54 matches found
CVE-2024-6776
Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-6776 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2024-6776 vulnerabilities
Vulnerabilities for packages: chromium...
DEBIAN-CVE-2024-6776
Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-6776
Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-6776
Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-6776
Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-6776
CVE-2024-6776 : Use-after-free in the Audio component of Google Chrome/Chromium before 126.0.6478.182 can allow remote heap corruption via a crafted HTML page. Affected software includes Chromium-based Chrome; vulnerable versions are prior to 126.0.6478.182. Remediation is a patch to 126.0.6478.1...
Google Chrome < 124.0.6367.182 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 124.0.6367.182. It is, therefore, affected by multiple vulnerabilities as referenced in the 202407stable-channel-update-for-desktop advisory. - Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182...
Google Chrome < 126.0.6478.182 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 126.0.6478.182. It is, therefore, affected by multiple vulnerabilities as referenced in the 202407stable-channel-update-for-desktop advisory. - Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182...
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6776-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6776-1 advisory. Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to ...
CVE-2023-6776
creationtimestamp| type| source ---|---|--- 2024-01-23 08:51:33+00:00| seen| https://t.me/ctinow/171776...
CVE-2023-6776
CVE-2023-6776 affects the WordPress plugin 3D FlipBook – PDF Flipbook Viewer
WordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Plugin <= 1.15.2 is vulnerable to Cross Site Scripting (XSS)
Software 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Type Plugin Vulnerable versions = 1.15.2 Fixed in 1.15.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6776 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID...
CVE-2020-6776 CSRF in Bosch PRAESIDEO and Bosch PRAESENSA Management Interface
A vulnerability in the web-based management interface of Bosch PRAESIDEO until and including version 4.41 and Bosch PRAESENSA until and including version 1.10 allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user Cross-Site Request Forgery...
CVE-2020-6776
The CVE-2020-6776 entry concerns CSRF in Bosch PRAESIDEO (versions <=4.41) and PRAESENSA (versions
CVE-2019-6776
Foxit PhantomPDF 9.5.0.20723 and earlier are affected by a removeField/AcroForms watermark handling flaw. The vulnerability stems from not validating the existence of an object before performing operations, enabling remote code execution when a user opens a malicious page or file. Multiple connec...
CVE-2018-6776
In Jiangmin Antivirus 16.0.0.100, the driver file KSysCall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A00813C...
CVE-2017-6776
CVE-2017-6776 affects Cisco Elastic Services Controller (ESC) web framework. It allows an unauthenticated, remote attacker to perform cross-site scripting (XSS) by abusing insufficient validation of user-supplied input. Exploitation could execute arbitrary script code or access browser-based info...
Privilege escalation
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...