Lucene search
+L

851 matches found

Cvelist
Cvelist
•added 2024/08/21 8:20 p.m.•41 views

CVE-2024-7978

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

0.0045EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2024/08/21 8:20 p.m.•48 views

CVE-2024-7978

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6AI score0.0045EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/08/21 8:20 p.m.•18 views

CVE-2024-7978

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.0045EPSS
SaveExploits0References2
CVE
CVE
•added 2024/08/21 8:20 p.m.•440 views

CVE-2024-7978

CVE-2024-7978 is a Chrome/Chromium vulnerability: Insufficient policy enforcement in Data Transfer allowed cross-origin data leakage via a crafted HTML page when a user engages specific UI gestures. Affected product: Google Chrome/Chromium-based browsers. Root cause: insufficient policy enforceme...

4.3CVSS6AI score0.0045EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2024/08/21 7:15 a.m.•28 views

CVE-2022-48898

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: do not complete dpauxcmdfifotx if irq is not for aux transfer There are 3 possible interrupt sources are handled by DP controller, HPDstatus, Controller state changes and Aux read/write transaction. At every irq, DP...

4.7CVSS6AI score0.00181EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/21 12:00 a.m.•1 views

CVE-2024-7978: Origin Validation Error

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.4AI score0.0045EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/08/21 12:00 a.m.•73 views

Google Chrome < 128.0.6613.84 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 128.0.6613.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 202408stable-channel-update-for-desktop21 advisory. - Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remot...

9.6CVSS8.1AI score0.21103EPSS
SaveExploits4References39
Tenable Nessus
Tenable Nessus
•added 2024/08/21 12:00 a.m.•54 views

Google Chrome < 128.0.6613.84 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 128.0.6613.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 202408stable-channel-update-for-desktop21 advisory. - Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a...

9.6CVSS8.1AI score0.21103EPSS
SaveExploits4References39
FreeBSD
FreeBSD
•added 2024/08/21 12:00 a.m.•33 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 38 security fixes: 358296941 High CVE-2024-7964: Use after free in Passwords. Reported by Anonymous on 2024-08-08 356196918 High CVE-2024-7965: Inappropriate implementation in V8. Reported by TheDog on 2024-07-30 355465305 High CVE-2024-7966: Out of...

9.6CVSS7.4AI score0.21103EPSS
SaveExploits4References1
Fedora
Fedora
•added 2024/07/30 1:33 a.m.•36 views

[SECURITY] Fedora 40 Update: curl-8.6.0-9.fc40

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

7.5CVSS7.7AI score0.04296EPSS
SaveExploits1
NVD
NVD
•added 2024/06/11 3:15 a.m.•30 views

CVE-2024-37176

SAP BW/4HANA Transformation and Data Transfer Process DTP allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks. This results in escalation of privileges. It has no impact on the confidentiality of data but may have low...

5.5CVSS0.00276EPSS
SaveExploits0References2
OSV
OSV
•added 2024/06/11 3:15 a.m.•13 views

CVE-2024-37176

SAP BW/4HANA Transformation and Data Transfer Process DTP allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks. This results in escalation of privileges. It has no impact on the confidentiality of data but may have low...

5.4CVSS5.8AI score0.00276EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/06/11 2:14 a.m.•30 views

CVE-2024-37176 Missing Authorization check in SAP BW/4HANA Transformation and DTP

SAP BW/4HANA Transformation and Data Transfer Process DTP allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks. This results in escalation of privileges. It has no impact on the confidentiality of data but may have low...

5.5CVSS7.3AI score0.00276EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/06/11 2:14 a.m.•39 views

CVE-2024-37176 Missing Authorization check in SAP BW/4HANA Transformation and DTP

SAP BW/4HANA Transformation and Data Transfer Process DTP allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks. This results in escalation of privileges. It has no impact on the confidentiality of data but may have low...

5.5CVSS0.00276EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/11 12:00 a.m.•1 views

CVE-2024-37176: Missing Authorization

SAP BW/4HANA Transformation and Data Transfer Process DTP allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks. This results in escalation of privileges. It has no impact on the confidentiality of data but may have low...

5.5CVSS6AI score0.00276EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/04 12:00 a.m.•13 views

PT-2024-4584 · Sap · Sap Bw/4Hana

Name of the Vulnerable Software and Affected Versions: SAP BW/4HANA affected versions not specified Description: The issue is related to improper authorization checks in the Transformation and Data Transfer Process DTP of SAP BW/4HANA, allowing an authenticated attacker to gain higher access leve...

5.5CVSS7.3AI score0.00276EPSS
SaveExploits0References9
OpenVAS
OpenVAS
•added 2024/05/27 12:00 a.m.•41 views

Fedora: Security Advisory (FEDORA-2024-6dab59bd47)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS7.1AI score0.36081EPSS
SaveExploits2References6
BDU FSTEC
BDU FSTEC
•added 2024/05/22 12:00 a.m.•18 views

The vulnerability of the Azure Migrate data transfer service allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the Azure Migrate data transfer service is related to the lack of security measures for website structure protection. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...

6.8CVSS5.1AI score0.00953EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/05/22 12:00 a.m.•17 views

Progress Software Progress MOVEit Automation 安全漏洞

Progress Software Progress MOVEit Automation is a suite of hosted file transfer software from Progress Software, USA. The software supports features such as sensitive data transfer and workflow automation. A security vulnerability exists in Progress Software Progress MOVEit Automation that stems...

7.5CVSS6.6AI score0.00235EPSS
SaveExploits0References3
The Hacker News
The Hacker News
•added 2024/05/15 10:55 a.m.•17 views

It's Time to Master the Lift & Shift: Migrating from VMware vSphere to Microsoft Azure

While cloud adoption has been top of mind for many IT professionals for nearly a decade, it's only in recent months, with industry changes and announcements from key players, that many recognize the time to make the move is now. It may feel like a daunting task, but tools exist to help you move...

7.2AI score
SaveExploits0
Rows per page
Query Builder