VulnCheck KEV: CVE-2024-0799

An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin...

PT-2024-3929 · Google +6 · Google Chrome +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 125.0.6422.141 Microsoft Edge affected versions not specified Description: The issue is related to a use after free vulnerability in the Presentation API of Google Chrome and Microsoft Edge browsers. This...

Microsoft Edge (Chromium) < 109.0.1518.115 (CVE-2023-3079)

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 109.0.1518.115. It is, therefore, affected by a type confusion vulnerability in v8 as referenced in the June 13, 2023 advisory. Note that Nessus has not tested for these issues but has instead relied only on t...

Microsoft Edge (Chromium) < 109.0.1518.140 Heap Buffer Overflow Vulnerability

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 109.0.1518.140. It is, therefore, affected by a heap buffer vulnerability in WebP as referenced in the September 15, 2023 advisory. Note that Nessus has not tested for these issues but has instead relied only ...

Microsoft Edge (Chromium) < 109.0.1518.100 (CVE-2023-2033)

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 109.0.1518.100. It is, therefore, affected by a type confusion vulnerability in V8 as referenced in the April 24, 2023 advisory. Note that Nessus has not tested for these issues but has instead relied only on...

Microsoft Edge (Chromium) < 109.0.1518.95 (CVE-2023-0941)

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 109.0.1518.95. It is, therefore, affected by a use after free vulnerability in Prompts as referenced in the March 23, 2023 advisory. Note that Nessus has not tested for these issues but has instead relied only...

PT-2024-4375

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 124.0.6367.155 Microsoft Edge affected versions not specified Description The issue is related to a use after free flaw in the ANGLE component, which can be exploited by a remote attacker to potentially corrupt...

PVS 2402 | Console Setup: EdgeWebView2 not installing correctly

When launching the "Console Installer" it tries to install the prerequired software which includes Edge WebView2. In some cases when installing it from the iso, Edge WebView2 might not show up in "appwiz.cpl" or "Apps and Features". If you start the "Console Installer" again it is shown as "not...

ROS-20240507-09

Vulnerability in the Extensions component of Microsoft Edge and Google Chrome browsers is related to incorrect security checks for standard elements. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive information V8 JavaScript script handler...

VulnCheck KEV: CVE-2024-4671

Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera...

PT-2024-6344 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Microsoft Edge affected versions not specified Description: The issue is related to insufficient data validation in the V8 API, which can be exploited by a remote attacker to potentially impact th...

CVE-2024-34376

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Freesia Edge allows Stored XSS.This issue affects Edge: from n/a through 2.0.9...

CVE-2024-34376 WordPress Edge theme <= 2.0.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Freesia Edge allows Stored XSS.This issue affects Edge: from n/a through 2.0.9...

CVE-2024-34376 WordPress Edge theme <= 2.0.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Freesia Edge allows Stored XSS.This issue affects Edge: from n/a through 2.0.9...

CVE-2024-34376

CVE-2024-34376 affects the Edge WordPress theme by Freesia Edge. It is a Stored XSS via the Author Display Name in Edge versions up to 2.0.9. Red Hat and Wordfence references confirm the issue and indicate that it is mitigated by updating Edge to the patched version (Edge

VulnCheck KEV: CVE-2017-0068

Browsers in Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0009, CVE-2017-0011, CVE-2017-0017, and...

PT-2024-25835 · Unknown · Theme Freesia Edge

Name of the Vulnerable Software and Affected Versions: Theme Freesia Edge versions n/a through 2.0.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can injec...

WordPress plugin Edge 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

The vulnerability of the “Bookmarks” control element in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the “Bookmarks” control element in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...