Lucene search
+L

2535 matches found

NVD
NVD
added 2023/03/15 7:15 p.m.26 views

CVE-2020-4556

IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 183329...

4CVSS4.1AI score0.00187EPSS
SaveExploits0References2
Prion
Prion
added 2023/03/15 7:15 p.m.25 views

Design/Logic Flaw

IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 183329...

1.7CVSS4.6AI score0.00187EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/03/15 6:56 p.m.79 views

CVE-2020-4556

CVE-2020-4556 concerns IBM Financial Transaction Manager for High Value Payments for Multi-Platform versions 3.2.0–3.2.10, where web pages can be stored locally and read by another user on the same system (information disclosure). The issue is documented across multiple sources (IBM X-Force ID 18...

4CVSS3.3AI score0.00187EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/03/15 12:00 a.m.10 views

IBM Financial Transaction Manager for High Value Payments for Multi-Platform 安全漏洞

IBM Financial Transaction Manager for High Value Payments for Multi-Platform FTM HVP is a financial transaction manager for multi-platform from International Business Machines IBM. The product is primarily used to monitor, track and report on financial payments and transactions. A security...

4CVSS5.1AI score0.00187EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/03/14 12:00 a.m.49 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0068-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0068-1 advisory. - Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a...

8.8CVSS7.5AI score0.01163EPSS
SaveExploits7References50
OSV
OSV
added 2023/03/13 4:35 p.m.10 views

USN-5949-1 chromium-browser vulnerabilities

It was discovered that Chromium could be made to write out of bounds in several components. A remote attacker could possibly use this issue to corrupt memory via a crafted HTML page, resulting in a denial of service, or possibly execute arbitrary code. CVE-2023-0930, CVE-2023-1219, CVE-2023-1220,...

8.8CVSS7AI score0.01163EPSS
SaveExploits0References23
Microsoft CVE
Microsoft CVE
added 2023/03/13 7:00 a.m.58 views

Chromium: CVE-2023-1224 Insufficient policy enforcement in Web Payments API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS6.6AI score0.00444EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2023/03/13 12:00 a.m.56 views

KLA48544 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Policy enforcement...

8.8CVSS9AI score0.01163EPSS
SaveExploits7References23
CNVD
CNVD
added 2023/03/13 12:00 a.m.103 views

Google Chrome Web Payments API Component Code Issue Vulnerability

Google Chrome is a web browser from Google, an American company. A code issue vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a weak policy enforcement issue in the Web Payments API component. A remote attacker could exploit the vulnerability to bypass...

4.3CVSS6AI score0.00444EPSS
SaveExploits0References1
Veracode
Veracode
added 2023/03/12 9:55 a.m.41 views

Denial Of Service (DoS)

Google Chrome is vulnerable to Denial Of Service DoS. The vulnerability exists due to the use after free in the Web Payments API, which allows an attacker to compromise the renderer process to potentially exploit heap corruption via a crafted HTML page, leading to an application crash...

8.8CVSS8.7AI score0.00579EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/03/11 12:00 a.m.47 views

Fedora 38 : chromium (2023-523a24d90a)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-523a24d90a advisory. update to 110.0.5481.177. Fixes the following security issues: CVE-2023-0927 CVE-2023-0928 CVE-2023-0929 CVE-2023-0930 CVE-2023-0931 CVE-2023-0932...

8.8CVSS8.2AI score0.00668EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
added 2023/03/09 3:53 a.m.8 views

SUSE CVE-2023-1224

Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS8.6AI score0.00444EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2023/03/09 3:53 a.m.6 views

SUSE CVE-2023-1226

Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS8.6AI score0.00459EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2023/03/09 12:00 a.m.55 views

Google Chrome Security Updates (stable-channel-update-for-desktop-2023-03) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS8.2AI score0.01163EPSS
SaveExploits7References1
FreeBSD
FreeBSD
added 2023/03/08 12:00 a.m.60 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This update includes 40 security fixes: 1411210 High CVE-2023-1213: Use after free in Swiftshader. Reported by Jaehun Jeong@n3sk of Theori on 2023-01-30 1412487 High CVE-2023-1214: Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab on 2023-02-03 1417176...

8.8CVSS8.3AI score0.01163EPSS
SaveExploits7References1
NVD
NVD
added 2023/03/07 10:15 p.m.19 views

CVE-2023-1226

Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.3AI score0.00459EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/07 10:15 p.m.27 views

CVE-2023-1226

Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.2AI score
SaveExploits0References2
OSV
OSV
added 2023/03/07 10:15 p.m.3 views

DEBIAN-CVE-2023-1226

Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.9AI score0.00459EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/07 10:15 p.m.26 views

CVE-2023-1224

Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.2AI score
SaveExploits0References2
NVD
NVD
added 2023/03/07 10:15 p.m.21 views

CVE-2023-1224

Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS4AI score0.00444EPSS
SaveExploits0References2
Rows per page
Query Builder