PT-2024-5547

Name of the Vulnerable Software and Affected Versions Microsoft Edge versions prior to the fixed version Microsoft Windows 10 version 1507 prior to 10.0.10240.20751 Description The vulnerability is related to a memory corruption issue in the Windows Scripting Engine, which can be exploited by...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Aug-1 24)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2024-42480

Kamaji is the Hosted Control Plane Manager for Kubernetes. In versions 1.0.0 and earlier, Kamaji uses an "open at the top" range definition in RBAC for etcd roles leading to some TCPs API servers being able to read, write, and delete the data of other control planes. This vulnerability is fixed i...

CVE-2024-42480 Kamaji's RBAC Roles for `etcd` are not disjunct

Kamaji is the Hosted Control Plane Manager for Kubernetes. In versions 1.0.0 and earlier, Kamaji uses an "open at the top" range definition in RBAC for etcd roles leading to some TCPs API servers being able to read, write, and delete the data of other control planes. This vulnerability is fixed i...

CVE-2024-42480 Kamaji's RBAC Roles for `etcd` are not disjunct

Kamaji is the Hosted Control Plane Manager for Kubernetes. In versions 1.0.0 and earlier, Kamaji uses an "open at the top" range definition in RBAC for etcd roles leading to some TCPs API servers being able to read, write, and delete the data of other control planes. This vulnerability is fixed i...

CVE-2024-42480 Kamaji's RBAC Roles for `etcd` are not disjunct

Kamaji is the Hosted Control Plane Manager for Kubernetes. In versions 1.0.0 and earlier, Kamaji uses an "open at the top" range definition in RBAC for etcd roles leading to some TCPs API servers being able to read, write, and delete the data of other control planes. This vulnerability is fixed i...

CVE-2024-38219

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

CVE-2024-38219

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

CVE-2024-38218

Microsoft Edge HTML-based Memory Corruption Vulnerability...

CVE-2024-38218

Microsoft Edge HTML-based Memory Corruption Vulnerability...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CNVD-2024-39526)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A remote code execution vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by an attacker to execute arbitrary code on a system...

Edge Side Includes Injection

Edge Side Includes ESI is a markup language used for dynamic web content assembly. It allows web developers to cache parts of web pages at the edge servers, reducing server load and improving page load times. However, when ESI is improperly implemented, it can be vulnerable to ESI Injection...

Microsoft Edge (HTML-based) Memory Corruption Vulnerability (CNVD-2024-39661)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A memory corruption vulnerability exists in Microsoft Edge HTML-based, which can be exploited by an attacker to execute arbitrary code on a system...

PT-2024-6523 · Cisco · Cisco Expressway Edge

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Edge Expressway-E affected versions not specified Description: A vulnerability in Cisco Expressway Edge Expressway-E could allow an authenticated, remote attacker to masquerade as another user on an affected system. This issu...

The vulnerability of the WebTransport interface in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the WebTransport interface in Google Chrome and Microsoft Edge relates to memory-walking attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, or cause a...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to bypass sandboxing mechanisms, gain unauthorized access to protected information, execute arbitrary code, or cause a denial-of-service attack.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to operations that go beyond the memory buffer. Exploiting this vulnerability allows a malicious actor to bypass sandboxing mechanisms, gain unauthorized access to protected information, execute...

The vulnerability of the Screen Capture function in browsers such as Google Chrome and Microsoft Edge allows a malicious actor to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the Screen Capture function in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, o...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge relates to type conversion errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execute arbitrary code, or cause a denial-of-service attack by generatin...

The vulnerability of the Dawn component in browsers such as Google Chrome and Microsoft Edge on Android operating systems allows a hacker to bypass the sandbox protection mechanisms and execute arbitrary code.

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge browsers on Android operating systems is related to the use of uninitialized variables. Exploiting this vulnerability allows a malicious actor to bypass the sandboxing mechanisms and execute arbitrary code using a special...