Lucene search
+L

201 matches found

CVE
CVE
added 2022/04/05 12:51 a.m.142 views

CVE-2022-0460

CVE-2022-0460 affects Google Chrome (Windows, Mac, Linux): a use-after-free in Window Dialog handling allowed by a crafted HTML page to potentially trigger heap corruption. The vulnerability is tied to Chrome versions prior to 98.0.4758.80. Exploitation could be remote and require no user interac...

8.8CVSS9AI score0.00745EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2022/04/05 12:51 a.m.71 views

CVE-2022-0460

Use after free in Window Dialogue in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.8AI score0.00745EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/02/08 12:0 a.m.37 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0030-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0030-1 advisory. - Use after free in Safe Browsing. CVE-2022-0452 - Use after free in Reader Mode. CVE-2022-0453 - Heap buffer overflow in ANGLE...

9.6CVSS8AI score0.00953EPSS
SaveExploits2References38
Microsoft CVE
Microsoft CVE
added 2022/02/02 2:3 a.m.31 views

Chromium: CVE-2022-0460 Use after free in Window Dialog

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.00745EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.35 views

Mageia: Security Advisory (MGASA-2018-0460)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.86006EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.29 views

Mageia: Security Advisory (MGASA-2015-0158)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.6AI score0.06408EPSS
SaveExploits1References6
Packet Storm
Packet Storm
added 2022/01/20 12:0 a.m.340 views

Backdoor.Win32.Wisell Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/57bda78cc5fd6a06017148bae28e8e39.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Wisell Vulnerability: Unauthenticated Remote Command Execution Description: The malwa...

SaveExploits0
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2012:0424-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS9.7AI score0.06585EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2014:0732-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.6AI score0.10117EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2014:0733-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.7AI score0.10117EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.35 views

SUSE: Security Advisory (SUSE-SU-2015:0789-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS5.4AI score0.06408EPSS
SaveExploits0References4
Circl
Circl
added 2021/03/10 8:53 p.m.7 views

CVE-2021-0460

creationtimestamp| type| source ---|---|--- 2021-03-10 20:53:07+00:00| seen| https://t.me/cibsecurity/24708...

4.4CVSS4.9AI score0.00124EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/10 5:15 p.m.38 views

CVE-2021-0460

In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

4.4CVSS0.00124EPSS
SaveExploits0References1
CVE
CVE
added 2021/03/10 4:17 p.m.58 views

CVE-2021-0460

CVE-2021-0460 affects Google's FingerTipS touchscreen driver in the Android kernel. The root cause is an integer overflow causing an out-of-bounds read in fts_driver_test_write, enabling a local attacker to disclose kernel data. Exploitation requires ability to execute low-privileged code; user i...

4.4CVSS4.2AI score0.00124EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/12/14 9:52 p.m.110 views

CVE-2020-0460

CVE-2020-0460 affects Android 11, in CertInstaller.java (createNameCredentialDialog). Root cause: a logic error that can improperly install certificates, leading to remote information disclosure with no privileges and no user interaction required. Public details come from Android 2020-12-01/12-05...

7.5CVSS7AI score0.00738EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/07/08 4:13 p.m.39 views

Security Bulletin: Multiple vulnerabilities exist in the current IBM SDK for Java used in IBM System Networking Switch Center (CVE-2014-0411 & CVE-2014-0460)

Summary IBM System Networking Switch Center ships with IBM Java 7 JRE. Two vulnerabilities are fixed in the April 2014 Critical Patch Update. 1 CVE-2014-0460: JNDI DNS service provider has several implementation flaws that make spoofing DNS responses much easier; 2 CVE-2014-0411: Vulnerability in...

5.8CVSS1.7AI score0.0435EPSS
SaveExploits0Affected Software1
Veracode
Veracode
added 2019/05/02 4:58 a.m.42 views

Information Disclosure

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS7.6AI score0.10117EPSS
SaveExploits1References12Affected Software1
Veracode
Veracode
added 2019/05/02 4:58 a.m.40 views

Privilege Escalation

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS7.6AI score0.10117EPSS
SaveExploits1References52Affected Software3
Veracode
Veracode
added 2019/05/02 4:58 a.m.44 views

Arbitrary Code Execution

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS7.6AI score0.10117EPSS
SaveExploits1References19Affected Software3
IBM Security Bulletins
IBM Security Bulletins
added 2019/01/31 1:35 a.m.41 views

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Flex System Manager (FSM): (CVE-2014-0453, CVE-2014-0460 and CVE-2014-0878)

Vulnerability Details Abstract There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Versions 1.6.0 and 1.7.0 and Oracle® Java™ SE Runtime Environment, Versions 1.6.0 and 1.7.0 that is used by IBM Flex System Manager. These were disclosed as part of the IBM Java...

5.8CVSS0.6AI score0.04899EPSS
SaveExploits0
Rows per page
Query Builder