Lucene search
K

6 matches found

OSV
OSV
added 2022/05/24 5:40 p.m.24 views

GHSA-38F9-4VHQ-9CR8 Zen Cart vulnerable to authenticated remote code execution

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

7.2CVSS7.2AI score0.16782EPSS
Exploits4References5
AlpineLinux
AlpineLinux
added 2021/12/08 9:21 p.m.47 views

CVE-2021-38504

When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 94, Thunderbird 91.3, and Firefox ESR 91.3...

8.8CVSS9.3AI score0.01599EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2021/11/03 12:0 a.m.42 views

CVE-2021-38504

When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 94, Thunderbird 91.3, and Firefox ESR 91.3...

8.8CVSS7.2AI score0.01599EPSS
Exploits0References6
CNVD
CNVD
added 2015/03/09 12:0 a.m.2 views

Google Chrome Blink Memory Misreference Vulnerability (CNVD-2015-01547)

Google Chrome is a web browsing tool developed by Google. A post-release reuse vulnerability exists in the core/html/HTMLInputElement.cpp file in the DOM implementation of Blink used in versions prior to Google Chrome 41.0.2272.76. A remote attacker can exploit this vulnerability to cause a denia...

7.5CVSS6.7AI score0.01864EPSS
Exploits0References1
OSV
OSV
added 2015/03/08 12:0 a.m.0 views

UBUNTU-CVE-2015-1223

Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change...

7.5CVSS7.4AI score0.01864EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2015/03/05 1:59 p.m.2 views

chromium-browser: Use-after-free in dom

Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change...

7.5CVSS7.5AI score0.01864EPSS
Exploits0References5
Rows per page
Query Builder