csaf-poc/csaf_distribution Cross-site Scripting vulnerability

The csafprovider package before 0.8.2 allows XSS via a crafted CSAF document uploaded as text/html. The endpoint upload allows valid CSAF advisories JSON format to be uploaded with Content-Type text/html and filenames ending in .html. When subsequently accessed via web browser, these advisories a...

CVE-2022-43996

The csafprovider package before 0.8.2 allows XSS via a crafted CSAF document uploaded as text/html. The endpoint upload allows valid CSAF advisories JSON format to be uploaded with Content-Type text/html and filenames ending in .html. When subsequently accessed via web browser, these advisories a...

Unspecified Vulnerability in Google Chrome (CNVD-2022-86348)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Goole Chrome versions prior to 108.0.5359.71 for use after the release of Mojo, which can be exploited by attackers to launch an attack via a constructed HTML page using heap corruption...

Google Chrome Type Obfuscation Vulnerability

Google Chrome is a web browser from Google, an American company. A type obfuscation vulnerability exists in versions of Google Chrome prior to V8 108.0.5359.71, which can be exploited by remote attackers to launch an attack via a crafted HTML page using heap corruption...

Google Chrome Peer Connection Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in Google Chrome versions prior to 106.0.5249.119. The vulnerability stems from the use of Peer Connection after release and can be exploited by a remote attacker to launch an attack via a...

Google Chrome Internals Heap Buffer Overflow Vulnerability

Google Chrome is a web browser from Google, an American company. A heap buffer overflow vulnerability exists in the Internals component of Google Chrome versions prior to 105.0.5195.125. An attacker can exploit this vulnerability to leverage heap corruption via specially crafted HTML pages...

Google Chrome Input Validation Error Vulnerability (CNVD-2022-81241)

Google Chrome is a web browser from Google, an American company. An input validation error vulnerability exists in the DevTools component of Google Chrome versions prior to 105.0.5195.125. An attacker can exploit this vulnerability to convince users to install a malicious extension that bypasses...

Google Chrome < 105.0.5195.52 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 105.0.5195.52. It is, therefore, affected by multiple vulnerabilities as referenced in the 202208stable-channel-update-for-desktop30 advisory. - Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to...

Google Chrome < 102.0.5005.61 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 102.0.5005.61. It is, therefore, affected by multiple vulnerabilities as referenced in the 202205stable-channel-update-for-desktop24 advisory. - Use after free in App Service in Google Chrome prior to 102.0.5005.61...

Google Chrome Input Validation Error Vulnerability (CNVD-2022-31839)

Google Chrome is a web browser from Google, an American company. An input validation error vulnerability exists in SQLite in versions prior to Google Chrome 74.0.3729.131. An attacker can exploit the vulnerability to corrupt the heap with the help of specially crafted HTML pages...

Google Chrome Buffer Overflow Vulnerability (CNVD-2022-45560)

Google Chrome is a web browser from Google, Inc. A buffer overflow vulnerability exists in Google Chrome, which can be exploited by attackers to potentially exploit heap corruption via well-designed HTML pages...

Google Chrome Information Disclosure Vulnerability (CNVD-2022-45558)

Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to an information disclosure vulnerability that could be exploited to disclose cross-domain data via crafted HTML pages...

Debian DSA-5079-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5079 advisory. - Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a craft...

Google Chrome Security Feature Issue Vulnerability (CNVD-2022-45561)

Google Chrome is a web browser from Google Inc. A security feature vulnerability exists in Google Chrome that could be exploited to convince users to install malicious extensions and perform sandbox escapes via carefully designed HTML pages...

Google Chrome Security Feature Issue Vulnerability (CNVD-2022-45570)

Google Chrome is a web browser from Google, Inc. A security feature vulnerability exists in versions of Google Chrome prior to 98.0.4758.80, which can be exploited by remote attackers to compromise cross-domain data via crafted HTML pages...

Google Chrome Buffer Overflow Vulnerability (CNVD-2022-45562)

Google Chrome is a web browser from Google, Inc. A buffer overflow vulnerability exists in Google Chrome, which can be exploited by remote attackers to potentially exploit heap corruption via well-designed HTML pages...

Google Chrome Type Obfuscation Vulnerability (CNVD-2022-45565)

Google Chrome is a web browser from Google, Inc. A type obfuscation vulnerability exists in Google Chrome, which can be exploited by remote attackers to potentially exploit heap corruption via well-designed HTML pages...

Google Chrome 安全特征问题漏洞

Google Chrome is a web browser from Google Inc. A security feature vulnerability exists in Google Chrome that could be exploited to convince users to install malicious extensions and perform sandbox escapes via carefully designed HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-15136)

Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome that could be exploited by attackers to convince users to engage in specific user interactions that could potentially exploit heap corruption via well-designed HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-15140)

Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to a resource management error that could be exploited by attackers to convince users to engage in specific user interactions to exploit heap corruption via carefully designed HTML pages...