128 matches found
CVE-2020-6383
Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2020-6383
Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2020-6383
CVE-2020-6383 is a type confusion in Google Chrome's V8 engine that could allow a remote attacker to cause heap corruption via a crafted HTML page. The initial entry notes Chrome versions prior to 80.0.3987.116 were affected. The connected Chrome update (Stable Channel Update for Desktop) confirm...
CVE-2020-6383
Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2020-6383
Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Google Chrome Security Update (stable-channel-update-for-desktop_18-2020-02) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Google Chrome < 80.0.3987.116 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 80.0.3987.116. It is, therefore, affected by multiple vulnerabilities as referenced in the 202002stable-channel-update-for-desktop18 advisory. - Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a...
Google Chrome < 80.0.3987.116 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 80.0.3987.116. It is, therefore, affected by multiple vulnerabilities as referenced in the 202002stable-channel-update-for-desktop18 advisory. - Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a...
KLA11677 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in speech component can be exploited to obtain sensitive...
Stable Channel Update for Desktop
The stable channel has been updated to 80.0.3987.116 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1475)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1537)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-6383
Monstra CMS through 3.0.4 has an incomplete "forbidden types" list that excludes .php and similar file extensions but not the .pht or .phar extension, which allows remote authenticated Admins or Editors to execute arbitrary PHP code by uploading a file, a different vulnerability than CVE-2017-180...
CVE-2018-6383
Monstra CMS through 3.0.4 has an incomplete "forbidden types" list that excludes .php and similar file extensions but not the .pht or .phar extension, which allows remote authenticated Admins or Editors to execute arbitrary PHP code by uploading a file, a different vulnerability than CVE-2017-180...
CVE-2018-6383
Monstra CMS
CVE-2017-6383
CVE-2017-6383 is a rejected candidate and does not represent an active vulnerability entry.
CVE-2016-6383
CVE-2016-6383 is rejected/not used and does not represent an active vulnerability entry.
Cisco ASR 1000 IOS XE安全绕过漏洞
漏洞详情： CVE ID CVE-2015-6383 漏洞描述 Cisco IOS XE on ASR 1000是美国思科（Cisco）公司的一套运行于ASR 1000系列路由器设备中的操作系统。 Cisco ASR 1000设备上的IOS XE 15.43S版本中存在安全漏洞，由于程序未能正确加载软件程序包。本地攻击者可通过使用命令行输入特制的文件名，利用该漏洞绕过许可限制，获取root权限。 参考链接 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-6383...