431 matches found
UBUNTU-CVE-2021-33192
A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...
Design/Logic Flaw
A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...
CVE-2021-33192
A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...
CVE-2021-33192
CVE-2021-33192 is an HTML page cross-site scripting (XSS) vulnerability in Apache Jena Fuseki. The issue allows an attacker to execute arbitrary JavaScript on certain page views and affects Fuseki versions 2.0.0 through 4.0.0 (inclusive). The vulnerability is described as an HTML page vulnerabili...
CVE-2021-33192
A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...
CVE-2021-33192 Display information UI XSS
A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...
Google Chrome Type Obfuscation Vulnerability (CNVD-2021-35163)
Google Chrome is a web browser from Google, an American company. A type obfuscation vulnerability exists in V8 in versions of Google Chrome prior to 90.0.4430.93. A remote attacker can exploit the vulnerability by leveraging heap corruption via specially crafted HTML pages...
Google Chrome UI Download Security Bypass Vulnerability
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions of Google Chrome prior to 90.0.4430.93. A remote attacker can exploit the vulnerability to perform domain spoofing via specially crafted HTML pages...
Google Chrome 访问控制错误漏洞
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions of Google Chrome prior to 90.0.4430.93. A remote attacker can exploit the vulnerability to perform domain spoofing via specially crafted HTML pages...
Unspecified Vulnerability in Google Chrome (CNVD-2021-34543)
Chrome is a web browsing tool developed by Google. A security vulnerability exists in Google Chrome versions prior to 90.0.4430.72. A remote attacker can leak cross-origin data through a carefully crafted HTML page...
PT-2021-8116 · Google +1 · Google Chrome +1
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to an inappropriate implementation in Compositing, which can allow a remote attacker to perform UI spoofing via a crafted HTML page. This could be achieved by...
Fedora 33 : chromium (2021-aa764a8531)
The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-aa764a8531 advisory. - Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory...
Fedora 32 : chromium (2021-d9faeff8eb)
The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-d9faeff8eb advisory. - Out of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HT...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in "Drag and Drop" in Google Chrome prior to version 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...
Google Chrome memory misreference vulnerability (CNVD-2021-04417)
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in "Safe Browsing" in Google Chrome versions prior to 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...
[ASA-202011-4] matrix-synapse: cross-site scripting
Arch Linux Security Advisory ASA-202011-4 ========================================= Severity: High Date : 2020-11-03 CVE-ID : CVE-2020-26891 Package : matrix-synapse Type : cross-site scripting Remote : Yes Link : https://security.archlinux.org/AVG-1252 Summary ======= The package matrix-synapse...
Google Chrome Mojo Race Competitive Conditions Issue Vulnerability
Google Chrome is the United States Google Google company a Web browser. Mojo is one of the Mojo Maven plain Old Java Object plug-ins. A competitive conditions issue vulnerability exists in Race in Mojo in versions of Google Chrome prior to 85.0.4183.102. A remote attacker can exploit this...
Sharpshooter HTML Remote Code Execution
Sharpshooter is a tool to create HTA payloads and inject them to HTML Pages using JS. This tool may be used by attackers to remotely execute arbitrary code on the affected system...
Demiguise HTML Remote Code Execution
Demiguise is a tool to inject malicious payload in HTA format to HTML Pages using JS. This tool may be used by attackers to remotely execute arbitrary code on the affected system...
Google Chrome video resource management error vulnerability
Google Chrome is a web browser from Google, an American company. A resource management error vulnerability exists in Android-based Google Chrome versions prior to 85.0.4183.102video, which allows remote attackers to perform sandbox escaping via specially crafted HTML pages...