Lucene search
+L

76 matches found

OSV
OSV
added 2023/09/12 9:15 p.m.26 views

CVE-2023-4908

Inappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.1AI score
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2023/09/12 9:15 p.m.32 views

CVE-2023-4908

Inappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.9AI score0.00623EPSS
SaveExploits0References3
CVE
CVE
added 2023/09/12 8:47 p.m.201 views

CVE-2023-4908

CVE-2023-4908: In Google Chrome/Chromium, an inappropriate implementation in Picture-in-Picture allowed a remote attacker to spoof the security UI via a crafted HTML page. Affected versions are prior to 117.0.5938.62 (Chrome/Chromium). The issue is rated Low severity by the Chromium/Chrome ecosys...

4.3CVSS4.2AI score0.00623EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
added 2023/09/12 8:47 p.m.58 views

CVE-2023-4908

Inappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Low...

4.3CVSS4.3AI score0.00623EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/08/10 12:00 a.m.31 views

Fedora 38 : chromium (2023-95d73a5f50)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-95d73a5f50 advisory. update to 115.0.5790.110. Fixes the following security issue: CVE-2022-4908 CVE-2022-4909 CVE-2022-4910 CVE-2022-4908 CVE-2022-4909 CVE-2022-4910...

8.8CVSS7.1AI score0.12957EPSS
SaveExploits9References11
OpenVAS
OpenVAS
added 2023/08/05 12:00 a.m.45 views

Fedora: Security Advisory for chromium (FEDORA-2023-8a94349e38)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.12957EPSS
SaveExploits9References2
Circl
Circl
added 2023/07/29 7:30 a.m.13 views

CVE-2022-4908

creationtimestamp| type| source ---|---|--- 2023-07-29 07:30:02+00:00| seen| https://t.me/cibsecurity/67404 2023-10-10 09:37:00+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/7858 2024-01-25 19:25:42+00:00| seen| https://t.me/SEReborn/4443 2024-07-27 20:09:08+00:00|...

4.3CVSS4.7AI score0.00719EPSS
SaveExploits1References8
NVD
NVD
added 2023/07/29 12:15 a.m.29 views

CVE-2022-4908

Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS4.5AI score0.00719EPSS
SaveExploits1References4
OSV
OSV
added 2023/07/29 12:15 a.m.31 views

CVE-2022-4908

Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.1AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2023/07/29 12:15 a.m.47 views

CVE-2022-4908

Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.9AI score0.00719EPSS
SaveExploits1References3
CVE
CVE
added 2023/07/28 11:26 p.m.206 views

CVE-2022-4908

CVE-2022-4908 refers to an inappropriate implementation in Chrome/Chromium’s iFrame Sandbox that could leak cross-origin data via a crafted HTML page. Affected product is Google Chrome (and Chromium-based components); vulnerable component/behavior is the iFrame Sandbox. The root cause is an incor...

4.3CVSS4.8AI score0.00719EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
added 2022/10/28 12:00 a.m.35 views

Google Chrome Security Update (stable-channel-update-for-desktop_25-2022-10) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS7.6AI score0.23798EPSS
SaveExploits6References1
Circl
Circl
added 2020/12/17 12:42 a.m.11 views

CVE-2020-4908

creationtimestamp| type| source ---|---|--- 2020-12-17 00:42:04+00:00| seen| https://t.me/cibsecurity/20963...

5.3CVSS5.4AI score0.01054EPSS
SaveExploits0References1
CVE
CVE
added 2020/12/16 8:35 p.m.60 views

CVE-2020-4908

CVE-2020-4908 affects IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4. The issue is an information disclosure where the login dialog reveals the product version and release information, which could be used to plan targeted attacks. Root cause: login UI exposes versio...

5.3CVSS5.3AI score0.01054EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/11/05 12:00 a.m.42 views

Oracle Linux 7 : libX11 (ELSA-2020-4908)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4908 advisory. 1.6.7-3 - Fix CVE-2020-14363 1873922 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

7.8CVSS7.7AI score0.00575EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/11/04 12:00 a.m.58 views

RHEL 7 : libX11 (RHSA-2020:4908)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4908 advisory. The libX11 packages contain the core X11 protocol client library. Security Fixes: libX11: integer overflow leads to double free in locale handling...

7.8CVSS7.7AI score0.00575EPSS
SaveExploits1References4
CVE
CVE
added 2020/02/12 9:17 p.m.103 views

CVE-2011-4908

CVE-2011-4908 affects the TinyBrowser plugin for Joomla! prior to 1.5.13, where the upload.php endpoint allows arbitrary file uploads. The root cause is insecure file upload handling in the TinyBrowser component (Joomla! 1.5.x series), enabling an attacker to place arbitrary files on the server. ...

10CVSS9.5AI score0.55769EPSS
SaveExploits5References3Affected Software1
CVE
CVE
added 2019/12/30 4:19 p.m.29 views

CVE-2019-4908

CVE-2019-4908 is rejected/not used per the Initial Description.

7.3AI score
SaveExploits0
Cvelist
Cvelist
added 2019/12/30 4:19 p.m.10 views

CVE-2019-4908

...

SaveExploits0
NVD
NVD
added 2018/02/27 5:29 a.m.26 views

CVE-2018-4908

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

6.5CVSS6.3AI score0.0644EPSS
SaveExploits0References3
Rows per page
Query Builder