Lucene search
K

25 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:47 a.m.3 views

CVE-2024-21169

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Partners. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks o...

6.5CVSS6.2AI score0.00223EPSS
Exploits0References1
Circl
Circl
added 2025/05/21 8:41 p.m.2 views

CVE-2022-21169

creationtimestamp| type| source ---|---|--- 2025-05-21 20:41:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17194...

7.3CVSS6.5AI score0.00504EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/03/13 5:14 p.m.6 views

CVE-2025-21169

Substance3D - Designer versions 14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.4AI score0.00037EPSS
Exploits0References3
Circl
Circl
added 2025/03/11 4:40 p.m.1 views

CVE-2025-21169

creationtimestamp| type| source ---|---|--- 2025-03-11 16:40:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7163...

7.8CVSS4.8AI score0.00037EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/11 4:26 p.m.10 views

CVE-2025-21169 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer versions 14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.00037EPSS
Exploits0References1
NVD
NVD
added 2024/07/16 11:15 p.m.21 views

CVE-2024-21169

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Partners. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks o...

6.5CVSS0.00223EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/16 10:40 p.m.26 views

CVE-2024-21169

...

6.5CVSS0.00223EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/16 10:40 p.m.13 views

CVE-2024-21169

...

6.5CVSS7AI score0.00223EPSS
Exploits0References1
CVE
CVE
added 2023/06/28 12:0 a.m.70 views

CVE-2023-21169

CVE-2023-21169 affects Android 13 and relates to an out-of-bounds read in inviteInternal of p2p_iface.cpp caused by a missing bounds check. The vulnerability can lead to local information disclosure with System execution privileges required; exploitation does not require user interaction. The ava...

4.4CVSS4.2AI score0.00039EPSS
Exploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 3:46 a.m.1 views

SUSE CVE-2021-21169

Out of bounds memory access in V8 in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

8.8CVSS8.4AI score0.01622EPSS
Exploits1References6
NVD
NVD
added 2022/09/26 5:15 a.m.9 views

CVE-2022-21169

The package express-xss-sanitizer before 1.1.3 are vulnerable to Prototype Pollution via the allowedTags attribute, allowing the attacker to bypass xss sanitization...

7.3CVSS0.00504EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2022/09/26 5:5 a.m.4 views

CVE-2022-21169 Prototype Pollution

The package express-xss-sanitizer before 1.1.3 are vulnerable to Prototype Pollution via the allowedTags attribute, allowing the attacker to bypass xss sanitization...

7.3CVSS7.1AI score0.00504EPSS
Exploits1References4
Cvelist
Cvelist
added 2022/09/26 5:5 a.m.12 views

CVE-2022-21169 Prototype Pollution

The package express-xss-sanitizer before 1.1.3 are vulnerable to Prototype Pollution via the allowedTags attribute, allowing the attacker to bypass xss sanitization...

7.3CVSS7.3AI score0.00504EPSS
Exploits1References4
CVE
CVE
added 2022/09/26 5:5 a.m.60 views

CVE-2022-21169

Express-XSS-Sanitizer prior to 1.1.3 is vulnerable to Prototype Pollution via the allowedTags attribute, enabling bypass of XSS sanitization. Affected: express-xss-sanitizer pre-1.1.3. Root cause: prototype contamination affecting sanitization. Impact: potential bypass of input sanitization and r...

7.3CVSS6.3AI score0.00504EPSS
Exploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/04/19 12:0 a.m.51 views

Fedora 33 : chromium (2021-4740239e28)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-4740239e28 advisory. - Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a...

8.8CVSS8AI score0.37976EPSS
Exploits24References33
OpenVAS
OpenVAS
added 2021/04/16 12:0 a.m.24 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2021:0392-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS8AI score0.37976EPSS
Exploits32References4
OpenVAS
OpenVAS
added 2021/03/15 12:0 a.m.23 views

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Mar 2021)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.6CVSS8.3AI score0.37976EPSS
Exploits32References3
UbuntuCve
UbuntuCve
added 2021/03/09 6:15 p.m.26 views

CVE-2021-21169

Out of bounds memory access in V8 in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

8.8CVSS7.2AI score0.01622EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2021/03/09 5:46 p.m.36 views

CVE-2021-21169

Out of bounds memory access in V8 in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

8.8CVSS8.3AI score0.01622EPSS
Exploits1
CVE
CVE
added 2021/03/09 5:46 p.m.179 views

CVE-2021-21169

CVE-2021-21169 is a real vulnerability: an out-of-bounds memory access in the V8 JavaScript engine used by Chromium/Chrome. Connected advisories confirm the issue affects Chromium before version 89.0.4389.72 and has been fixed in newer Chrome/Chromium releases. Debian Security Advisories and Arch...

8.8CVSS8AI score0.01622EPSS
Exploits1References7Affected Software1
Rows per page
Query Builder