Lucene search
K

84 matches found

NVD
NVD
added 2026/05/27 9:16 a.m.9 views

CVE-2025-13593

Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation...

6.1CVSS0.00004EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/27 8:38 a.m.8 views

CVE-2025-13593

Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation...

6.1CVSS5.9AI score0.00004EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/27 8:38 a.m.11 views

CVE-2025-13593

Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation...

6.1CVSS5.9AI score0.00004EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.6 views

PT-2026-43585

Name of the Vulnerable Software and Affected Versions Synology ActiveProtect Agent versions prior to 1.1.0-0439 Description An origin validation error occurs during installation, allowing local users to write arbitrary files with restricted content. Recommendations Update to version 1.1.0-0439 or...

6.1CVSS5.9AI score0.00004EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 11:17 a.m.6 views

CVE-2021-0439

In setPowerModeWithHandle of comandroidserverpowerPowerManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

7.8CVSS7.1AI score0.00015EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/02 6:30 p.m.2 views

EUVD-2026-0439

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

5.5AI score
Exploits0References1
OSV
OSV
added 2025/09/15 1:11 a.m.1 views

ECHO-A31B-E9BD-0439

Bulletin has no description...

5.5CVSS9.1AI score0.00008EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2025-0439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing v...

6.5CVSS7AI score0.00084EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/02/04 10:58 p.m.3 views

CVE-2024-0439

As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience for the role since most managers would not be savvy enough to modify these settings. They can use their token to still modify those settings though through a standard HTTP request...

8.8CVSS6.7AI score0.00216EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/01/18 12:0 a.m.31 views

Fedora 40 : chromium (2025-4c65803ea6)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4c65803ea6 advisory. Update to 132.0.6834.83 High CVE-2025-0434: Out of bounds memory access in V8 High CVE-2025-0435: Inappropriate implementation in Navigation High...

8.8CVSS7AI score0.12088EPSS
Exploits12References15
Microsoft CVE
Microsoft CVE
added 2025/01/16 8:0 a.m.17 views

Chromium: CVE-2025-0439 Race in Frames

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS6.5AI score0.00084EPSS
Exploits1
Wolfi
Wolfi
added 2025/01/15 11:15 a.m.56 views

CVE-2025-0439 vulnerabilities

Vulnerabilities for packages: chromium...

6.5CVSS7.1AI score0.00084EPSS
Exploits1
OSV
OSV
added 2025/01/15 11:15 a.m.1 views

DEBIAN-CVE-2025-0439

Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.3AI score0.00084EPSS
Exploits1References1
Chainguard
Chainguard
added 2025/01/15 11:15 a.m.11 views

CVE-2025-0439 vulnerabilities

Vulnerabilities for packages: chromium...

6.5CVSS6.8AI score0.00084EPSS
Exploits1
OSV
OSV
added 2025/01/15 11:15 a.m.13 views

CVE-2025-0439

Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6AI score
Exploits0References2
Circl
Circl
added 2025/01/15 11:12 a.m.4 views

CVE-2025-0439

creationtimestamp| type| source ---|---|--- 2025-01-15 11:12:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1727 2025-01-15 11:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrnafawhx2n 2025-01-15 11:21:29+00:00| seen|...

6.5CVSS6.2AI score0.00084EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/01/15 10:58 a.m.13 views

CVE-2025-0439

Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

5.9AI score0.00084EPSS
Exploits1References2
CVE
CVE
added 2025/01/15 10:58 a.m.933 views

CVE-2025-0439

CVE-2025-0439 concerns a race in Chrome’s Frame handling that enables UI spoofing when a user is induced to perform specific UI gestures via a crafted HTML page. Affected product is Google Chrome (and Chromium-derived builds) with versions prior to 132.0.6834.83. Impact per the entry is confirmed...

6.5CVSS6.4AI score0.00084EPSS
Exploits1References2Affected Software1
Debian CVE
Debian CVE
added 2025/01/15 10:58 a.m.13 views

CVE-2025-0439

Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.3AI score0.00084EPSS
Exploits1
Cvelist
Cvelist
added 2025/01/15 10:58 a.m.13 views

CVE-2025-0439

Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

0.00084EPSS
Exploits1References2
Rows per page
Query Builder