CVE-2022-1864

Use after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

CVE-2022-1864

Use after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

Design/Logic Flaw

Use after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

UBUNTU-CVE-2022-1864

Use after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

CVE-2022-1864

CVE-2022-1864 : In Google Chrome, a use-after-free in WebApp Installs (prior to 102.0.5005.61) can allow heap corruption when a user is convinced to install a malicious extension and performs specific interactions. The issue affects Chrome’s handling of WebApp Installs and is tied to a post-relea...

CVE-2022-1864

Use after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

CVE-2022-1864

Use after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

CVE-2022-1864

Use after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

CVE-2022-1864: Use After Free

Use after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction...

Mageia: Security Advisory (MGASA-2022-0241)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Wire is a secure messaging application. Wire is vulnerable to arbitrary HTML and Javascript execution via insufficient escaping when rendering @mentions in the wire-webapp. If a user receives and views a malicious message, arbitrary code is injected and executed in the context of the victim...

CVE-2022-29168 Cross Site Scripting in Wire Messages

Wire is a secure messaging application. Wire is vulnerable to arbitrary HTML and Javascript execution via insufficient escaping when rendering @mentions in the wire-webapp. If a user receives and views a malicious message, arbitrary code is injected and executed in the context of the victim...

CVE-2022-29168 Cross Site Scripting in Wire Messages

Wire is a secure messaging application. Wire is vulnerable to arbitrary HTML and Javascript execution via insufficient escaping when rendering @mentions in the wire-webapp. If a user receives and views a malicious message, arbitrary code is injected and executed in the context of the victim...

CVE-2022-29168

Wire is a secure messaging application. Wire is vulnerable to arbitrary HTML and Javascript execution via insufficient escaping when rendering "@mentions" in the wire-webapp. If a user receives and views a malicious message, arbitrary code is injected and executed in the context of the victim...

PT-2022-19426

Name of the Vulnerable Software and Affected Versions Wire versions prior to 2022-05-04-production.0 Wire-server versions prior to 2022-05-04 chart/4.11.0 Description The issue concerns arbitrary HTML and Javascript execution via insufficient escaping when rendering @mentions in the wire-webapp. ...

CVE-2022-29168: Improper Neutralization of Input During Web Page Generation

Wire is a secure messaging application. Wire is vulnerable to arbitrary HTML and Javascript execution via insufficient escaping when rendering @mentions in the wire-webapp. If a user receives and views a malicious message, arbitrary code is injected and executed in the context of the victim...

de.digitalcollections:iiif-bookshelf-webapp (>=2.3.1, <=2.5.1), io.gumga:gumga-application (>=1.5.23, <=4.0.4) +3 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.10.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.digitalcollections:iiif-bookshelf-webapp =2.3.1, =1.5.23,...

com.orange.fiware:openlpwa-iotagent (>=1.0.1, <=1.0.2), de.digitalcollections:iiif-bookshelf-webapp (>=2.2.0, <=2.3.0) +109 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.8.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.8.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.orange.fiware:openlpwa-iotagent =1.0.1, =2.2.0, =5.0.0.m1,...

com.epam.reportportal:commons-bugtracking (>=4.0.0, <=4.0.4), com.sinsz.c:bxfs-mongodb (1.0.1) +10 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.10.8.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.epam.reportportal:commons-bugtracking =4.0.0, =1.2, =2.6.0...

WebApp Provider Unauthorized Access

The vulnerability of the WebApp Provider component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...