Lucene search
+L

5346 matches found

CNNVD
CNNVD
added 2023/09/05 12:00 a.m.4 views

Google Chrome Security Vulnerability

Google Chrome is a web browser from the American company Google Google. A security vulnerability exists in Google Chrome versions prior to 116.0.5845.179. An attacker can exploit the vulnerability to execute arbitrary code via specially crafted HTML pages...

8.8CVSS7.3AI score0.39933EPSS
SaveExploits2References11
OSV
OSV
added 2023/08/31 2:15 p.m.8 views

CVE-2023-41637

An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted HTML file...

9.8CVSS6.2AI score0.01066EPSS
SaveExploits1References2
OSV
OSV
added 2023/08/29 8:15 p.m.5 views

DEBIAN-CVE-2023-4572

Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.4AI score0.00942EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/08/28 12:00 a.m.11 views

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, arises due to errors in processing hypertext links. This vulnerability allows an intruder to gain unauthorized access to protected information.

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, is related to errors in processing hypertext links. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

4.3CVSS5.5AI score0.00575EPSS
SaveExploits0References2Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/08/28 12:00 a.m.17 views

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, arises due to errors in processing hypertext links. This vulnerability allows a intruder to gain unauthorized access to protected information.

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, is related to errors in processing hypertext links. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

4.3CVSS5.5AI score0.00575EPSS
SaveExploits0References2Affected Software6
OSV
OSV
added 2023/08/25 10:15 p.m.12 views

CVE-2023-41121

Array AG OS before 9.4.0.499 allows denial of service: remote attackers can cause system service processes to crash through abnormal HTTP operations...

7.5CVSS5.9AI score0.0084EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/08/23 12:00 a.m.12 views

The vulnerability of the Google Chrome XML browser component allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Google Chrome XML browser component is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...

7.5CVSS7.6AI score0.47122EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/08/23 12:00 a.m.21 views

The vulnerability of the Fullscreen application interface of Google Chrome’s browser allows a hacker to bypass existing security restrictions.

The vulnerability of the Fullscreen application interface of Google Chrome’s browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions on the browser page through a specially...

5CVSS5.5AI score0.00681EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/08/23 12:00 a.m.20 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML page...

10CVSS8.1AI score0.01841EPSS
SaveExploits2References8Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/08/23 12:00 a.m.16 views

The vulnerability of Google Chrome’s Skia graphic library allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Skia graphics library is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created HTML page...

10CVSS8.4AI score0.01654EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/08/23 12:00 a.m.23 views

The vulnerability of Google Chrome’s Autofill function for Android allows attackers to circumvent existing security restrictions.

The vulnerability of Google Chrome’s Autofill function for Android relates to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created HTML page...

6.5CVSS5.9AI score0.0079EPSS
SaveExploits0References6Affected Software5
Positive Technologies
Positive Technologies
added 2023/08/22 12:00 a.m.14 views

PT-2023-4504 · Google +2 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.110 Description: The issue is related to an out of bounds memory access in V8, allowing a remote attacker to perform an out of bounds memory read via a crafted HTML page. This can potentially impact...

10CVSS6.6AI score0.99979EPSS
SaveExploits132References1124
Amazon
Amazon
added 2023/08/21 12:00 a.m.8 views

Important: containerd

Issue Overview: http2/hpack: avoid quadratic complexity in hpack decoding CVE-2022-41723 Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct...

9.8CVSS7.6AI score0.04561EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/08/17 12:00 a.m.11 views

Juniper Networks Junos OS EX 安全漏洞

Juniper Networks Junos OS EX is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS EX, which is caused by a PHP external variab...

5.3CVSS7.2AI score0.91357EPSS
SaveExploits6References6
SUSE CVE
SUSE CVE
added 2023/08/16 2:21 a.m.7 views

SUSE CVE-2023-4364

Inappropriate implementation in Permission Prompts in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS8.5AI score0.00681EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/08/16 2:21 a.m.6 views

SUSE CVE-2023-4367

Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS8.5AI score0.0064EPSS
SaveExploits0References5
OSV
OSV
added 2023/08/15 6:15 p.m.2 views

DEBIAN-CVE-2023-4363

Inappropriate implementation in WebShare in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to spoof the contents of a dialog URL via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS4.9AI score0.00681EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/15 6:15 p.m.2 views

DEBIAN-CVE-2023-4360

Inappropriate implementation in Color in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS4.8AI score0.00681EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/08/15 12:00 a.m.12 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google Inc. in the United States. A security vulnerability exists in Google Chrome prior to version 116.0.5845.96, which stems from an inadequate enforcement of Extensions API policies, allowing remote attackers to bypass corporate policies via a crafted HTML...

6.5CVSS7.6AI score0.0064EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2023/08/15 12:00 a.m.9 views

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in versions of Google Chrome prior to 116.0.5845.96, which stems from a boundary error in Skia when handling untrusted input, and can be exploited by a remote attacker to corrupt the renderer...

8.8CVSS7AI score0.01654EPSS
SaveExploits0References11
Rows per page
Query Builder