Lucene search
+L

693 matches found

osv_mal
osv_mal
•added 2022/06/13 5:46 a.m.•13 views

MAL-2022-6981 Malicious code in vso-service-worker-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 521d9c0aa9e811392cdcb626e976bbd45fb4f70615153f303716350975b432b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/13 5:46 a.m.•8 views

Malicious code in vso-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccb422332a19aeef03b4767503a00b97068dcb0b6f6119143f0060dae741b750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2022/05/26 7:10 a.m.•1 views

ionic-conference-app (0.0.0), jsmusicdb-next (>=2.9.0, <=2.9.8) +2 more potentially affected by CVE-2021-4231 via @angular/service-worker (>=7.0.0, <=7.1.4)

@angular/service-worker NPM version =7.0.0, =2.9.0, =2.9.8 - myais-lib 0.0.0 - tecna-pwa-lib 0.0.9 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

5.4CVSS0.01181EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/26 7:10 a.m.•2 views

@esfaenza/ngx-currency-mask (>=9.0.0, <=9.0.5), @esfaenza/ngx-introjs (9.0.5) +23 more potentially affected by CVE-2021-4231 via @angular/service-worker (>=9.0.0, <=9.1.9)

@angular/service-worker NPM version =9.0.0, =9.0.0, =7.15.0-snapshot-1585667137763.0, =0.1.0, =0.1.3, =0.0.1, =0.0.1, =0.0.1, =5.0.11, =0.0.4, =0.0.0, =0.0.13, =2.0.83, =2.0.118 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

5.4CVSS0.01181EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/26 7:10 a.m.•1 views

jack-test-app (1.0.0), jsmusicdb-next (>=2.4.0, <=2.6.1) potentially affected by CVE-2021-4231 via @angular/service-worker (>=5.2.1, <=5.2.10)

@angular/service-worker NPM version =5.2.1, =2.4.0, =2.6.1 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

5.4CVSS0.01181EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2022/05/20 11:16 p.m.•48 views

CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

8.8CVSS3.3AI score0.00626EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/02/17 12:00 a.m.•15 views

Service Worker API Code Execution

The vulnerability of the Service Worker API in browsers such as Google Chrome and Microsoft Edge is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS7.2AI score0.00626EPSS
SaveExploits0References9Affected Software6
NVD
NVD
•added 2022/02/12 2:15 a.m.•26 views

CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS0.00626EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/02/12 2:15 a.m.•12 views

CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS8.5AI score
SaveExploits0References2
osv_debian
osv_debian
•added 2022/02/12 2:15 a.m.•9 views

DEBIAN-CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS6.8AI score0.00626EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/02/12 2:15 a.m.•11 views

CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS6.8AI score0.00626EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2022/02/12 2:15 a.m.•14 views

UBUNTU-CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS5.7AI score0.00626EPSS
SaveExploits0References2
Prion
Prion
•added 2022/02/12 2:15 a.m.•18 views

Design/Logic Flaw

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

4.3CVSS6.5AI score0.00626EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2022/02/12 2:15 a.m.•27 views

CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS6.7AI score0.00626EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/02/12 1:35 a.m.•41 views

CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.9AI score0.00626EPSS
SaveExploits0References2
CVE
CVE
•added 2022/02/12 1:35 a.m.•163 views

CVE-2022-0305

CVE-2022-0305 involves an Inappropriate implementation in Chrome’s Service Worker API. Multiple connected advisories confirm the vulnerability affects Google Chrome prior to 97.0.4692.99, where a compromised renderer process could bypass site isolation via a crafted HTML page. The issue is identi...

6.5CVSS6.5AI score0.00626EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2022/02/12 1:35 a.m.•47 views

CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS7.2AI score0.00626EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/02/12 1:35 a.m.•84 views

CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS6.8AI score0.00626EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/12 12:00 a.m.•7 views

CVE-2022-0305: Undefined Security Weakness

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS6.5AI score0.00626EPSS
SaveExploits0References1
Kaspersky
Kaspersky
•added 2022/01/26 12:00 a.m.•54 views

KLA12435 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Task Manager can be exploited to execute arbitrary code or caus...

9.6CVSS9.5AI score0.85352EPSS
SaveExploits0References4
Rows per page
Query Builder