Lucene search
+L

806 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 6:20 a.m.14 views

SUSE CVE-2004-1029

The Sun Java Plugin capability in Java 2 Runtime Environment JRE 1.4.201, 1.4.204, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using th...

9.3CVSS7.9AI score0.17018EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:02 a.m.8 views

SUSE CVE-2009-3616

Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a VNC client and then 1 disconnecting during data transfer, 2 sending a message using incorrect integ...

9.9CVSS8.1AI score0.03875EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:49 a.m.9 views

SUSE CVE-2017-5667

The sdhcisdmatransfermultiblocks function in hw/sd/sdhci.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service out-of-bounds heap access and crash or execute arbitrary code on the QEMU host via vectors involving the data transfer length...

6.5CVSS9AI score0.00443EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 3:35 a.m.2 views

SUSE CVE-2022-0308

Use after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.9AI score0.0075EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 3:33 a.m.8 views

SUSE CVE-2022-1867

Insufficient validation of untrusted input in Data Transfer in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to bypass same origin policy via a crafted clipboard content...

6.5CVSS7AI score0.00838EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:21 a.m.4 views

SUSE CVE-2023-0702

Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS8.7AI score0.00715EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2023/02/14 11:30 a.m.41 views

Invoke-Transfer - PowerShell Clipboard Data Transfer

Invoke-Transfer Invoke-Transfer is a PowerShell Clipboard Data Transfer. This tool helps you to send files in highly restricted environments such as Citrix, RDP, VNC, Guacamole.. using the clipboard function. As long as you can send text through the clipboard, you can send files in text format, i...

7.1AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/02/13 12:00 a.m.11 views

The vulnerability of the specialized software development environment SCADAPack Workbench allows a perpetrator to transfer data from local files to a remote system.

The vulnerability of the specialized software development environment SCADAPack Workbench arises from incorrect restrictions on XML references to external objects. This allows attackers to transfer data from local files to a remote system...

5.5CVSS6AI score0.00956EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/02/10 12:00 a.m.51 views

Google Chrome < 110.0.5481.77 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 110.0.5481.77. It is, therefore, affected by multiple vulnerabilities as referenced in the 202302stable-channel-update-for-desktop advisory. - Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a...

8.8CVSS7.7AI score0.00883EPSS
SaveExploits0References21
Tenable Nessus
Tenable Nessus
added 2023/02/10 12:00 a.m.128 views

Google Chrome < 110.0.5481.77 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 110.0.5481.77. It is, therefore, affected by multiple vulnerabilities as referenced in the 202302stable-channel-update-for-desktop advisory. - Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a...

8.8CVSS7.7AI score0.00883EPSS
SaveExploits0References21
BDU FSTEC
BDU FSTEC
added 2023/02/10 12:00 a.m.10 views

The vulnerability of the Data Transfer component in the Google Chrome web browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Data Transfer component in the Google Chrome web browser is related to errors in data type conversion. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

7.8CVSS7.6AI score0.00715EPSS
SaveExploits0References6Affected Software4
Microsoft CVE
Microsoft CVE
added 2023/02/09 8:57 p.m.53 views

Chromium: CVE-2023-0702 Type Confusion in Data Transfer

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.00715EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2023/02/09 12:00 a.m.50 views

KLA20224 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out of bounds read vulnerability in...

8.8CVSS9.6AI score0.01067EPSS
SaveExploits0References14
BDU FSTEC
BDU FSTEC
added 2023/02/08 12:00 a.m.11 views

The vulnerability of Mozilla Firefox and Firefox ESR browsers, related to errors in interpreting data loaded in multiple ways, allows attackers to read arbitrary files.

The vulnerability of Mozilla Firefox and Firefox ESR browsers is related to errors in interpreting data loaded in multiple ways. Exploiting this vulnerability allows a remote attacker to read arbitrary files by calling DataTransfer.setData...

7.6CVSS7.1AI score0.00641EPSS
SaveExploits0References13Affected Software6
OSV
OSV
added 2023/02/07 9:15 p.m.14 views

CVE-2023-0702

Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS5.6AI score
SaveExploits0References3
OSV
OSV
added 2023/02/07 9:15 p.m.5 views

DEBIAN-CVE-2023-0702

Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS8.2AI score0.00715EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/02/07 9:15 p.m.6 views

CVE-2023-0702

Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.3AI score0.00715EPSS
SaveExploits0References4
Prion
Prion
added 2023/02/07 9:15 p.m.22 views

Type confusion

Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

6.8CVSS8.4AI score0.00715EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/02/07 9:15 p.m.4 views

UBUNTU-CVE-2023-0702

Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.3AI score0.00715EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/02/07 12:00 a.m.10 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 110.0.5481.77 that stems from a type confusion issue during data transfer. An attacker exploits the vulnerability to cause heap corruption via UI interaction...

8.8CVSS8.2AI score0.00715EPSS
SaveExploits0References8
Rows per page
Query Builder