Lucene search
+L

127 matches found

Cvelist
Cvelist
•added 2021/06/15 9:40 p.m.•39 views

CVE-2021-30549

Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

9.1AI score0.00931EPSS
SaveExploits0References5
CVE
CVE
•added 2021/06/15 9:40 p.m.•279 views

CVE-2021-30549

CVE-2021-30549 is a use-after-free in Chromium’s Spell check component affecting Chromium-based browsers up to version 91.0.4472.101. The vulnerability can be triggered when a user installs a malicious extension, potentially enabling heap corruption and remote code execution via a crafted HTML pa...

8.8CVSS8.7AI score0.00931EPSS
SaveExploits0References5Affected Software1
AlpineLinux
AlpineLinux
•added 2021/06/15 9:40 p.m.•84 views

CVE-2021-30549

Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.00931EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/06/15 9:40 p.m.•49 views

CVE-2021-30549

Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.00931EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/15 12:00 a.m.•3 views

CVE-2021-30549: Use After Free

Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.00931EPSS
SaveExploits0References2
Veracode
Veracode
•added 2021/06/13 8:00 p.m.•40 views

Denial Of Service (DoS)

chromium is vulnerable to denial of service. The vulnerability exists due to a use after free in the Spell check component...

8.8CVSS7.9AI score0.00931EPSS
SaveExploits0References8Affected Software2
Microsoft CVE
Microsoft CVE
•added 2021/06/11 7:00 a.m.•53 views

Chromium: CVE-2021-30549 Use after free in Spell check

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS7.7AI score0.00931EPSS
SaveExploits0
CNVD
CNVD
•added 2021/06/11 12:00 a.m.•39 views

Google Chrome post-release reuse vulnerability (CNVD-2021-43404)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in "Spell Check" in Google Chrome versions prior to 91.0.4472.101. No details of the vulnerability are available at this...

8.8CVSS7.5AI score0.00931EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/09 12:00 a.m.•1 views

PT-2021-5629

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 91.0.4472.101 Description The issue is related to a use after free in the spell check function of Google Chrome, which can be exploited by an attacker who convinces a user to install a malicious extension. This...

8.8CVSS0.00931EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/06/09 12:00 a.m.•27 views

Google Chrome 资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in "Spell Check" in Google Chrome versions prior to 91.0.4472.101. No details of the vulnerability are available at this...

8.8CVSS7.5AI score0.00931EPSS
SaveExploits0References13
Microsoft KB
Microsoft KB
•added 2020/04/10 12:00 a.m.•17 views

Update for RichTextBox controls and ALT codes in Windows 8.1

Update for RichTextBox controls and ALT codes in Windows 8.1 Summary This update fixes the following issues: You have a RichTextBox control in a Windows-based application in Windows 8.1. When you try to check the spelling within the control, the application crashes in the Msftedit.dll file. When...

6.5AI score
SaveExploits0
OSV
OSV
•added 2019/12/26 4:15 p.m.•18 views

CVE-2019-6027

Cross-site request forgery CSRF vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

8.8CVSS5.8AI score0.00678EPSS
SaveExploits0References2
NVD
NVD
•added 2019/12/26 4:15 p.m.•32 views

CVE-2019-6027

Cross-site request forgery CSRF vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

8.8CVSS8.9AI score0.00678EPSS
SaveExploits0References2
Prion
Prion
•added 2019/12/26 4:15 p.m.•21 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

6.8CVSS8.8AI score0.00678EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2019/12/26 3:16 p.m.•60 views

CVE-2019-6027

The CVE-2019-6027 entry concerns the WordPress WP Spell Check plugin (versions ≤ 7.1.9). A CSRF vulnerability allows an attacker to cause actions on behalf of an authenticated admin when a user views a malicious page, per multiple connected sources. Impact is described as hijacking administrator ...

8.8CVSS8.8AI score0.00678EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/12/26 3:16 p.m.•38 views

CVE-2019-6027

Cross-site request forgery CSRF vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

8.9AI score0.00678EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/12/26 12:00 a.m.•3 views

PT-2019-17952

Name of the Vulnerable Software and Affected Versions WP Spell Check versions 7.1.9 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. Recommendations For WP Spell Check versions 7.1.9 and...

8.8CVSS0.00678EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/26 12:00 a.m.•2 views

CVE-2019-6027: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

8.8CVSS6.5AI score0.00678EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2019/11/26 9:16 a.m.•18 views

WordPress Plugin "WP Spell Check" vulnerable to cross-site request forgery

Overview WordPress Plugin "WP Spell Check" provided by Tips and Tricks HQ contains a cross-site request forgery vulnerability CWE-352. Takuya Yamaguchi of Cryptography Laboratory,Department of Information and Communication Engineering,Tokyo Denki University directly reported these vulnerabilities...

8.8CVSS6.7AI score0.00678EPSS
SaveExploits0References5
CNVD
CNVD
•added 2019/11/26 12:00 a.m.•22 views

WordPress wp-spell-check Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-spell-check is a spell-checking plugin used in it. A cross-site request forgery vulnerability exists in WordPress wp-spell-check...

8.8CVSS6.7AI score0.00678EPSS
SaveExploits0References1
Rows per page
Query Builder