17088 matches found
Design/Logic Flaw
Inappropriate implementation in Scroll in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
Design/Logic Flaw
Use after free in Reader Mode in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...
Design/Logic Flaw
Use after free in Cast in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific interactions to potentially exploit heap corruption via a crafted HTML page...
Design/Logic Flaw
Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Design/Logic Flaw
Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Design/Logic Flaw
Use after free in GPU in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Autodesk Navisworks 资源管理错误漏洞
Autodesk Navisworks is 3D model review software for architecture, engineering, and construction from Autodesk, Inc. A resource management error vulnerability exists in Autodesk AutoCAD and Autodesk Navisworks that originates from a post-release reuse error when parsing DWFX and SKP files. A remot...
Autodesk Navisworks 资源管理错误漏洞
Autodesk Navisworks is 3D model review software for architecture, engineering, and construction from Autodesk, Inc. A resource management error vulnerability exists in Autodesk AutoCAD and Autodesk Navisworks due to a boundary error in the handling of DWF files. A remote attacker could trick a...
Design/Logic Flaw
Missing filtering in an error message in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 exposed sensitive information when an include directive fails in the CI/CD configuration...
Design/Logic Flaw
AVEVA System Platform versions 2017 through 2020 R2 P01 uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that ca...
Design/Logic Flaw
URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11...
CVE-2022-0404
The Material Design for Contact Form 7 WordPress plugin through 2.6.4 does not check authorization or that the option mentioned in the notice param belongs to the plugin when processing requests to the cf7mddismissnotice action, allowing any logged in user with roles as low as Subscriber to set...
CVE-2022-0404
The Material Design for Contact Form 7 WordPress plugin through 2.6.4 does not check authorization or that the option mentioned in the notice param belongs to the plugin when processing requests to the cf7mddismissnotice action, allowing any logged in user with roles as low as Subscriber to set...
CVE-2022-0404
The Material Design for Contact Form 7 WordPress plugin through 2.6.4 does not check authorization or that the option mentioned in the notice param belongs to the plugin when processing requests to the cf7mddismissnotice action, allowing any logged in user with roles as low as Subscriber to set...
CVE-2022-0404
The CVE-2022-0404 issue affects the Material Design for Contact Form 7 WordPress plugin (versions ≤ 2.6.4). The root cause is missing authorization checks in the cf7md_dismiss_notice handling, allowing any logged‑in user (even Subscriber) to set arbitrary plugin options to true, potentially causi...
CVE-2022-0404 Material Design for Contact Form 7 <= 2.6.4 - Subscriber+ Arbitrary Settings Update leading to DoS
The Material Design for Contact Form 7 WordPress plugin through 2.6.4 does not check authorization or that the option mentioned in the notice param belongs to the plugin when processing requests to the cf7mddismissnotice action, allowing any logged in user with roles as low as Subscriber to set...
Design/Logic Flaw
Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV...
WordPress plugin Material Design for Contact Form安全漏洞
WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Material Design for Contact Form plugin suffers from a denial of service vulnerability that stems from a plugin validatio...
PT-2022-13158 · WordPress · Contact Form 7 Material Design
Name of the Vulnerable Software and Affected Versions: Material Design for Contact Form 7 WordPress plugin versions 2.6.4 and earlier Description: The issue allows any logged-in user, even those with low roles such as Subscriber, to set arbitrary options to true due to a lack of authorization...