6710 matches found
CVE-2021-37998
Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-37998
Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-37998
CVE-2021-37998 is a use-after-free vulnerability in the Garbage Collection component of the Chromium browser engine (Chrome) prior to 95.0.4638.69. The issue could allow a remote attacker to cause heap corruption via a crafted HTML page, potentially enabling arbitrary code execution. Public recor...
CVE-2021-37998: Use After Free
Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...
A Simple 5-Step Framework to Minimize the Risk of a Data Breach
Today's businesses run on data. They collect it from customers at every interaction, and they use it to improve efficiency, increase their agility, and provide higher levels of service. But it's becoming painfully obvious that all of that data businesses collect has also made them an enticing...
CVE-2021-37322
GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c...
DuckDuckGo Wants to Stop Apps From Tracking You on Android
The privacy-focused tech company's latest update promises to block invasive data collection across your whole phone...
Gcc C++filt 资源管理错误漏洞
Gcc C++filt is a filter from the Gnu community. It is used to disambiguate compiled C++ names. A resource management error vulnerability exists in GCC c++filt v2.26, which stems from the presence of a post-release use in the component cplus-dem.c. The vulnerability is caused by the presence of th...
The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...
Moderate: Red Hat Security Advisory: devtoolset-11-gcc security update
An update for devtoolset-11-gcc is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Quotes Collection <= 2.5.2 - Admin+ SQL Injection
The plugin does not validate and escape the bulkcheck parameter before using it in a SQL statement, leading to a SQL injection https://example.com/wp-admin/admin.php?page=quotes-collection&s=&wpnonce=6e21e0a8b6&action=makepublic&paged=1&bulkcheck=1%20and%20sleep10--%20-&action2=makepublic...
WordPress Quotes Collection plugin <= 2.5.2 - SQL Injection (SQLi) vulnerability
SQL Injection SQLi vulnerability discovered by JrXnm in WordPress Quotes Collection plugin versions = 2.5.2. Solution Deactivate and delete. This plugin has been closed as of October 13, 2021 and is not available for download. This closure is temporary, pending a full review...
tdengine:sql-fuzzer: Crash in unsigned long fuzzer::ForEachNonZeroByte<unsigned long fuzzer::TracePC::CollectF
Detailed Report: https://oss-fuzz.com/testcase?key=4876134148341760 Project: tdengine Fuzzing Engine: libFuzzer Fuzz Target: sql-fuzzer Job Type: libfuzzerubsantdengine Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x01cf572c0000 Crash State: unsigned long...
Kunyu
This is a Python-based tool called Kunyu, which is designed for more efficient corporate asset collection and network surveying and mapping. The tool is intended for security-related practitioners to use in their work. The tool's primary function is to identify and collect information about asset...
Mozilla Firefox Security Advisory (MFSA2014-30) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
Mozilla Firefox Security Advisory (MFSA2013-08) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
Remote Code Execution (RCE)
chrome is vulnerable to remote code execution. The vulnerability exists due to a use-after-free error within the Garbage Collection component in Google Chrome...
