Lucene search
K

22 matches found

Microsoft CVE
Microsoft CVE
added 2026/05/29 11:20 p.m.7 views

Chromium: CVE-2026-9945 Use after free in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS5.8AI score0.00139EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/05/29 12:13 a.m.4 views

CVE-2026-9945

An use after free flaw was found in the Media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503565293...

8.8CVSS5.7AI score0.00139EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/05/29 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-9945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted...

8.8CVSS6.2AI score0.00139EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 6:18 a.m.2 views

CVE-2024-9945

An information-disclosure vulnerability exists in Fortra's GoAnywhere MFT application prior to version 7.7.0 that allows external access to the resources in certain admin root folders...

5.3CVSS6.9AI score0.00228EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:44 p.m.3 views

CVE-2020-9945

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, Safari 14.0.1. Visiting a malicious website may lead to address bar spoofing...

4.3CVSS5.7AI score0.0034EPSS
Exploits0References1
Circl
Circl
added 2024/12/13 6:17 p.m.3 views

CVE-2024-9945

creationtimestamp| type| source ---|---|--- 2024-12-13 18:17:14+00:00| seen| https://t.me/cvedetector/12895...

5.3CVSS4.8AI score0.00228EPSS
Exploits0References1
CVE
CVE
added 2024/12/13 3:22 p.m.43 views

CVE-2024-9945

CVE-2024-9945 describes an information-disclosure vulnerability in Fortra’s GoAnywhere MFT prior to version 7.7.0, where an attacker may gain external access to resources in certain admin root folders. The issue is rooted in what the public documents describe as information exposure to admin fold...

5.3CVSS5.3AI score0.00228EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/13 3:22 p.m.16 views

CVE-2024-9945 Limited Information Disclosure in GoAnywhere MFT Prior to 7.7.0

An information-disclosure vulnerability exists in Fortra's GoAnywhere MFT application prior to version 7.7.0 that allows external access to the resources in certain admin root folders...

5.3CVSS0.00228EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 3:22 p.m.8 views

CVE-2024-9945 Limited Information Disclosure in GoAnywhere MFT Prior to 7.7.0

An information-disclosure vulnerability exists in Fortra's GoAnywhere MFT application prior to version 7.7.0 that allows external access to the resources in certain admin root folders...

5.3CVSS6.8AI score0.00228EPSS
Exploits0References1
Circl
Circl
added 2020/12/08 10:31 p.m.1 views

CVE-2020-9945

creationtimestamp| type| source ---|---|--- 2020-12-08 22:31:33+00:00| seen| https://t.me/cibsecurity/17281...

4.3CVSS5.8AI score0.0034EPSS
Exploits0References1
CVE
CVE
added 2020/12/08 7:19 p.m.90 views

CVE-2020-9945

CVE-2020-9945 is a spoofing issue in the URL handling that Apple fixed in macOS Big Sur 11.0.1 and Safari 14.0.1. The root cause was inadequate input validation, and the fix involved improved input validation to prevent address bar spoofing when visiting malicious websites. The Apple advisories H...

4.3CVSS4.5AI score0.0034EPSS
Exploits0References3Affected Software2
Apple
Apple
added 2020/11/13 12:59 p.m.55 views

About the security content of Safari 14.0.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

7.8CVSS1AI score0.0034EPSS
Exploits0Affected Software1
Apple
Apple
added 2020/11/12 12:0 a.m.238 views

About the security content of Safari 14.0.1

About the security content of Safari 14.0.1 This document describes the security content of Safari 14.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

7.8CVSS8.2AI score0.0034EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2020/04/22 9:15 p.m.11 views

CVE-2020-10912

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.9AI score0.00374EPSS
Exploits0References2
Prion
Prion
added 2020/04/22 9:15 p.m.15 views

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.9AI score0.00374EPSS
Exploits0References2Affected Software2
CVE
CVE
added 2020/04/22 8:51 p.m.73 views

CVE-2020-10912

CVE-2020-10912 affects Foxit PhantomPDF (and Foxit Reader/PhantomPDF family) and is tied to the SetFieldValue command in Foxit’s communication API. The root cause is a lack of validation of user-supplied data, leading to a type confusion condition and enabling arbitrary code execution in the cont...

7.8CVSS7.9AI score0.00374EPSS
Exploits0References2Affected Software2
CVE
CVE
added 2019/03/23 3:3 p.m.50 views

CVE-2019-9945

CVE-2019-9945 affects SoftNAS Cloud 4.2.0/4.2.1. A remote attacker can gain access to the Webadmin interface and execute arbitrary commands with administrative privileges by manipulating an NGINX cookie check, potentially creating new users, if the StorageCenter ports are exposed to the internet....

10CVSS10AI score0.02383EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2018/05/17 3:0 p.m.44 views

CVE-2018-9945

Foxit Reader 9.0.0.29935 is affected by a getField use-after-free/validation flaw that allows remote code execution when a user opens a malicious file or visits a malicious page. The root cause is failure to validate the existence of an object before operating on it, enabling arbitrary code execu...

8.8CVSS8.8AI score0.00367EPSS
Exploits0References2Affected Software2
ICS
ICS
added 2017/08/31 12:0 a.m.32 views

Siemens 7KM PAC Switched Ethernet

CVSS v3 4.3 ATTENTION: Low skill level to exploit. Vendor: Siemens Equipment: 7KM PAC Switched Ethernet Vulnerability: Resource Exhaustion AFFECTED PRODUCTS Siemens reports that the vulnerability affects the following 7KM PAC Switched Ethernet PROFINET expansion modules: 7KM PAC Switched Ethernet...

6.5CVSS6.5AI score0.00145EPSS
Exploits0References3
NVD
NVD
added 2017/06/06 2:29 p.m.12 views

CVE-2014-9945

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist...

9.3CVSS7.3AI score0.00031EPSS
Exploits0References2
Rows per page
Query Builder