123 matches found
CVE-2023-1528
The connected Astra Linux bulletin confirms CVE-2023-1528 affects Chromium-based browsers, notably Google Chrome/Chromium Passwords, with the issue being a use-after-free that could lead to heap corruption when an attacker who has compromised the renderer page crafts HTML. This allows a remote at...
CVE-2023-1528
Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
chromium -- multiple vulnerabilities
Chrome Releases reports: This update includes 8 security fixes: 1421773 High CVE-2023-1528: Use after free in Passwords. Reported by Wan Choi of Seoul National University on 2023-03-07 1419718 High CVE-2023-1529: Out of bounds memory access in WebHID. Reported by anonymous on 2023-02-27 1419831...
KLA48626 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in ANGLE can be exploited to cause denial of service or execute...
Google Chrome < 111.0.5563.110 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 111.0.5563.110. It is, therefore, affected by multiple vulnerabilities as referenced in the 202303stable-channel-update-for-desktop21 advisory. - Use after free in WebProtect in Google Chrome prior to 111.0.5563.110 allow...
CVE-2022-1528
creationtimestamp| type| source ---|---|--- 2022-05-30 12:17:48+00:00| seen| https://t.me/cibsecurity/43532...
CVE-2022-1528
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.9 does not escape the current URL before putting it back in a JavaScript context, leading to a Reflected Cross-Site Scripting...
CVE-2022-1528
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.9 does not escape the current URL before putting it back in a JavaScript context, leading to a Reflected Cross-Site Scripting...
CVE-2022-1528
The CVE-2022-1528 entry affects the VikBooking Hotel Booking Engine & PMS WordPress plugin (before 1.5.9). The vulnerability is a Reflected Cross-Site Scripting caused by not escaping the current URL before embedding it in a JavaScript context, enabling potential script execution. Reported PoCs s...
CVE-2022-1528 VikBooking < 1.5.9 - Reflected Cross-Site Scripting
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.9 does not escape the current URL before putting it back in a JavaScript context, leading to a Reflected Cross-Site Scripting...
CVE-2021-1528
creationtimestamp| type| source ---|---|--- 2021-06-04 21:42:08+00:00| published-proof-of-concept| Telegram/DB8jK4zL0I8BprlsjcvMwJ2SGeYxQOrb16cJqrhhf3a0gc...
CVE-2021-1528
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system. This vulnerability exists because the affected software does not properly restrict access to privileged processes. An attacker could exploit this...
CVE-2021-1528
CVE-2021-1528 affects Cisco SD-WAN Software. The vulnerability is in the CLI where access to privileged processes is not properly restricted, allowing an authenticated, local attacker to escalate privileges and potentially execute actions with root-level privileges. Impact is elevated privileges ...
CVE-2021-1528 Cisco SD-WAN Software Privilege Escalation Vulnerability
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system. This vulnerability exists because the affected software does not properly restrict access to privileged processes. An attacker could exploit this...
CVE-2020-1528
An elevation of privilege vulnerability exists when the Windows Radio Manager API improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...
CVE-2020-1528
CVE-2020-1528 concerns an elevation of privilege in Windows related to the Windows Radio Manager API improperly handling memory. The vulnerability requires an attacker to gain code execution on the victim and then run a crafted application to elevate privileges; Microsoft’s security update fixes ...
CVE-2019-1528
CVE-2019-1528 entry is rejected/not used and does not represent an active vulnerability.
Debian DLA-1528-1 : strongswan security update
It was discovered that there was a denial of service vulnerability in strongswan, a virtual private network VPN client and server. Verification of an RSA signature with a very short public key caused an integer underflow in a length check that resulted in a heap buffer overflow. For Debian 8...
Security Bulletin: IBM Maximo Asset Management could allow an authenticated user to obtain sensitive information from the WhoAmI API (CVE-2018-1528)
Summary IBM Maximo Asset Management could allow an authenticated user to obtain sensitive information from the WhoAmI API. Vulnerability Details CVEID: CVE-2018-1528 DESCRIPTION: IBM Maximo Asset Management could allow an authenticated user to obtain sensitive information from the WhoAmI API. CVS...