CVE-2021-30565

Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page...

CVE-2021-30565

The CVE-2021-30565 entry corresponds to an out-of-bounds write in Chrome/Chromium’s Tab Groups feature, exploitable on Linux/ChromeOS before 92.0.4515.107 when a user is coaxed into loading a crafted page or extension. Connected sources (Astra Linux bulletin and ASA-202108-5) confirm the flaw is ...

Google Chrome out-of-bounds read vulnerability (CNVD-2021-62186)

Chrome is a web browsing tool developed by Google. An out-of-bounds read vulnerability exists in the Tab Strip in versions of Google Chrome prior to 92.0.4515.131. A remote attacker could exploit this vulnerability to obtain sensitive information...

Google Chrome out-of-bounds write vulnerability (CNVD-2021-62187)

Chrome is a web browsing tool developed by Google. An out-of-bounds write vulnerability exists in Tab Groups in versions of Google Chrome prior to 92.0.4515.131. A remote attacker could use this vulnerability to execute arbitrary code or cause a denial of service condition on the system...

CVE-2021-24488

The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back in the pages, leading to Reflected Cross-Site Scripting issues...

WordPress 插件跨站脚本漏洞

WordPress is a set of blogging platform developed by Wordpress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Post Grid plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress Po...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 10 security fixes, including: 1227777 High CVE-2021-30590: Heap buffer overflow in Bookmarks. Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2021-07-09 1229298 High CVE-2021-30591: Use after free in File System API. Reported by SorryMybad...

Google Chrome 缓冲区错误漏洞

Chrome is a web browsing tool developed by Google. An out-of-bounds read vulnerability exists in the Tab Strip in versions of Google Chrome prior to 92.0.4515.131. A remote attacker could exploit this vulnerability to obtain sensitive information...

Google Chrome 缓冲区错误漏洞

Chrome is a web browsing tool developed by Google. An out-of-bounds write vulnerability exists in Tab Groups in versions of Google Chrome prior to 92.0.4515.131. A remote attacker could use this vulnerability to execute arbitrary code or cause a denial of service condition on the system...

Chromium: CVE-2021-30565 Out of bounds write in Tab Groups

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Google Chrome out-of-bounds write vulnerability (CNVD-2021-62169)

Chrome is a web browsing tool developed by Google. An out-of-bounds write vulnerability exists in Tab Groups in versions of Google Chrome prior to 92.0.4515.107. An attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash...

[ASA-202107-47] chromium: multiple issues

Arch Linux Security Advisory ASA-202107-47 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-30565 CVE-2021-30566 CVE-2021-30567 CVE-2021-30568 CVE-2021-30569 CVE-2021-30571 CVE-2021-30572 CVE-2021-30573 CVE-2021-30574 CVE-2021-30575 CVE-2021-30576...

KN Fix Your Title <= 1.0.1 - Authenticated Stored XSS

The plugin was vulnerable to Authenticated Stored XSS in the separator field. 1. Install WordPress 5.7.2 2. Install and activate KN Fix Your Title 3. Navigate to Fix Title under Settings Tab Click on I have done this and enter the XSS payload into the Separator input field. 4. Click Save Changes...

Microsoft Edge 缓冲区错误漏洞

Chrome is a web browsing tool developed by Google. An out-of-bounds write vulnerability exists in Tab Groups in versions of Google Chrome prior to 92.0.4515.107. An attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash...

KLA12236 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface, obtain sensitive information, perform cross-site scripting attack. Below is a complete li...

CVE-2021-24447

The WP Image Zoom WordPress plugin before 1.47 did not validate its tab parameter before using it in the includeonce function, leading to a local file inclusion issue in the admin dashboard...

WordPress 路径遍历漏洞

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin WP Image Zoom has a file inclusion vulnerability in versions prior to 1.47. The vulnerability stems...

The vulnerability in the implementation of the “Tabs Group” extension for the Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability of the “Google Chrome Tab Group” extension relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure through a specially created HTML page...

CVE-2021-24426

The Backup by 10Web – Backup and Restore Plugin WordPress plugin through 1.0.20 does not sanitise or escape the tab parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue...

CVE-2021-24409

The Prismatic WordPress plugin before 2.8 does not escape the 'tab' GET parameter before outputting it back in an attribute, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator...