Lucene search
+L

76 matches found

Microsoft CVE
Microsoft CVE
added 2023/09/15 7:00 a.m.46 views

Chromium: CVE-2023-4906 Insufficient policy enforcement in Autofill

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS6AI score0.00637EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/09/15 12:00 a.m.102 views

Microsoft Edge (Chromium) < 117.0.2045.31 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 117.0.2045.31. It is, therefore, affected by multiple vulnerabilities as referenced in the September 15, 2023 advisory. - Microsoft Edge Chromium-based Elevation of Privilege Vulnerability CVE-2023-36562, CVE-2023-3673...

9.6CVSS6.6AI score0.99735EPSS
SaveExploits9References29
Circl
Circl
added 2023/09/13 12:23 a.m.9 views

CVE-2023-4906

creationtimestamp| type| source ---|---|--- 2023-09-13 00:23:27+00:00| seen| https://t.me/cibsecurity/70361...

4.3CVSS4.5AI score0.00637EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/12 9:15 p.m.10 views

DEBIAN-CVE-2023-4906

Insufficient policy enforcement in Autofill in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. Chromium security severity: Low...

4.3CVSS4.8AI score0.00637EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2023/09/12 9:15 p.m.25 views

CVE-2023-4906

Insufficient policy enforcement in Autofill in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.9AI score0.00637EPSS
SaveExploits0References3
CVE
CVE
added 2023/09/12 8:47 p.m.219 views

CVE-2023-4906

Chromium/Google Chrome Autofill vulnerability CVE-2023-4906: Insufficient policy enforcement in Autofill allows bypass via a crafted HTML page. Descriptions in connected docs confirm affected components (Chromium/Chrome/ChromeOS), root cause, and low severity. Public fixes exist: Debian/Debian se...

4.3CVSS4.2AI score0.00637EPSS
SaveExploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/08/10 12:00 a.m.31 views

Fedora 38 : chromium (2023-95d73a5f50)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-95d73a5f50 advisory. update to 115.0.5790.110. Fixes the following security issue: CVE-2022-4908 CVE-2022-4909 CVE-2022-4910 CVE-2022-4908 CVE-2022-4909 CVE-2022-4910...

8.8CVSS7.1AI score0.12957EPSS
SaveExploits9References11
OpenVAS
OpenVAS
added 2023/08/05 12:00 a.m.44 views

Fedora: Security Advisory for chromium (FEDORA-2023-8a94349e38)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.12957EPSS
SaveExploits9References2
Circl
Circl
added 2023/07/29 7:30 a.m.11 views

CVE-2022-4906

creationtimestamp| type| source ---|---|--- 2023-07-29 07:30:11+00:00| seen| https://t.me/cibsecurity/67410...

8.8CVSS8.1AI score0.12957EPSS
SaveExploits1References1
NVD
NVD
added 2023/07/29 12:15 a.m.26 views

CVE-2022-4906

Inappropriate implementation in Blink in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.1AI score0.12957EPSS
SaveExploits1References4
OSV
OSV
added 2023/07/29 12:15 a.m.2 views

DEBIAN-CVE-2022-4906

Inappropriate implementation in Blink in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.3AI score0.12957EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2023/07/28 11:26 p.m.61 views

CVE-2022-4906

Inappropriate implementation in Blink in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.1AI score0.12957EPSS
SaveExploits1
CVE
CVE
added 2023/07/28 11:26 p.m.110 views

CVE-2022-4906

CVE-2022-4906 concerns Blink/Chromium in Google Chrome prior to 108.0.5359.71. The vulnerability arises from an inappropriate implementation in Blink that permits a remote attacker to perform arbitrary read/write via a crafted HTML page, with high impact (C/H, I/H, A/H) and network attack vector....

8.8CVSS7.9AI score0.12957EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
added 2021/04/30 12:00 a.m.36 views

Debian: Security Advisory (DSA-4906-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS8AI score0.5624EPSS
SaveExploits2References6
Tenable Nessus
Tenable Nessus
added 2021/04/14 12:00 a.m.44 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Nettle vulnerability (USN-4906-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4906-1 advisory. It was discovered that Nettle incorrectly handled signature verification. A remote attacker could use this issue to cause Nettle to crash,...

8.1CVSS6.5AI score0.01687EPSS
SaveExploits0References2
Circl
Circl
added 2020/12/17 12:42 a.m.11 views

CVE-2020-4906

creationtimestamp| type| source ---|---|--- 2020-12-17 00:42:03+00:00| seen| https://t.me/cibsecurity/20962...

4CVSS4.6AI score0.0032EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/16 9:15 p.m.23 views

CVE-2020-4906

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be stored locally which can be read by another user on the system...

4CVSS3.8AI score0.0032EPSS
SaveExploits0References2
CVE
CVE
added 2020/12/16 8:35 p.m.55 views

CVE-2020-4906

CVE-2020-4906 affects IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4. The vulnerability allows local access to read web pages stored locally by the application, enabling another user on the same system to read those pages. It is documented in multiple sources; the I...

4CVSS4.4AI score0.0032EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/02/12 8:59 p.m.76 views

CVE-2011-4906

CVE-2011-4906 concerns a vulnerability in the TinyMCE 3.0 editor integrated into Joomla! prior to 1.5.13. The connected documents confirm that an improper file upload mechanism could allow arbitrary PHP code execution via the TinyMCE-based upload path, enabling an attacker to execute code remotel...

9.8CVSS9.7AI score0.09582EPSS
SaveExploits2References3Affected Software1
Hacker One
Hacker One
added 2020/01/20 10:44 p.m.118 views

8x8: (Critical) Remote Code Execution Through Old TinyMCE upload bypass

A third party marketing site utilized an outdated version of TinyMCE that was vulnerable to CVE-2011-4906...

7.5CVSS4.9AI score0.09582EPSS
SaveExploits2
Rows per page
Query Builder