The vulnerability of Google Chrome’s API interface allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Google Chrome’s browser API is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafted HTML page...

Telesquare TLR-2005KSH 安全漏洞

Telesquare Tlr-2005Ksh is a Sk Telecom Lte router from Telesquare Korea.Telesquare TLR-2005KSH is vulnerable to an access control error, which can be exploited by attackers to upload arbitrary files, including HTML and CGI formats...

The vulnerability of Google Chrome’s Navigation function, related to a lack of mechanism for verifying the source, allows attackers to manipulate the content of the address bar.

The vulnerability of Google Chrome’s Navigation function is related to a lack of mechanisms for verifying the source of the content. Exploiting this vulnerability could allow a malicious actor to manipulate the URL input by using a specially created HTML page...

The vulnerability of Google Chrome’s cookie handling mechanism, related to authentication errors, allows a violator to circumvent existing access restrictions policies.

The vulnerability of Google Chrome’s cookie handling mechanism is related to authentication errors. Exploiting this vulnerability allows a remote attacker to circumvent existing policies regarding access restrictions for HTML elements through a specially created HTML page...

CVE-2021-38021

Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

The vulnerability of the Mojo messaging library in Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Mojo messaging library in Microsoft Edge and Google Chrome lies in the insufficient validation of input data during the processing of HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicious web...

The vulnerability of the Google Chrome browser’s Media component, caused by a numerical overflow, allows a malicious actor to trigger an overflow in the buffer through a specially created HTML page.

The vulnerability of the Google Chrome browser’s Media component is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to trigger the overflow by using a specially created HTML page...

The vulnerability of Google Chrome’s WebView component allows a hacker to bypass existing security restrictions by using a specially created HTML page.

The vulnerability of Google Chrome’s WebView component is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created HTML page...

sqlite: dropping of shadow tables not restricted in defensive mode

Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page...

The vulnerability of Google Chrome’s browser loading function, related to memory usage after it is released, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s web browser loading function is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a specially created...

Google Chrome 安全特征问题漏洞

Chrome is a web browsing tool developed by Google. versions prior to Google Chrome 95.0.4638.54 are vulnerable to an improper Blink implementation. An attacker could exploit this vulnerability to abuse content security policies via crafted HTML pages...

Google Chrome 资源管理错误漏洞

Chrome is a web browsing tool developed by Google. a post-release reuse vulnerability exists in Profiles in versions prior to Google Chrome 95.0.4638.54. A remote attacker exploited this vulnerability to potentially exploit heap corruption via a crafted HTML page...

Google Chrome 资源管理错误漏洞

Chrome is a simple and efficient web browsing tool developed by Google. a post-release reuse vulnerability exists in V8 in versions prior to Google Chrome 94.0.4606.71. An attacker could exploit this vulnerability to potentially cause heap corruption via a crafted HTML page...

JEESNS 跨站脚本漏洞

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the header...

JEESNS 跨站脚本漏洞

JEESNS is a social management system developed on the JAVA enterprise platform. An attacker can use this vulnerability to execute arbitrary Web scripts or HTML...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation, U.S. A buffer overflow vulnerability exists in Mozilla Firefox, which stems from a boundary error in the product's handling of HTML content. A remote attacker could exploit the vulnerability to create a specially crafted W...

UBUNTU-CVE-2021-30596

Incorrect security UI in Navigation in Google Chrome on Android prior to 92.0.4515.131 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

Microsoft Edge 资源管理错误漏洞

Chrome is a web browsing tool developed by Google. A post-release reuse vulnerability exists in WebRTC in versions of Google Chrome prior to 92.0.4515.159. An attacker could exploit this vulnerability to potentially cause heap corruption via a crafted HTML page...

The vulnerability of the Mozilla Firefox browser, which allows a hacker to execute arbitrary code on the target system

The vulnerability of the Mozilla Firefox browser is related to a boundary error in the processing of HTML content. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely, as well as cause memory corruption...

The vulnerability of the library for performing fast, customizable HTML AntiSamy cleanup, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the library for performing a quick, customizable cleanup of HTML files related to AntiSamy is linked to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to carry out cross-site scripting attacks...