Lucene search
+L

6710 matches found

The Hacker News
The Hacker News
•added 2021/11/03 3:12 p.m.•54 views

Product Overview - Cynet Centralized Log Management

For most organizations today, the logs produced by their security tools and environments provide a mixed bag. On the one hand, they can be a trove of valuable data on security breaches, vulnerabilities, attack patterns, and general security insights. On the other, organizations don't have the rig...

6.6AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/11/02 10:15 p.m.•8 views

CVE-2021-43266

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in a collection name. Additional, in Mahara before 20.10.4, 21.04.3, and 21.10.1, exporting collections via PDF export could cause code execution...

7.3CVSS7.5AI score0.01326EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2021/11/02 9:54 p.m.•41 views

CVE-2021-43266

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in a collection name. Additional, in Mahara before 20.10.4, 21.04.3, and 21.10.1, exporting collections via PDF export could cause code execution...

8.1AI score0.01326EPSS
SaveExploits1References4
Mend
Mend
•added 2021/11/02 9:54 p.m.•3 views

CVE-2021-43266

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in a collection name. Additional, in Mahara before 20.10.4, 21.04.3, and 21.10.1, exporting collections via PDF export could cause code execution...

7.3CVSS0.01326EPSS
SaveExploits1References4
NVD
NVD
•added 2021/11/02 9:15 p.m.•22 views

CVE-2021-37977

Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.00889EPSS
SaveExploits0References4
OSV
OSV
•added 2021/11/02 9:15 p.m.•3 views

DEBIAN-CVE-2021-37977

Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.1AI score0.00889EPSS
SaveExploits0References1
Prion
Prion
•added 2021/11/02 9:15 p.m.•30 views

Design/Logic Flaw

Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS8.8AI score0.00889EPSS
SaveExploits0References4Affected Software3
attackerkb
attackerkb
•added 2021/11/02 9:15 p.m.•10 views

CVE-2021-37977

Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.00889EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2021/11/02 9:15 p.m.•91 views

CVE-2021-37977

Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.00889EPSS
SaveExploits0References1
Mend
Mend
•added 2021/11/02 8:25 p.m.•1 views

CVE-2021-37977

Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.00889EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2021/11/02 8:25 p.m.•58 views

CVE-2021-37977

Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.00889EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/02 12:00 a.m.•3 views

CVE-2021-37977: Use After Free

Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.00889EPSS
SaveExploits0References2
OSV
OSV
•added 2021/11/01 7:18 p.m.•32 views

GHSA-CF2J-VF36-C6W8 Communities and collections administrators can escalate their privilege up to system administrator

Impact Any community or collection administrator can escalate their permission up to become system administrator. This vulnerability only existed in 7.0 and does not impact 6.x or below. Patches Fix is included in 7.1. Please upgrade to 7.1 at your earliest convenience. Workarounds In 7.0,...

7.2CVSS5.9AI score0.02056EPSS
SaveExploits1References6
Vulnerability Lab
Vulnerability Lab
•added 2021/11/01 12:00 a.m.•101 views

My Movie Collection Sinatra App - (Login) XSS Vulnerabilities

Document Title: =============== My Movie Collection Sinatra App - Login XSS Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2293 Release Date: ============= 2021-11-01 Vulnerability Laboratory ID VL-ID: ==================================...

0.5AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2021/10/29 4:52 p.m.•85 views

Chromium: CVE-2021-37998 Use after free in Garbage Collection

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.00973EPSS
SaveExploits0
CNVD
CNVD
•added 2021/10/29 12:00 a.m.•68 views

Google Chrome Post-release Reuse Vulnerability (CNVD-2021-99263)

A post-release reuse vulnerability exists in Google Chrome 95.0.4638.69 and earlier versions of "garbage collection". An attacker could exploit this vulnerability to cause heap corruption via a crafted HTML page...

8.8CVSS3.1AI score0.00973EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/10/28 12:00 a.m.•14 views

Google Chrome 资源管理错误漏洞

A post-release reuse vulnerability exists in Google Chrome 95.0.4638.69 and earlier versions of "garbage collection". An attacker could exploit this vulnerability to cause heap corruption via a crafted HTML page...

8.8CVSS5.6AI score0.00973EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
•added 2021/10/28 12:00 a.m.•142 views

Google Chrome < 95.0.4638.69 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 95.0.4638.69. It is, therefore, affected by multiple vulnerabilities as referenced in the 202110stable-channel-update-for-desktop28 advisory. - Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69...

9.6CVSS8.2AI score0.38573EPSS
SaveExploits6References17
Tenable Nessus
Tenable Nessus
•added 2021/10/27 12:00 a.m.•52 views

NewStart CGSL MAIN 6.02 : firefox Multiple Vulnerabilities (NS-SA-2021-0120)

The remote NewStart CGSL host, running version MAIN 6.02, has firefox packages installed that are affected by multiple vulnerabilities: - Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a...

8.8CVSS8.4AI score0.01899EPSS
SaveExploits0References43
Tenable Nessus
Tenable Nessus
•added 2021/10/27 12:00 a.m.•216 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : thunderbird Multiple Vulnerabilities (NS-SA-2021-0177)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has thunderbird packages installed that are affected by multiple vulnerabilities: - Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted...

8.8CVSS7.7AI score0.01639EPSS
SaveExploits1References23
Rows per page
Query Builder