1015 matches found
Microsoft Edge 权限许可和访问控制问题漏洞
Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge Chromium-based is vulnerable to a privilege permission and access control issue. An attacker could exploit the vulnerability to elevate privileges...
Microsoft Edge 安全特征问题漏洞
Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge suffers from a security signature issue vulnerability that allows remote attackers to trick victims into visiting specially designed websites to obtain sensitive information or...
Google Chrome 资源管理错误漏洞
Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in TabStrip in versions prior to Google Chrome 91.0.4472.77, which can be exploited by an attacker to exploit heap...
Command Execution Vulnerability in Vivaldi Browser
Vivaldi Browser is a new generation browser based on the Chromium / Blink kernel created by the former founder and CEO of Opera. A command execution vulnerability exists in Vivaldi, which can be exploited by an attacker to gain control of the server...
Cross-site Scripting (XSS)
gwtupload is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious script in a user's browser via the name parameter of file upload functionality...
The vulnerability of the `dirvote_add_signatures_to_pending_consensus()` function in the Tor browser, related to the lack of use of the `assert()` function, allows a violator to trigger a service failure.
The vulnerability of the dirvoteaddsignaturestopendingconsensus function in the Tor browser is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to trigger a service failure remotely...
Samsung Internet Input Validation Error Vulnerability
Samsung Internet is a cell phone application from Samsung South Korea. It provides a browser function. A security vulnerability exists in Samsung Internet prior to version 13.2.1.46, which can be exploited by an attacker to launch unexported activities in Samsung Browser via a malicious deeplink...
The vulnerability of the Google Chrome browser’s media component, which allows a hacker to access confidential data
The vulnerability of the Google Chrome browser’s media component is related to security issues with the user interface. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...
UBUNTU-CVE-2021-21187
Insufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
CVE-2021-23958
CVE-2021-23958 affects Mozilla Firefox versions before 85. The issue could confuse the browser into transferring a screen sharing state between tabs, potentially leaking screen sharing permissions/information. Affected product: Firefox (pre-85). Underlying cause: state transfer between tabs durin...
The vulnerability of the Mozilla Firefox browser, related to the use of memory after its release, allows a hacker to trigger a service failure.
The vulnerability of the Mozilla Firefox browser is related to the use of a memory area after it is freed. Exploiting this vulnerability can allow an attacker, working remotely, to cause a service failure...
UBUNTU-CVE-2021-23953
If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data. This vulnerability affects Firefox 85, Thunderbird 78.7, and Firefox ESR 78.7...
Mozilla Firefox Input Validation Error Vulnerability (CNVD-2021-04654)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 84, whereby when a user types a URL into the address bar or search bar and quickly presses the enter key, the website sometimes...
The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after release, allows a hacker to trigger a service failure.
The vulnerabilities of Firefox, Firefox ESR, and the email client Thunderbird are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...
Microsoft Edge Security Breach
Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge. The following products and editions are affected: Microsoft Edge EdgeHTML-based in Windows 10 Version 20H2 for 32-bit Systems, Microsoft Edge...
CVE-2020-35719
Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/Applications/Search/index.jsp file via the added parameter. NOTE: This vulnerability only affects products that are no longer supported by...
Cross site scripting
Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the ReportPreview.do file via the referer parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
Cross site scripting
Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the Error.jsp file via the err parameter or indirectly via the cpr, tcp, or abs parameter. NOTE: This vulnerability only affects products that are no...
CVE-2020-35726
Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/Applications/Reports/index.jsp file via the by parameter. NOTE: This vulnerability only affects products that are no longer supported by t...