Lucene search
+L

900 matches found

Positive Technologies
Positive Technologies
•added 2022/10/07 12:00 a.m.•13 views

PT-2022-25065 · Samsung · Samsung Internet

Name of the Vulnerable Software and Affected Versions: Samsung Internet versions prior to 18.0.4.14 Description: The issue is related to improper authorization, allowing physical attackers to add bookmarks in secret mode without requiring user authentication. Recommendations: For versions prior t...

4.6CVSS4.4AI score0.00258EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/07 12:00 a.m.•5 views

CVE-2022-39873: Improper Authorization

Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user authentication...

4.6CVSS5.5AI score0.00258EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/10/07 12:00 a.m.•19 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 18.0.4.14, which stems from an improper authorization vulnerability in Samsung...

4.6CVSS5AI score0.00258EPSS
SaveExploits0References2
Snyk
Snyk
•added 2022/08/30 12:00 a.m.•5 views

SQL Injection

Overview johnpbloch/wordpress-core is a web software you can use to create a website or blog. Affected versions of this package are vulnerable to SQL Injection via the getbookmarks function. An attacker can manipulate SQL queries and potentially access or alter database information by injecting...

8CVSS7.9AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2022/08/25 6:15 p.m.•8 views

CVE-2021-42522

There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of libxml2 API. The vendor forgot to call 'gfree' to release the return value of 'xmlGetProp'...

7.5CVSS5.8AI score0.00812EPSS
SaveExploits0References2
OSV
OSV
•added 2022/08/25 6:15 p.m.•10 views

DEBIAN-CVE-2021-42522

There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of libxml2 API. The vendor forgot to call 'gfree' to release the return value of 'xmlGetProp'...

7.5CVSS7.3AI score0.00812EPSS
SaveExploits0References1
OSV
OSV
•added 2022/08/25 6:15 p.m.•15 views

UBUNTU-CVE-2021-42522

There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of libxml2 API. The vendor forgot to call 'gfree' to release the return value of 'xmlGetProp'...

7.5CVSS5.8AI score0.00812EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/08/25 12:00 a.m.•24 views

PT-2022-11606 · Anjuta +2 · Anjuta +2

Name of the Vulnerable Software and Affected Versions: Anjuta affected versions not specified Description: The issue is caused by the incorrect use of the libxml2 API in the anjuta/plugins/document-manager/anjuta-bookmarks.c file. Specifically, the vendor forgot to call g free to release the retu...

7.5CVSS7.1AI score0.00812EPSS
SaveExploits0References12
OSV
OSV
•added 2022/07/27 10:15 p.m.•20 views

CVE-2022-1865

Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

8.8CVSS9.5AI score
SaveExploits0References3
OSV
OSV
•added 2022/07/27 10:15 p.m.•7 views

DEBIAN-CVE-2022-1865

Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

8.8CVSS8.3AI score0.00566EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/07/27 10:15 p.m.•20 views

CVE-2022-1865

Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

8.8CVSS8.3AI score0.00566EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2022/07/27 10:15 p.m.•38 views

CVE-2022-1865

Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

8.8CVSS8.1AI score0.00566EPSS
SaveExploits0References1
Prion
Prion
•added 2022/07/27 10:15 p.m.•32 views

Design/Logic Flaw

Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

6.8CVSS9AI score0.00566EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/07/27 10:15 p.m.•10 views

UBUNTU-CVE-2022-1865

Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

8.8CVSS8.3AI score0.00566EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/07/27 9:18 p.m.•44 views

CVE-2022-1865

Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

9.4AI score0.00566EPSS
SaveExploits0References3
Mend
Mend
•added 2022/07/27 9:18 p.m.•3 views

CVE-2022-1865

Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

8.8CVSS0.00566EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
•added 2022/07/27 9:18 p.m.•87 views

CVE-2022-1865

Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

8.8CVSS8.3AI score0.00566EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/27 12:00 a.m.•6 views

CVE-2022-1865: Use After Free

Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

8.8CVSS8.3AI score0.00566EPSS
SaveExploits0References2
NVD
NVD
•added 2022/07/26 10:15 p.m.•14 views

CVE-2022-1491

Use after free in Bookmarks in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction...

8.8CVSS0.00892EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/07/26 10:15 p.m.•11 views

CVE-2022-1491

Use after free in Bookmarks in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction...

8.8CVSS8.4AI score0.00892EPSS
SaveExploits1References4
Rows per page
Query Builder