22 matches found
MAL-2026-4400 Malicious code in @kmmao/happy-coder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4478b22a21a87a37250e86ef25639330f79b779e5793f642eaf7ddaafd975d4 This package is a near-verbatim fork of the upstream happy-coder/happy-cli references to slopus/happy-cli and happy.engineering are retained througho...
CVE-2026-3219: Unrestricted Upload of File with Dangerous Type
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds wit...
MiracleLinux 9 : firefox-128.4.0-1.el9_4.ML.1 (AXSA:2024-8972:37)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8972:37 advisory. firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser CVE-2024-10464 firefox:...
EUVD-2021-3060
Malicious code in bioql PyPI...
Mozilla Firefox Security Update (MFSA2024-55) - Windows
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
Meta Given Deadline to Address E.U. Concerns Over 'Pay or Consent' Model
Meta has been given time till September 1, 2024, to respond to concerns raised by the European Commission over its "pay or consent" advertising model or risk-facing enforcement measures, including sanctions. The European Commission said the Consumer Protection Cooperation CPC Network has notified...
SUSE CVE-2018-18346
Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page...
UBUNTU-CVE-2022-20452
In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...
CVE-2021-0441
In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-1744955...
CVE-2021-0441
In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-1744955...
Design/Logic Flaw
In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-1744955...
CVE-2021-0441
CVE-2021-0441 affects the Android 11 Framework: a permission bypass in onCreate of PermissionActivity.java caused by a confusing UI, enabling local elevation of privilege. The vulnerability targets the Framework component and, per the CVSS data, can require user interaction (UI) for exploitation ...
CVE-2021-0441
In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-1744955...
CVE-2021-0441: Incorrect Default Permissions
In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-1744955...
The vulnerability of Google Chrome, related to improper input validation, allows a malicious actor to create a confusing user interface through a specially crafted HTML page.
The vulnerability of Google Chrome relates to improper handling of the alert window display in Blink. Exploiting this vulnerability allows an attacker to create a confusing user interface through a specially created HTML page...
Design/Logic Flaw
Confusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...
CVE-2018-6117
Removed by vendor...
CVE-2018-18346: Undefined Security Weakness
Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page...
PT-2018-2627
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 71.0.3578.80 Description The issue is related to the incorrect handling of alert box display in Blink, allowing a remote attacker to present confusing browser UI via a crafted HTML page. This could be achieved b...
