210 matches found
CVE-2021-30574
CVE-2021-30574 is a use-after-free in the protocol handling component of the Chromium-based Google Chrome browser prior to 92.0.4515.107. The description indicates an attacker could craft an HTML page to trigger a remote heap corruption, potentially enabling arbitrary code execution or similar im...
CVE-2021-30574
Use after free in protocol handling in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Remote Code Execution (RCE)
chromium is vulnerable to remote code execution. The vulnerability exists due to a use-after-free error within the protocol handling component in Google Chrome...
Chromium: CVE-2021-30574 Use after free in protocol handling
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Google Chrome Protocol Handling Code Execution Vulnerability
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in the protocol handling in versions of Google Chrome prior to 92.0.4515.107. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service condition...
[ASA-202107-47] chromium: multiple issues
Arch Linux Security Advisory ASA-202107-47 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-30565 CVE-2021-30566 CVE-2021-30567 CVE-2021-30568 CVE-2021-30569 CVE-2021-30571 CVE-2021-30572 CVE-2021-30573 CVE-2021-30574 CVE-2021-30575 CVE-2021-30576...
PT-2021-3674
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.107 Description The issue is related to a use after free in protocol handling, which can be exploited by a remote attacker to potentially cause heap corruption via a crafted HTML page. This could allow...
Microsoft Edge 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in the protocol handling in versions of Google Chrome prior to 92.0.4515.107. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service condition...
KLA12236 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface, obtain sensitive information, perform cross-site scripting attack. Below is a complete li...
The vulnerability of the Node.js software platform, related to a bug in the resource consumption monitoring mechanism, allows a hacker to trigger a service failure.
The vulnerability of the Node.js software platform is related to the improper handling of a large number of requests sent to the unknownProtocol. Exploiting this vulnerability allows an attacker who operates remotely to cause service failures...
Oracle Solaris Remote Code Execution Vulnerability
Oracle Solaris is a UNIX operating system. A security vulnerability exists in the Oracle Solaris protocol handling, which allows remote attackers to exploit the vulnerability by submitting a special request that can be used to execute arbitrary code in the system context...
CVE-2020-3430
A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands. The vulnerability is due to improper handling of input to the application protocol handlers. An attacker could exploit this...
Ntop nDPI Buffer Overflow Vulnerability (CNVD-2020-36701)
Ntop nDPI is an open source library for deep packet inspection from Ntop Italy. A buffer overflow vulnerability exists in the extractRDNSequence of the lib/protocols/tls.c file in Ntop nDPI 3.2 and earlier versions. The vulnerability stems from a network system or product performing operations in...
Huawei EulerOS: Security Advisory for spice (EulerOS-SA-2017-1226)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for spice (EulerOS-SA-2017-1021)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for rdesktop (openSUSE-SU-2019:2135-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : chromium (openSUSE-2019-2692)
This update for chromium fixes the following issues : Chromium was updated to 79.0.3945.79 boo1158982 - CVE-2019-13725: Fixed a use after free in Bluetooth - CVE-2019-13726: Fixed a heap buffer overflow in password manager - CVE-2019-13727: Fixed an insufficient policy enforcement in WebSockets -...
chromium-browser: Incorrect security UI in external protocol handling
Incorrect security UI in external protocol handling in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof security UI via a crafted HTML page...
Vulnerability Spotlight: Multiple vulnerabilities in WAGO PFC200
Kelly Leuschner of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. The WAGO PFC200 and PFC100 controllers contain multiple exploitable vulnerabilities. The PFC200 is one of WAGO’s programmable automation controllers that are used in many industries including automotive, rail,...
