48650 matches found
Drupal core 安全漏洞
Drupal core is a free, open source content management system developed in PHP by the Drupal community. A security vulnerability in Drupal core versions prior to 10.4.9, 10.5.0 through 10.5.6, 11.0.0 through 11.1.9, and 11.2.0 through 11.2.8 stems from the use of browser caches that contain...
CVE-2025-13083: Use of Web Browser Cache Containing Sensitive Information
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before...
EUVD-2025-197890
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2025-13229
A Type Confusion vulnerability exists in the V8 engine of Google Chrome (and Chromium) prior to version 142.0.7444.59 . The flaw stems from errors in handling object types, which can be exploited by a remote attacker to trigger heap corruption via a specially crafted HTML page. This vulnerability...
CVE-2025-13228
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2025-13226
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2025-13224
Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2025-13224
Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2025-13223
Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
GO-2025-4118 File Browser has risk of HTTP Request/Response smuggling through vulnerable dependency in github.com/filebrowser/filebrowser
File Browser has risk of HTTP Request/Response smuggling through vulnerable dependency in github.com/filebrowser/filebrowser...
GO-2025-4117 File Browser is Vulnerable to Insecure Direct Object Reference (IDOR) in Share Deletion Function in github.com/filebrowser/filebrowser
File Browser is Vulnerable to Insecure Direct Object Reference IDOR in Share Deletion Function in github.com/filebrowser/filebrowser...
The vulnerability of the Prisma Browser, related to the unencrypted storage of confidential information, allows attackers to gain unauthorized access to protected data.
The vulnerability of the Prisma Browser is related to the unencrypted storage of confidential information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Prisma Browser, related to improper protection of the alternate path, allows a hacker to compromise the confidentiality of the protected information.
The vulnerability of the Prisma Browser is related to improper protection of the alternative path. Exploiting this vulnerability allows an attacker to compromise the confidentiality of the protected information...
Google Chrome 安全漏洞
Google Chrome is a web browser developed by Google Inc. Google Chrome suffers from a type obfuscation vulnerability that stems from V8 type obfuscation, which can be exploited by an attacker to cause heap corruption...
The vulnerability of the Prisma Browser, related to improper checking of integrity values, allows attackers to circumvent existing security restrictions.
The vulnerability of the Prisma Browser is related to improper checking of integrity values. Exploiting this vulnerability can allow attackers to bypass existing security restrictions...
[SECURITY] Fedora 43 Update: chromium-142.0.7444.162-1.fc43
Chromium is an open-source web browser, powered by WebKit Blink...
CVE-2025-4618
A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser. Browser self-protection should be enabled to mitigate this issue...
CVE-2025-4617
An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser. Browser self-protection should be enabled to mitigate this issue...
CVE-2025-4616
An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to revert the browser’s security controls...
CVE-2025-54346
A Reflected Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...