11691 matches found
Google Chrome Type Obfuscation Vulnerability (CNVD-2019-46422)
Google Chrome is the United States Google Google company's a Web browser. JavaScript is one of the JavaScript code debugging components. A type confusion vulnerability exists in Google Chrome. An attacker can exploit this vulnerability to cause heap corruption with the help of specially crafted...
Google Chrome Input Validation Error Vulnerability (CNVD-2019-46759)
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to spoof domain names with the help of specially crafted HTML pages...
Google Chrome Type Obfuscation Vulnerability (CNVD-2020-00274)
Google Chrome is the United States Google Google company's a Web browser. JavaScript is one of the JavaScript code debugging components. A type confusion vulnerability exists in Google Chrome. An attacker can exploit this vulnerability to cause heap corruption with the help of specially crafted...
Google Chrome Same Origin Policy Bypass Vulnerability (CNVD-2020-00270)
Google Chrome is a web browser from Google, and WebSockets is one of the communication protocols used to exchange data between the client and the server. Google Chrome suffers from a same-origin policy bypass vulnerability that stems from the program's failure to fully implement the policy. The...
Google Chrome Input Validation Error Vulnerability (CNVD-2019-46431)
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to disable extensions via specially crafted HTML pages...
Google Chrome Input Validation Error Vulnerability (CNVD-2019-46432)
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to spoof domain names with the help of specially crafted HTML pages...
The vulnerability of the Cisco Web Security Appliance’s web interface allows a hacker to inject arbitrary code into the web page that is uploaded.
The vulnerability of the Cisco Web Security Appliance web interface relates to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the loaded web page remotely...
The vulnerability of the DirectWrite programming interface in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially crafted document or web page...
CVE-2019-4465
IBM Cloud Pak System 2.3 and 2.3.0.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 163774...
Code injection
IBM Cloud Pak System 2.3 and 2.3.0.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 163774...
Step-by-Step Guide to Creating the Best Web Pages
By Uzair Amir Everyone knows that your site design and content can be the difference between success and failure... This is a post from HackRead.com Read the original post: Step-by-Step Guide to Creating the Best Web Pages...
IBM Cloud Pak System Platform System Manager Information Disclosure Vulnerability
IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from IBM USA. The product supports deploying, managing and moving application environments across hybrid clouds. An information disclosure vulnerability exists in Platform System Manager in I...
The vulnerability of the mod_proxy module in the Apache HTTP Server allows a hacker to redirect users to a malicious website through a specially crafted web page.
The vulnerability of the modproxy module in the Apache HTTP Server is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to redirect users to a malicious website using a specially crafted web page...
CVE-2019-19378
In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in indexrbiopages in fs/btrfs/raid56.c...
Google Chrome Resource Management Error Vulnerability (CNVD-2019-42756)
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions prior to Google Chrome 75.0.3770.142. The vulnerability stems from the system's mismanagement of resources such as memory. A remote attacker can exploit the vulnerability to cause heap...
Google Chrome Omnibox Content Spoofing Vulnerability
Chrome is a web browsing tool developed by Google. A security vulnerability exists in Google Chrome versions prior to 77.0.3865.75. The vulnerability stems from insufficient validation of untrustworthy input by the navigation in Chrome. A remote attacker can exploit the vulnerability to spoof the...
CVE-2019-18454
An issue was discovered in GitLab Community and Enterprise Edition 10.5 through 12.4 in link validation for RDoc wiki pages feature. It has XSS...
Cross site scripting
An issue was discovered in GitLab Community and Enterprise Edition 10.5 through 12.4 in link validation for RDoc wiki pages feature. It has XSS...
CVE-2019-18675
The Linux kernel through 5.3.13 has a startoffset+size Integer Overflow in cpia2remapbuffer in drivers/media/usb/cpia2/cpia2core.c because cpia2 has its own mmap implementation. This allows local users with /dev/video0 access to obtain read and write permissions on kernel physical pages, which ca...
DEBIAN-CVE-2019-18675
The Linux kernel through 5.3.13 has a startoffset+size Integer Overflow in cpia2remapbuffer in drivers/media/usb/cpia2/cpia2core.c because cpia2 has its own mmap implementation. This allows local users with /dev/video0 access to obtain read and write permissions on kernel physical pages, which ca...