101 matches found
CVE-2023-2461
creationtimestamp| type| source ---|---|--- 2023-05-03 07:30:52+00:00| seen| https://t.me/cibsecurity/63201...
CVE-2023-2461
Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. Chromium security severity: Medium...
DEBIAN-CVE-2023-2461
Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. Chromium security severity: Medium...
CVE-2023-2461
Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. Chromium security severity: Medium...
CVE-2023-2461
CVE-2023-2461 affects Google Chrome/Chromium OS Inputs on ChromeOS before 113.0.5672.63. Root cause: use-after-free in OS Inputs leading to heap corruption via crafted UI interaction after user engagement. Impact per sources: remote attacker could exploit via user interaction; CVSS v3.1 indicates...
Google Chrome < 113.0.5672.63 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 113.0.5672.63. It is, therefore, affected by multiple vulnerabilities as referenced in the 202305stable-channel-update-for-desktop advisory. - Use after free in OS Inputs in Google Chrome on ChromeOS prior to...
KLA49112 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Validation of untrusted input vulnerability in Exte can be exploited to cause denial of...
K62050299: Adobe Flex vulnerability CVE-2011-2461
Security Advisory Description Cross-site scripting XSS vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the loading of modules from different domains. CVE-2011-2461 Impact There is no impact; F5 produc...
Input validation
The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticated users in versions up to, and including, 1.0.8.1. This is due to insufficient validation of settings on the 'tptranslation' AJAX action which makes it possible for...
Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2022-2461)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-2461
The Transposh WordPress Translation plugin is affected by CVE-2022-2461. Affected software: Transposh WordPress Translation plugin for WordPress. Vulnerable component: the tp_translation AJAX action, due to insufficient permissions checking. Root cause: unauthenticated users can trigger unauthori...
Transposh WordPress Translation 1.0.7 Cross Site Scripting Vulnerability
Transposh WordPress Translation versions 1.0.7 and below have an ajax action "tptranslation" which is available to authenticated or unauthenticated users see CVE-2022-2461 that allows them to submit new translations. Translations submitted this way are shown on the Transposh administrative...
Transposh WordPress Translation 1.0.7 Incorrect Authorization
RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: Transposh WordPress Translation Vendor URL: https://wordpress.org/plugins/transposh-translation-filter-for-wordpress/ Type: Incorrect Authorization CWE-863 Date found: 2022-07-13 Date...
CVE-2021-2461
creationtimestamp| type| source ---|---|--- 2021-10-20 14:41:22+00:00| seen| https://t.me/cibsecurity/30874...
CVE-2021-2461
Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications component: Provision API. The supported version that is affected is 6.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2021-2461
CVE-2021-2461 affects Oracle Communications Interactive Session Recorder (Provision API) with affected version 6.4. Multiple connected sources corroborate a remote, unauthenticated HTTP-accessible vulnerability that can lead to unauthorized read/update/delete of data and a partial denial of servi...
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-2461)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:2461-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2020:2461-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2019-2461)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...