5353 matches found
The vulnerability of Google Chrome browser developer tools allows a hacker to compromise data integrity.
The vulnerability of Google Chrome browser developer tools is related to improper control over access to critical resources. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...
The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.
The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially crafted HTML page...
The vulnerability of Google Chrome browsers, related to memory usage after deallocation, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.
The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability through a specially created HTML page...
The vulnerability in the user interface of Google Chrome’s Chromium browser allows a hacker to compromise data integrity.
The vulnerability of Google Chrome’s Chromium user interface is related to improper control over access to critical resources. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...
The vulnerability in the implementation of the WebRTC protocol in Google Chrome browser allows a perpetrator to gain unauthorized access to information and compromise its integrity and accessibility.
The vulnerability of the WebRTC protocol implementation in Google Chrome browser relates to the use of memory after deallocation. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to information and compromise its integrity and accessibility...
The vulnerability of Google Chrome’s JavaScript script handlers, which allows attackers to trigger a service failure.
The vulnerability of Google Chrome’s JavaScript script handler is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...
The vulnerability of the Omnibox address bar in Google Chrome browser tools allows attackers to compromise data integrity.
The vulnerability of the Omnibox address bar in Google Chrome browser tools is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially created HTML page...
MayiCMS has a flawed logic vulnerability
MayiCMS is a php mysql based website builder. MayiCMS suffers from a logic flaw vulnerability that can be exploited by attackers to perform unauthorized operations...
CVE-2020-7113
A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to intercept and change parameters in the HTTP packets resulting in the compromise of some of ClearPass' service accounts. Resolution: Fixed in 6.7.10, 6.8.1, 6.9.0 and higher...
chromium-browser: Out of bounds read in WebSQL
Out of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
chromium-browser: Inappropriate implementation in cache
Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
chromium-browser: Type Confusion in V8
Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
chromium-browser: Insufficient policy enforcement in navigations
Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page...
The vulnerability of the PHP interpreter, related to key management errors, allows attackers to gain unauthorized access to protected information.
The vulnerability of the PHP interpreter is related to key management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2020-2866
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2020-2837
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing...
CVE-2020-2810
Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore...
CVE-2019-2880
Vulnerability in the Oracle Retail Store Inventory Management product of Oracle Retail Applications component: Security. The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Store...
UBUNTU-CVE-2020-2778
Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability...
SAP Business Objects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2020-23029)
SAP Business Objects Business Intelligence Platform Web Intelligence HTML interface version 4.2 does not adequately encode user-controlled input, resulting in a cross-site scripting XSS vulnerability. The cross-site scripting vulnerability exists in SAP Business Objects Business Intelligence...