Lucene search
+L

87 matches found

BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•20 views

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

The Google Chrome browser contains a vulnerability related to memory reuse after deallocation use-after-free error in the browser/ui/views/speechrecognitionbubbleviews.cc file. Exploiting this vulnerability allows malicious actors to remotely cause system failures or other adverse effects through...

7.5CVSS7.7AI score0.01623EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2016/04/12 5:59 p.m.•29 views

CVE-2015-7520

Multiple cross-site scripting XSS vulnerabilities in the 1 RadioGroup and 2 CheckBoxMultipleChoice classes in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 allow remote attackers to inject arbitrary web script or HTML via a crafted "value" attribute in a element...

6.1CVSS6AI score0.05188EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2016/04/12 5:00 p.m.•38 views

CVE-2015-7520

Multiple cross-site scripting XSS vulnerabilities in the 1 RadioGroup and 2 CheckBoxMultipleChoice classes in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 allow remote attackers to inject arbitrary web script or HTML via a crafted "value" attribute in a element...

6AI score0.05188EPSS
SaveExploits0References2
CNVD
CNVD
•added 2015/03/09 12:00 a.m.•17 views

Google Chrome Blink Memory Misreference Vulnerability (CNVD-2015-01547)

Google Chrome is a web browsing tool developed by Google. A post-release reuse vulnerability exists in the core/html/HTMLInputElement.cpp file in the DOM implementation of Blink used in versions prior to Google Chrome 41.0.2272.76. A remote attacker can exploit this vulnerability to cause a denia...

7.5CVSS6.7AI score0.01851EPSS
SaveExploits0References1
OSV
OSV
•added 2015/03/08 12:00 a.m.•12 views

UBUNTU-CVE-2015-1223

Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change...

7.5CVSS7.4AI score0.01851EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2015/03/05 1:59 p.m.•13 views

chromium-browser: Use-after-free in dom

Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change...

7.5CVSS7.5AI score0.01851EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2014/08/12 12:00 a.m.•56 views

Microsoft Internet Explorer CInput onfocus Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

9.3CVSS7.6AI score0.16528EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2014/05/21 10:00 a.m.•58 views

CVE-2014-3803

Removed by vendor...

4.3CVSS9AI score0.01369EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/05/21 12:00 a.m.•4 views

CVE-2014-3803: Exposure of Sensitive Information to an Unauthorized Actor

The SpeechInput feature in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to enable microphone access and obtain speech-recognition text without indication via an INPUT element with a -x-webkit-speech attribute...

4.3CVSS5.9AI score0.01369EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2014/01/16 12:17 p.m.•38 views

CVE-2013-6645

Use-after-free vulnerability in the OnWindowRemovingFromRootWindow function in content/browser/webcontents/webcontentsviewaura.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows user-assisted remote attackers to cause a denial of service or...

6.8CVSS7.3AI score0.01311EPSS
SaveExploits1References5
Prion
Prion
•added 2014/01/16 12:17 p.m.•28 views

Design/Logic Flaw

Use-after-free vulnerability in the OnWindowRemovingFromRootWindow function in content/browser/webcontents/webcontentsviewaura.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows user-assisted remote attackers to cause a denial of service or...

6.8CVSS7.6AI score0.01311EPSS
SaveExploits1References6Affected Software3
UbuntuCve
UbuntuCve
•added 2013/11/13 3:55 p.m.•34 views

CVE-2013-6621

Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the x-webkit-speech attribute in a text INPUT element...

7.5CVSS7.2AI score0.0177EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2013/05/27 12:00 a.m.•33 views

Mozilla Firefox Multiple Vulnerabilities -01 May13 (Windows)

This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxmultvuln01may13win.nasl 6104 2017-05-11 09:03:48Z teissa $ Mozilla Firefox Multiple Vulnerabilities -01 May13 Windows Authors: Arun Kallavi Copyright: Copyright c...

10CVSS0.6AI score0.10893EPSS
SaveExploits5References3
OpenVAS
OpenVAS
•added 2013/05/27 12:00 a.m.•31 views

Mozilla Firefox Multiple Vulnerabilities -01 (May 2013) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.2AI score0.10893EPSS
SaveExploits5References19
NVD
NVD
•added 2013/05/16 11:45 a.m.•24 views

CVE-2013-1671

Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site...

4.3CVSS6.2AI score0.01041EPSS
SaveExploits0References6
Prion
Prion
•added 2013/05/16 11:45 a.m.•18 views

Input validation

Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site...

4.3CVSS6.7AI score0.01041EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2013/05/16 10:00 a.m.•37 views

CVE-2013-1671

Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site...

6AI score0.01041EPSS
SaveExploits0References6
CVE
CVE
•added 2013/05/16 10:00 a.m.•149 views

CVE-2013-1671

CVE-2013-1671 affects Mozilla Firefox prior to 21.0. The vulnerability arises in the handling of the INPUT/file input element, allowing a remote site to obtain the full local path of a file chosen via the element. This can lead to partial confidentiality impact as described in MFSA 2013-43. The i...

4.3CVSS8.1AI score0.01041EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/05/16 12:00 a.m.•2 views

CVE-2013-1671: Improper Input Validation

Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site...

4.3CVSS6AI score0.01041EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2013/05/14 12:00 a.m.•32 views

CVE-2013-1671

Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site...

4.3CVSS8.1AI score0.01041EPSS
SaveExploits0References3
Rows per page
Query Builder