Lucene search
+L

793 matches found

CNNVD
CNNVD
added 2022/01/19 12:0 a.m.3 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome, which can be exploited by remote attackers to potentially exploit heap corruption via well-designed HTML pages...

8.8CVSS8.4AI score0.28196EPSS
SaveExploits0References14
CNNVD
CNNVD
added 2022/01/19 12:0 a.m.8 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A buffer overflow vulnerability exists in Google Chrome, which could be exploited by attackers to convince users to install malicious extensions to potentially exploit heap corruption via well-designed HTML pages...

7.8CVSS8.6AI score0.00454EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2022/01/19 12:0 a.m.8 views

Google Chrome 安全特征问题漏洞

Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to a security feature issue that could be exploited by attackers to bypass navigation restrictions via crafted HTML pages...

6.5CVSS8.3AI score0.00644EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2022/01/19 12:0 a.m.8 views

Google Chrome 安全特征问题漏洞

Google Chrome is a web browser from Google, Inc. A security feature vulnerability exists in Google Chrome that could be exploited by attackers to bypass site quarantine via crafted HTML pages...

6.5CVSS8.2AI score0.00626EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2022/01/19 12:0 a.m.6 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a resource management error vulnerability that can be exploited by an attacker to leverage heap corruption via a crafted HTML page...

8.8CVSS8.3AI score0.0075EPSS
SaveExploits0References13
BDU FSTEC
BDU FSTEC
added 2022/01/10 12:0 a.m.9 views

The vulnerability of Google Chrome’s API interface allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Google Chrome’s browser API is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafted HTML page...

7.5CVSS7.7AI score0.02073EPSS
SaveExploits0References10Affected Software5
CNNVD
CNNVD
added 2022/01/03 12:0 a.m.11 views

Telesquare TLR-2005KSH 安全漏洞

Telesquare Tlr-2005Ksh is a Sk Telecom Lte router from Telesquare Korea.Telesquare TLR-2005KSH is vulnerable to an access control error, which can be exploited by attackers to upload arbitrary files, including HTML and CGI formats...

9.8CVSS5.7AI score0.56931EPSS
SaveExploits5References5
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.10 views

The vulnerability of Google Chrome’s Navigation function, related to a lack of mechanism for verifying the source, allows attackers to manipulate the content of the address bar.

The vulnerability of Google Chrome’s Navigation function is related to a lack of mechanisms for verifying the source of the content. Exploiting this vulnerability could allow a malicious actor to manipulate the URL input by using a specially created HTML page...

4.3CVSS5.8AI score0.01718EPSS
SaveExploits1References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.11 views

The vulnerability of Google Chrome’s cookie handling mechanism, related to authentication errors, allows a violator to circumvent existing access restrictions policies.

The vulnerability of Google Chrome’s cookie handling mechanism is related to authentication errors. Exploiting this vulnerability allows a remote attacker to circumvent existing policies regarding access restrictions for HTML elements through a specially created HTML page...

4.3CVSS6.7AI score0.01143EPSS
SaveExploits1References12Affected Software8
ATTACKERKB
ATTACKERKB
added 2021/12/23 1:15 a.m.6 views

CVE-2021-38021

Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

6.5CVSS6.9AI score0.00788EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.8 views

The vulnerability of the Mojo messaging library in Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Mojo messaging library in Microsoft Edge and Google Chrome lies in the insufficient validation of input data during the processing of HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicious web...

10CVSS8AI score0.00645EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.14 views

The vulnerability of Google Chrome’s WebView component allows a hacker to bypass existing security restrictions by using a specially created HTML page.

The vulnerability of Google Chrome’s WebView component is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created HTML page...

6.5CVSS6.8AI score0.03718EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.9 views

The vulnerability of the Google Chrome browser’s Media component, caused by a numerical overflow, allows a malicious actor to trigger an overflow in the buffer through a specially created HTML page.

The vulnerability of the Google Chrome browser’s Media component is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to trigger the overflow by using a specially created HTML page...

6.5CVSS6.9AI score0.01335EPSS
SaveExploits0References10Affected Software6
RedHat Linux
RedHat Linux
added 2021/11/09 5:55 p.m.8 views

sqlite: dropping of shadow tables not restricted in defensive mode

Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page...

6.5CVSS7.4AI score0.02207EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.8 views

The vulnerability of Google Chrome’s browser loading function, related to memory usage after it is released, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s web browser loading function is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a specially created...

8.8CVSS7.6AI score0.01173EPSS
SaveExploits0References11Affected Software5
CNNVD
CNNVD
added 2021/10/19 12:0 a.m.6 views

Google Chrome 安全特征问题漏洞

Chrome is a web browsing tool developed by Google. versions prior to Google Chrome 95.0.4638.54 are vulnerable to an improper Blink implementation. An attacker could exploit this vulnerability to abuse content security policies via crafted HTML pages...

6.5CVSS5.6AI score0.00797EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2021/10/19 12:0 a.m.5 views

Google Chrome 资源管理错误漏洞

Chrome is a web browsing tool developed by Google. a post-release reuse vulnerability exists in Profiles in versions prior to Google Chrome 95.0.4638.54. A remote attacker exploited this vulnerability to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS5.7AI score0.00827EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2021/09/30 12:0 a.m.10 views

Google Chrome 资源管理错误漏洞

Chrome is a simple and efficient web browsing tool developed by Google. a post-release reuse vulnerability exists in V8 in versions prior to Google Chrome 94.0.4606.71. An attacker could exploit this vulnerability to potentially cause heap corruption via a crafted HTML page...

8.8CVSS8.4AI score0.34887EPSS
SaveExploits0References15
CNNVD
CNNVD
added 2021/09/09 12:0 a.m.8 views

JEESNS 跨站脚本漏洞

JEESNS is a social management system developed on the JAVA enterprise platform. An attacker can use this vulnerability to execute arbitrary Web scripts or HTML...

6.1CVSS6AI score0.02633EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/09/09 12:0 a.m.8 views

JEESNS 跨站脚本漏洞

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the header...

5.4CVSS6AI score0.00687EPSS
SaveExploits1References3
Rows per page
Query Builder