Lucene search
+L

199 matches found

AlpineLinux
AlpineLinux
added 2023/10/11 10:28 p.m.118 views

CVE-2023-5475

Inappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted Chrome Extension. Chromium security severity: Medium...

6.5CVSS6.9AI score0.00586EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2023/10/11 12:00 a.m.34 views

CVE-2023-5475

Inappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted Chrome Extension. Chromium security severity: Medium...

6.5CVSS6.6AI score0.00586EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 3:55 a.m.7 views

SUSE CVE-2020-16043

Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicious network traffic...

8.8CVSS8.8AI score0.01079EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
added 2023/02/15 3:28 a.m.6 views

SUSE CVE-2022-23132

During Zabbix installation from RPM, DACOVERRIDE SELinux capability is in use to access PID files in /var/run/zabbix folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level...

7.5CVSS6.4AI score0.00796EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/07/28 1:15 a.m.14 views

CVE-2022-2164

Inappropriate implementation in Extensions API in Google Chrome prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted HTML page...

6.3CVSS5.9AI score0.00635EPSS
SaveExploits0References8
AlpineLinux
AlpineLinux
added 2022/07/28 12:41 a.m.88 views

CVE-2022-2164

Inappropriate implementation in Extensions API in Google Chrome prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted HTML page...

6.3CVSS6.6AI score0.00635EPSS
SaveExploits0
Cvelist
Cvelist
added 2022/07/28 12:41 a.m.41 views

CVE-2022-2164

Inappropriate implementation in Extensions API in Google Chrome prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted HTML page...

6.7AI score0.00635EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/02/10 12:00 a.m.20 views

The vulnerability of the Windows Event Tracing service, related to the discretionary list of access control (DACL) in the Windows operating system, allows a perpetrator to trigger a service failure.

The vulnerability of the Windows Event Tracing service related to the discretionary access control list DACL of the Windows operating system involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

6.1CVSS7.2AI score0.01506EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/11 9:15 p.m.33 views

CVE-2022-21839

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability...

6.1CVSS0.01506EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/01/11 9:15 p.m.11 views

CVE-2022-21839

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability...

6.1CVSS7AI score0.01506EPSS
SaveExploits0References3Affected Software3
OSV
OSV
added 2022/01/11 9:15 p.m.4 views

CVE-2022-21839

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability...

5.5CVSS7.3AI score0.01506EPSS
SaveExploits0References2
Prion
Prion
added 2022/01/11 9:15 p.m.35 views

Denial of service

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability...

2.1CVSS6.3AI score0.01506EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/11 8:22 p.m.49 views

CVE-2022-21839 Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability

...

6.1CVSS8.1AI score0.01506EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2022/01/11 8:00 a.m.51 views

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability

...

6.1CVSS7.6AI score0.01506EPSS
SaveExploits0
NVD
NVD
added 2021/09/21 11:15 a.m.39 views

CVE-2021-26333

An information disclosure vulnerability exists in AMD Platform Security Processor PSP chipset driver. The discretionary access control list DACL may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages...

5.5CVSS0.00517EPSS
SaveExploits0References3
OSV
OSV
added 2021/09/21 11:15 a.m.7 views

CVE-2021-26333

An information disclosure vulnerability exists in AMD Platform Security Processor PSP chipset driver. The discretionary access control list DACL may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages...

5.5CVSS5.8AI score0.00517EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2021/09/21 10:49 a.m.10 views

CVE-2021-26333 AMD Chipset Driver Information Disclosure Vulnerability

An information disclosure vulnerability exists in AMD Platform Security Processor PSP chipset driver. The discretionary access control list DACL may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages...

6AI score0.00517EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/09/21 10:49 a.m.48 views

CVE-2021-26333 AMD Chipset Driver Information Disclosure Vulnerability

An information disclosure vulnerability exists in AMD Platform Security Processor PSP chipset driver. The discretionary access control list DACL may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages...

5.2AI score0.00517EPSS
SaveExploits0References3
Veracode
Veracode
added 2021/01/11 7:49 p.m.32 views

Authorization Bypass

chromium is vulnerable to authorization bypass. Insufficient data validation in networking allows a remote attacker to bypass discretionary access control via malicious network traffic...

8.8CVSS5AI score0.01079EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2021/01/08 7:15 p.m.4 views

DEBIAN-CVE-2020-16020

Inappropriate implementation in cryptohome in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass discretionary access control via a malicious file...

8.8CVSS8.4AI score0.00858EPSS
SaveExploits0References1
Rows per page
Query Builder