Lucene search
+L

156 matches found

Tenable Nessus
Tenable Nessus
•added 2021/10/19 12:00 a.m.•80 views

Google Chrome < 95.0.4638.54 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 95.0.4638.54. It is, therefore, affected by multiple vulnerabilities as referenced in the 202110stable-channel-update-for-desktop19 advisory. - Use after free in PDF Accessibility in Google Chrome prior to 95.0.4638.54...

9.6CVSS7.7AI score0.01033EPSS
SaveExploits0References33
Tenable Nessus
Tenable Nessus
•added 2021/10/19 12:00 a.m.•101 views

Google Chrome < 95.0.4638.54 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 95.0.4638.54. It is, therefore, affected by multiple vulnerabilities as referenced in the 202110stable-channel-update-for-desktop19 advisory. - Use after free in PDF Accessibility in Google Chrome prior to 95.0.4638.54...

9.6CVSS7.7AI score0.01033EPSS
SaveExploits0References33
CNNVD
CNNVD
•added 2021/10/19 12:00 a.m.•19 views

Google Chrome 资源管理错误漏洞

Chrome is a web browsing tool developed by Google.A post-release reuse vulnerability exists in Dev Tools in versions of Google Chrome prior to 95.0.4638.54. An attacker could exploit this vulnerability to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS5.6AI score0.00904EPSS
SaveExploits0References13
FreeBSD
FreeBSD
•added 2021/10/19 12:00 a.m.•215 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 19 security fixes, including: 1246631 High CVE-2021-37981: Heap buffer overflow in Skia. Reported by Yangkang @dnpushme of 360 ATA on 2021-09-04 1248661 High CVE-2021-37982: Use after free in Incognito. Reported by Weipeng Jiang @Krace from Codesafe...

9.6CVSS1.2AI score0.01033EPSS
SaveExploits0References1
Atlassian
Atlassian
•added 2021/07/08 1:49 a.m.•51 views

An admin can downgrade or remove a group with sys admin privilege

This vulnerability affects certain versions of Atlassian Dev Tools. Please describe the impact of the vulnerability here. No known vulnerability could be read off of the parent...

5.2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2021/07/08 1:49 a.m.•30 views

An admin can downgrade or remove a group with sys admin privilege

This vulnerability affects certain versions of Atlassian Dev Tools. Please describe the impact of the vulnerability here. No known vulnerability could be read off of the parent...

5.2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2021/05/20 10:43 p.m.•31 views

Bitbucket XSS, privilege escalation from "Project Creator" to "System admin" on project deletion

This vulnerability affects certain versions of Atlassian Dev Tools. Please describe the impact of the vulnerability here. No known vulnerability could be read off of the parent...

5.6AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2021/05/20 10:43 p.m.•39 views

Bitbucket XSS, privilege escalation from "Project Creator" to "System admin" on project deletion

This vulnerability affects certain versions of Atlassian Dev Tools. Please describe the impact of the vulnerability here. No known vulnerability could be read off of the parent...

5.6AI score
SaveExploits0Affected Software1
Kaspersky
Kaspersky
•added 2021/05/06 12:00 a.m.•59 views

KLA12184 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A data validation vulnerability in V8 can be exploited to bypass security...

8.8CVSS8.8AI score0.01601EPSS
SaveExploits0References3
OSV
OSV
•added 2021/04/30 9:15 p.m.•6 views

DEBIAN-CVE-2021-21232

Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.01104EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/30 9:15 p.m.•25 views

CVE-2021-21232

Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.01104EPSS
SaveExploits0References7
CVE
CVE
•added 2021/04/30 8:15 p.m.•276 views

CVE-2021-21232

CVE-2021-21232 affects Google Chrome DevTools. Use-after-free in Dev Tools prior to version 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Debian and other advisories note the fix in Chrome 90.0.4430.93 (and Chrome/Chromium update channels),...

8.8CVSS8.8AI score0.01104EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/30 12:00 a.m.•4 views

CVE-2021-21232: Use After Free

Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.01104EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2021/04/30 12:00 a.m.•39 views

CVE-2021-21232

Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.01104EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2021/04/29 7:00 a.m.•61 views

Chromium: CVE-2021-21232 Use after free in Dev Tools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.01104EPSS
SaveExploits0
CNVD
CNVD
•added 2021/04/27 12:00 a.m.•41 views

Google Chrome Dev Tools Code Execution Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Dev Tools in versions of Google Chrome prior to 90.0.4430.93. A remote attacker can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

8.8CVSS7.5AI score0.01104EPSS
SaveExploits0References1
Packet Storm
Packet Storm
•added 2021/04/05 12:00 a.m.•254 views

Simple Traffic Offense System 1.0 Cross Site Scripting

Exploit Title: Traffic Offense System | Stored Cross Site Scripting Cookie-theft Exploit Author: Richard Jones Date: 03-04-2021 Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/12330/simple-traffic-offense-system-php.html Version: 1.0 Tested On:...

7.4AI score
SaveExploits0
Atlassian
Atlassian
•added 2020/10/28 5:50 p.m.•70 views

Local file disclosure / path traversal within WEB-INF in Crucible - CVE-2020-29446

Affected versions of Atlassian Dev Tools allow remote attackers to browse local files via an Insecure Direct Object References IDOR vulnerability in WEB-INF in Fisheye/Crucible. The affected versions are before version 4.8.5. Affected versions: version 4.8.5 Fixed versions: 4.8.5 4.9.0...

7.5CVSS6AI score0.01295EPSS
SaveExploits0
Atlassian
Atlassian
•added 2020/10/28 5:50 p.m.•125 views

Local file disclosure / path traversal within WEB-INF in Crucible - CVE-2020-29446

Affected versions of Atlassian Dev Tools allow remote attackers to browse local files via an Insecure Direct Object References IDOR vulnerability in WEB-INF in Fisheye/Crucible. The affected versions are before version 4.8.5. Affected versions: version 4.8.5 Fixed versions: 4.8.5 4.9.0...

5.3CVSS5.8AI score0.01184EPSS
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2020/10/28 5:45 p.m.•80 views

Local file disclosure / path traversal within WEB-INF in Crucible - CVE-2020-29446

Affected versions of Atlassian Dev Tools allow remote attackers to browse local files via an Insecure Direct Object References IDOR vulnerability in WEB-INF in Fisheye/Crucible. The affected versions are before version 4.8.5. Affected versions: version 4.8.5 Fixed versions: 4.8.5 4.9.0...

5.3CVSS5.8AI score0.01184EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder