39 matches found
SUSE CVE-2026-7353
Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
Linux Distros Unpatched Vulnerability : CVE-2026-7353
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform ...
CVE-2026-7353
Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-7353
CVE-2026-7353 describes a heap buffer overflow in Skia used by Google Chrome before 147.0.7727.138. The flaw could allow a remote attacker who has compromised the renderer process to escape the sandbox via a crafted HTML page, as stated in multiple sources. Affected product: Google Chrome (pre-14...
CVE-2026-7353
creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:25:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkltlkzkqo2o 2026-05-03 18:00:00+00:00| seen|...
MINI-7353-6596-PJ7M
Bulletin has no description...
MINI-PPHJ-F63J-7353
Bulletin has no description...
MiracleLinux 8 : opensc-0.20.0-7.el8_9 (AXSA:2024-7353:02)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7353:02 advisory. OpenSC: Potential PIN bypass when card tracks its own login state CVE-2023-40660 OpenSC: multiple memory issues with pkcs15-init enrollment tool...
MINI-8J4J-7353-7RRJ
Bulletin has no description...
CVE-2025-7353
A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow...
CVE-2025-7353
creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-28 2025-08-18 07:56:29+00:00| seen| https://bsky.app/profile/undercodenews.bsky.social/post/3lwnwdvbjv52e 2025-08-18 16:14:50+00:00| seen|...
CVE-2024-7353
creationtimestamp| type| source ---|---|--- 2024-08-07 15:17:46+00:00| seen| https://t.me/cvedetector/2682...
CVE-2024-7353 Accept Stripe Payments <= 2.0.86 - Authenticated (Contributor+) Stored Cross-Site Scripting via accept_stripe_payment_ng Shortcode
The Accept Stripe Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's acceptstripepaymentng shortcode in all versions up to, and including, 2.0.86 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...
CVE-2024-7353 Accept Stripe Payments <= 2.0.86 - Authenticated (Contributor+) Stored Cross-Site Scripting via accept_stripe_payment_ng Shortcode
The Accept Stripe Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's acceptstripepaymentng shortcode in all versions up to, and including, 2.0.86 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...
WordPress Stripe Payments Plugin <= 2.0.86 is vulnerable to Cross Site Scripting (XSS)
Software Stripe Payments Type Plugin Vulnerable versions = 2.0.86 Fixed in 2.0.87 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7353 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4e25c32d75e3 Credits Arkadiusz Hydzik...
Mageia: Security Advisory (MGASA-2014-0210)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2014:0724-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.2.2 : libpng (EulerOS-SA-2020-1496)
According to the versions of the libpng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service crash via a crafted ima...
EulerOS Virtualization for ARM 64 3.0.2.0 : libpng (EulerOS-SA-2020-1256)
According to the versions of the libpng package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service crash via a...
Huawei EulerOS: Security Advisory for libpng (EulerOS-SA-2020-1256)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...