Lucene search
+L

3713 matches found

CNNVD
CNNVD
added 2022/11/18 12:00 a.m.9 views

WordPress plugin Accessibility 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.8CVSS5AI score0.00412EPSS
SaveExploits0References3
Veracode
Veracode
added 2022/11/17 12:54 a.m.25 views

Use After Free

chromium is vulnerable to use after free. The vulnerability exists in Accessibility in Google Chrome on Chrome OS which allows a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions...

8.8CVSS8.5AI score0.00557EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2022/11/17 12:15 a.m.24 views

CVE-2022-42960

EqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1, 3.0.2, 4.0.0, and 4.0.1 allows DOM XSS due to improper validation of message events to accessibility.js...

5.4CVSS0.00353EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/17 12:15 a.m.5 views

CVE-2022-42960

EqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1, 3.0.2, 4.0.0, and 4.0.1 allows DOM XSS due to improper validation of message events to accessibility.js...

5.4CVSS5.8AI score0.00353EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/17 12:15 a.m.17 views

Input validation

EqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1, 3.0.2, 4.0.0, and 4.0.1 allows DOM XSS due to improper validation of message events to accessibility.js...

5.8CVSS5.3AI score0.00353EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/11/16 12:00 a.m.71 views

CVE-2022-42960

CVE-2022-42960 concerns the EqualWeb Accessibility Widget. The connected sources confirm a DOM XSS vulnerability in the widget due to improper validation of message events within accessibility.js. Affected versions include 2.0.0 through 4.0.1 (exact sub-versions listed in the public records). The...

5.4CVSS5.3AI score0.00353EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/16 12:00 a.m.6 views

CVE-2022-42960

EqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1, 3.0.2, 4.0.0, and 4.0.1 allows DOM XSS due to improper validation of message events to accessibility.js...

6.2AI score0.00353EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/11/16 12:00 a.m.34 views

CVE-2022-42960

EqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1, 3.0.2, 4.0.0, and 4.0.1 allows DOM XSS due to improper validation of message events to accessibility.js...

5.5AI score0.00353EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/11/16 12:00 a.m.5 views

EqualWeb Accessibility Widget 跨站脚本漏洞

The EqualWeb Accessibility Widget is an accessibility widget from EqualWeb. A security vulnerability exists in the EqualWeb Accessibility Widget, which stems from an incorrect validation of message events in its accessibility.js component that could allow an attacker to implement DOM-based...

5.4CVSS4.9AI score0.00353EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
added 2022/11/08 8:00 a.m.57 views

Description of the security update for SharePoint Server Subscription Edition: September 13, 2022 (KB5002271)

None None...

8.8CVSS6.8AI score0.52885EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/11/07 12:00 a.m.9 views

The vulnerability of the Accessibility (Special Features) module of the Google Chrome browser, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information

The vulnerability of the Accessibility Special Features module of the Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.5CVSS7.7AI score0.00557EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/11/03 12:00 a.m.10 views

The vulnerability of the full-screen mode implementations of Google Chrome and Microsoft Edge allows a perpetrator to compromise the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the full-screen mode implementations of Google Chrome and Microsoft Edge is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to compromise the integrity, accessibility, and confidentiality of the protected information...

7.5CVSS6.4AI score0.0054EPSS
SaveExploits1References7Affected Software3
NVD
NVD
added 2022/11/01 11:15 p.m.23 views

CVE-2022-3659

Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. Chromium security severity: Medium...

8.8CVSS0.00557EPSS
SaveExploits0References2
OSV
OSV
added 2022/11/01 11:15 p.m.27 views

CVE-2022-3659

Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. Chromium security severity: Medium...

8.8CVSS9AI score
SaveExploits0References2
OSV
OSV
added 2022/11/01 11:15 p.m.1 views

DEBIAN-CVE-2022-3659

Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. Chromium security severity: Medium...

8.8CVSS8.6AI score0.00557EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/11/01 11:15 p.m.9 views

CVE-2022-3659

Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. Chromium security severity: Medium...

8.8CVSS7.4AI score0.00557EPSS
SaveExploits0References3
OSV
OSV
added 2022/11/01 11:15 p.m.6 views

UBUNTU-CVE-2022-3659

Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. Chromium security severity: Medium...

8.8CVSS7.3AI score0.00557EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2022/11/01 11:15 p.m.37 views

CVE-2022-3659

Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. Chromium security severity: Medium...

8.8CVSS7.2AI score0.00557EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/01 11:15 p.m.22 views

Design/Logic Flaw

Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. Chromium security severity: Medium...

6.8CVSS8.9AI score0.00557EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/11/01 12:00 a.m.96 views

CVE-2022-3659

CVE-2022-3659 refers to a use-after-free vulnerability in Chrome OS Accessibility in Google Chrome, prior to version 107.0.5304.62, allowing a remote attacker to potentially trigger heap corruption via specific UI interactions. Connected sources confirm the issue is categorized as a Chrome/Chromi...

8.8CVSS8.9AI score0.00557EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder