PT-2023-9378 · Zabbix +3 · Zabbix +3

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to the lack of protection for the web page structure in Zabbix, allowing an attacker to access and compromise confidential data. Specifically, the geomap configuration...

CVE-2022-3200

Heap buffer overflow in Internals in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

PT-2022-7608 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Extensions component of Google Chrome and Microsoft Edge, which is...

CVE-2021-4098

Insufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

JetBrains TeamCity Cross-Site Scripting Vulnerability (CNVD-2021-89061)

TeamCity is a Java-based build management and continuous integration server from JetBrains. A cross-site scripting vulnerability exists in versions of JetBrains TeamCity prior to 2021.1.2. The vulnerability stems from an email notification that may contain unescaped HTML, which can be exploited b...

DEBIAN-CVE-2021-30628

Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page...

CVE-2021-30508

Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page...

Google Chrome post-release reuse vulnerability (CNVD-2021-14738)

Chrome is a simple and efficiently designed web browsing tool developed by Google. A post-release reuse vulnerability exists in Navigation in versions prior to Google Chrome 88.0.4324.146. An attacker can exploit this vulnerability to potentially perform sandbox escaping via a crafted HTML page...

CVE-2016-9424

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m doesn't properly validate the value of tag attribute, which allows remote attackers to cause a denial of service heap buffer overflow crash and possibly execute arbitrary code via a crafted HTML page...