Lucene search
+L

7444 matches found

CVE
CVE
added 2021/02/23 10:45 p.m.85 views

CVE-2021-21323

Brave Browser vulnerability CVE-2021-21323 involves a DNS leak tied to the CNAME-based adblocking feature. Affected: Brave Desktop/Brave browser versions 1.17.73–1.20.103. Root cause: the CNAME adblocking flow could initiate DNS requests that bypassed the Brave Tor proxy, causing DNS traffic from...

5.3CVSS5.3AI score0.0226EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2021/02/22 10:15 p.m.10 views

UBUNTU-CVE-2021-21156

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script...

8.8CVSS7.5AI score0.02703EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/02/22 12:00 a.m.48 views

Debian DSA-4858-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2021-21148 Mattias Buelens discovered a buffer overflow issue in the v8 JavaScript library. - CVE-2021-21149 Ryoya Tsukasaki discovered a stack overflow issue in the Data Transfer implementation. - CVE-2021-21150 Wooj...

9.6CVSS8.8AI score0.19815EPSS
SaveExploits8References23
BDU FSTEC
BDU FSTEC
added 2021/02/19 12:00 a.m.11 views

The vulnerability of the isolated iframe in the Google Chrome web browser allows a perpetrator to circumvent existing security restrictions.

The vulnerability in the isolated environment of the iframe in the Google Chrome web browser is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

7.3CVSS6.9AI score0.04743EPSS
SaveExploits1References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/02/19 12:00 a.m.13 views

The vulnerability of the GPU Process web browser in Google Chrome, which allows a hacker to execute arbitrary code.

The vulnerability of the GPU Process web browser in Google Chrome is caused by a buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

7.3CVSS8.3AI score0.01273EPSS
SaveExploits1References12Affected Software6
Ubuntu
Ubuntu
added 2021/02/18 12:29 p.m.149 views

USN-4739-1: WebKitGTK vulnerability

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

8.8CVSS7.9AI score0.01857EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2021/02/18 12:00 a.m.23 views

Fedora: Security Advisory for chromium (FEDORA-2021-7fb30b9381)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS9.6AI score0.19815EPSS
SaveExploits0References4
Fedora
Fedora
added 2021/02/17 5:09 a.m.91 views

[SECURITY] Fedora 32 Update: chromium-88.0.4324.150-1.fc32

Chromium is an open-source web browser, powered by WebKit Blink...

9.6CVSS1.8AI score0.19815EPSS
SaveExploits0
Fedora
Fedora
added 2021/02/13 1:18 a.m.75 views

[SECURITY] Fedora 32 Update: firefox-85.0.1-1.fc32

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

2.7AI score
SaveExploits0
NVD
NVD
added 2021/02/12 7:15 a.m.33 views

CVE-2021-20644

ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page...

6.1CVSS0.00594EPSS
SaveExploits0References2
Prion
Prion
added 2021/02/12 7:15 a.m.21 views

Code injection

ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page...

4.3CVSS6.5AI score0.00594EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/02/12 6:15 a.m.41 views

CVE-2021-20644

ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page...

6.7AI score0.00594EPSS
SaveExploits0References2
CVE
CVE
added 2021/02/12 6:15 a.m.91 views

CVE-2021-20644

CVE-2021-20644 affects ELECOM WRC-1467GHBK-A. The vulnerability arises in the web setup page where displaying a specially crafted SSID can cause arbitrary scripts to execute in a user’s browser (cross-site scripting). The connected documents confirm the affected product and the impact as script e...

6.1CVSS6.5AI score0.00594EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2021/02/10 12:00 a.m.23 views

Fedora: Security Advisory for chromium (FEDORA-2021-05afa65d39)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS9.6AI score0.19815EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/02/09 12:00 a.m.21 views

Debian: Security Advisory (DSA-4846-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS7.3AI score0.23406EPSS
SaveExploits4References4
Debian
Debian
added 2021/02/07 7:07 p.m.188 views

[SECURITY] [DSA 4846-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4846-1 [email protected] https://www.debian.org/security/ Michael Gilbert February 07, 2021 https://www.debian.org/security/faq -...

6.9CVSS0.7AI score0.23406EPSS
SaveExploits4
NVD
NVD
added 2021/02/04 5:15 a.m.25 views

CVE-2021-3401

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer...

9.8CVSS0.10478EPSS
SaveExploits0References2
OSV
OSV
added 2021/02/04 5:15 a.m.17 views

CVE-2021-3401

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer...

9.8CVSS7.9AI score
SaveExploits0References2
Prion
Prion
added 2021/02/04 5:15 a.m.19 views

Code injection

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer...

7.5CVSS9.8AI score0.10478EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/02/04 4:47 a.m.35 views

CVE-2021-3401

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer...

10AI score0.10478EPSS
SaveExploits0References2
Rows per page
Query Builder