Lucene search
K

33 matches found

RedhatCVE
RedhatCVE
added 2025/11/11 1:12 p.m.1 views

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

6.5CVSS5.6AI score0.00003EPSS
Exploits1References5
NVD
NVD
added 2025/11/10 8:15 p.m.2 views

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

5.5CVSS0.00003EPSS
Exploits1References2
OSV
OSV
added 2025/11/10 8:15 p.m.1 views

DEBIAN-CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

5.5CVSS5.1AI score0.00003EPSS
Exploits1References1
CVE
CVE
added 2025/11/10 8:0 p.m.8 views

CVE-2025-12439

CVE-2025-12439 affects Google Chrome (Windows) prior to 142.0.7444.59 due to an inappropriate implementation in App-Bound Encryption. A local attacker could obtain potentially sensitive information from a process’s memory via a malicious file. This is a Chromium-based issue affecting Chrome/Chrom...

5.5CVSS5.1AI score0.00003EPSS
Exploits1References2Affected Software1
SUSE CVE
SUSE CVE
added 2025/10/31 12:34 a.m.2 views

SUSE CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

5.5CVSS6.1AI score0.00003EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/10/29 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-12439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive...

5.5CVSS5.4AI score0.00003EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2019-12439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to XDGRUNTIMEDIR, a...

7.8CVSS6.3AI score0.00145EPSS
Exploits0References3
NVD
NVD
added 2025/01/07 6:15 a.m.8 views

CVE-2024-12439

The Marketplace Items plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'marketplace' shortcode in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.0036EPSS
Exploits0References3
Circl
Circl
added 2025/01/07 5:38 a.m.3 views

CVE-2024-12439

creationtimestamp| type| source ---|---|--- 2025-01-07 05:38:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/342 2025-01-07 06:03:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113785558213640255 2025-01-07 06:16:12+00:00| seen|...

6.4CVSS8.7AI score0.0036EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/01/07 5:23 a.m.12 views

CVE-2024-12439 Marketplace Items <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marketplace' Shortcode

The Marketplace Items plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'marketplace' shortcode in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.0036EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/01/07 5:23 a.m.4 views

CVE-2024-12439 Marketplace Items <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marketplace' Shortcode

The Marketplace Items plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'marketplace' shortcode in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.8AI score0.0036EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/11/07 12:0 a.m.7 views

RHEL 7 : CloudForms 4.7.7 (RHSA-2019:1833)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1833 advisory. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments...

7.8CVSS6.5AI score0.00145EPSS
Exploits0References19
Circl
Circl
added 2023/12/18 3:50 a.m.1 views

CVE-2017-12439

creationtimestamp| type| source ---|---|--- 2023-12-18 03:50:40+00:00| seen| https://t.me/arpsyndicate/1905...

7.5CVSS7.4AI score0.00173EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:11 a.m.2 views

SUSE CVE-2019-12439

bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to XDGRUNTIMEDIR, a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code...

7CVSS6.8AI score0.00145EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2019:1826-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.00145EPSS
Exploits0References2
CBLMariner
CBLMariner
added 2020/09/09 6:9 a.m.16 views

CVE-2019-12439 affecting package bubblewrap 0.3.0-5

CVE-2019-12439 affecting package bubblewrap 0.3.0-5. A patched version of the package is available...

7.8CVSS7.5AI score0.00145EPSS
Exploits0
OSV
OSV
added 2020/05/05 10:15 p.m.11 views

CVE-2020-12439

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

5.3CVSS6.8AI score0.00334EPSS
Exploits0References3
CVE
CVE
added 2020/05/05 9:19 p.m.69 views

CVE-2020-12439

CVE-2020-12439 affects Grin prior to 3.1.0. The issue allows attackers to adversely affect availability of data on a Mimblewimble blockchain. The Connected documents confirm the product (Grin), version bound (before 3.1.0), and the impact (availability disruption). There are no explicit remediati...

5.3CVSS5.2AI score0.00334EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.18 views

openSUSE: Security Advisory for bubblewrap (openSUSE-SU-2019:1535-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.8AI score0.00145EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2019/07/25 12:0 a.m.23 views

EulerOS 2.0 SP8 : bubblewrap (EulerOS-SA-2019-1762)

According to the version of the bubblewrap package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to...

7.8CVSS6.4AI score0.00145EPSS
Exploits0References2
Rows per page
Query Builder