Design/Logic Flaw

Contao 4.0 through 4.8.5 has Insecure Permissions. Back end users can manipulate the details view URL to show pages and articles that have not been enabled for them...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted web page or file...

Google Chrome JavaScript component buffer overflow vulnerability (CNVD-2020-00480)

Google Chrome is the United States Google Google company's a Web browser. JavaScript is one of the JavaScript code debugging components. A buffer overflow vulnerability exists in the Google Chrome JavaScript component. An attacker can exploit this vulnerability to cause heap corruption with the...

Google Chrome JavaScript component buffer overflow vulnerability (CNVD-2020-00479)

Google Chrome is the United States Google Google company's a Web browser. JavaScript is one of the JavaScript code debugging components. A buffer overflow vulnerability exists in the Google Chrome JavaScript component. An attacker can exploit this vulnerability to cause heap corruption with the...

Microsoft Windows GDI Information Leakage Vulnerability

Microsoft Windows is a family of operating systems from Microsoft. An information disclosure vulnerability exists in Microsoft Windows GDI. An attacker could exploit this vulnerability by obtaining information in a variety of ways, including tricking a user into opening a specially crafted docume...

The quiet evolution of phishing

The battle against phishing is a silent one: every day, Office 365 Advanced Threat Protection detects millions of distinct malicious URLs and email attachments. Every year, billions of phishing emails don’t ever reach mailboxes—real-world attacks foiled in real-time. Heuristics, detonation, and...

Google Chrome WebSockets Resource Management Error Vulnerability

Google Chrome is a web browser from Google, and WebSockets is one of the communication protocols used to exchange data between the client and the server. A resource management error vulnerability exists in Google Chrome WebSockets. An attacker can exploit this vulnerability to cause heap corrupti...

Google Chrome Information Disclosure Vulnerability (CNVD-2019-46424)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information from process memory with the help of specially crafted HTML pages...

Google Chrome Input Validation Error Vulnerability (CNVD-2019-46429)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to obtain cross-origin data with the help of specially crafted HTML pages...

Microsoft Windows Graphics Device Interface Information Disclosure Vulnerability (CNVD-2019-45917)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. An...

Google Chrome Buffer Overflow Vulnerability (CNVD-2020-00271)

Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in Google Chrome. An attacker can exploit this vulnerability to execute arbitrary code with the help of specially crafted HTML pages...

Google Chrome Input Validation Error Vulnerability (CNVD-2019-46756)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to spoof a secure user interface with the help of specially crafted HTML pages...

Google Chrome JavaScript Buffer Overflow Vulnerability

Google Chrome is the United States Google Google company's a Web browser. JavaScript is one of the JavaScript code debugging components. A buffer overflow vulnerability exists in Google Chrome JavaScript. An attacker can exploit this vulnerability to cause heap corruption with the help of special...

Google Chrome Input Validation Error Vulnerability (CNVD-2019-46426)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to spoof domain names with the help of specially crafted HTML pages...

Google Chrome cookies information disclosure vulnerability

Google Chrome is a web browser from Google, Inc. cookies is one of the cookie plug-ins. An information disclosure vulnerability exists in Google Chrome cookies, which stems from the program's failure to fully implement policies. The vulnerability can be exploited to disclose cross-origin data via...

Google Chrome Input Validation Error Vulnerability (CNVD-2019-46425)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability that stems from the program's failure to fully implement policies. An attacker could exploit the vulnerability to bypass navigation restrictions with the help of...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-00269)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a resource management error vulnerability. The vulnerability can be exploited to execute arbitrary code via specially crafted HTML pages...

Google Chrome Input Validation Error Vulnerability (CNVD-2019-46752)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to obtain sensitive information from process memory with the help of specially crafted HTML pages...

Google Chrome Input Validation Error Vulnerability (CNVD-2019-46751)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to cause heap corruption with the help of specially crafted HTML pages...

Google Chrome JavaScript Component Buffer Overflow Vulnerability

Google Chrome is the United States Google Google company's a Web browser. JavaScript is one of the JavaScript code debugging components. A buffer overflow vulnerability exists in the Google Chrome JavaScript component. An attacker can exploit this vulnerability to execute arbitrary code inside a...