CVE-2024-3834

Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-3834 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-3834 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-3834

Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-3834

Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-3834

Concrete details found: CVE-2024-3834 affects Google Chrome/Chromium, describing a Use-after-Free in the Downloads component that could enable heap corruption via a crafted HTML page. Affected versions are prior to 124.0.6367.60. The issue has been addressed in newer Chromium/Chrome updates (e.g....

CVE-2023-3834

creationtimestamp| type| source ---|---|--- 2023-07-22 20:24:34+00:00| seen| https://t.me/cibsecurity/67118 2024-01-03 22:36:15+00:00| seen| https://t.me/arpsyndicate/2371...

CVE-2023-3834 Bug Finder EX-RATE Ticket create cross site scripting

A vulnerability was found in Bug Finder EX-RATE 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. The attack may be...

CVE-2023-3834

Bug Finder EX-RATE 1.0 is affected in the Ticket Handler’s /user/ticket/create endpoint. The vulnerability is a cross-site scripting flaw triggered by manipulating the message argument, with the attack potentially executable remotely. Reported impact is primarily information/script integrity on a...

Debian: Security Advisory (DSA-2143-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : python-Flask-Security (SUSE-SU-2022:3834-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:3834-1 advisory. - CVE-2021-23385: Fixed open redirect bsc1202105. Tenable has extracted the preceding description block directly from the SUSE security advisory. Note that...

CVE-2022-3834

The CVE-2022-3834 entry concerns the WordPress Google Forms plugin (versions ≤ 0.95). The vulnerability arises because the plugin does not sanitize/escape certain settings, enabling Stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (such as in multisite). A...

SUSE: Security Advisory (SUSE-SU-2021:3834-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3834

Integria IMS 5.0.92 is vulnerable to cross-site scripting (XSS) due to improper filtering of certain fields in login.php. The issue, described across CVE-2021-3834 records, is caused by inadequate input handling in a login-related form, enabling an attacker to inject/execute script content. The c...

RHEL 8 : firefox (RHSA-2020:3834)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3834 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

CVE-2020-3834

CVE-2020-3834 is a memory corruption issue affecting the Apple Watch kernel. The flaw could allow an application to execute code with kernel privileges. It is fixed in watchOS 6.1.2; affected products are Apple Watch Series 1 and later, per Apple documentation and NVD records. The vulnerability i...

Oracle Linux 7 : kernel (ELSA-2019-3834)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3834 advisory. - drm drm/i915: Lower RM timeout to avoid DSI hard hangs Dave Airlie 1756815 1756816 CVE-2019-0154 - drm drm/i915/gen8+: Add RC6 CTX corruption WA Dave...

CentOS Update for bpftool CESA-2019:3834 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : kernel (RHSA-2019:3834)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3834 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: hw: Machine Check Error on Page Size...

CVE-2019-3834

It was found that the fix for CVE-2014-0114 had been reverted in JBoss Operations Network 3 JON. This flaw allows attackers to manipulate ClassLoader properties on a vulnerable server. Exploits that have been published rely on ClassLoader properties that are exposed such as those in JON 3...