Lucene search
+L

129 matches found

ATTACKERKB
ATTACKERKB
added 2022/07/23 12:15 a.m.8 views

CVE-2022-1146

Inappropriate implementation in Resource Timing in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.8AI score0.00871EPSS
SaveExploits1References4
CVE
CVE
added 2022/07/22 11:40 p.m.243 views

CVE-2022-1146

CVE-2022-1146 affects Google Chrome prior to 100.0.4896.60, due to an inappropriate implementation in Resource Timing. This flaw could allow a remote attacker to leak cross-origin data via a crafted HTML page. Multiple connected sources (Chrome release notes, Debian security advisory, Gentoo GLSA...

6.5CVSS6.2AI score0.00871EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2022/07/22 11:40 p.m.71 views

CVE-2022-1146

Inappropriate implementation in Resource Timing in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.1AI score0.00871EPSS
SaveExploits1
OPENSUSE Linux
OPENSUSE Linux
added 2022/04/13 12:00 a.m.45 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:0112-1 Rating: important References: 1194511 1194512 1194513 1194514 1197680 1198053 1198361 Cross-References: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-1125 CVE-2022-1127 CVE-2022-1128...

5.9CVSS8AI score0.21514EPSS
SaveExploits31References7
OpenVAS
OpenVAS
added 2022/04/07 12:00 a.m.23 views

Mageia: Security Advisory (MGASA-2022-0130)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.6AI score0.0179EPSS
SaveExploits17References4
Microsoft CVE
Microsoft CVE
added 2022/04/01 7:00 a.m.57 views

Chromium: CVE-2022-1146 Inappropriate implementation in Resource Timing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.2AI score0.00871EPSS
SaveExploits1
Kaspersky
Kaspersky
added 2022/04/01 12:00 a.m.61 views

KLA12495 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Portals can be...

8.8CVSS9.5AI score0.01845EPSS
SaveExploits15References27
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2012:0554-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.3AI score0.00795EPSS
SaveExploits10References2
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2020:1146-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS7.1AI score0.02447EPSS
SaveExploits4References2
Circl
Circl
added 2021/01/14 12:48 a.m.16 views

CVE-2021-1146

creationtimestamp| type| source ---|---|--- 2021-01-14 00:48:44+00:00| seen| https://t.me/cibsecurity/22108...

9CVSS7AI score0.02371EPSS
SaveExploits0References1
CVE
CVE
added 2021/01/13 9:40 p.m.108 views

CVE-2021-1146

CVE-2021-1146 affects Cisco Small Business RV110W/RV130/RV130W/RV215W routers. The issue lies in improper validation in the web-based management interface, allowing an authenticated attacker to inject arbitrary commands that run with root privileges via crafted HTTP requests. Exploitation require...

9CVSS7.3AI score0.02371EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/09/11 5:09 p.m.113 views

CVE-2020-1146

CVE-2020-1146 is an elevation of privilege affecting the Microsoft Store Runtime, caused by improper memory handling. The vulnerability requires the attacker to gain code execution on the victim machine and then run a crafted application to elevate privileges. Microsoft addresses the issue via a ...

7.8CVSS7.3AI score0.00777EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
added 2020/09/11 5:09 p.m.44 views

CVE-2020-1146 Microsoft Store Runtime Elevation of Privilege Vulnerability

...

6.6CVSS7.3AI score0.00777EPSS
SaveExploits0References1
CVE
CVE
added 2020/09/11 5:08 p.m.114 views

CVE-2020-0766

CVE-2020-0766 is an elevation-of-privilege vulnerability in the Microsoft Store Runtime caused by improper memory handling. An attacker would need remote execution on the target to run a crafted program that could escalate privileges locally; the issue is mitigated by a security update that corre...

7.8CVSS7.9AI score0.00931EPSS
SaveExploits0References1Affected Software3
OpenVAS
OpenVAS
added 2020/02/25 12:00 a.m.33 views

Huawei EulerOS: Security Advisory for dovecot (EulerOS-SA-2020-1146)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02525EPSS
SaveExploits0References2
Prion
Prion
added 2019/08/14 9:15 p.m.40 views

Remote code execution

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1146, CVE-2019-1147, CVE-2019-1155, CVE-2019-1156...

9.3CVSS7.9AI score0.04477EPSS
SaveExploits0References1Affected Software5
Vulnrichment
Vulnrichment
added 2019/08/14 8:55 p.m.21 views

CVE-2019-1146 Jet Database Engine Remote Code Execution Vulnerability

...

7.8CVSS6.7AI score0.04477EPSS
SaveExploits0References1
CVE
CVE
added 2019/08/14 8:55 p.m.142 views

CVE-2019-1146

CVE-2019-1146 concerns a remote code execution that arises when the Windows Jet Database Engine mismanages in‑memory objects. An attacker could exploit this by convincing a user to open a specially crafted file, enabling arbitrary code on the system. The vulnerability is addressed by Microsoft in...

9.3CVSS8.8AI score0.04477EPSS
SaveExploits0References1Affected Software8
Cvelist
Cvelist
added 2019/08/14 8:55 p.m.34 views

CVE-2019-1146 Jet Database Engine Remote Code Execution Vulnerability

...

7.8CVSS8.6AI score0.04477EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/08/13 12:00 a.m.56 views

KB4512501: Windows 10 Version 1803 August 2019 Security Update

The remote Windows host is missing security update 4512501. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC. An attacker who successfully exploited this...

10CVSS8.3AI score0.83433EPSS
SaveExploits15References72
Rows per page
Query Builder