Lucene search
+L

5162 matches found

Cvelist
Cvelist
added 2023/11/15 5:19 p.m.44 views

CVE-2023-6112

Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

9.1AI score0.24743EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2023/11/15 1:59 a.m.4 views

SUSE CVE-2023-6112

Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.2AI score0.24743EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2023/11/14 12:00 a.m.55 views

Google Chrome < 119.0.6045.159 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 119.0.6045.159. It is, therefore, affected by multiple vulnerabilities as referenced in the 202311stable-channel-update-for-desktop14 advisory. - Use after free in Navigation in Google Chrome prior to 119.0.6045.159...

8.8CVSS8.3AI score0.24743EPSS
SaveExploits0References5
FreeBSD
FreeBSD
added 2023/11/14 12:00 a.m.37 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 4 security fixes: 1497997 High CVE-2023-5997: Use after free in Garbage Collection. Reported by Anonymous on 2023-10-31 1499298 High CVE-2023-6112: Use after free in Navigation. Reported by Sergei Glazunov of Google Project Zero on 2023-11-04...

8.8CVSS7.6AI score0.24743EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/14 12:00 a.m.9 views

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome versions prior to 119.0.6045.159, which originates from a post-release reuse vulnerability in Navigation...

8.8CVSS6.5AI score0.24743EPSS
SaveExploits0References5
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2023/11/14 12:00 a.m.102 views

Stable Channel Update for Desktop

The Stable channel has been updated to 119.0.6045.159 for Mac and Linux and 119.0.6045.159/.160 for Windows, which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

8.8CVSS9.3AI score0.24743EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/14 12:00 a.m.9 views

PT-2023-7066 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.159 Microsoft Edge affected versions not specified Description: The issue is related to a use after free vulnerability in the Navigation component of Google Chrome and Microsoft Edge browsers. This...

10CVSS6.8AI score0.99979EPSS
SaveExploits129References1103
Tenable Nessus
Tenable Nessus
added 2023/11/07 12:00 a.m.28 views

Fedora 39 : chromium (2023-0b39dc9302)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0b39dc9302 advisory. update to 118.0.5993.117. Security release for CVE-2023-5472 ---- Update to 118.0.5993.88 ---- Update to 118.0.5993.70. Include following security...

8.8CVSS7.4AI score0.01755EPSS
SaveExploits0References17
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:00 a.m.35 views

Rocky Linux 8 : firefox (RLSA-2021:5013)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:5013 advisory. - Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported...

9.8CVSS7.8AI score0.0202EPSS
SaveExploits1References21
WPVulnDB
WPVulnDB
added 2023/11/06 12:00 a.m.25 views

Bookly < 22.5 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC 1. As an admin user, visit the...

4.8CVSS4.8AI score0.00451EPSS
SaveExploits2Affected Software1
wpexploit
wpexploit
added 2023/11/06 12:00 a.m.151 views

Bookly < 22.5 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. As an admin user, visit the Bookly...

4.8CVSS4.8AI score0.00451EPSS
SaveExploits2
CNNVD
CNNVD
added 2023/11/01 12:00 a.m.12 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the gnss service. An attacker can exploit this vulnerability to escalate privileges...

4.4CVSS7.2AI score0.00086EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/10/30 12:00 a.m.28 views

openSUSE 15 Security Update : opera (openSUSE-SU-2023:0338-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0338-1 advisory. - Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a...

8.8CVSS7.5AI score0.01301EPSS
SaveExploits0References29
OSV
OSV
added 2023/10/27 6:15 p.m.8 views

CVE-2023-5827

A vulnerability was found in Shanghai CTI Navigation CTI Monitoring and Early Warning System 2.2. It has been classified as critical. This affects an unknown part of the file /Web/SysManage/UserEdit.aspx. The manipulation of the argument ID leads to sql injection. The exploit has been disclosed t...

9.8CVSS5.6AI score0.00684EPSS
SaveExploits1References3
Prion
Prion
added 2023/10/27 6:15 p.m.24 views

Sql injection

A vulnerability was found in Shanghai CTI Navigation CTI Monitoring and Early Warning System 2.2. It has been classified as critical. This affects an unknown part of the file /Web/SysManage/UserEdit.aspx. The manipulation of the argument ID leads to sql injection. The exploit has been disclosed t...

5.2CVSS9.7AI score0.00684EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/10/27 5:31 p.m.32 views

CVE-2023-5827 Shanghai CTI Navigation CTI Monitoring and Early Warning System UserEdit.aspx sql injection

A vulnerability was found in Shanghai CTI Navigation CTI Monitoring and Early Warning System 2.2. It has been classified as critical. This affects an unknown part of the file /Web/SysManage/UserEdit.aspx. The manipulation of the argument ID leads to sql injection. The exploit has been disclosed t...

5.5CVSS9.9AI score0.00684EPSS
SaveExploits1References3
CVE
CVE
added 2023/10/27 5:31 p.m.51 views

CVE-2023-5827

CVE-2023-5827 affects Shanghai CTI Navigation CTI Monitoring and Early Warning System 2.2. The vulnerability is in the file /Web/SysManage/UserEdit.aspx, where manipulating the ID parameter leads to a SQL injection. Several connected sources corroborate a critical impact with public disclosure of...

9.8CVSS7.8AI score0.00684EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/27 5:31 p.m.2 views

CVE-2023-5827 Shanghai CTI Navigation CTI Monitoring and Early Warning System UserEdit.aspx sql injection

A vulnerability was found in Shanghai CTI Navigation CTI Monitoring and Early Warning System 2.2. It has been classified as critical. This affects an unknown part of the file /Web/SysManage/UserEdit.aspx. The manipulation of the argument ID leads to sql injection. The exploit has been disclosed t...

5.5CVSS7.6AI score0.00684EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/10/27 12:00 a.m.9 views

Monitoring and Early Warning System Security Vulnerability

Monitoring and Early Warning System is a monitoring and early warning system of Shanghai CTI Navigation Technology Co. A security vulnerability exists in version 2.2 of the Shanghai CTI Navigation CTI Monitoring and Early Warning System, which originates from a parameter ID in the file...

9.8CVSS7.4AI score0.00684EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2023/10/23 12:00 a.m.23 views

Jira Server/Data Center STAGIL Navigation plugin Path Traversal CVE-2023-26255

Binary data jiraCVE-2023-26255.nbin...

7.5CVSS7.5AI score0.47199EPSS
SaveExploits5References2
Rows per page
Query Builder