Lucene search
K

2060 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 4:32 a.m.7 views

CVE-2023-5718

The Vue.js Devtools extension was found to leak screenshot data back to a malicious web page via the standard postMessage API. By creating a malicious web page with an iFrame targeting a sensitive resource i.e. a locally accessible file or sensitive website, and registering a listener on the web...

4.3CVSS6.8AI score0.00248EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 10:29 p.m.6 views

CVE-2022-24072

The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into the extension store web page via devtools.inspectedWindow, leading to extensions downloading and uploading when users open the developer tool...

6.1CVSS6.8AI score0.00557EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/19 12:0 a.m.3 views

The vulnerability of Google Chrome’s DevTools component, which allows a hacker to trigger a service failure

The vulnerability of Google Chrome’s DevTools component is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS6.9AI score0.00296EPSS
Exploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/19 12:0 a.m.2 views

The vulnerability of Google Chrome’s DevTools component, which allows a hacker to trigger a service failure

The vulnerability of Google Chrome’s DevTools component is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.7AI score0.0058EPSS
Exploits0References9Affected Software4
CNVD
CNVD
added 2025/05/14 12:0 a.m.1 views

Google Chrome Security Bypass Vulnerability (CNVD-2025-10055)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome prior to version 136.0.7103.59, which stems from an improper implementation in DevTools, and can be exploited by an attacker to cause an access control bypass...

9.8CVSS6.8AI score0.0058EPSS
Exploits0References1
CNVD
CNVD
added 2025/05/14 12:0 a.m.2 views

Google Chrome Code Execution Vulnerability (CNVD-2025-10054)

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome prior to version 136.0.7103.59, which stems from an out-of-bounds memory access in DevTools, and can be exploited by an attacker to cause heap corruption...

8.8CVSS7.2AI score0.00462EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/13 1:18 p.m.2 views

Malicious code in firefox-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d723f2db7c5589f68811969f49939e22ad3e71b00f741fc7f19a5bb6464da2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0References1
OSV
OSV
added 2025/05/13 1:18 p.m.2 views

MAL-2025-3778 Malicious code in firefox-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d723f2db7c5589f68811969f49939e22ad3e71b00f741fc7f19a5bb6464da2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/06 5:55 a.m.3 views

Malicious code in vue-ssr-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea182277a6932c17b90af3e6d99aea3b0824f5ac77dff35caaf782c3ce87c150 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References4
OSV
OSV
added 2025/05/06 5:55 a.m.3 views

MAL-2025-3656 Malicious code in vue-ssr-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea182277a6932c17b90af3e6d99aea3b0824f5ac77dff35caaf782c3ce87c150 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/05/06 12:0 a.m.6 views

Fedora 41 : chromium (2025-8fbc37e703)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8fbc37e703 advisory. Update to 136.0.7103.59 CVE-2025-4096: Heap buffer overflow in HTML CVE-2025-4050: Out of bounds memory access in DevTools CVE-2025-4051: Insufficie...

9.8CVSS7.6AI score0.0058EPSS
Exploits0References5
OSV
OSV
added 2025/05/05 6:15 p.m.2 views

DEBIAN-CVE-2025-4052

Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...

9.8CVSS8.3AI score0.0058EPSS
Exploits0References1
OSV
OSV
added 2025/05/05 6:15 p.m.2 views

DEBIAN-CVE-2025-4051

Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

6.3CVSS7AI score0.00296EPSS
Exploits0References1
OSV
OSV
added 2025/05/05 6:15 p.m.3 views

DEBIAN-CVE-2025-4050

Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.7AI score0.00462EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2025/05/05 6:10 p.m.5 views

CVE-2025-4051

Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

6.3CVSS6.5AI score0.00296EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2025/05/05 6:10 p.m.2 views

CVE-2025-4052

Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...

9.8CVSS6.5AI score0.0058EPSS
Exploits0
Debian CVE
Debian CVE
added 2025/05/05 6:10 p.m.9 views

CVE-2025-4052

Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...

9.8CVSS8.3AI score0.0058EPSS
Exploits0
Debian CVE
Debian CVE
added 2025/05/05 6:10 p.m.5 views

CVE-2025-4050

Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.7AI score0.00462EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2025/05/04 2:9 a.m.2 views

SUSE CVE-2025-4050

Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.1AI score0.00462EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2025/05/04 2:9 a.m.2 views

SUSE CVE-2025-4051

Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

6.3CVSS6.5AI score0.00296EPSS
Exploits0References5
Rows per page
Query Builder