CVE-2018-6145

Insufficient data validation in HTML parser in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

CVE-2018-6154

Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2018-6145

Technical details about CVE-2018-6145 are not publicly available in the provided documents; monitor for updates.

CVE-2018-6154

Removed by vendor...

CVE-2018-6145

Removed by vendor...

CVE-2018-6154

CVE-2018-6154 affects Google Chrome/Chromium WebGL: insufficient data validation in WebGL leads to heap/buffer overflow. A remote attacker could exploit via a crafted HTML page to trigger heap corruption and potential code execution. Public references in connected docs confirm the WebGL heap over...

CVE-2018-16064

CVE-2018-16064 concerns Google Chrome’s Extensions API. It states that insufficient data validation in the Extensions API, for Chrome versions prior to 68.0.3440.75, could let an attacker who tricks a user into installing a crafted extension bypass navigation restrictions. Affected: Google Chrome...

CVE-2018-16064

Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

CVE-2017-5028

Insufficient data validation in V8 in Google Chrome prior to 56.0.2924.76 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2017-5028

CVE-2017-5028 affects Google Chrome’s V8 engine. The issue is insufficient data validation in V8 prior to Chrome 56.0.2924.76, enabling a remote attacker to leak cross-origin data via a crafted HTML page. Impact per provided metrics: CVSSv2 base 4.3 (Partial confidentiality), CVSSv3 base 6.5 (Con...

CVE-2018-17460

Insufficient data validation in filesystem URIs in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

CVE-2017-5028

Removed by vendor...

CVE-2018-17460

Removed by vendor...

CVE-2018-16064

Removed by vendor...

CVE-2018-17460

CVE-2018-17460 affects Google Chrome before 68.0.3440.75. The vulnerability arises from insufficient data validation in filesystem URIs, allowing a remote attacker to spoof the Omnibox (URL bar) content via a crafted domain name. Impact is spoofing of the URL bar, with no confidentiality impact b...

WordPress miniOrange SAML SP Single Sign On Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. miniOrange SAML SP Single Sign On plugin is a single sign on plugin used in it. A cross-site scripting vulnerability exists in the SAM...

TYPO3 Cross-Site Scripting Vulnerability (CNVD-2019-19310)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in TYPO3 versions 8.3.0 through 8.7.26 and 9.0.0 through 9.5.7. The vulnerability stems from a lack of proper validation of client-side data by t...

STOPzilla AntiMalware Arbitrary Write Vulnerability

STOPzilla AntiMalware is a set of antivirus software from the American company STOPzilla that is mainly used for malware detection and killing. A security vulnerability exists in the szkg64.sys driver file in STOPzilla AntiMalware version 6.5.2.59. The vulnerability originates from a networked...

STOPzilla AntiMalware Input Validation Error Vulnerability

STOPzilla AntiMalware is a set of antivirus software from the American company STOPzilla that is mainly used for malware detection and killing. An input validation error vulnerability exists in STOPzilla AntiMalware version 6.5.2.59. The vulnerability originates from a network system or product...

STOPzilla AntiMalware Denial of Service Vulnerability

STOPzilla AntiMalware is a set of antivirus software from the American company STOPzilla that is mainly used for malware detection and killing. A denial of service vulnerability exists in the szkg64.sys driver file in STOPzilla AntiMalware version 6.5.2.59. The vulnerability originates from a...