Lucene search
+L

4212 matches found

Debian CVE
Debian CVE
added 2023/11/01 5:14 p.m.57 views

CVE-2023-5851

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6.1AI score0.00935EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:00 a.m.26 views

The vulnerability of the Downloads component of the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Downloads component of the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially...

7.8CVSS5.8AI score0.00935EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:00 a.m.22 views

The vulnerability of the Downloads component of the Google Chrome browser, which allows attackers to perform spear-phishing attacks

The vulnerability of the Downloads component of the Google Chrome browser is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

7.8CVSS5.8AI score0.00651EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:00 a.m.12 views

The vulnerability of the Downloads component of the Google Chrome browser, which allows attackers to perform spear-phishing attacks

The vulnerability of the Downloads component of the Google Chrome browser is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

7.8CVSS5.8AI score0.00938EPSS
SaveExploits0References11Affected Software4
Tenable Nessus
Tenable Nessus
added 2023/11/01 12:00 a.m.101 views

Tenable Nessus Agent 10.4.2 Multiple Vulnerabilities (TNS-2023-38)

According to its self-reported version, the Tenable Nessus Agent running on the remote host is 10.4.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-38 advisory. - Nessus Agent leverages third-party software to help provide underlying functionality. Several ...

9.8CVSS6.7AI score0.06531EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/10/31 12:00 a.m.12 views

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from an incorrect security user interface in the Downloads module...

4.3CVSS6.6AI score0.00651EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2023/10/31 12:00 a.m.9 views

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from an improperly executed vulnerability in the Downloads module...

4.3CVSS6.6AI score0.00935EPSS
SaveExploits0References8
FreeBSD
FreeBSD
added 2023/10/31 12:00 a.m.38 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This update includes 15 security fixes: 1492698 High CVE-2023-5480: Inappropriate implementation in Payments. Reported by Vsevolod Kokorin Slonser of Solidlab on 2023-10-14 1492381 High CVE-2023-5482: Insufficient data validation in USB. Reported by DarkNavy on 2023-10-13...

8.8CVSS6.9AI score0.07154EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/10/31 12:00 a.m.65 views

Google Chrome < 119.0.6045.105 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 119.0.6045.105. It is, therefore, affected by multiple vulnerabilities as referenced in the 202310stable-channel-update-for-desktop31 advisory. - Inappropriate implementation in Downloads in Google Chrome prior to...

8.8CVSS7.7AI score0.07154EPSS
SaveExploits0References27
CNNVD
CNNVD
added 2023/10/31 12:00 a.m.15 views

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from an improperly executed vulnerability in the Downloads module...

8.8CVSS6.6AI score0.01291EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/10/31 12:00 a.m.13 views

PT-2023-6635 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to an inappropriate implementation in the Downloads component of Google Chrome, which allowed a remote attacker to obfuscate security UI via a crafted HTML page...

9.8CVSS6.5AI score0.99979EPSS
SaveExploits131References1105
Positive Technologies
Positive Technologies
added 2023/10/31 12:00 a.m.11 views

PT-2023-6637 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to incorrect security UI in the Downloads component of Google Chrome, which can be exploited by a remote attacker to obfuscate security UI via a crafted HTML pag...

9.8CVSS6.7AI score0.99979EPSS
SaveExploits131References1105
Positive Technologies
Positive Technologies
added 2023/10/31 12:00 a.m.7 views

PT-2023-6636 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to incorrect security UI in the Downloads component of Google Chrome, which can be exploited by a remote attacker to perform domain spoofing via a crafted domain...

9.8CVSS6.7AI score0.99979EPSS
SaveExploits131References1107
CNNVD
CNNVD
added 2023/10/31 12:00 a.m.10 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that originates from an incorrect security user interface in the Downloads module. An attacker can exploit this vulnerability to bypass security restrictions...

4.3CVSS6.6AI score0.00938EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/10/31 12:00 a.m.9 views

PT-2023-6659 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to an inappropriate implementation in the Downloads component of Google Chrome, which may allow a remote attacker to potentially execute arbitrary code via a...

9.8CVSS7.5AI score0.99979EPSS
SaveExploits131References1105
CNNVD
CNNVD
added 2023/10/29 12:00 a.m.10 views

WordPress Plugin almosteffortless secure-files path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in...

9.8CVSS6.8AI score0.00746EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/29 12:00 a.m.9 views

The vulnerability of the sysmanage/licence.php component in D-Link’s DAR-7000 and DAR-8000 router microprogramming systems lies in the lack of restrictions on file downloads. This allows a malicious individual to download arbitrary files.

The vulnerability of the sysmanage/licence.php component in D-Link DAR-7000 and DAR-8000 router microprogramming systems lies in the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to download any files at will...

9CVSS6.8AI score0.34312EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/28 12:00 a.m.11 views

The vulnerability of the WPanel CMS system, related to the lack of restrictions on file uploads, allows a hacker to execute arbitrary code.

The vulnerability of the WPanel CMS system is related to the lack of restrictions on the download of files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by downloading arbitrary PHP files remotely...

9CVSS8AI score0.01822EPSS
SaveExploits1References4Affected Software1
SUSE CVE
SUSE CVE
added 2023/10/26 1:01 a.m.4 views

SUSE CVE-2023-5727

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer. Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox 119,...

6.1CVSS6.6AI score0.00871EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
added 2023/10/26 12:00 a.m.10 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 are related to lack of access control mechanisms. This allows attackers to bypass security restrictions.

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to lack of access control mechanisms. Exploiting these vulnerabilities can allow attackers to bypass securi...

7.8CVSS7.2AI score0.04186EPSS
SaveExploits0References5
Rows per page
Query Builder