CVE-2021-44278

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

CVE-2021-44278

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

CVE-2021-44278

Librenms 21.11.0 is affected by a path traversal vulnerability in includes/html/pages/device/showconfig.inc.php, enabling manipulation of the requested path to access files outside the intended directory. Multiple connected advisories (GHSA-7289-CHWJ-7H86, OSV:GHSA-7289-CHWJ-7H86, CNVD/CNNVD, Ver...

Google Chrome has an unspecified vulnerability (CNVD-2021-92469)

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in versions of Google Chrome prior to 95.0.4638.69, which stems from insufficient Autofill policy enforcement. An attacker could exploit this vulnerability to leak cross-source data via specially crafted HTML pages...

WordPress plugin WP Guppy sensitive information leakage vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up websites on servers that support PHP and MySQL databases, or as a content management system CMS. a sensitive information disclosure vulnerability exists in the WordPress plugin WP Guppy. An attacker can exploi...

Google Chrome WebAuthentication Misimplementation Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google. A WebAuthentication mal-implementation vulnerability exists in versions of Google Chrome prior to 96.0.4664.45. An attacker could exploit this vulnerability to leak cross-origin data via a crafted HTML page...

Google Chrome under-validation vulnerability for untrusted inputs

Chrome, a simple and efficient web browsing tool developed by Google, is vulnerable to insufficient validation of untrusted input in Intents in versions prior to Google Chrome 95.0.4638.69. A remote attacker could exploit this vulnerability to arbitrarily browse malicious URLs via crafted HTML...

How we took part in MLSEC and (almost) won

This summer Kaspersky experts took part in the Machine Learning Security Evasion Competition MLSEC — a series of trials testing contestants ability to create and attack machine learning models. The event is comprised of two main challenges — one for attackers, and the other for defenders. The...

Google Chrome iFrame Sandbox improperly implemented vulnerability

Chrome is a web browsing tool developed by Google. iFrame Sandbox is improperly implemented in versions prior to Google Chrome 95.0.4638.54. An attacker could exploit this vulnerability to bypass navigation restrictions via crafted HTML pages...

Google Chrome Blink improperly implemented vulnerability (CNVD-2021-84806)

Chrome is a web browsing tool developed by Google. versions prior to Google Chrome 95.0.4638.54 are vulnerable to an improper Blink implementation. An attacker could exploit this vulnerability to abuse content security policies via crafted HTML pages...

Google Chrome 访问控制错误漏洞

Google Chrome is a simple and efficient web browsing tool developed by Google. 93.0.4577.82 and earlier versions of Google Chrome contain a Blink implementation vulnerability. An attacker could exploit this vulnerability to leak cross-source data via crafted HTML pages...

PT-2021-6359

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 97.0.4692.71 Description The issue is related to an inappropriate implementation in the File System API of Google Chrome on Windows, allowing a remote attacker to obtain potentially sensitive information via a...

GHSA-PHWJ-86VX-CFJC Cross-site scripting in Apache Jena Fuseki

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

Google Chrome V8 Type Obfuscation Vulnerability (CNVD-2021-60535)

Google Chrome is a web browser from Google, Inc. Google Chrome V8 has a security vulnerability that could be exploited by remote attackers to conduct potential attacks via specially crafted HTML pages using heap corruption...

Google Chrome buffer overflow vulnerability

Google Chrome is a web browser from Google, Inc. Google Chrome 91.0.4472.164 previously contained a buffer overflow vulnerability that could be exploited by remote attackers to cause heap corruption via crafted HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2021-68462)

Google Chrome is a web browser from Google, Inc. Google Chrome 91.0.4472.164 was previously vulnerable to resource management errors that could be exploited by remote attackers to cause heap corruption via crafted HTML pages...

Denial Of Service

WebGL is vulnerable to denial of service. The vulnerability exists due to a heap corruption via a crafted HTML page...

DEBIAN-CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...