Lucene search
K

360 matches found

UbuntuCve
UbuntuCve
added 2021/10/08 10:15 p.m.30 views

CVE-2021-37959

Use after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who convinced a user to enage in a series of user gestures to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.00113EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/10/08 9:30 p.m.20 views

CVE-2021-37959

Use after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who convinced a user to enage in a series of user gestures to potentially exploit heap corruption via a crafted HTML page...

9.3AI score0.00113EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2021/10/08 9:30 p.m.22 views

CVE-2021-37959

Use after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who convinced a user to enage in a series of user gestures to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.6AI score0.00113EPSS
Exploits0
CVE
CVE
added 2021/10/08 9:30 p.m.148 views

CVE-2021-37959

CVE-2021-37959 affects Google Chrome Task Manager: use-after-free leading to heap corruption when a user is convinced to perform a sequence of gestures on a crafted HTML page. Documented in multiple advisories (e.g., Debian DSA-5046-1) as a Chromium/Chrome vulnerability with impact to code execut...

8.8CVSS9AI score0.00113EPSS
Exploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/10/01 12:0 a.m.46 views

FreeBSD : chromium -- multiple vulnerabilities (3551e106-1b17-11ec-a8a7-704d7b472482)

Chrome Releases reports : This update contains 19 security fixes, including : - 1243117 High CVE-2021-37956: Use after free in Offline use. Reported by Huyna at Viettel Cyber Security on 2021-08-24 - 1242269 High CVE-2021-37957: Use after free in WebGPU. Reported by Looben Yang on 2021-08-23 -...

8.8CVSS7AI score0.02428EPSS
Exploits3References18
Microsoft CVE
Microsoft CVE
added 2021/09/24 3:8 p.m.30 views

Chromium: CVE-2021-37959 Use after free in Task Manager

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.00113EPSS
Exploits0
Kaspersky
Kaspersky
added 2021/09/24 12:0 a.m.41 views

KLA12299 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A use after free vulnerability in Tab...

9.6CVSS9.7AI score0.14782EPSS
Exploits3References20
CNVD
CNVD
added 2021/09/22 12:0 a.m.29 views

Google Chrome Task Manager code execution vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Task Manager. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

8.8CVSS5.1AI score0.00113EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/09/21 12:0 a.m.2 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Task Manager. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

8.8CVSS9.1AI score0.00113EPSS
Exploits0References14
Tenable Nessus
Tenable Nessus
added 2021/09/21 12:0 a.m.76 views

Google Chrome < 94.0.4606.54 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 94.0.4606.54. It is, therefore, affected by multiple vulnerabilities as referenced in the 202109stable-channel-update-for-desktop21 advisory. - Out of bounds read in libjpeg-turbo in Google Chrome prior to 94.0.4606.54...

8.8CVSS7.1AI score0.02428EPSS
Exploits3References33
NVD
NVD
added 2021/08/25 7:15 p.m.6 views

CVE-2021-31989

A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memory dump may potentially contain credentials of connected Axis devices...

5.3CVSS0.00138EPSS
Exploits0References1
OSV
OSV
added 2021/08/25 7:15 p.m.0 views

CVE-2021-31989

A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memory dump may potentially contain credentials of connected Axis devices...

5.3CVSS5.8AI score0.00138EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/08/25 6:29 p.m.13 views

CVE-2021-31989

A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memory dump may potentially contain credentials of connected Axis devices...

5.5AI score0.00138EPSS
Exploits0References1
CVE
CVE
added 2021/08/25 6:29 p.m.49 views

CVE-2021-31989

The CVE-2021-31989 entry affects AXIS Device Manager: a user with host permissions can, under certain conditions, extract a memory dump from the built-in Windows Task Manager, potentially exposing credentials of connected Axis devices. Documented across multiple sources (Axis tech note, Red Hat a...

5.3CVSS5.2AI score0.00138EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/08/25 12:0 a.m.1 views

AXIS Device Manger 安全漏洞

AXIS Device Manger is an on-premise tool from AXIS Sweden that provides a simple, cost-effective and secure way to perform device management. A security vulnerability exists in AXIS Device Manger. The vulnerability stems from the fact that a user with host privileges to log in to the AXIS Device...

5.3CVSS5.8AI score0.00138EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/08/25 12:0 a.m.2 views

PT-2021-19618 · Axis · Axis Device Manager

Name of the Vulnerable Software and Affected Versions: AXIS Device Manager affected versions not specified Description: A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manage...

5.3CVSS6.8AI score0.00138EPSS
Exploits0References4
OSV
OSV
added 2021/06/22 11:15 a.m.1 views

CVE-2021-0571

In ActivityTaskManagerService.startActivity and AppTaskImpl.startActivity of ActivityTaskManagerService.java and AppTaskImpl.java, there is possible access to restricted activities due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privilege...

7.8CVSS7.2AI score
Exploits0References1
vulnersOsv
vulnersOsv
added 2021/05/18 10:38 a.m.0 views

faradaysec (>=3.14.1 <=3.14.4), flask-authoob (>=0.0.21 <=0.0.34) +4 more potentially affected by CVE-2021-32618 via flask-security-too (>=3.2.0rc1 <=4.0.1)

flask-security-too PYPI version =3.2.0rc1, =3.14.1, =0.0.21, =0.3.1, =4.22.0, =6.0.1, =6.0.0, =6.4.0 Source cves: CVE-2021-32618 Source advisory: SNYK:PYTHON-FLASKSECURITYTOO-1293190...

6.1CVSS6.5AI score0.17067EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2021/04/08 4:46 p.m.1 views

flask-authoob (>=0.0.21 <=0.0.34), pidb (=6.0.1) +1 more potentially affected by unknown CVE via flask-security-too (>=3.2.0rc1 <=3.3.3)

flask-security-too PYPI version =3.2.0rc1, =0.0.21, =6.0.0, =6.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-FXQ4-R6MR-9X64...

5.8AI score
Exploits0
vulnersOsv
vulnersOsv
added 2021/01/11 9:15 p.m.1 views

pidb (=6.0.1), task-manager (>=6.0.0 <=6.3.0) potentially affected by CVE-2021-21241 via flask-security-too (>=3.3.0 <=3.3.3)

flask-security-too PYPI version =3.3.0, =6.0.0, =6.3.0 Source cves: CVE-2021-21241 Source advisory: OSV:PYSEC-2021-91...

7.4CVSS7.1AI score0.00421EPSS
Exploits0
Rows per page
Query Builder