: For version...

6.1CVSS6.1AI score0.00419EPSS
SaveExploits0References10
Rows per page
Query Builder