Lucene search
+L

3047 matches found

osv_ghsa
osv_ghsa
•added 2022/02/17 5:19 p.m.•289 views

GHSA-FMVM-X8MV-47MJ Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0

Next.js is a React framework. Starting with version 10.0.0 and prior to version 12.1.0, Next.js is vulnerable to User Interface UI Misrepresentation of Critical Information. In order to be affected, the next.config.js file must have an images.domains array assigned and the image host assigned in...

5.9CVSS6.5AI score0.01795EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2022/02/17 5:19 p.m.•76 views

Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0

Next.js is a React framework. Starting with version 10.0.0 and prior to version 12.1.0, Next.js is vulnerable to User Interface UI Misrepresentation of Critical Information. In order to be affected, the next.config.js file must have an images.domains array assigned and the image host assigned in...

7.5CVSS2.5AI score0.01795EPSS
SaveExploits0References5Affected Software1
Citrix
Citrix
•added 2022/02/14 12:00 a.m.•21 views

Incoming audio issue on Microsoft Teams optimization for CWA HTML5

Any user on optimized Microsoft Teams is not able to receive any incoming audio during audio or video calls. Video streaming is not impacted. Users who meet below conditions are likely to see the issue are on Citrix Workspace app for HTML5 AND have enabled Microsoft Teams optimization...

7AI score
SaveExploits0
Citrix
Citrix
•added 2022/02/14 12:00 a.m.•18 views

Incoming audio issue on Microsoft Teams optimization for CWA Chrome OS

Any user on optimized Microsoft Teams is not able to receive any incoming audio during audio or video calls. Video streaming is not impacted. Users who meet the below conditions are likely to see the issue are on Citrix Workspace app for Chrome OS AND have enabled Microsoft Teams optimization...

7AI score
SaveExploits0
attackerkb
attackerkb
•added 2022/02/12 2:15 a.m.•20 views

CVE-2022-0307

Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.7AI score0.0075EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2022/02/12 2:15 a.m.•12 views

DEBIAN-CVE-2022-0307

Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.0075EPSS
SaveExploits0References1
NVD
NVD
•added 2022/02/12 2:15 a.m.•27 views

CVE-2022-0307

Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.0075EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2022/02/12 2:15 a.m.•13 views

UBUNTU-CVE-2022-0307

Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.0075EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2022/02/12 2:15 a.m.•30 views

CVE-2022-0307

Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.0075EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/02/12 1:35 a.m.•46 views

CVE-2022-0307

Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

9.3AI score0.0075EPSS
SaveExploits0References2
Mend
Mend
•added 2022/02/12 1:35 a.m.•4 views

CVE-2022-0307

Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.0075EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2022/02/12 1:35 a.m.•54 views

CVE-2022-0307

Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.5AI score0.0075EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/12 12:00 a.m.•6 views

CVE-2022-0307: Use After Free

Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.4AI score0.0075EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2022/02/09 10:17 p.m.•98 views

GHSA-HCW3-J74M-QC58 Incorrect Calculation in github.com/open-policy-agent/opa

Impact Under certain conditions, pretty-printing an AST that contains synthetic nodes could change the logic of some statements by reordering array literals. Example of policies impacted are those that parse and compare web paths, see the example below. All of these three conditions have to be me...

6.3CVSS5.7AI score0.01026EPSS
SaveExploits1References8
osv_mgasa
osv_mgasa
•added 2022/02/08 4:27 p.m.•16 views

MGASA-2022-0052 Updated glibc packages fix security vulnerability

Updated glibc packages fix security vulnerability: An off-by-one buffer overflow and underflow in getcwd may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd in a setuid program could use this flaw to...

7.8CVSS9.3AI score0.00809EPSS
SaveExploits1References2
The Hacker News
The Hacker News
•added 2022/02/03 10:49 a.m.•42 views

New SEO Poisoning Campaign Distributing Trojanized Versions of Popular Software

An ongoing search engine optimization SEO poisoning attack campaign has been observed abusing trust in legitimate software utilities to trick users into downloading BATLOADER malware on compromised machines. "The threat actor used 'free productivity apps installation' or 'free software developmen...

1.5AI score
SaveExploits0
Mageia
Mageia
•added 2022/02/02 9:29 p.m.•125 views

Updated chromium-browser-stable packages fix security vulnerability

CVE-2022-0096: Use after free in Storage. CVE-2022-0097: Inappropriate implementation in DevTools. CVE-2022-0098: Use after free in Screen Capture. CVE-2022-0099: Use after free in Sign-in. CVE-2022-0100: Heap buffer overflow in Media streams API. CVE-2022-0101: Heap buffer overflow in Bookmarks...

9.6CVSS8.5AI score0.85352EPSS
SaveExploits21References3
Malwarebytes
Malwarebytes
•added 2022/02/02 11:05 a.m.•33 views

How to speed up your computer or laptop

Why do machines always throw a tantrum when you are in a hurry? It’s called Murphy’s Law which some people may know as the butter side down rule. Anything that can go wrong will go wrong. And usually at a time when it is most inconvenient. That being said, there are ways to speed things up. Let’s...

0.1AI score
SaveExploits0
Citrix
Citrix
•added 2022/01/31 12:00 a.m.•29 views

Citrix Workspace for Linux on Linux Mint : HDX optimization fails for MS Teams published App

MS Teams do not show as HDX Optimized status in MS Teams- About-Version. Microphone and Camera fail to get redirected...

7.1AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/01/28 11:09 p.m.•13 views

123-x-ed-eied (>=1.0.5, <=1.0.6), @andrydharmawan/component-react (>=1.1.1, <=1.1.4) +111 more potentially affected by CVE-2022-21721 via next (>=12.0.0, <=12.0.8)

next NPM version =12.0.0, =1.0.5, =1.1.1, =0.0.41, =2.0.2, =2.0.1, =0.0.5, =1.9.6, =1.0.2, =0.0.0-34, =0.0.15, =1.1.0 and more Source cves: CVE-2022-21721 Source advisory: OSV:GHSA-WR66-VRWM-5G5X...

7.5CVSS7.7AI score0.02153EPSS
SaveExploits0
Rows per page
Query Builder