10990 matches found
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from an improperly implemented permission prompt, which can be exploited by a remote attacker to bypass the Primary Source Permission Delegation via a crafted HTML page, and affects the...
CVE-2023-0131
Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a crafted HTML page. Chromium security severity: Medium...
Google Chrome 缓冲区错误漏洞
Google Chrome is a web browser by Google, Inc. A security vulnerability exists in Google Chrome, which originates from a heap buffer overflow in libphonenumber that allows remote attackers to potentially exploit heap corruption via a crafted HTML page, and affects the following products and...
Google Chrome 缓冲区错误漏洞
Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions of Google Chrome prior to 109.0.5414.74, which stems from a possible heap buffer overflow in its Network Service Allows an attacker to convince a user to install a malicious extensio...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome has a security vulnerability that stems from the use of free in the shopping cart allows an attacker to convince users to install malicious extensions, an attacker can exploit the vulnerability by exploiting heap...
CVE-2023-0036
platformcallbackstub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...
WordPress Plugin WooCommerce 访问控制错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error vulnerability...
WordPress Plugin WP Custom Admin Interface 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...
CVE-2023-0110
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...
CVE-2023-0107
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...
CVE-2023-0107 Cross-site Scripting (XSS) - Stored in usememos/memos
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...
theme-cesnet 安全漏洞
theme-cesnet is a CESNET open source custom CESNET theme for ownCloud. A security vulnerability exists in CESNET theme-cesnet versions prior to 2.0.0, which stems from a problem with an unknown function in the file cesnet/core/lostpassword/templates/resetpassword.php, which can lead to insufficie...
VulnCheck KEV: CVE-2023-22278
m-FILTER prior to Ver.5.70R01 Ver.5 Series and m-FILTER prior to Ver.4.87R04 Ver.4 Series allows a remote unauthenticated attacker to bypass authentication and send users' unintended email when email is being sent under the certain conditions. The attacks exploiting this vulnerability have...
PT-2023-13768 · Bentley Systems · Microstation Connect
Name of the Vulnerable Software and Affected Versions: Bentley Systems MicroStation Connect versions 10.17.0.209 and prior Description: The issue is a Stack-Based Buffer Overflow that occurs when a malformed design DGN file is parsed. This may allow an attacker to execute arbitrary code...
PT-2023-3460 · Western Digital · My Cloud Os
Name of the Vulnerable Software and Affected Versions: My Cloud OS 5 versions prior to 5.26.300 Description: The issue is related to a lack of data cleaning measures at the management level in My Cloud OS, which can be exploited by a remote attacker to execute arbitrary commands. Specifically, it...
nodebatis SQL注入漏洞
nodebatis is a sql style orm library for nodejs by PeterMu Personal Developer. A SQL injection vulnerability exists in nodebatis versions prior to 2.2.0, which stems from a problem with an unknown feature that causes sql injection...
PT-2023-15394 · Unknown · Siren Investigate
Name of the Vulnerable Software and Affected Versions: Siren Investigate versions prior to 12.1.7 Description: An issue was discovered in Siren Investigate where script variable whitelisting is insufficiently sandboxed. Recommendations: For versions prior to 12.1.7, update to version 12.1.7 or...