17893 matches found
Design/Logic Flaw
Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof the APK downloads dialog via a crafted HTML page...
Design/Logic Flaw
Use after free in File Manager in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction...
Design/Logic Flaw
Use after free in Bookmarks in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction...
Design/Logic Flaw
Use after free in Ozone in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via running a Wayland test...
Design/Logic Flaw
Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page...
Design/Logic Flaw
Use after free in SwiftShader in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Malicious code in design-insights (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 939b31c8e77308691486e2c471ef67e7ba1acc3fc7c3fcccd4355b1901424326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2446 Malicious code in design-insights (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 939b31c8e77308691486e2c471ef67e7ba1acc3fc7c3fcccd4355b1901424326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Design/Logic Flaw
An issue was discovered in yasm version 1.3.0. There is a use-after-free in yasmintnumdestroy in libyasm/intnum.c...
Design/Logic Flaw
insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF see XSA-273, PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / val...
Design/Logic Flaw
An issue was discovered in yasm version 1.3.0. There is a use-after-free in error in modules/preprocs/nasm/nasm-pp.c...
Design/Logic Flaw
Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Design/Logic Flaw
This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion function...
Design/Logic Flaw
This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js...
Design/Logic Flaw
This affects the package properties-reader before 2.2.0...
Design/Logic Flaw
Use after free in tab groups in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Four Main Reasons Shoppers Abandon eCommerce Carts
More than just window shopping eCommerce shopping cart abandonment causes brands a sobering USD 18 Billion in annual revenue Forrester Research. While rates differ by device, with mobile and tablet device users most likely to leave before completing their order, nearly 70 percent of shoppers dese...
Design/Logic Flaw
The Exports and Reports WordPress plugin before 0.9.2 does not sanitize and validate data when generating the CSV to export, which could lead to a CSV injection, by the use of Microsoft Excel DDE function, or to leak data via maliciously injected hyperlinks...
Malicious code in antd-form-design (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc32bc73be14dc59b38126b0360d4228f51855a1766affb2b795bddf67179d85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Design/Logic Flaw
Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction...