269 matches found
Chromium: CVE-2022-2618 Insufficient validation of untrusted input in Internals
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
FreeBSD : chromium -- multiple vulnerabilities (96a41723-133a-11ed-be3b-3065ec8fd3ec)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 96a41723-133a-11ed-be3b-3065ec8fd3ec advisory. - Use after free in Omnibox. CVE-2022-2603 - Use after free in Safe Browsing. CVE-2022-2604 -...
KLA12600 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of boun...
Malicious code in jest-utils-lwc-internals (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c648c3492e79706f76e42a3e0ee3bf0d79e36fc2996157477622d919419e8f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4016 Malicious code in jest-utils-lwc-internals (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c648c3492e79706f76e42a3e0ee3bf0d79e36fc2996157477622d919419e8f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2021-21173
Side-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
PT-2022-6775 · Google +1 · Google Chrome +1
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 101.0.4951.41 Description: The issue is related to a use after free in Base Internals, allowing a remote attacker to perform arbitrary read/write via a crafted HTML page. This can be exploited by a remote...
kernel: out-of-bounds read in in vc_do_resize function in drivers/tty/vt/vt.c
A flaw was found in the Linux kernel’s virtual console resize functionality. An attacker with local access to virtual consoles can use the virtual console resizing code to gather kernel internal data structures...
Aternity SteelCentral AppInternals 路径遍历漏洞
Aternity SteelCentral AppInternals is a monitoring modern automation solution from Aternity, Inc. It provides application performance monitoring APM and diagnostics. Aternity SteelCentral AppInternals Dynamic Sampling Agent DSA A security vulnerability exists in the AgentConfigurationServlet that...
Arbitrary Code Execution
vm2 is vulnerable to arbitrary code execution. Remote attackers are able to inject and execute crafted malicious scripts on the host machine via direct access to host error objects generated by node internals during generation of a stacktraces...
GHSA-6PW2-5HJV-9PF7 Sandbox bypass in vm2
The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of arbitrary code on the host machine...
CVE-2021-23555
The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of arbitrary code on the host machine...
Sandbox Bypass
Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of...
openSUSE 15 Security Update : opera (openSUSE-SU-2021:1310-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1310-1 advisory. - Chromium: CVE-2021-30606 Use after free in Blink CVE-2021-30606 - Chromium: CVE-2021-30607 Use after free in Permissions CVE-2021-30607 -...
openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1303-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1303-1 advisory. - Chromium: CVE-2021-30606 Use after free in Blink CVE-2021-30606 - Chromium: CVE-2021-30607 Use after free in Permissions CVE-2021-30607 -...
CVE-2021-30613
Chromium: CVE-2021-30613 Use after free in Base internals...
DEBIAN-CVE-2021-30613
Chromium: CVE-2021-30613 Use after free in Base internals...
Design/Logic Flaw
Chromium: CVE-2021-30613 Use after free in Base internals...
UBUNTU-CVE-2021-30613
Chromium: CVE-2021-30613 Use after free in Base internals...
CVE-2021-30613
Chromium: CVE-2021-30613 Use after free in Base internals...