Lucene search
+L

100 matches found

Positive Technologies
Positive Technologies
added 2023/10/31 12:00 a.m.7 views

PT-2023-6636 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to incorrect security UI in the Downloads component of Google Chrome, which can be exploited by a remote attacker to perform domain spoofing via a crafted domain...

9.8CVSS6.7AI score0.99979EPSS
SaveExploits131References1107
Positive Technologies
Positive Technologies
added 2023/10/31 12:00 a.m.13 views

PT-2023-6635 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to an inappropriate implementation in the Downloads component of Google Chrome, which allowed a remote attacker to obfuscate security UI via a crafted HTML page...

9.8CVSS6.5AI score0.99979EPSS
SaveExploits131References1105
Positive Technologies
Positive Technologies
added 2023/10/31 12:00 a.m.9 views

PT-2023-6659 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to an inappropriate implementation in the Downloads component of Google Chrome, which may allow a remote attacker to potentially execute arbitrary code via a...

9.8CVSS7.5AI score0.99979EPSS
SaveExploits131References1105
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:00 a.m.13 views

The vulnerability of the Downloads component of the Google Chrome browser, which allows a hacker to perform a spoofing attack

The vulnerability of the Downloads component of the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

7.8CVSS6.8AI score0.00752EPSS
SaveExploits0References13Affected Software5
Positive Technologies
Positive Technologies
added 2023/10/10 12:00 a.m.11 views

PT-2023-5969 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 118.0.5993.70 Description: The issue is related to an inappropriate implementation in the Downloads component of Google Chrome, which allowed a remote attacker to spoof security UI via a crafted HTML page. This...

9.8CVSS6.3AI score0.99979EPSS
SaveExploits129References1113
BDU FSTEC
BDU FSTEC
added 2023/09/28 12:00 a.m.19 views

The vulnerability of the Downloads component in the Google Chrome browser allows a hacker to bypass existing security restrictions.

The vulnerability of the Downloads component in the Google Chrome browser is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...

5CVSS5.4AI score0.00621EPSS
SaveExploits0References12Affected Software5
Positive Technologies
Positive Technologies
added 2023/09/12 12:00 a.m.17 views

PT-2023-5487 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 117.0.5938.62 Description: The issue is related to insufficient policy enforcement in the Downloads component of Google Chrome, allowing a remote attacker to bypass Enterprise policy restrictions. This can be...

9.8CVSS6.7AI score0.99979EPSS
SaveExploits134References1113
CNVD
CNVD
added 2023/05/31 12:00 a.m.41 views

Google Chrome Downloads Component Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome Downloads component, which can be exploited by attackers to bypass security restrictions...

6.5CVSS6.7AI score0.00693EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/05/30 12:00 a.m.11 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome Downloads component, which can be exploited by attackers to bypass security restrictions...

6.5CVSS8.7AI score0.00693EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/05/30 12:00 a.m.7 views

PT-2023-3761 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 114.0.5735.90 Description: The issue is related to an inappropriate implementation in the Downloads component, allowing an attacker to bypass file access restrictions. This can be achieved by convincing a user ...

9.8CVSS6.4AI score0.99979EPSS
SaveExploits132References1126
ArchLinux
ArchLinux
added 2021/07/21 12:00 a.m.138 views

[ASA-202107-47] chromium: multiple issues

Arch Linux Security Advisory ASA-202107-47 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-30565 CVE-2021-30566 CVE-2021-30567 CVE-2021-30568 CVE-2021-30569 CVE-2021-30571 CVE-2021-30572 CVE-2021-30573 CVE-2021-30574 CVE-2021-30575 CVE-2021-30576...

9.6CVSS1.3AI score0.06282EPSS
SaveExploits26References40
ATTACKERKB
ATTACKERKB
added 2020/02/11 3:15 p.m.3 views

CVE-2020-6402

Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension...

8.8CVSS7.7AI score0.02662EPSS
SaveExploits0References12
Kaspersky
Kaspersky
added 2020/02/04 12:00 a.m.358 views

KLA11660 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A...

8.8CVSS9.4AI score0.06997EPSS
SaveExploits19References4
NVD
NVD
added 2008/02/21 12:44 a.m.24 views

CVE-2008-0849

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652...

7.5CVSS8.2AI score0.01137EPSS
SaveExploits1References4
Prion
Prion
added 2008/02/21 12:44 a.m.25 views

Sql injection

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652...

7.5CVSS8.7AI score0.01137EPSS
SaveExploits2References4
CVE
CVE
added 2008/02/21 12:00 a.m.60 views

CVE-2008-0849

CVE-2008-0849 is a SQL injection in index.php of the Downloads (com_downloads) component for Mambo/Joomla, exploitable via the cat parameter in a selectcat function. This is a different vector than CVE-2008-0652 (which uses filecatid in a selectfolder action). Connected sources confirm the affect...

7.5CVSS8.4AI score0.01137EPSS
SaveExploits1References4Affected Software2
Cvelist
Cvelist
added 2008/02/21 12:00 a.m.35 views

CVE-2008-0849

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652...

8.2AI score0.01137EPSS
SaveExploits1References4
Prion
Prion
added 2008/02/07 9:00 p.m.22 views

Sql injection

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action...

7.5CVSS8.7AI score0.00928EPSS
SaveExploits1References2
NVD
NVD
added 2008/02/07 9:00 p.m.27 views

CVE-2008-0652

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action...

7.5CVSS8.2AI score0.00928EPSS
SaveExploits1References2
CVE
CVE
added 2008/02/07 8:00 p.m.64 views

CVE-2008-0652

The CVE-2008-0652 entry describes an SQL injection in index.php of the Mambo/Joomla! Downloads (com_downloads) component. The vulnerability allows remote attackers to inject arbitrary SQL via the filecatid parameter in a selectfolder action. This exposes the possibility of unauthorized data expos...

7.5CVSS8.3AI score0.00928EPSS
SaveExploits1References2Affected Software2
Rows per page
Query Builder