Unspecified Vulnerability in Google Chrome (CNVD-2024-39248)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome prior to version 119.0.6045.105, which stems from an improper implementation of the compositing feature and can be exploited by remote attackers to perform UI spoofing via a crafted...

The vulnerability of the Tinode Chat messaging platform, which allows a hacker to perform a CSRF attack

The vulnerability of the Tinode Chat messaging platform is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack using a specially created web page...

The vulnerability of the Down component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Down component in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to access to resources using incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a created HTML page...

PT-2024-22615 · Gocd · Gocd

Name of the Vulnerable Software and Affected Versions: GoCD versions 19.4.0 through 23.5.0 Description: The issue is a reflected cross-site scripting vulnerability on the loading page displayed while GoCD is starting, via abuse of a redirect to query parameter with inadequate validation. Attacker...

CVE-2023-52499 powerpc/47x: Fix 47x syscall return crash

In the Linux kernel, the following vulnerability has been resolved: powerpc/47x: Fix 47x syscall return crash Eddie reported that newer kernels were crashing during boot on his 476 FSP2 system: kernel tried to execute user page b7ee2000 - exploit attempt? uid: 0 BUG: Unable to handle kernel...

DEBIAN-CVE-2024-1669

Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

PT-2024-5052 · Netis Systems · Netis Systems Mw5360

Name of the Vulnerable Software and Affected Versions: NETIS SYSTEMS MW5360 version 1.0.1.3031 Description: The issue is related to a command injection vulnerability via the password parameter on the login page. This vulnerability may allow a remote attacker to execute arbitrary commands...

PT-2023-7687 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.109 Description: The issue is related to a use after free vulnerability in the libavif library of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a craft...

The vulnerability of Google Chrome’s Autofill function allows attackers to influence the integrity of the protected information.

The vulnerability of Google Chrome’s Autofill function is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows an attacker to influence the integrity of protected information by loading a specially created HTML page...

The vulnerability of the Installer component in the Google Chrome browser allows a hacker to bypass existing security restrictions.

The vulnerability of the Google Chrome browser’s Installer component is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created HTML page...

The vulnerability of Google Chrome’s Intents component allows attackers to circumvent existing security restrictions.

The vulnerability of Google Chrome’s Intents component is related to the improper use of standard permissions. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...

SUSE CVE-2023-4863

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in their lack of access control mechanisms, allowing attackers to increase their privileges.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created...

Zeroday vulnerability fixed in Google Chrome

Google has fixed a Zeroday vulnerability in Chrome. A malicious party can exploit the vulnerability to execute arbitrary code execute arbitrary code on the underlying operating system with permissions from the victim. If the victim's privileges are high enough are high enough, this allows the...

CVE-2021-36646

A Cross Site Scrtpting XSS vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page...

The vulnerability of the Google Chrome browser’s Extensions API allows a hacker to install any extension they desire.

The vulnerability of the Google Chrome browser’s Extensions API relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to install any extension using a specially created HTML page...

The vulnerability in the implementation of the Fullscreen application interface of Google Chrome’s Android browser allows a hacker to manipulate the content of the omnibox.

The vulnerability of the Fullscreen application interface of the Google Chrome browser for Android is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to manipulate the omnibox’s content using a specially created HTML...

User Activity Tracking and Log < 4.0.9 - License Update/Deactivation via CSRF

Description The plugin does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin's license via CSRF attacks Make a logged in admin open a page with the code below To make them deactivate the license To make th...

EUVD-2023-34189

Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...