95 matches found
UBUNTU-CVE-2022-3370
Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2022-3370
CVE-2022-3370 is a Chrome/Chromium vulnerability: a use-after-free in Custom Elements leading to potential heap corruption. Affects Chrome/Chromium prior to version 106.0.5249.91. Exploitation would require a crafted HTML page and could lead to high-severity impact across confidentiality, integri...
CVE-2022-3370
Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Chromium: CVE-2022-3370 Use after free in Custom Elements
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
KLA19999 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Out of bounds write vulnerability in V8 can be exploited to cause denial of service. 2. U...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10138-1 Rating: important References: 1203808 Cross-References: CVE-2022-3201 CVE-2022-3304 CVE-2022-3305 CVE-2022-3306 CVE-2022-3307 CVE-2022-3308 CVE-2022-3309 CVE-2022-3310 CVE-2022-3311 CVE-2022-3312...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10139-1 Rating: important References: 1203808 Cross-References: CVE-2022-3201 CVE-2022-3304 CVE-2022-3305 CVE-2022-3306 CVE-2022-3307 CVE-2022-3308 CVE-2022-3309 CVE-2022-3310 CVE-2022-3311 CVE-2022-3312...
[SECURITY] [DSA 5245-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5245-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 02, 2022 https://www.debian.org/security/faq -...
Google Chrome < 106.0.5249.91 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 106.0.5249.91. It is, therefore, affected by multiple vulnerabilities as referenced in the 202209stable-channel-update-for-desktop30 advisory. - Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a...
KLA19265 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Out of bounds write vulnerability in V8 can be exploited to cause denial of service. 2. Use...
FreeBSD : chromium -- multiple vulnerabilities (d459c914-4100-11ed-9bc7-3065ec8fd3ec)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d459c914-4100-11ed-9bc7-3065ec8fd3ec advisory. - Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker ...
Ubuntu: Security Advisory (USN-853-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2017-0325)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-3370
DouPHP v1.6 was discovered to contain a cross-site scripting XSS vulnerability via /admin/cloud.php...
Cisco Email Security Appliance Filter Bypass (cisco-sa-ESA-filt-39jXvMfM)
According to its self-reported version, Cisco Email Security Appliance ESA is affected by an input-validation flaw related to the URL filtering feature. An unauthenticated, remote attacker can exploit this, by sending a crafted, malicious HTTP request to an affected device, in order to allow the...
CVE-2020-3370
CVE-2020-3370 affects Cisco Content Security Management Appliance (SMA). The vulnerability arises from insufficient input validation in the URL filtering feature, enabling an unauthenticated, remote attacker to bypass URL filtering by sending a crafted HTTP request and potentially redirecting use...
CVE-2020-3370 Cisco Content Security Management Appliance Filter Bypass Vulnerability
A vulnerability in URL filtering of Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to bypass URL filtering on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a...
CVE-2011-3370
StatusNet (PHP-based micro‑blogging software) before version 0.9.9 is affected by a cross‑site scripting (XSS) vulnerability. Root cause: improper validation of client‑side data by the web application. Impact: potential execution of client‑side code. Remediation/patch details are not provided in ...
Privilege Escalation
An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...
CVE-2017-3370
Vulnerability in the Oracle iSupport component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport...