Lucene search
+L

5920 matches found

CNNVD
CNNVD
added 2024/08/21 12:0 a.m.6 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome version 128.0.6613.84 and prior versions, which stems from the inclusion of an insufficient data validation issue...

7.8CVSS8.6AI score0.00221EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/08/21 12:0 a.m.6 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome version 128.0.6613.84 and prior versions, which stems from contains an insufficient data validation issue...

7.8CVSS8.6AI score0.00258EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/08/21 12:0 a.m.7 views

Google Chrome 安全漏洞

Google Chrome is a free web browser developed by Google. It is the world's largest browser in terms of market share due to its speed, security, simplicity, multi-platform support and built-in privacy protection. Google Chrome suffers from a Data Validation Insufficiency vulnerability, which can b...

8.8CVSS6.8AI score0.00488EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2024/08/21 12:0 a.m.51 views

Google Chrome < 128.0.6613.84 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 128.0.6613.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 202408stable-channel-update-for-desktop21 advisory. - Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a...

9.6CVSS7.6AI score0.20547EPSS
SaveExploits4References39
FreeBSD
FreeBSD
added 2024/08/21 12:0 a.m.28 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 38 security fixes: 358296941 High CVE-2024-7964: Use after free in Passwords. Reported by Anonymous on 2024-08-08 356196918 High CVE-2024-7965: Inappropriate implementation in V8. Reported by TheDog on 2024-07-30 355465305 High CVE-2024-7966: Out of...

9.6CVSS8.4AI score0.20547EPSS
SaveExploits4References1
Positive Technologies
Positive Technologies
added 2024/08/21 12:0 a.m.13 views

PT-2024-6550 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Microsoft Edge affected versions not specified Description: The issue is related to insufficient data validation in the installer, which can be exploited by a local attacker to perform privilege...

9.6CVSS5.5AI score0.20547EPSS
SaveExploits28References269
Positive Technologies
Positive Technologies
added 2024/08/21 12:0 a.m.8 views

PT-2024-6288 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Microsoft Edge versions prior to 128.0.6613.84 Description: The issue is related to insufficient data validation in the installer, which can be exploited by a local attacker to perform privilege...

9.6CVSS5.8AI score0.20547EPSS
SaveExploits28References270
Positive Technologies
Positive Technologies
added 2024/08/21 12:0 a.m.8 views

PT-2024-5813 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Microsoft Edge affected versions not specified Description: The issue is related to insufficient data validation in the Installer component, allowing a local attacker to perform privilege escalati...

9.6CVSS5.5AI score0.20547EPSS
SaveExploits28References271
CNNVD
CNNVD
added 2024/08/21 12:0 a.m.8 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome version 128.0.6613.84 and prior versions, which stems from contains an insufficient data validation issue...

7.8CVSS8.6AI score0.00342EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2024/08/21 12:0 a.m.52 views

Google Chrome < 128.0.6613.84 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 128.0.6613.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 202408stable-channel-update-for-desktop21 advisory. - Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remot...

9.6CVSS7.6AI score0.20547EPSS
SaveExploits4References39
Veracode
Veracode
added 2024/08/20 5:51 a.m.16 views

Server-Side Request Forgery (SSRF)

TruffleHog is vulnerable to unauthorized request execution. The vulnerability is due to insufficient validation of the data being scanned by TruffleHog's detectors, which allows maliciously crafted data to trigger unauthorized requests to attacker-chosen endpoints...

3.4CVSS6.7AI score0.00283EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/19 12:0 a.m.24 views

The vulnerability of the intel-sdw-acpi component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the intel-sdw-acpi component of the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.0021EPSS
SaveExploits0References4Affected Software2
Positive Technologies
Positive Technologies
added 2024/08/18 12:0 a.m.3 views

PT-2024-6810 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 129.0.6668.58 Microsoft Edge affected versions not specified Description: The issue is related to insufficient data validation in the Omnibox feature of Google Chrome and Microsoft Edge browsers. This could all...

8.8CVSS5.6AI score0.00472EPSS
SaveExploits2References54
Redos
Redos
added 2024/08/14 12:0 a.m.30 views

ROS-20240814-05

A vulnerability in the "Save As" function of Mozilla Firefox, Firefox ESR and Thunderbird email client on Windows operating systems is related to insufficient input data validation. Thunderbird email client of Windows operating systems is related to insufficient input data validation. Exploitatio...

8.1CVSS8.6AI score0.0107EPSS
SaveExploits3
CNVD
CNVD
added 2024/08/14 12:0 a.m.35 views

Tenda FH1206 fromqossetting function buffer overflow vulnerability

The Tenda FH1206 is a wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda FH1206 fromqossetting function, which originates from the failure of the fromqossetting function in the /goform/qossetting page to correctly validate the length of input data, which could b...

9.8CVSS8.2AI score0.01467EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2024/08/13 12:0 a.m.15 views

Adobe Dimension SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.8AI score0.00307EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/08/13 12:0 a.m.8 views

Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS6.8AI score0.03901EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/08/09 12:0 a.m.6 views

The vulnerability of the PowerShell command line interface on Windows operating systems, which allows attackers to exploit their privileges

The vulnerability of the PowerShell command line interface on Windows operating systems is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.3CVSS5.5AI score0.01056EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/08/09 12:0 a.m.7 views

The vulnerability of the PowerShell command line interface on Windows operating systems, which allows attackers to exploit their privileges

The vulnerability of the PowerShell command line interface on Windows operating systems is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS5.5AI score0.00687EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/08/07 12:0 a.m.11 views

The vulnerability of the taprio_parse_mqprio_opt() function in the network/scheduler subsystem of the Linux operating system allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the taprioparsemqprioopt function in the net/sched/schtaprio.c module, part of the network scheduling subsystem in the Linux operating system’s kernel, is related to insufficient validation of data received from users. Exploiting this vulnerability could allow an attacker to...

6.1CVSS6.7AI score0.00284EPSS
SaveExploits0References38Affected Software7
Rows per page
Query Builder