Lucene search
+L

1431 matches found

BDU FSTEC
BDU FSTEC
added 2022/03/16 12:00 a.m.11 views

The vulnerability of the Cast UI interface in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Cast UI interface in Google Chrome and Microsoft Edge is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.8CVSS8.4AI score0.01037EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:00 a.m.11 views

The vulnerability of the Cast UI interface in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Cast UI interface in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.00932EPSS
SaveExploits0References10Affected Software6
Veracode
Veracode
added 2022/03/07 12:22 a.m.22 views

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to a Heap buffer overflow in Cast UI...

8.8CVSS2.4AI score0.01037EPSS
SaveExploits0References4Affected Software2
Veracode
Veracode
added 2022/03/07 12:11 a.m.31 views

Denial Of Service (DoS)

Chrome is vulnerable to denial of service. The vulnerability exists due to a Use after free in Cast UI...

9.6CVSS2.3AI score0.00932EPSS
SaveExploits0References4Affected Software2
Tenable Nessus
Tenable Nessus
added 2022/03/07 12:00 a.m.41 views

Debian DSA-5089-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5089 advisory. Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. For the...

9.6CVSS7.7AI score0.01703EPSS
SaveExploits2References45
Microsoft CVE
Microsoft CVE
added 2022/03/03 8:00 a.m.70 views

Chromium: CVE-2022-0800 Heap buffer overflow in Cast UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.01037EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2022/03/03 8:00 a.m.110 views

Chromium: CVE-2022-0790 Use after free in Cast UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

9.6CVSS8.8AI score0.00932EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2022/03/03 12:00 a.m.67 views

KLA12482 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in ANGLE can be exploited to cause...

9.6CVSS9.7AI score0.01703EPSS
SaveExploits2References23
Malwarebytes
Malwarebytes
added 2022/03/02 2:57 p.m.73 views

Google launches Chrome 99, fixes 28 vulnerabilities

The Chrome team announced the promotion of Chrome 99 to the stable channel for Windows, Mac and Linux on March 1, 2022. This will roll out over the coming days/weeks. In the desktop version, a total of 28 vulnerabilities were closed. Of these, 11 were classified as high, 15 as medium and two as...

8.8AI score0.01703EPSS
SaveExploits2
Code423n4
Code423n4
added 2022/03/02 12:00 a.m.20 views

LockedBalance library should drop parameters to 96/32 bits

Lines of code Vulnerability details Impact The LockedBalance contract takes 256-bit amount values but performs bit math on them as if they were 96 bit values. Bits could spill over to a different locked balance in the else part lockedBalance stores two 128-bit locked balances in one 256-bit stora...

6.9AI score
SaveExploits0
CNNVD
CNNVD
added 2022/03/02 12:00 a.m.8 views

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, Inc. A heap buffer overflow vulnerability exists in the Google Chrome Cast UI, which can be exploited by attackers to cause arbitrary code execution...

8.8CVSS8.8AI score0.01037EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2022/03/02 12:00 a.m.10 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A memory mis-reference vulnerability exists in the Google Chrome Cast UI, which is caused by a mix-up in the program's instructions for freeing memory, and can be exploited to cause the program to crash and execute arbitrary code...

9.6CVSS8.5AI score0.00932EPSS
SaveExploits0References11
Kaspersky
Kaspersky
added 2022/03/01 12:00 a.m.520 views

KLA12473 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of bounds memory...

9.6CVSS9.6AI score0.01703EPSS
SaveExploits5References3
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2022/03/01 12:00 a.m.461 views

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 99 to the stable channel for Windows, Mac and Linux.This will roll out over the coming days/weeks. Chrome 99.0.4844.51 for Windows,Mac and Linux contains a number of fixes and improvements -- a list of changes is available in the lo...

9.6CVSS8.4AI score0.01703EPSS
SaveExploits5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/21 4:39 a.m.56 views

Security Bulletin: WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in Pacemaker, ImageMagick, gd-libgd, libxslt, cURL libcurl , Ghostscript.

Summary WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in Pacemaker, ImageMagick, gd-libgd, libxslt, cURL libcurl , Ghostscript. These vulnerabilities are addressed in App connect professional v7.5.4.0 and v7.5.5.0, customer can migrate to these versions without...

9.8CVSS9.5AI score0.98745EPSS
SaveExploits20Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/02/16 7:15 p.m.5 views

CVE-2021-3578

A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an unexpected APPENDUID response. This could be plausibly exploited for remote co...

7.8CVSS6.6AI score0.01037EPSS
SaveExploits0References12
OSV
OSV
added 2022/02/16 7:15 p.m.11 views

CVE-2021-3578

A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an unexpected APPENDUID response. This could be plausibly exploited for remote co...

7.8CVSS9.7AI score
SaveExploits0References9
OSV
OSV
added 2022/02/16 7:15 p.m.3 views

DEBIAN-CVE-2021-3578

A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an unexpected APPENDUID response. This could be plausibly exploited for remote co...

7.8CVSS8.2AI score0.01037EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/16 7:15 p.m.23 views

Remote code execution

A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an unexpected APPENDUID response. This could be plausibly exploited for remote co...

7.2CVSS7.9AI score0.01037EPSS
SaveExploits0References9Affected Software3
CVE
CVE
added 2022/02/16 6:35 p.m.158 views

CVE-2021-3578

CVE-2021-3578 affects isync/mbsync before versions 1.3.6 and 1.4.2. The root cause is an unchecked pointer cast that lets a malicious or compromised IMAP server write an arbitrary integer past the end of a heap-allocated structure via an unexpected APPENDUID response, potentially enabling remote ...

7.8CVSS7.9AI score0.01037EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder