Lucene search
+L

3713 matches found

Vulnrichment
Vulnrichment
added 2024/03/06 5:25 p.m.64 views

CVE-2024-24761 Galette public pages accessibility restriction

Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per default restricted to only administrators and staff members. From configuration, it is possible to restrict to up-to-date members or to...

7.5CVSS6.8AI score0.00614EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/06 12:00 a.m.8 views

The vulnerability of the __skb_flow_dissect() function in the networking component of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the skbflowdissect function in the net/core/flowdissector.c file of the Linux kernel’s network component is related to incorrect calculation of the network header offset. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality and...

9.4CVSS6.5AI score0.00225EPSS
SaveExploits0References20Affected Software7
Apple
Apple
added 2024/03/05 12:00 a.m.206 views

About the security content of iOS 17.4 and iPadOS 17.4

About the security content of iOS 17.4 and iPadOS 17.4 This document describes the security content of iOS 17.4 and iPadOS 17.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

9.8CVSS8.7AI score0.01481EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
added 2024/03/05 12:00 a.m.10 views

PT-2024-2646 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.4 iPadOS versions prior to 17.4 Description: A privacy issue was addressed with improved private data redaction for log entries. This issue allows an app to potentially read sensitive location information. The...

7.8CVSS5.7AI score0.00574EPSS
SaveExploits0References14
CNVD
CNVD
added 2024/03/01 12:00 a.m.18 views

Google Chrome Code Execution Vulnerability (CNVD-2024-16937)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is due to free usage in Accessibility. An attacker can exploit this vulnerability to execute arbitrary code on the system...

8.8CVSS7.5AI score0.00801EPSS
SaveExploits1References1
NVD
NVD
added 2024/02/28 3:15 p.m.31 views

CVE-2024-24705

Cross-Site Request Forgery CSRF vulnerability in Octa Code Accessibility.This issue affects Accessibility: from n/a through 1.0.6...

5.4CVSS5.6AI score0.00187EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/28 3:15 p.m.30 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Octa Code Accessibility.This issue affects Accessibility: from n/a through 1.0.6...

5.8CVSS5.9AI score0.00187EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/02/28 2:26 p.m.22 views

CVE-2024-24705 WordPress Accessibility Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Octa Code Accessibility.This issue affects Accessibility: from n/a through 1.0.6...

5.4CVSS7.1AI score0.00187EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/28 2:26 p.m.116 views

CVE-2024-24705

CVE-2024-24705 : CSRF vulnerability in the WordPress Accessibility plugin (

5.4CVSS6.8AI score0.00187EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/28 12:00 a.m.9 views

WordPress Plugin Accessibility Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

5.4CVSS6.6AI score0.00187EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/02/28 12:00 a.m.10 views

PT-2024-20501 · Unknown · Octa Code Accessibility

Name of the Vulnerable Software and Affected Versions: Octa Code Accessibility versions n/a through 1.0.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web applicatio...

5.4CVSS6.4AI score0.00187EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/02/27 12:00 a.m.9 views

The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge allows a perpetrator to compromise the rendering process.

The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the rendering process remotely...

7.5CVSS7.5AI score0.00801EPSS
SaveExploits1References15Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/02/25 12:00 a.m.8 views

The vulnerability of the tcg2measuregpttable() function in the Tianocore EDK2 library, caused by buffer overflows, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcg2measuregpttable function in the Tianocore EDK2 library is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7AI score0.00288EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/02/25 12:00 a.m.10 views

The vulnerability of the tcg2measurepeimage() function in the Tianocore EDK2 library, caused by buffer overflows, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcg2measurepeimage function in the Tianocore EDK2 library is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7AI score0.00287EPSS
SaveExploits0References11Affected Software6
Microsoft CVE
Microsoft CVE
added 2024/02/23 6:57 p.m.42 views

Chromium: CVE-2024-1673 Use after free in Accessibility

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.00801EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2024/02/23 12:00 a.m.35 views

Debian dsa-5629 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5629 advisory. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5629-1...

9.8CVSS7.7AI score0.18849EPSS
SaveExploits6References18
SUSE CVE
SUSE CVE
added 2024/02/22 3:05 a.m.4 views

SUSE CVE-2024-1673

Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS9.6AI score0.00801EPSS
SaveExploits1References4
NVD
NVD
added 2024/02/21 4:15 a.m.20 views

CVE-2024-1673

Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS8.5AI score0.00801EPSS
SaveExploits1References4
OSV
OSV
added 2024/02/21 4:15 a.m.25 views

CVE-2024-1673

Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS6.4AI score
SaveExploits0References4
OSV
OSV
added 2024/02/21 4:15 a.m.5 views

DEBIAN-CVE-2024-1673

Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS8.2AI score0.00801EPSS
SaveExploits1References1
Rows per page
Query Builder