330 matches found
CVE-2022-22709
VP9 Video Extensions Remote Code Execution Vulnerability...
CVE-2022-24071
A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the rendering process which could lead to controlling browser internal APIs...
PT-2022-11319 · Mcafee · Data Loss Protection (Dlp) Epo Extension
Name of the Vulnerable Software and Affected Versions: Data Loss Protection DLP ePO extension versions 11.6.401 through 11.7.100 Data Loss Protection DLP ePO extension versions 11.8.x prior to 11.8.100 Description: A SQL injection vulnerability in the DLP ePO extension allows a remote authenticat...
CVE-2022-21889
Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...
CVE-2022-21890
Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...
CVE-2022-21848
Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...
PT-2022-1494 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the incorrect clearing or release of resources in the Windows IKE extension, which can lead to a denial-of-service condition. This can be exploited by a remote...
CVE-2021-38015
CVE-2021-38015 affects the Chromium-based browser engine. The provided security advisories describe an inappropriate implementation in the input handling of Chromium (prior to 96.0.4664.45) that could allow a user-assisted attacker who persuades a user to install a malicious extension to bypass n...
TYPO3 Information Disclosure Vulnerability (CNVD-2022-17970)
TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland.TYPO3 has an information disclosure vulnerability that originates from the extension's inability to protect or obfuscate the filename of uploaded files, which can be exploited by ...
FATEK Automation WinProladder 安全漏洞
FATEK Automation WinProladder is a PLC from FATEK Automation in China.FATEK Automation WinProladder is vulnerable to an unexpected flag extension vulnerability, which can be exploited by attackers to execute arbitrary code...
CVE-2021-33362
Stack buffer overflow in the hevcparsevpsextension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...
Cross site scripting
The miniorangesaml aka Miniorange Saml extension before 1.4.3 for TYPO3 allows XSS...
WordPress SP Project And Document Remote Code Execution Exploit
This Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in WordPress SP Project and Document plugin versions prior to 4.22. The security check only searches for lowercase file extensions such as .php,...
The vulnerability of Google Chrome browser extensions, related to improper authorization, allows a perpetrator to compromise data integrity.
The vulnerability of Google Chrome browsers is related to the insufficient implementation of policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...
Microsoft Windows Codecs Library 代码注入漏洞
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA. Image Extension is an image extension application developed by Microsoft that allows you to view images in Raw format.A remote code execution vulnerability exists in Raw Image Extension in Microsoft...
The vulnerability of the PHP SOAP extension allows a attacker to trigger an emergency shutdown of the application.
The vulnerability of the PHP SOAP extension interpreter is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the application to terminate abnormally...
Google Chrome 资源管理错误漏洞
Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in "Extensions" in Google Chrome versions prior to 91.0.4472.101. No details of the vulnerability are available at this ti...
Unrestricted file upload
Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a ".jpg.php" extension to the component "admin/wenjian.php?wj=../templets/pc"...
Server-side request forgery in extension "Yoast SEO for TYPO3" (yoast_seo)
The extension fails to restrict analyzed URLs to domains managed by the current TYPO3 website. A logged in TYPO3 backend user can use the vulnerability to make HTTP requests to arbitrary domains including the webserver itself or other internally managed resources...