498 matches found
CVE-2024-1938
creationtimestamp| type| source ---|---|--- 2024-02-29 21:37:08+00:00| seen| https://t.me/ctinow/197049...
Chromium: CVE-2024-1938 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2024-1938
Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-1938
Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-1938
Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-1938
Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-1938
CVE-2024-1938 corresponds to a Chrome/Chromium V8 type-confusion vulnerability (prior to 122.0.6261.94). The issue enables remote attackers to potentially trigger object corruption via a crafted HTML page, with high impact across confidentiality, integrity, and availability per the source. The As...
KLA64687 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be exploited to cause denial of service. 2. ...
FreeBSD : chromium -- multiple security fixes (31bb1b8d-d6dc-11ee-86bb-a8a1599412c6)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 31bb1b8d-d6dc-11ee-86bb-a8a1599412c6 advisory. - Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to...
[SECURITY] [DSA 5634-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5634-1 [email protected] https://www.debian.org/security/ Andres Salomon February 28, 2024 https://www.debian.org/security/faq -...
Google Chrome < 122.0.6261.94 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 122.0.6261.94. It is, therefore, affected by multiple vulnerabilities as referenced in the 202402stable-channel-update-for-desktop27 advisory. - Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remot...
KLA64630 Multiple vulnerabilities in Google Chrome
Type confusion vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service. Original advisories Chrome Releases: Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. Related products Google-Chrom...
Google Chrome < 122.0.6261.94 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 122.0.6261.94. It is, therefore, affected by multiple vulnerabilities as referenced in the 202402stable-channel-update-for-desktop27 advisory. - Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a...
chromium -- multiple security fixes
Chrome Releases reports: This update includes 4 security fixes: 324596281 High CVE-2024-1938: Type Confusion in V8. Reported by 5f46f4ee2e17957ba7b39897fb376be8 on 2024-02-11 323694592 High CVE-2024-1939: Type Confusion in V8. Reported by Bohan Liu @P4nda20371774 of Tencent Security Xuanwu Lab on...
CVE-2014-1938
creationtimestamp| type| source ---|---|--- 2024-02-26 09:12:03+00:00| seen| https://t.me/ctinow/193174...
CVE-2023-1938
CVE-2023-1938 affects the WordPress plugin WP Fastest Cache up to version 1.1.5. The flaw allows Blind SSRF via an AJAX action because there is no CSRF check and user input is not validated before use in wp_remote_get(). Exploitation details are not provided in the initial documents; the CVSS bas...
CVE-2023-1938 WP Fatest Cache < 1.1.5 - Blind SSRF via CSRF
The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wpremoteget function, leading to a Blind SSRF issue...
WordPress WP Fastest Cache Plugin < 1.1.5 is vulnerable to Server Side Request Forgery (SSRF)
Software WP Fastest Cache Type Plugin Vulnerable versions 1.1.5 Fixed in 1.1.5 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2023-1938 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID b892370bc54e Credits Erwan LR WPScan Required privile...
Amazon Linux 2 : httpd (ALAS-2023-1938)
The version of httpd installed on the remote host is prior to 2.4.55-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1938 advisory. A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory...
PT-2022-28117 · Talend · Talend Open Studio For Mdm
Name of the Vulnerable Software and Affected Versions: Talend Open Studio for MDM versions prior to 20221220 1938 Description: A vulnerability was found in Talend Open Studio for MDM, affecting an unknown functionality of the file...