Lucene search
+L

76 matches found

OSV
OSV
added 2023/09/12 9:15 p.m.23 views

CVE-2023-4908

Inappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.1AI score0.00618EPSS
Exploits0References7
UbuntuCve
UbuntuCve
added 2023/09/12 9:15 p.m.30 views

CVE-2023-4908

Inappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.9AI score0.00618EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2023/09/12 8:47 p.m.53 views

CVE-2023-4908

Inappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Low...

4.3CVSS4.3AI score0.00618EPSS
Exploits0
CVE
CVE
added 2023/09/12 8:47 p.m.188 views

CVE-2023-4908

CVE-2023-4908: In Google Chrome/Chromium, an inappropriate implementation in Picture-in-Picture allowed a remote attacker to spoof the security UI via a crafted HTML page. Affected versions are prior to 117.0.5938.62 (Chrome/Chromium). The issue is rated Low severity by the Chromium/Chrome ecosys...

4.3CVSS4.2AI score0.00618EPSS
Exploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/08/10 12:0 a.m.31 views

Fedora 38 : chromium (2023-95d73a5f50)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-95d73a5f50 advisory. update to 115.0.5790.110. Fixes the following security issue: CVE-2022-4908 CVE-2022-4909 CVE-2022-4910 CVE-2022-4908 CVE-2022-4909 CVE-2022-4910...

8.8CVSS7.1AI score0.12957EPSS
Exploits9References11
OpenVAS
OpenVAS
added 2023/08/05 12:0 a.m.43 views

Fedora: Security Advisory for chromium (FEDORA-2023-8a94349e38)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.12957EPSS
Exploits9References2
Circl
Circl
added 2023/07/29 7:30 a.m.9 views

CVE-2022-4908

creationtimestamp| type| source ---|---|--- 2023-07-29 07:30:02+00:00| seen| https://t.me/cibsecurity/67404 2023-10-10 09:37:00+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/7858 2024-01-25 19:25:42+00:00| seen| https://t.me/SEReborn/4443 2024-07-27 20:09:08+00:00|...

4.3CVSS4.7AI score0.00538EPSS
Exploits1References8
NVD
NVD
added 2023/07/29 12:15 a.m.27 views

CVE-2022-4908

Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS4.5AI score0.00538EPSS
Exploits1References4
OSV
OSV
added 2023/07/29 12:15 a.m.29 views

CVE-2022-4908

Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.1AI score
Exploits0References4
UbuntuCve
UbuntuCve
added 2023/07/29 12:15 a.m.43 views

CVE-2022-4908

Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.9AI score0.00538EPSS
Exploits1References3
CVE
CVE
added 2023/07/28 11:26 p.m.198 views

CVE-2022-4908

CVE-2022-4908 refers to an inappropriate implementation in Chrome/Chromium’s iFrame Sandbox that could leak cross-origin data via a crafted HTML page. Affected product is Google Chrome (and Chromium-based components); vulnerable component/behavior is the iFrame Sandbox. The root cause is an incor...

4.3CVSS4.8AI score0.00538EPSS
Exploits1References4Affected Software1
OpenVAS
OpenVAS
added 2022/10/28 12:0 a.m.35 views

Google Chrome Security Update (stable-channel-update-for-desktop_25-2022-10) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS7.6AI score0.23798EPSS
Exploits6References1
Circl
Circl
added 2020/12/17 12:42 a.m.6 views

CVE-2020-4908

creationtimestamp| type| source ---|---|--- 2020-12-17 00:42:04+00:00| seen| https://t.me/cibsecurity/20963...

5.3CVSS5.4AI score0.01054EPSS
Exploits0References1
CVE
CVE
added 2020/12/16 8:35 p.m.54 views

CVE-2020-4908

CVE-2020-4908 affects IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4. The issue is an information disclosure where the login dialog reveals the product version and release information, which could be used to plan targeted attacks. Root cause: login UI exposes versio...

5.3CVSS5.3AI score0.01054EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/11/05 12:0 a.m.40 views

Oracle Linux 7 : libX11 (ELSA-2020-4908)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4908 advisory. 1.6.7-3 - Fix CVE-2020-14363 1873922 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

7.8CVSS7.7AI score0.00575EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/11/04 12:0 a.m.56 views

RHEL 7 : libX11 (RHSA-2020:4908)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4908 advisory. The libX11 packages contain the core X11 protocol client library. Security Fixes: libX11: integer overflow leads to double free in locale handling...

7.8CVSS7.7AI score0.00575EPSS
Exploits1References4
CVE
CVE
added 2020/02/12 9:17 p.m.93 views

CVE-2011-4908

CVE-2011-4908 affects the TinyBrowser plugin for Joomla! prior to 1.5.13, where the upload.php endpoint allows arbitrary file uploads. The root cause is insecure file upload handling in the TinyBrowser component (Joomla! 1.5.x series), enabling an attacker to place arbitrary files on the server. ...

10CVSS9.5AI score0.55769EPSS
Exploits3References3Affected Software1
CVE
CVE
added 2019/12/30 4:19 p.m.26 views

CVE-2019-4908

CVE-2019-4908 is rejected/not used per the Initial Description.

7.3AI score
Exploits0
Cvelist
Cvelist
added 2019/12/30 4:19 p.m.8 views

CVE-2019-4908

...

Exploits0
NVD
NVD
added 2018/02/27 5:29 a.m.22 views

CVE-2018-4908

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

6.5CVSS6.3AI score0.10992EPSS
Exploits0References3
Rows per page
Query Builder