Lucene search
+L

431 matches found

OSV
OSV
added 2021/07/05 10:15 a.m.7 views

UBUNTU-CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

6.1CVSS6AI score0.02881EPSS
SaveExploits0References3
Prion
Prion
added 2021/07/05 10:15 a.m.20 views

Design/Logic Flaw

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

4.3CVSS6.5AI score0.02881EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2021/07/05 10:15 a.m.23 views

CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

6.1CVSS6.6AI score0.02881EPSS
SaveExploits0References2
CVE
CVE
added 2021/07/05 9:15 a.m.98 views

CVE-2021-33192

CVE-2021-33192 is an HTML page cross-site scripting (XSS) vulnerability in Apache Jena Fuseki. The issue allows an attacker to execute arbitrary JavaScript on certain page views and affects Fuseki versions 2.0.0 through 4.0.0 (inclusive). The vulnerability is described as an HTML page vulnerabili...

6.1CVSS6.5AI score0.02881EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2021/07/05 9:15 a.m.65 views

CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

6.1CVSS6.6AI score0.02881EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/07/05 9:15 a.m.32 views

CVE-2021-33192 Display information UI XSS

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

6.7AI score0.02881EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/04/27 12:0 a.m.22 views

Google Chrome Type Obfuscation Vulnerability (CNVD-2021-35163)

Google Chrome is a web browser from Google, an American company. A type obfuscation vulnerability exists in V8 in versions of Google Chrome prior to 90.0.4430.93. A remote attacker can exploit the vulnerability by leveraging heap corruption via specially crafted HTML pages...

8.8CVSS6.4AI score0.01601EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/04/27 12:0 a.m.30 views

Google Chrome UI Download Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions of Google Chrome prior to 90.0.4430.93. A remote attacker can exploit the vulnerability to perform domain spoofing via specially crafted HTML pages...

6.5CVSS6.1AI score0.0085EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/26 12:0 a.m.10 views

Google Chrome 访问控制错误漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions of Google Chrome prior to 90.0.4430.93. A remote attacker can exploit the vulnerability to perform domain spoofing via specially crafted HTML pages...

6.5CVSS5.7AI score0.0085EPSS
SaveExploits0References15
CNVD
CNVD
added 2021/04/16 12:0 a.m.13 views

Unspecified Vulnerability in Google Chrome (CNVD-2021-34543)

Chrome is a web browsing tool developed by Google. A security vulnerability exists in Google Chrome versions prior to 90.0.4430.72. A remote attacker can leak cross-origin data through a carefully crafted HTML page...

6.5CVSS6AI score0.01009EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/03/17 12:0 a.m.8 views

PT-2021-8116 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to an inappropriate implementation in Compositing, which can allow a remote attacker to perform UI spoofing via a crafted HTML page. This could be achieved by...

8.8CVSS6AI score0.07094EPSS
SaveExploits4References52
Tenable Nessus
Tenable Nessus
added 2021/03/01 12:0 a.m.42 views

Fedora 33 : chromium (2021-aa764a8531)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-aa764a8531 advisory. - Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory...

9.6CVSS8.5AI score0.09458EPSS
SaveExploits8References10
Tenable Nessus
Tenable Nessus
added 2021/01/25 12:0 a.m.40 views

Fedora 32 : chromium (2021-d9faeff8eb)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-d9faeff8eb advisory. - Out of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HT...

9.6CVSS8.9AI score0.03095EPSS
SaveExploits0References14
CNNVD
CNNVD
added 2021/01/07 12:0 a.m.13 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in "Drag and Drop" in Google Chrome prior to version 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

9.6CVSS7.3AI score0.01117EPSS
SaveExploits0References11
CNVD
CNVD
added 2021/01/07 12:0 a.m.9 views

Google Chrome memory misreference vulnerability (CNVD-2021-04417)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in "Safe Browsing" in Google Chrome versions prior to 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

9.6CVSS8.9AI score0.03095EPSS
SaveExploits0References1
ArchLinux
ArchLinux
added 2020/11/03 12:0 a.m.24 views

[ASA-202011-4] matrix-synapse: cross-site scripting

Arch Linux Security Advisory ASA-202011-4 ========================================= Severity: High Date : 2020-11-03 CVE-ID : CVE-2020-26891 Package : matrix-synapse Type : cross-site scripting Remote : Yes Link : https://security.archlinux.org/AVG-1252 Summary ======= The package matrix-synapse...

6.1CVSS3AI score0.01931EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/10/21 12:0 a.m.7 views

Google Chrome Mojo Race Competitive Conditions Issue Vulnerability

Google Chrome is the United States Google Google company a Web browser. Mojo is one of the Mojo Maven plain Old Java Object plug-ins. A competitive conditions issue vulnerability exists in Race in Mojo in versions of Google Chrome prior to 85.0.4183.102. A remote attacker can exploit this...

8.3CVSS9AI score0.01365EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2020/09/15 12:0 a.m.2 views

Sharpshooter HTML Remote Code Execution

Sharpshooter is a tool to create HTA payloads and inject them to HTML Pages using JS. This tool may be used by attackers to remotely execute arbitrary code on the affected system...

4.2AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2020/09/10 12:0 a.m.2 views

Demiguise HTML Remote Code Execution

Demiguise is a tool to inject malicious payload in HTA format to HTML Pages using JS. This tool may be used by attackers to remotely execute arbitrary code on the affected system...

4.1AI score
SaveExploits0
CNVD
CNVD
added 2020/09/09 12:0 a.m.4 views

Google Chrome video resource management error vulnerability

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability exists in Android-based Google Chrome versions prior to 85.0.4183.102video, which allows remote attackers to perform sandbox escaping via specially crafted HTML pages...

9.6CVSS9AI score0.01769EPSS
SaveExploits0References1
Rows per page
Query Builder