20951 matches found
CVE-2024-7575
Progress Telerik UI for WPF prior to 2024 Q3 (2024.3.924) is affected by a command-injection vulnerability due to improper neutralization of hyperlink elements. Affected component: UI for WPF controls; root cause is inadequate handling of hyperlink elements. Impact per sources: high/critical risk...
CVE-2024-7679
Summary: CVE-2024-7679 affects Progress Telerik UI for WinForms prior to 2024 Q3 (2024.3.924). The root cause is improper neutralization of hyperlink elements, enabling a command injection attack. What’s affected: Progress Telerik UI for WinForms versions before 2024.3.924. Impact: potential comm...
CVE-2024-7679 Improper neutralization special element in hyperlinks
In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...
MAL-2024-8962 Malicious code in visa-ui-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd965500f041551c6ece4a137b88df7d7c601228f7e039a8130a8514a48b98e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in visa-ui-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd965500f041551c6ece4a137b88df7d7c601228f7e039a8130a8514a48b98e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2023-7281
Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
SUSE CVE-2023-7282
Inappropriate implementation in Navigation in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...
SUSE CVE-2024-7019
Inappropriate implementation in UI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
SUSE CVE-2024-7020
Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
Telerik UI 代码问题漏洞
Telerik UI is a suite of UI User Interface controls for application development from Telerik Bulgaria. A code issue vulnerability exists in Telerik UI versions prior to 2024.3.924, which stems from a possible code execution attack via an insecure deserialization vulnerability...
openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0312-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0312-1 advisory. - Chromium 129.0.6668.58 stable released 2024-09-17 boo1230678 CVE-2024-8904: Type Confusion in V8 CVE-2024-8905: Inappropriate implementation in...
Telerik UI 代码问题漏洞
Telerik UI is a suite of UI User Interface controls for application development from Telerik Bulgaria. A code issue vulnerability exists in Telerik UI versions prior to 2024.3.924, which stems from a possible code execution attack via an insecure deserialization vulnerability...
Unspecified Vulnerability in Google Chrome (CNVD-2024-39250)
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 124.0.6367.60, which stems from an improper UI implementation and can be exploited by remote attackers to perform UI spoofing via specific UI gestures...
Google Chrome Security Bypass Vulnerability (CNVD-2024-39742)
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in versions prior to Google Chrome 124.0.6367.60, which can be exploited by remote attackers to conduct UI spoofing via specially crafted HTML pages...
Unspecified Vulnerability in Google Chrome (CNVD-2024-39248)
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome prior to version 119.0.6045.105, which stems from an improper implementation of the compositing feature and can be exploited by remote attackers to perform UI spoofing via a crafted...
OPENSUSE-SU-2024:0312-1 Security update for chromium
This update for chromium fixes the following issues: - Chromium 129.0.6668.58 stable released 2024-09-17 boo1230678 CVE-2024-8904: Type Confusion in V8 CVE-2024-8905: Inappropriate implementation in V8 CVE-2024-8906: Incorrect security UI in Downloads CVE-2024-8907: Insufficient data validation i...
OPENSUSE-SU-2024:0311-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 129.0.6668.58 stable released 2024-09-17 boo1230678 CVE-2024-8904: Type Confusion in V8 CVE-2024-8905: Inappropriate implementation in V8 CVE-2024-8906: Incorrect security UI in Downloads CVE-2024-8907: Insufficient data validation in...
CVE-2024-7019
Inappropriate implementation in UI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
