Lucene search
+L

4300 matches found

Debian CVE
Debian CVE
•added 2022/04/05 12:51 a.m.•58 views

CVE-2022-0464

Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction...

8.8CVSS8.4AI score0.00843EPSS
SaveExploits0
Cvelist
Cvelist
•added 2022/04/05 12:51 a.m.•37 views

CVE-2022-0463

Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction...

9.4AI score0.00713EPSS
SaveExploits0References2
CVE
CVE
•added 2022/04/05 12:51 a.m.•170 views

CVE-2022-0463

CVE-2022-0463 is a use-after-free vulnerability in the Accessibility component of Google Chrome/Chromium prior to 98.0.4758.80, potentially allowing heap corruption via specific user interaction. The issue affects Chrome/Chromium’s accessibility pathways and is addressed in Chrome 98 (98.0.4758.8...

8.8CVSS9.1AI score0.00713EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
•added 2022/04/05 12:51 a.m.•93 views

CVE-2022-0463

Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction...

8.8CVSS9.3AI score0.00713EPSS
SaveExploits0
Mend
Mend
•added 2022/04/05 12:51 a.m.•1 views

CVE-2022-0463

Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction...

8.8CVSS0.00713EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2022/04/05 12:51 a.m.•63 views

CVE-2022-0463

Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction...

8.8CVSS8.9AI score0.00713EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/05 12:00 a.m.•5 views

CVE-2022-0463: Use After Free

Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction...

8.8CVSS8.3AI score0.00713EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/05 12:00 a.m.•4 views

CVE-2022-0464: Use After Free

Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction...

8.8CVSS8.3AI score0.00843EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/04/04 12:00 a.m.•16 views

Google Chrome PDF Processor Data Compromise

The vulnerability of Google Chrome browser-based PDF processors relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafted HTML page...

9.3CVSS7.7AI score0.0129EPSS
SaveExploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
•added 2022/03/30 12:00 a.m.•18 views

MySQL Server Data Compromise

Vulnerability of the Server component: Compiling the MySQL Server database management system is vulnerable due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information...

7.5CVSS6.8AI score0.01309EPSS
SaveExploits0References5Affected Software1
Kaspersky
Kaspersky
•added 2022/03/23 12:00 a.m.•45 views

KLA51499 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Omnibox can be exploited to cause denial of service. 2. Use after fre...

7.5AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/03/11 12:00 a.m.•15 views

Google Chrome Microsoft Edge Data Compromise

The vulnerability of Autofill implementations in Google Chrome and Microsoft Edge browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to influence the integrity, accessibility, and confidentiality of data...

6.8CVSS7.1AI score0.00904EPSS
SaveExploits0References8Affected Software5
Prion
Prion
•added 2022/03/07 9:15 a.m.•31 views

Design/Logic Flaw

The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses...

5CVSS5.1AI score0.01198EPSS
SaveExploits2References1Affected Software1
attackerkb
attackerkb
•added 2022/03/04 7:15 p.m.•11 views

CVE-2021-27757

" Insecure password storage issue.The application stores sensitive information in cleartext within a resource that might be accessible to another control sphere.Since the information is stored in cleartext, attackers could potentially read it and gain access to sensitive information."...

7.5CVSS7.2AI score0.00582EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2022/03/02 6:20 a.m.•35 views

TeaBot Android Banking Malware Spreads Again Through Google Play Store Apps

An Android banking trojan designed to steal credentials and SMS messages has been observed once again sneaking past Google Play Store protections to target users of more than 400 banking and financial apps, including those from Russia, China, and the U.S. "TeaBot RAT capabilities are achieved via...

1.8AI score
SaveExploits0
CNVD
CNVD
•added 2022/03/02 12:00 a.m.•66 views

WordPress WP Accessibility Helper plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL.A cross-site scripting vulnerability exists in versions of the WordPress WP Accessibility Helper plugin prio...

6.1CVSS0.9AI score0.01718EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
•added 2022/03/01 12:00 a.m.•11 views

PT-2022-6781 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 99.0.4844.51 Description: The issue is related to a use after free in the Accessibility component of Google Chrome, which could allow a remote attacker to perform arbitrary read/write operations via a crafted...

10CVSS6.7AI score0.01703EPSS
SaveExploits5References69
attackerkb
attackerkb
•added 2022/02/28 9:15 a.m.•16 views

CVE-2022-0150

The WP Accessibility Helper WAH WordPress plugin before 0.6.0.7 does not sanitise and escape the wahi parameter before outputting back its base64 decode value in the page, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS6.3AI score0.01718EPSS
SaveExploits3References4
osv_cve
osv_cve
•added 2022/02/28 9:15 a.m.•20 views

CVE-2022-0150

The WP Accessibility Helper WAH WordPress plugin before 0.6.0.7 does not sanitise and escape the wahi parameter before outputting back its base64 decode value in the page, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS5.8AI score0.01718EPSS
SaveExploits3References2
NVD
NVD
•added 2022/02/28 9:15 a.m.•28 views

CVE-2022-0150

The WP Accessibility Helper WAH WordPress plugin before 0.6.0.7 does not sanitise and escape the wahi parameter before outputting back its base64 decode value in the page, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS0.01718EPSS
SaveExploits3References2
Rows per page
Query Builder