CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2095 matches found

CNNVD•added 2021/10/19 12:00 a.m.•24 views

Google Chrome Security Feature Vulnerability

Chrome is a web browsing tool developed by Google. versions prior to Google Chrome 95.0.4638.54 are vulnerable to an improper implementation of WebApp Installer. An attacker could potentially override and spoof the content of the multi-function box URL bar via a crafted HTML page...

6.5CVSS5.5AI score0.0081EPSS

SaveExploits0References13

Tenable Nessus•added 2021/10/04 12:00 a.m.•652 views

Jetty < 9.4.39 Multiple Vulnerabilities

According to its self-reported version number, the instance of Jetty hosted on the remote web server is prior to 9.4.39, 10.0.x prior to 10.0.2 or 11.0.x prior to 11.0.2. It is, therefore, affected by multiple vulnerabilities: - An issue where CPU usage can reach 100% with a large invalid TLS...

7.8CVSS6.6AI score0.82371EPSS

SaveExploits9References6

Cvelist•added 2021/09/30 7:20 p.m.•45 views

CVE-2021-41101 CORS `Access-Control-Allow-Origin` settings are too lenient

wire-server is an open-source back end for Wire, a secure collaboration platform. Before version 2.106.0, the CORS Access-Control-Allow-Origin header set by nginz is set for all subdomains of .wire.com including wire.com. This means that if somebody were to find an XSS vector in any of the...

5.7CVSS5.6AI score0.00708EPSS

SaveExploits0References1

Tenable Nessus•added 2021/09/26 12:00 a.m.•54 views

openSUSE 15 Security Update : opera (openSUSE-SU-2021:1310-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1310-1 advisory. - Chromium: CVE-2021-30606 Use after free in Blink CVE-2021-30606 - Chromium: CVE-2021-30607 Use after free in Permissions CVE-2021-30607 -...

8.8CVSS7.2AI score0.0559EPSS

SaveExploits1References39

Tenable Nessus•added 2021/09/23 12:00 a.m.•50 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1303-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1303-1 advisory. - Chromium: CVE-2021-30606 Use after free in Blink CVE-2021-30606 - Chromium: CVE-2021-30607 Use after free in Permissions CVE-2021-30607 -...

9.6CVSS7.1AI score0.6319EPSS

SaveExploits4References57

Tenable Nessus•added 2021/09/22 12:00 a.m.•53 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1300-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1300-1 advisory. - Chromium: CVE-2021-30606 Use after free in Blink CVE-2021-30606 - Chromium: CVE-2021-30607 Use after free in Permissions CVE-2021-30607 -...

9.6CVSS7.1AI score0.6319EPSS

SaveExploits4References57

Packet Storm•added 2021/09/22 12:00 a.m.•243 views

E-Negosyo System 1.0 Shell Upload

Exploit Title: E-Negosyo System 1.0 - Authenticated RCE Date: 2021-09-22 Exploit Author: Janik Wehrli Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/bsenordering0.zip Version: 1.0 Category: Webapps...

7.4AI score

SaveExploits0

zdt•added 2021/09/22 12:00 a.m.•179 views

E-Negosyo System 1.0 Shell Upload Vulnerability

Exploit Title: E-Negosyo System 1.0 - Authenticated RCE Exploit Author: Janik Wehrli Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/bsenordering0.zip Version: 1.0 Category: Webapps Tested on: Ubuntu...

7.4AI score

SaveExploits0

OPENSUSE Linux•added 2021/09/22 12:00 a.m.•116 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1303-1 Rating: important References: 1190096 1190476 Cross-References: CVE-2021-30606 CVE-2021-30607 CVE-2021-30608 CVE-2021-30609 CVE-2021-30610 CVE-2021-30611 CVE-2021-30612 CVE-2021-30613 CVE-2021-30614...

9.6CVSS7.1AI score0.6319EPSS

SaveExploits4References2

zdt•added 2021/09/20 12:00 a.m.•254 views

T-Soft E-Commerce 4 - change (admin credentials) Cross-Site Request Forgery Vulnerability

Exploit Title: T-Soft E-Commerce 4 - change 'admin credentials' Cross-Site Request Forgery CSRF Exploit Author: Alperen Ergel Software Homepage: https://www.tsoft.com.tr/ Version : v4 Tested on: Kali Linux 2021.4 / xammp Category: WebApp Google Dork: intext:'T-Soft E-Ticaret Sistemleriyle...

0.6AI score

SaveExploits0

Veracode•added 2021/09/15 2:04 a.m.•27 views

Denial Of Service (DoS)

chromium is vulnerable to denial of service. The vulnerability exists due to a use after free in WebApp Installs in Google Chrome which allows an attacker who may convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.4AI score0.0407EPSS

SaveExploits0References8Affected Software2