Lucene search
+L

54 matches found

BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.9 views

The vulnerability of the lsx_read_w_buf() function in the formats_i.c component of the SoX sound processing program allows a hacker to cause a service failure.

The vulnerability of the lsxreadwbuf function in the formsi.c component of the SoX sound processing program is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure using a specially created file...

5.5CVSS6.8AI score0.00466EPSS
SaveExploits1References11Affected Software4
Veracode
Veracode
added 2024/08/22 8:35 a.m.13 views

Code Injection

SquirrellyJS is vulnerable to Code Injection. The vulnerability is due to improper handling of input in the options.varName component of SquirrellyJS, allowing an attacker to inject and execute arbitrary code...

9.8CVSS7.4AI score0.01126EPSS
SaveExploits2References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.11 views

The vulnerability of the XML input component of the software tool for working with Oracle Web Applications and Oracle E-Business Suite desktop integration solutions for enterprise automation activities allows a malicious individual to gain unauthorized access to data or to modify, add, or delete protected data.

The vulnerability of the XML input component of the software tool for working with Oracle Web Applications, a desktop integration system for automating business activities within the Oracle E-Business Suite, is related to insufficient validation of entered data. Exploiting this vulnerability can...

4.3CVSS7.2AI score0.00417EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
added 2024/04/16 12:0 a.m.8 views

PT-2024-3528 · Oracle · Oracle Web Applications Desktop Integrator

Name of the Vulnerable Software and Affected Versions: Oracle Web Applications Desktop Integrator versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the XML input component of Oracle Web Applications Desktop Integrator, part of the Oracle...

4.3CVSS7AI score0.00417EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/01 11:15 p.m.9 views

CVE-2024-24512

Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component...

6.1CVSS6.2AI score0.00528EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2023/10/13 12:0 a.m.9 views

The vulnerability of the Input component in the Google Chrome browser allows attackers to perform spoofing attacks.

The vulnerability of the Input component in Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to carry out spam attacks using a specially created HTML page...

5CVSS5.4AI score0.00684EPSS
SaveExploits0References13Affected Software5
Positive Technologies
Positive Technologies
added 2023/10/10 12:0 a.m.8 views

PT-2023-5912 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 118.0.5993.70 Description: The issue is related to an inappropriate implementation in the Input component of Google Chrome, which allowed a remote attacker to spoof security UI via a crafted HTML page. This cou...

9.8CVSS6.3AI score0.99735EPSS
SaveExploits128References1114
Veracode
Veracode
added 2023/10/09 5:25 p.m.24 views

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in the Input component of the library, which allows an attacker to spoof security UI via a maliciously crafted HTML page...

4.3CVSS6.5AI score0.00663EPSS
SaveExploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.12 views

The vulnerability of the Input component in the Google Chrome browser allows a hacker to replace the user interface.

The vulnerability of the Input component in Google Chrome browser is related to the improper use of standard permissions. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...

5CVSS5.5AI score0.00663EPSS
SaveExploits0References11Affected Software5
Positive Technologies
Positive Technologies
added 2023/09/12 12:0 a.m.8 views

PT-2023-5469 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 117.0.5938.62 Description: The issue is related to an inappropriate implementation in the Input component of Google Chrome, which can be exploited by a remote attacker to spoof the security UI via a crafted HTM...

9.8CVSS6.4AI score0.99735EPSS
SaveExploits133References1113
SUSE CVE
SUSE CVE
added 2023/02/15 3:32 a.m.4 views

SUSE CVE-2022-2613

Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user interactions to potentially exploit heap corruption via specific UI interactions...

8.8CVSS9.2AI score0.00923EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/09/16 12:0 a.m.9 views

The vulnerability of the Input component in the Google Chrome browser allows attackers to disclose protected information.

The vulnerability of the Input component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially created web page...

10CVSS7.6AI score0.00923EPSS
SaveExploits0References11Affected Software6
Positive Technologies
Positive Technologies
added 2019/12/13 12:0 a.m.17 views

PT-2019-1112 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.4.12 Description: The issue is related to an out-of-bounds write in the Linux kernel's input.c component, specifically in the drivers/input/input.c file. This can be exploited to impact the confidentiality,...

10CVSS7.4AI score0.16908EPSS
SaveExploits131References1021
BDU FSTEC
BDU FSTEC
added 2019/03/12 12:0 a.m.17 views

The vulnerability of the graphical user input component in the fly-dm operating system of Astra Linux allows a hacker to cause a service failure.

The vulnerability of the graphical user input component in the fly-dm operating system of Astra Linux is related to an error that causes a failure when executing the “fly-dmctl rtcwake” command without specifying the arguments “-t/-s secs”. Exploiting this vulnerability could allow a perpetrator ...

5.5CVSS5.5AI score
SaveExploits0References1
Rows per page
Query Builder