Lucene search
+L

526 matches found

Prion
Prion
added 2022/11/01 8:15 p.m.20 views

Input validation

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

4.3CVSS4.9AI score0.00599EPSS
Exploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/11/01 8:15 p.m.2 views

CVE-2022-3317

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

4.3CVSS6.7AI score0.00599EPSS
Exploits1References3
OSV
OSV
added 2022/11/01 8:15 p.m.2 views

UBUNTU-CVE-2022-3317

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

4.3CVSS6.8AI score0.00599EPSS
Exploits1References2
CVE
CVE
added 2022/11/01 12:0 a.m.96 views

CVE-2022-3317

CVE-2022-3317 refers to Google Chrome on Android with insufficient validation of untrusted input in Intents, allowing a remote attacker to bypass navigation restrictions via a crafted HTML page. The issue affects Chrome on Android prior to version 106.0.5249.62. Root cause per the available docum...

4.3CVSS4.8AI score0.00599EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/11/01 12:0 a.m.22 views

CVE-2022-3317

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

5.4AI score0.00599EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/10/31 12:0 a.m.87 views

GLSA-202210-16 : Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-16 Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities - Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to...

8.8CVSS7.3AI score0.01283EPSS
Exploits6References30
Prion
Prion
added 2022/10/25 5:15 p.m.23 views

Information disclosure

The Tasks.org Android app is an open-source app for to-do lists and reminders. The Tasks.org app uses the activity ShareLinkActivity.kt to handle "share" intents coming from other components in the same device and convert them to tasks. Those intents may contain arbitrary file paths as attachment...

1.7CVSS5.3AI score0.0025EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.9 views

The vulnerability of Intents functions in Microsoft Edge and Google Chrome browsers allows a perpetrator to trigger a service failure.

The vulnerability of Intents functions in Microsoft Edge and Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

4.3CVSS6.7AI score0.00599EPSS
Exploits1References7Affected Software4
OpenVAS
OpenVAS
added 2022/10/12 12:0 a.m.31 views

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Oct 2022)

This host is missing an important security update according to Microsoft Edge Chromium-Based update. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

8.8CVSS7.6AI score0.01283EPSS
Exploits4References2
Veracode
Veracode
added 2022/10/10 8:23 p.m.23 views

Privilege Escalation

chromium is vulnerable to privilege escalation. The vulnerability exists due to an Insufficient validation of untrusted input in Intents allowing a remote attacker to bypass download restrictions via a malicious file...

4.3CVSS6.4AI score0.00599EPSS
Exploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/10/07 3:15 p.m.3 views

CVE-2022-39864

Improper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1.7.89.25 allows attackers to access sensitive information via implicit intent...

7.5CVSS5.8AI score0.00332EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/10/07 12:0 a.m.6 views

PT-2022-25047 · Unknown · Factorycamera

Name of the Vulnerable Software and Affected Versions: FactoryCameraFB versions prior to 3.5.51 Description: The issue is related to improper access control in the CameraTestActivity component of FactoryCameraFB, allowing attackers to access broadcasting Intent with system uid privilege...

7.3CVSS5.4AI score0.00164EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/10/06 12:0 a.m.163 views

Microsoft Edge (Chromium) < 106.0.1370.34 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 106.0.1370.34. It is, therefore, affected by multiple vulnerabilities as referenced in the October 3, 2022 advisory. - Use after free in CSS. CVE-2022-3304 - Use after free in Media. CVE-2022-3307 - Insufficient policy...

8.8CVSS6.7AI score0.00713EPSS
Exploits4References13
Microsoft CVE
Microsoft CVE
added 2022/10/03 7:0 a.m.43 views

Chromium: CVE-2022-3317 Insufficient validation of untrusted input in Intents

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS6AI score0.00599EPSS
Exploits1
OPENSUSE Linux
OPENSUSE Linux
added 2022/10/03 12:0 a.m.43 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10138-1 Rating: important References: 1203808 Cross-References: CVE-2022-3201 CVE-2022-3304 CVE-2022-3305 CVE-2022-3306 CVE-2022-3307 CVE-2022-3308 CVE-2022-3309 CVE-2022-3310 CVE-2022-3311 CVE-2022-3312...

8.8CVSS6.4AI score0.00713EPSS
Exploits6References1
Tenable Nessus
Tenable Nessus
added 2022/09/30 12:0 a.m.130 views

Debian DSA-5244-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5244 advisory. - Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to install...

8.8CVSS7.1AI score0.00616EPSS
Exploits6References35
OpenVAS
OpenVAS
added 2022/09/28 12:0 a.m.32 views

Google Chrome Security Update (stable-channel-update-for-desktop_27-2022-09) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS7.4AI score0.00616EPSS
Exploits6References1
Tenable Nessus
Tenable Nessus
added 2022/09/27 12:0 a.m.48 views

FreeBSD : chromium -- multiple vulnerabilities (18529cb0-3e9c-11ed-9bc7-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 18529cb0-3e9c-11ed-9bc7-3065ec8fd3ec advisory. - Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior t...

8.8CVSS7.1AI score0.00616EPSS
Exploits6References18
OSV
OSV
added 2022/09/26 4:15 p.m.1 views

DEBIAN-CVE-2022-2856

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page...

6.5CVSS6.6AI score0.04493EPSS
Exploits1References1
OSV
OSV
added 2022/09/26 4:15 p.m.8 views

UBUNTU-CVE-2022-2856

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page...

6.5CVSS7.3AI score0.04493EPSS
Exploits1References3
Rows per page
Query Builder