Lucene search
+L

3532 matches found

Positive Technologies
Positive Technologies
•added 2021/02/16 12:00 a.m.•2 views

PT-2021-2016

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 88.0.4324.182 Description A heap buffer overflow in the Tab Strip of Google Chrome allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pag...

9.6CVSS7AI score0.01422EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2021/02/16 12:00 a.m.•6 views

PT-2021-2015

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 88.0.4324.182 Description The issue is a heap buffer overflow in the Tab Strip element of Google Chrome on Windows, which could allow a remote attacker who has compromised the renderer process to potentially...

10CVSS0.01324EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2021/02/16 12:00 a.m.•42 views

openSUSE Security Update : opera (openSUSE-2021-296)

This update for opera fixes the following issues : - Update to version 74.0.3911.107 - CHR-8311 Update chromium on desktop-stable-88-3911 to 88.0.4324.150 - DNA-90329 Implement clientcapabilities negotiation for Flow / Sync - DNA-90560 Search Tabs Open Tabs On Top - DNA-90620 Add opauto tests for...

8.8CVSS8.4AI score0.19968EPSS
SaveExploits0References2
NVD
NVD
•added 2021/02/15 9:15 p.m.•49 views

CVE-2020-35734

Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Users tab. To exploit this, one must login to the administration panel and edit an arbitrary user's data username, displayed name, etc.. NOTE: This...

7.2CVSS0.06772EPSS
SaveExploits4References4
OSV
OSV
•added 2021/02/15 9:15 p.m.•13 views

CVE-2020-35734

Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Users tab. To exploit this, one must login to the administration panel and edit an arbitrary user's data username, displayed name, etc.. NOTE: This...

7.2CVSS7.3AI score0.06772EPSS
SaveExploits4References4
Prion
Prion
•added 2021/02/15 9:15 p.m.•30 views

Code injection

Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Users tab. To exploit this, one must login to the administration panel and edit an arbitrary user's data username, displayed name, etc.. NOTE: This...

6.5CVSS7.2AI score0.06772EPSS
SaveExploits4References4Affected Software1
Vulnrichment
Vulnrichment
•added 2021/02/15 8:49 p.m.•21 views

CVE-2020-35734

Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Users tab. To exploit this, one must login to the administration panel and edit an arbitrary user's data username, displayed name, etc.. NOTE: This...

7.5AI score0.06772EPSS
SaveExploits4References4
Cvelist
Cvelist
•added 2021/02/15 8:49 p.m.•56 views

CVE-2020-35734

Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Users tab. To exploit this, one must login to the administration panel and edit an arbitrary user's data username, displayed name, etc.. NOTE: This...

7.3AI score0.06772EPSS
SaveExploits4References4
OSV
OSV
•added 2021/02/15 1:04 p.m.•14 views

OPENSUSE-SU-2021:0296-1 Security update for opera

This update for opera fixes the following issues: - Update to version 74.0.3911.107 - CHR-8311 Update chromium on desktop-stable-88-3911 to 88.0.4324.150 - DNA-90329 Implement clientcapabilities negotiation for Flow / Sync - DNA-90560 Search Tabs Open Tabs On Top - DNA-90620 Add opauto tests for...

8.8CVSS9.4AI score0.19968EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/02/15 12:00 a.m.•22 views

PT-2021-11840 · Batflat · Batflat

Name of the Vulnerable Software and Affected Versions: Batflat version 1.3.6 Description: The issue allows an authenticated user to perform code injection, and consequently Remote Code Execution, via the input fields of the Users tab. To exploit this, one must login to the administration panel an...

7.2CVSS7.5AI score0.06772EPSS
SaveExploits4References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/15 12:00 a.m.•4 views

CVE-2020-35734: Improper Control of Generation of Code

Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Users tab. To exploit this, one must login to the administration panel and edit an arbitrary user's data username, displayed name, etc.. NOTE: This...

7.2CVSS6AI score0.06772EPSS
SaveExploits4References2
NVD
NVD
•added 2021/02/09 3:15 p.m.•23 views

CVE-2021-21144

Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

8.8CVSS0.00873EPSS
SaveExploits0References5
OSV
OSV
•added 2021/02/09 3:15 p.m.•7 views

DEBIAN-CVE-2021-21144

Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

8.8CVSS8.8AI score0.00873EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/02/09 3:15 p.m.•13 views

CVE-2021-21144

Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

8.8CVSS7.4AI score0.00873EPSS
SaveExploits0References8
Prion
Prion
•added 2021/02/09 3:15 p.m.•34 views

Heap overflow

Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

6.8CVSS8.9AI score0.00873EPSS
SaveExploits0References5Affected Software2
UbuntuCve
UbuntuCve
•added 2021/02/09 3:15 p.m.•36 views

CVE-2021-21144

Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

8.8CVSS7.4AI score0.00873EPSS
SaveExploits0References3
OSV
OSV
•added 2021/02/09 3:15 p.m.•9 views

UBUNTU-CVE-2021-21144

Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

8.8CVSS7.5AI score0.00873EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/02/09 2:55 p.m.•50 views

CVE-2021-21144

Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

9.3AI score0.00873EPSS
SaveExploits0References5
Mend
Mend
•added 2021/02/09 2:55 p.m.•1 views

CVE-2021-21144

Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

8.8CVSS0.00873EPSS
SaveExploits0References9
CVE
CVE
•added 2021/02/09 2:55 p.m.•210 views

CVE-2021-21144

CVE-2021-21144 is a vulnerability in Chromium’s Tab Groups feature, where a heap buffer overflow prior to 88.0.4324.146 could allow a malicious extension to trigger heap corruption and potentially execute arbitrary code. Affected software is the Chromium browser (before 88.0.4324.146). The root c...

8.8CVSS8.9AI score0.00873EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder