SUSE CVE-2021-37965

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

SUSE CVE-2021-37968

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

SUSE CVE-2021-37967

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

SUSE CVE-2021-38016

Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

SUSE CVE-2022-1139

Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

SUSE CVE-2022-2610

Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

SUSE CVE-2022-45407

If an attacker loaded a font using FontFace on a background worker, a use-after-free could have occurred, leading to a potentially exploitable crash. This vulnerability affects Firefox 107...

UBUNTU-CVE-2023-25730

A background script invoking requestFullscreen and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...

CVE-2022-47071

In NVS365 V01, the background network test function can trigger command execution...

PT-2023-15152 · Nvs365 · Nvs365

Name of the Vulnerable Software and Affected Versions: NVS365 version V01 Description: The background network test function in NVS365 can trigger command execution, potentially leading to unauthorized access or control. Recommendations: For NVS365 version V01, as a temporary workaround, consider...

NVS365 安全漏洞

NVS365 is a network video server from NVS365. A security vulnerability exists in NVS365 version V01, which stems from a command execution that can be triggered by the background network test function...

CVE-2022-47071

In NVS365 V01, the background network test function can trigger command execution...

Gitlab -- Multiple Vulnerabilities

Gitlab reports: Denial of Service via arbitrarily large Issue descriptions CSRF via file upload allows an attacker to take over a repository Sidekiq background job DoS by uploading malicious CI job artifact zips Sidekiq background job DoS by uploading a malicious Helm package...

PT-2025-49495

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc2 19 Description The Linux kernel contains an issue within the dm cache component. Specifically, the background tracker's queued work is not properly freed in the btracker destroy function. This can lead ...

CVE-2023-20916

In getMainActivityLaunchIntent of LauncherAppsService.java, there is a possible way to bypass the restrictions on starting activities from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

Server side request forgery (ssrf)

An issue in the website background of taocms v3.0.2 allows attackers to execute a Server-Side Request Forgery SSRF...

CVE-2022-44297

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...

CVE-2022-44297

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...

PT-2023-15126 · Taocms · Taocms

Name of the Vulnerable Software and Affected Versions: taocms version 3.0.2 Description: An issue in the website background of taocms allows attackers to execute a Server-Side Request Forgery SSRF. Recommendations: For taocms version 3.0.2, at the moment, there is no information about a newer...

CVE-2022-46998

CVE-2022-46998 affects taocms v3.0.2: a vulnerability in the website background enables Server-Side Request Forgery (SSRF). CVSS 3.1 base score 9.8 (NETWORK, LOW complexity, NONE user interaction, HIGH impact on Confidentiality/Integrity/Availability). Documented exploitation exists (POC) per one...