432 matches found
GitLab: A profile page of a user can be denied from loading by appending .html to the username
Summary: I was able to create a user with the username "dashboard.html". Once, the account is set up, when the user clicks on his profile, the actual dashboard will show up instead of his profile page. Same can be done for all the HTML pages in GitLab. Steps To Reproduce: 1. Register a new user...
Google Chrome Skia Heap Corruption Vulnerability
Google Chrome is a web browser developed by Google, Inc. Skia is an open source 2D graphics library that provides common APIs that work on a variety of hardware and software platforms. A security vulnerability exists in Skia in versions of Google Chrome prior to 71.0.3578.80. A remote attacker ca...
Google Chrome V8 Buffer Overflow Vulnerability (CNVD-2019-01581)
Google Chrome is the United States Google Google company developed a Web browser. v8 is one of the open source JavaScript engine. An out-of-bounds write vulnerability exists in V8 in versions prior to Google Chrome 71.0.3578.80. A remote attacker can exploit this vulnerability to execute arbitrar...
Google Chrome Media Information Disclosure Vulnerability
Google Chrome is a web browser developed by Google, Inc.Media is one of the multimedia components. A security vulnerability exists in Media in versions of Google Chrome prior to 71.0.3578.80. A remote attacker can exploit this vulnerability to bypass the same-origin policy used for audio content...
Google Chrome Networking Disk Cache Memory Misreference Vulnerability
Google Chrome is a web browser developed by Google.Networking Disk Cache is one of the network disk cache components. A memory misreference vulnerability exists in Networking Disk Cache in Google Chrome versions prior to 66.0.3359.106. The vulnerability can be exploited to execute arbitrary code...
Google Chrome Skia Arbitrary Code Execution Vulnerability
Google Chrome is a web browser developed by Google, Inc. Skia is an open source 2D graphics library that provides common APIs that work on a variety of hardware and software platforms. A security vulnerability exists in Skia in versions of Google Chrome prior to 66.0.3359.106. A remote attacker c...
chromium-browser: Out of bounds memory access in V8
Incorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page...
Google Chrome Blink Information Disclosure Vulnerability (CNVD-2018-24370)
Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security vulnerability exists in Blink in Google Chrome versions prior to 70.0.3538.67. The vulnerability can be exploited by ...
Google Chrome Omnibox URL Spoofing Vulnerability (CNVD-2018-24374)
Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in iOS-based versions of Google Chrome prior to 70.0.3538.67, which stems from the program's failure to properly handle browsing history. A remote attacker...
Google Chrome V8 Memory Misreference Vulnerability
Google Chrome is the United States Google Google company developed a Web browser. v8 is one of the open source JavaScript engine. A memory misreference vulnerability exists in V8 in versions of Google Chrome prior to 70.0.3538.67. A remote attacker can exploit this vulnerability to damage objects...
Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2018-20076)
Google Chrome is a web browser developed by the American company Google Google. An arbitrary code execution vulnerability exists in Catalog Service in Google Chrome versions prior to 64.0.3282.119, which stems from a failure to fully enforce policy, and can be exploited by a remote attacker to ru...
GHSA-FM87-46VV-JQRR Path Traversal in html-pages
Versions of html-pages before 2.1.0 are vulnerable to path traversal. Recommendation Update to version 2.1.0 or later...
Path Traversal in html-pages
Versions of html-pages before 2.1.0 are vulnerable to path traversal. Recommendation Update to version 2.1.0 or later...
Google Chrome Memory Misreference Vulnerability (CNVD-2019-03620)
Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in ResourceCoordinator in versions of Google Chrome prior to 69.0.3497.81. A remote attacker can exploit this vulnerability to corrupt the heap with the help of specially...
Google Chrome Blink Buffer Overflow Vulnerability (CNVD-2019-03614)
Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A buffer overflow vulnerability exists in Blink in versions of Google Chrome prior to 69.0.3497.81. The vulnerability can be...
CVE-2018-2434
A content spoofing vulnerability in the following components allows to render html pages containing arbitrary plain text content, which might fool an end user: UI add-on for SAP NetWeaver UIInfra, 1.0, SAP UI Implementation for Decoupled Innovations UI700, 2.0: SAP NetWeaver 7.00 Implementation,...
html-pages node module path traversal vulnerability
html-pages is a module that allows you to browse catalogs in your browser and provide static files. A path traversal vulnerability exists in the html-pages node module. An attacker can exploit this vulnerability to read arbitrary files from the server using cURL...
CVE-2018-3744
The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL...
