2782 matches found
Cross-site Scripting (XSS)
pimcore/pimcore is vulnerable to cross-site scripting attacks. The library does not properly validate the Key field in the Navigation & Properties tab, allowing an attacker to inject and execute malicious javascript...
CVE-2022-0429
The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard, leading to an unauthenticated stored Cross-Site Scripting vulnerability...
CVE-2022-0429
The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard, leading to an unauthenticated stored Cross-Site Scripting vulnerability...
PT-2022-13178
Name of the Vulnerable Software and Affected Versions: WP Cerber Security, Anti-spam & Malware Scan WordPress plugin versions prior to 8.9.6 Description: The issue is related to an unauthenticated stored Cross-Site Scripting problem. It occurs because the $url variable is not properly sanitized...
WordPress plugin WP Cerber Security, Anti-spam & Malware Scan 跨站脚本漏洞
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress WP Cerber Security, Anti-spam & Malware Scan Plugin...
WordPress EDD Tab Manager plugin <= 1.3.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress EDD Tab Manager plugin versions = 1.3.0. Solution Update the WordPress EDD Tab Manager plugin to the latest available version at least 1.3.1...
WordPress EDD Tab Manager plugin <= 1.3.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress EDD Tab Manager plugin versions = 1.3.0. Solution Update the WordPress EDD Tab Manager plugin to the latest available version at least 1.3.1...
The vulnerability of the Tab Groups component in Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s Tab Groups component is caused by an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0042-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0042-1 advisory. - Use after free in File Manager. CVE-2022-0603 - Heap buffer overflow in Tab Groups. CVE-2022-0604 - Use after free in Webstore API...
Heap Buffer Overflow
Google Chrome is vulnerable to heap buffer overflow. The vulnerability exist in Tab Groups...
Chromium: CVE-2022-0604 Heap buffer overflow in Tab Groups
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
KLA12464 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in File Manager can be exploit...
The vulnerability of the Thumbnail Tab Strip component of the Google Chrome browser, which allows a hacker to circumvent existing security restrictions
The vulnerability of the Thumbnail Tab Strip component in Google Chrome browser relates to the use of memory after it is released. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...
Google Chrome Tab Groups Buffer Overflow Vulnerability
Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in Google Chrome Tab Groups, which can be exploited by an attacker to cause a buffer overflow, execute arbitrary code, or cause a denial of service condition on a system...
Chrome Zero-Day Under Active Attack: Patch ASAP
Google on Monday issued 11 security fixes for its Chrome browser, including a high-severity zero-day bug that’s actively being jumped on by attackers in the wild. In a brief update, Google described the weakness, tracked as CVE-2022-0609, as a use-after-free vulnerability in Chrome’s Animation...
New Chrome 0-Day Bug Under Active Attack – Update Your Browser ASAP!
Google on Monday rolled out fixes for eight security issues in the Chrome web browser, including a high-severity vulnerability that's being actively exploited in real-world attacks, marking the first zero-day patched by the internet giant in 2022. The shortcoming, tracked CVE-2022-0609, is...
Vicidial 安全漏洞
Vicidial is a software suite from Vicidial, Inc. designed to interact with the Asterisk open source Pbx telephony system as a complete inbound/outbound contact center suite with inbound email support. Vicidial suffers from a cross-site scripting vulnerability that stems from the discovery of a...
FreeBSD : chromium -- multiple vulnerabilities (e12432af-8e73-11ec-8bc4-3065ec8fd3ec)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e12432af-8e73-11ec-8bc4-3065ec8fd3ec advisory. - Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed ...