Lucene search
+L

3718 matches found

Qualys Blog
Qualys Blog
added 2024/11/07 5:53 p.m.19 views

Elevate Your Container Security with QScanner in 2025

Securing container images is more important than ever in the dynamic world of cloud-native technologies. Organizations have long utilized reliable solutions from Qualys to scan their images, ensuring applications run smoothly and securely. These tools have played a crucial role in maintaining the...

7.1AI score
SaveExploits0
OSV
OSV
added 2024/11/04 2:15 p.m.10 views

CVE-2024-45164

Akamai SIA Secure Internet Access Enterprise ThreatAvert, in SPS Security and Personalization Services before the latest 19.2.0 patch and Apps Portal before 19.2.0.3 or 19.2.0.20240814, has incorrect authorization controls for the Admin functionality on the ThreatAvert Policy page. An authenticat...

7.1CVSS5.8AI score0.00314EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/11/04 12:00 a.m.29 views

CVE-2024-45164

Akamai SIA Secure Internet Access Enterprise ThreatAvert, in SPS Security and Personalization Services before the latest 19.2.0 patch and Apps Portal before 19.2.0.3 or 19.2.0.20240814, has incorrect authorization controls for the Admin functionality on the ThreatAvert Policy page. An authenticat...

0.00314EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/11/04 12:00 a.m.11 views

CVE-2024-45164

Akamai SIA Secure Internet Access Enterprise ThreatAvert, in SPS Security and Personalization Services before the latest 19.2.0 patch and Apps Portal before 19.2.0.3 or 19.2.0.20240814, has incorrect authorization controls for the Admin functionality on the ThreatAvert Policy page. An authenticat...

6.8AI score0.00314EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:00 a.m.33 views

CentOS 6 : chromium-browser (RHSA-2020:3740)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3740 advisory. - Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to...

9.6CVSS7.1AI score0.01769EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:00 a.m.44 views

CentOS 6 : chromium-browser (RHSA-2020:1270)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1270 advisory. - usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit. CVE-2019-20503 - Use after free in WebGL in Google Chrome prior to...

8.8CVSS7.7AI score0.03498EPSS
SaveExploits7References10
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:00 a.m.32 views

CentOS 6 : chromium-browser (RHSA-2020:3723)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3723 advisory. - Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a...

9.3CVSS7.3AI score0.02296EPSS
SaveExploits3References14
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:00 a.m.43 views

CentOS 6 : chromium-browser (RHSA-2020:2643)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2643 advisory. - Use after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML...

9.6CVSS7.7AI score0.19082EPSS
SaveExploits6References4
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:00 a.m.24 views

CentOS 6 : chromium-browser (RHSA-2020:0214)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0214 advisory. - Use after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

8.8CVSS8.1AI score0.01218EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:00 a.m.27 views

CentOS 6 : chromium-browser (RHSA-2020:2544)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2544 advisory. - Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to...

9.6CVSS7.4AI score0.06414EPSS
SaveExploits13References31
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:00 a.m.31 views

CentOS 6 : chromium-browser (RHSA-2020:1487)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1487 advisory. - Out of bounds write in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

8.8CVSS7.7AI score0.02026EPSS
SaveExploits9References25
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:00 a.m.35 views

CentOS 6 : chromium-browser (RHSA-2020:4235)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4235 advisory. - Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTM...

8.8CVSS8.2AI score0.02482EPSS
SaveExploits4References28
Mageia
Mageia
added 2024/10/04 5:27 a.m.106 views

Updated chromium-browser-stable packages fix security vulnerabilities

Use after free in Downloads. CVE-2024-6988 Use after free in Loader. CVE-2024-6989 Use after free in Dawn. CVE-2024-6991 Heap buffer overflow in Layout. CVE-2024-6994 Inappropriate implementation in Fullscreen. CVE-2024-6995 Race in Frames. CVE-2024-6996 Use after free in Tabs. CVE-2024-6997 Use...

9.6CVSS7.2AI score0.20713EPSS
SaveExploits15References11
Tenable Nessus
Tenable Nessus
added 2024/08/25 12:00 a.m.37 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0258-2)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0258-2 advisory. - Chromium 128.0.6613.84 boo1229591 CVE-2024-7964: Use after free in Passwords CVE-2024-7965: Inappropriate implementation in V8 CVE-2024-7966: O...

9.6CVSS7.9AI score0.20713EPSS
SaveExploits4References43
Microsoft CVE
Microsoft CVE
added 2024/08/22 7:00 a.m.121 views

Chromium: CVE-2024-7978 Insufficient policy enforcement in Data Transfer

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS6AI score0.0045EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2024/08/21 9:15 p.m.16 views

CVE-2024-7978

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6.8AI score0.0045EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/08/21 8:20 p.m.40 views

CVE-2024-7978

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

0.0045EPSS
SaveExploits0References2
CVE
CVE
added 2024/08/21 8:20 p.m.433 views

CVE-2024-7978

CVE-2024-7978 is a Chrome/Chromium vulnerability: Insufficient policy enforcement in Data Transfer allowed cross-origin data leakage via a crafted HTML page when a user engages specific UI gestures. Affected product: Google Chrome/Chromium-based browsers. Root cause: insufficient policy enforceme...

4.3CVSS6AI score0.0045EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2024/08/21 8:20 p.m.47 views

CVE-2024-7978

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6AI score0.0045EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/08/21 12:00 a.m.11 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc.V8 is one of the open source JavaScript engines. A security vulnerability exists in Google Chrome version 128.0.6613.84 and prior versions, which stems from the inclusion of an insufficient policy enforcement issue...

4.3CVSS6.4AI score0.0045EPSS
SaveExploits0References5
Rows per page
Query Builder