Lucene search
K

5838 matches found

Cvelist
Cvelist
added 2021/01/08 5:53 p.m.29 views

CVE-2020-16035

Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file...

8.3AI score0.00996EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2021/01/08 5:53 p.m.21 views

CVE-2020-16035

Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file...

8.8CVSS8.7AI score0.00996EPSS
Exploits0
Cvelist
Cvelist
added 2021/01/08 5:53 p.m.18 views

CVE-2020-16031

Insufficient data validation in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

5AI score0.00687EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/01/08 5:53 p.m.21 views

CVE-2020-16030

Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...

6.6AI score0.00652EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/01/08 5:53 p.m.21 views

CVE-2020-16032

Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

5AI score0.00656EPSS
Exploits0References2
CVE
CVE
added 2021/01/08 5:53 p.m.187 views

CVE-2020-16030

CVE-2020-16030 affects the Blink component in Chromium/Google Chrome prior to 87.0.4280.66. The issue is insufficient data validation in Blink, enabling a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Publicly cited sources in the provided documents confirm C...

6.1CVSS6.4AI score0.00652EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2021/01/08 5:53 p.m.21 views

CVE-2020-16031

Insufficient data validation in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

4.3CVSS5.7AI score0.00687EPSS
Exploits1
Debian CVE
Debian CVE
added 2021/01/08 5:53 p.m.21 views

CVE-2020-16032

Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

4.3CVSS5.7AI score0.00656EPSS
Exploits0
Debian CVE
Debian CVE
added 2021/01/08 5:53 p.m.27 views

CVE-2020-16030

Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...

6.1CVSS7.2AI score0.00652EPSS
Exploits0
CVE
CVE
added 2021/01/08 5:53 p.m.173 views

CVE-2020-16032

CVE-2020-16032 affects Chromium/Google Chrome prior to 87.0.4280.66 in the sharing UI. The vulnerability is described as content spoofing in the sharing component, i.e., an incorrect security UI could misrepresent content shown to users. Affected products include Chromium/Chrome, with multiple up...

4.3CVSS4.8AI score0.00656EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2021/01/08 5:53 p.m.186 views

CVE-2020-16031

CVE-2020-16031 is a vulnerability in Chromium/Chrome related to the tab-Preview UI. Multiple connected sources (e.g., Arch Linux security advisory ASA-202011-11) describe it as a content spoofing issue in the tab preview component caused by an incorrect security UI, allowing a remote attacker to ...

4.3CVSS4.8AI score0.00687EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2021/01/08 5:49 p.m.192 views

CVE-2020-16015

CVE-2020-16015 affects Google Chrome/Chromium, specifically the WASM component. The issue is described as insufficient data validation in WASM prior to 87.0.4280.66, which could allow a remote attacker to trigger heap corruption via a crafted HTML page. Multiple connected sources corroborate that...

8.8CVSS8.5AI score0.0099EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/01/08 5:49 p.m.23 views

CVE-2020-16015

Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.7AI score0.0099EPSS
Exploits0References2
CVE
CVE
added 2021/01/08 3:5 p.m.70 views

CVE-2021-1066

NVIDIA vGPU software CVE-2021-1066 affects the vGPU manager/plugin where unvalidated input data can lead to unintended resource consumption and Denial of Service. Affected: vGPU 8.x (before 8.6) and 11.0 (before 11.3). Remediation: upgrade to vGPU software 11.3 or 8.6 or later, as per official se...

5.5CVSS6.2AI score0.00334EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/08 3:5 p.m.27 views

CVE-2021-1066

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to unexpected consumption of resources, which in turn may lead to denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 prior to 11.3...

6.3AI score0.00334EPSS
Exploits0References1
CNVD
CNVD
added 2021/01/07 12:0 a.m.2 views

Google Chrome Insufficient Data Validation Vulnerability

Google Chrome is a web browser from Google, an American company. A data validation insufficiency vulnerability exists in networking in versions prior to Google Chrome 87.0.4280.141. No detailed vulnerability details are provided at this time...

8.8CVSS9AI score0.01079EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/01/07 12:0 a.m.4 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A data validation insufficiency vulnerability exists in networking in versions prior to Google Chrome 87.0.4280.141. No detailed vulnerability details are provided at this time...

8.8CVSS7.5AI score0.01079EPSS
Exploits0References11
CNVD
CNVD
added 2021/01/06 12:0 a.m.3 views

Buffer Overflow Vulnerability in Cisco RV110W Products (CNVD-2021-05411)

The Cisco RV110W Wireless-N VPN Firewall is an enterprise-class router from Cisco USA. The Cisco RV110W product suffers from a buffer overflow vulnerability that originates from a program's failure to properly validate user data, which can be exploited by a remote attacker to execute arbitrary co...

8.5AI score
Exploits0
CNNVD
CNNVD
added 2021/01/06 12:0 a.m.5 views

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. Mozilla Firefox suffers from a denial of service vulnerability that originates...

8.8CVSS7.2AI score0.01283EPSS
Exploits0References24
CNVD
CNVD
added 2021/01/06 12:0 a.m.1 views

Korzio Djv Command Injection Vulnerability

Korzio Djv is Korzio individual developers of a Javascript-based software used to dynamically verify the Json data format . A command injection vulnerability exists in versions prior to djv 2.1.4, which stems from the lack of proper validation of client-side data by the web application. An attack...

10CVSS7.7AI score0.02996EPSS
Exploits1References1
Rows per page
Query Builder